Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
File: Hx3pNv8XhLeClri8S0sDgbKT7RA.mft (raw, json)
Hash identifier: PH2/+YPEa6icsCJKDq0tktSTjiigKcAwpcpt0mOdliw=
Subject key identifier: 6A:96:B9:EF:B8:05:0E:FE:05:06:DD:E1:83:EA:39:84:73:30:4E:2C
Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
Certificate issuer: /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Certificate serial: 019A4E4FF0B8090711579AE2D74C1819BDCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
Manifest number: 0F56
Signing time: Tue 04 Nov 2025 10:00:53 +0000
Manifest this update: Tue 04 Nov 2025 10:00:53 +0000
Manifest next update: Wed 05 Nov 2025 10:00:53 +0000
Files and hashes: 1: 1-veQxSzqgnwuwyzarzzUI6GU1Vo.roa (hash: bIWGmao73L88A9Mc0bEmGHNF/q2XxTrM/cwuMLwX1wg=)
2: Hx3pNv8XhLeClri8S0sDgbKT7RA.crl (hash: wi6Os6/LbhvFKhFzqESsyv9QE1+CkVEtTebA7VngpyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:f0:b8:09:07:11:57:9a:e2:d7:4c:18:19:bd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Validity
Not Before: Nov 4 10:00:53 2025 GMT
Not After : Nov 5 10:00:53 2025 GMT
Subject: CN=6a96b9efb8050efe0506dde183ea398473304e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:7a:0b:4c:15:1d:80:d7:5a:c4:c0:ee:cf:
45:ed:bc:9a:af:98:32:b2:2c:cd:14:33:7a:dd:d1:
4a:68:d2:7f:e1:91:2b:6d:20:26:e2:ae:4c:91:35:
7d:0c:9a:42:aa:60:a0:90:ee:0e:16:84:1e:07:13:
8d:06:19:3e:9b:c1:4c:73:cd:88:ab:39:bc:96:08:
5e:55:ee:6e:99:5e:a1:8d:a7:bc:02:e7:4a:2c:0e:
3a:cc:d9:28:3a:02:48:de:27:3b:69:e8:7e:fb:9c:
8f:29:9c:a9:59:8d:10:d5:53:1c:ab:7b:cc:00:c2:
a2:91:ec:b9:e2:84:32:59:2e:46:58:ed:32:d1:5f:
50:c7:de:1a:70:99:61:c0:3a:b6:0d:e6:55:54:17:
9b:04:56:64:5f:26:77:51:06:01:62:84:f6:08:35:
f4:f8:66:c2:2e:31:5e:54:fe:d2:21:bf:2a:cb:9c:
40:45:a7:6a:cf:1d:86:a5:df:bd:aa:4f:40:02:37:
ac:e2:e5:69:32:90:86:a6:a3:95:2a:ff:44:1e:eb:
85:ce:a0:06:e3:fa:96:75:a7:3a:4b:cb:81:92:06:
b1:71:fd:a4:ea:8f:05:05:8c:2e:1e:3b:7e:77:89:
61:26:10:6d:da:e2:30:af:8b:02:11:76:37:60:aa:
ff:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:96:B9:EF:B8:05:0E:FE:05:06:DD:E1:83:EA:39:84:73:30:4E:2C
X509v3 Authority Key Identifier:
keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:74:d4:22:b4:5c:fc:c7:5a:4f:fd:37:20:61:57:1d:ab:91:
11:6f:fa:ce:63:cf:3c:82:70:5b:69:0b:04:87:e3:59:ba:7c:
60:0f:f3:72:70:03:8a:da:f1:09:36:dc:75:fb:ba:5f:0c:d0:
10:38:6e:2f:61:fb:a8:0a:5e:76:da:66:84:2c:61:81:db:cf:
3f:bc:b4:94:21:b1:b1:ea:57:90:ab:42:2d:33:70:45:1d:44:
8e:08:12:af:7a:31:71:dd:ee:f3:1e:86:3d:1a:e2:43:a8:d4:
8c:4c:04:14:28:9f:03:33:23:e7:e4:ab:77:f5:da:e0:65:a8:
44:88:48:d0:c4:ac:42:ea:8b:c4:64:21:be:1b:3f:df:fc:80:
89:9a:31:63:da:37:6b:89:ed:d1:ca:93:61:13:3f:ee:dc:89:
66:b2:27:2b:01:e6:65:76:51:32:cc:c2:25:21:3e:00:cb:00:
ab:bc:c0:d7:63:04:5b:8c:43:f5:39:b6:c7:ef:36:45:30:cd:
37:2c:e8:b2:78:51:c1:2f:fc:45:01:57:8e:0c:d9:f2:d9:3a:
b3:38:03:0d:71:6b:a1:53:fe:74:17:0a:f4:be:57:5c:9e:2b:
fe:71:b9:05:4a:a9:16:a1:22:09:2d:7f:d5:da:2b:2f:ba:ae:
89:ed:61:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:22 2025 by rpki-client