Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
File: HWW3t7iY-q7nB2fQlxXENqg_zcI.mft (raw, json)
Hash identifier: C25SUNFFD6tjkaiQb7efJGgaAVi+2LIftmZP4PD9NxU=
Subject key identifier: B5:A3:BD:9A:53:42:8D:CA:38:8D:B1:FE:ED:23:0B:85:06:30:E4:80
Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
Certificate issuer: /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Certificate serial: 019A4F61E847C9BBFD20CA5122B17F128483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 15:00:07 +0000
Manifest this update: Tue 04 Nov 2025 15:00:07 +0000
Manifest next update: Wed 05 Nov 2025 15:00:07 +0000
Files and hashes: 1: ESdFHrMTT9CdnTueAws85KzTpOo.roa (hash: EFe4+WtiIfRKsYq3EhY1PIgLIFzMrHc8WS2QY4wWHBs=)
2: HWW3t7iY-q7nB2fQlxXENqg_zcI.crl (hash: ES2UzL1XeJjx4BRKiRIkz7/NtyiSBmbbdiw69HkEhLU=)
3: S7dw96BjJHjSAZkMcxGi_FB5doA.roa (hash: KE2tpzq8RhZkUzoGjIN+rbgmJi4KOhIPNewQQ1O2Z3o=)
4: lHt_Mh1w-7vs8I-ZaeWKv1xW2Ps.roa (hash: /8Glm1hc9AeZKEAxOBVRVagGt2gyvK5usk/gBvfbgls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:e8:47:c9:bb:fd:20:ca:51:22:b1:7f:12:84:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Validity
Not Before: Nov 4 15:00:07 2025 GMT
Not After : Nov 5 15:00:07 2025 GMT
Subject: CN=b5a3bd9a53428dca388db1feed230b850630e480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:d0:2c:cd:c6:f5:e8:1d:5f:df:54:c6:04:
9f:ff:54:a1:32:eb:4a:6b:a1:65:50:1c:2c:e8:1a:
1f:7b:c9:ba:74:52:d8:bb:61:58:d8:66:4f:d2:22:
7f:fc:6f:d1:7b:28:3a:29:c3:df:b9:08:f7:9c:68:
fa:14:6f:de:6c:50:27:d6:7c:26:8b:96:e0:a6:52:
b4:de:3b:16:f1:43:96:7f:2b:8c:ed:bd:c3:23:77:
bf:a7:8a:ac:52:df:41:be:df:6d:5b:cc:df:45:17:
33:fa:49:be:91:bd:bf:ea:ea:9e:d7:43:67:bd:5c:
f6:f4:52:32:2e:f5:58:61:18:d8:06:55:56:c7:91:
15:1f:25:ac:5b:c4:0f:e0:22:bd:1a:f0:a2:8a:b3:
cc:87:a9:56:08:5b:3b:44:2e:5a:ea:21:07:65:97:
50:c1:35:27:41:38:90:92:3a:75:6b:fe:04:12:3c:
8c:b2:3d:76:43:81:63:10:b5:75:fb:82:e5:02:3e:
49:7a:f5:56:f4:0d:7c:63:d3:b4:d3:2a:e6:64:ad:
77:d3:fc:f5:ba:c8:72:d4:65:fb:9e:d7:d9:3b:30:
79:de:75:bc:d0:f2:eb:aa:e3:b4:f6:e5:a4:f4:98:
6c:fb:1f:ab:ed:6d:07:1f:b6:e1:74:90:7c:ca:ef:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A3:BD:9A:53:42:8D:CA:38:8D:B1:FE:ED:23:0B:85:06:30:E4:80
X509v3 Authority Key Identifier:
keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9d:fe:eb:96:ca:32:f8:42:19:22:cb:bc:9c:f5:95:5c:d6:
25:4e:67:09:4f:5c:b5:56:1e:b5:ce:78:bb:46:e8:72:a5:9a:
12:47:20:ed:67:40:33:83:9c:22:e5:a9:af:73:df:1e:12:df:
19:c6:21:e3:ab:4d:6b:08:fc:c7:61:f4:da:18:fa:5a:6e:88:
d4:e1:a1:3d:5b:bd:7f:e8:12:0d:49:de:06:82:3b:18:9a:b7:
85:54:a5:11:4c:ec:42:fc:86:00:79:c7:c2:50:4f:e4:0c:c6:
63:7e:64:71:1e:8f:40:0d:98:e3:10:1b:b8:41:41:8b:53:6e:
2e:ca:48:59:ef:b1:e3:4b:e6:d4:08:a3:48:c7:4e:73:4d:ed:
ad:c5:de:8f:86:86:40:dd:33:31:1e:95:5d:a0:21:ac:05:36:
9b:50:ee:34:54:73:05:63:9a:b1:e0:66:26:1b:8b:02:b5:78:
56:2b:c8:77:a7:a0:fd:a0:b3:2d:bf:73:98:a5:ce:e1:4c:26:
9f:6d:45:1c:e5:06:45:a6:fc:fb:cf:a3:11:f8:a8:fa:3e:0b:
84:b8:82:9b:5f:b9:3f:14:86:1a:c4:ae:78:14:69:56:f8:a8:
ca:3d:e6:5f:05:6c:f4:ea:f1:14:fd:ed:e7:e9:0a:0e:ea:0a:
43:c4:23:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYehHybv9IMpRIrF/EoSDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNjViN2I3Yjg5OGZhYWVlNzA3NjdkMDk3MTVjNDM2YTgz
ZmNkYzIwHhcNMjUxMTA0MTUwMDA3WhcNMjUxMTA1MTUwMDA3WjAzMTEwLwYDVQQD
EyhiNWEzYmQ5YTUzNDI4ZGNhMzg4ZGIxZmVlZDIzMGI4NTA2MzBlNDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4nQLM3G9egdX99UxgSf/1ShMutK
a6FlUBws6Bofe8m6dFLYu2FY2GZP0iJ//G/Reyg6KcPfuQj3nGj6FG/ebFAn1nwm
i5bgplK03jsW8UOWfyuM7b3DI3e/p4qsUt9Bvt9tW8zfRRcz+km+kb2/6uqe10Nn
vVz29FIyLvVYYRjYBlVWx5EVHyWsW8QP4CK9GvCiirPMh6lWCFs7RC5a6iEHZZdQ
wTUnQTiQkjp1a/4EEjyMsj12Q4FjELV1+4LlAj5JevVW9A18Y9O00yrmZK130/z1
ushy1GX7ntfZOzB53nW80PLrquO09uWk9Jhs+x+r7W0HH7bhdJB8yu9hfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWjvZpTQo3KOI2x/u0jC4UGMOSAMB8GA1UdIwQY
MBaAFB1lt7e4mPqu5wdn0JcVxDaoP83CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUt
OGZjMzczNzU3Njg0LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUtOGZjMzczNzU3Njg0
LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJ3+65bK
MvhCGSLLvJz1lVzWJU5nCU9ctVYetc54u0bocqWaEkcg7WdAM4OcIuWpr3PfHhLf
GcYh46tNawj8x2H02hj6Wm6I1OGhPVu9f+gSDUneBoI7GJq3hVSlEUzsQvyGAHnH
wlBP5AzGY35kcR6PQA2Y4xAbuEFBi1NuLspIWe+x40vm1AijSMdOc03trcXej4aG
QN0zMR6VXaAhrAU2m1DuNFRzBWOaseBmJhuLArV4VivId6eg/aCzLb9zmKXO4Uwm
n21FHOUGRab8+8+jEfio+j4LhLiCm1+5PxSGGsSueBRpVvioyj3mXwVs9OrxFP3t
5+kKDuoKQ8QjyA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:51 2025 by rpki-client