Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier: ocLyDj+zaqjcES/vkl8Vu3QIpmqWFVagDie7PaOphc0=
Subject key identifier: D9:BD:1C:59:D8:85:8B:C2:39:0F:0D:1B:10:81:2B:32:A4:E9:52:3B
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial: 019A4DE1DD19457257F480C110D04DDCBF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number: 0F22
Signing time: Tue 04 Nov 2025 08:00:39 +0000
Manifest this update: Tue 04 Nov 2025 08:00:39 +0000
Manifest next update: Wed 05 Nov 2025 08:00:39 +0000
Files and hashes: 1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: 3ontq/orwf9/31pq78Jrhb+GBjv5YJnQoRyQHt25Ejs=)
2: UGBpl3oHNIS2Cd9_Sczzu0VBiiE.roa (hash: wSoOj4MFImWuZ5Z3plItyJ7lOAnvxzo7omn+Vgq6Vio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:dd:19:45:72:57:f4:80:c1:10:d0:4d:dc:bf:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Validity
Not Before: Nov 4 08:00:39 2025 GMT
Not After : Nov 5 08:00:39 2025 GMT
Subject: CN=d9bd1c59d8858bc2390f0d1b10812b32a4e9523b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:78:b0:63:33:c9:40:0c:22:8f:b9:c5:6c:
16:31:9f:26:27:c7:5e:38:09:3f:55:bf:77:82:eb:
7c:69:7c:e6:5b:d0:40:57:ee:89:3c:14:09:b3:c7:
aa:e3:d6:dd:da:71:fd:31:51:33:89:b4:e6:e4:d2:
28:d9:64:25:7a:5b:d6:5b:5b:34:d6:8b:e5:78:75:
91:cb:e5:70:8f:ee:92:78:46:2e:ac:c5:47:a6:17:
bb:b1:73:e6:46:e1:62:ae:92:8b:31:32:ee:3d:33:
d6:e7:47:32:73:22:dc:bb:e8:eb:66:c5:4b:7d:0a:
fe:68:ae:ca:4a:7d:95:2b:08:db:30:71:87:d6:c7:
9f:95:73:a1:a5:dd:5d:16:70:2d:a0:b5:70:1f:05:
67:88:0d:9f:c0:6d:e8:53:2a:7e:0b:25:b4:08:24:
26:3b:17:31:ca:3b:98:f1:f3:a6:39:d1:ba:90:6e:
b3:e0:6e:0a:c6:f1:54:86:06:31:b6:cc:3a:1e:a8:
55:a7:57:3f:d5:c8:e1:29:3d:4f:37:7c:23:1e:ce:
b5:fe:9d:3d:43:25:5d:6c:2b:b4:05:92:2a:07:2b:
37:9e:6c:ed:0b:a3:1d:3a:eb:fa:c2:96:cd:50:d4:
3e:54:be:f3:4f:af:b1:80:cc:72:36:80:40:d4:28:
f6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BD:1C:59:D8:85:8B:C2:39:0F:0D:1B:10:81:2B:32:A4:E9:52:3B
X509v3 Authority Key Identifier:
keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8e:da:6d:3a:f4:cf:3d:0e:00:bb:95:7b:83:37:b9:64:49:
2a:52:a8:fe:9d:42:a0:88:11:59:a5:44:b9:48:d0:f8:40:a5:
f7:14:1d:14:c2:d6:9a:2c:e9:60:d7:b5:37:74:1b:e5:93:ce:
bc:b1:ef:ff:3b:b1:be:54:52:a5:b5:ac:52:ca:f7:6f:08:68:
37:12:70:43:df:8a:e6:da:d9:d5:52:8f:fc:b7:77:27:ad:ad:
8f:aa:80:ad:28:74:4b:19:64:96:f5:af:11:24:8a:5e:90:06:
53:3a:50:95:a6:44:59:8d:07:1f:9d:9f:bc:fd:23:58:0a:70:
03:5f:1e:1f:06:1c:ec:de:d6:3d:b0:eb:97:5a:77:40:2f:9c:
5b:40:f1:52:d3:aa:9d:4b:ab:f6:89:74:94:50:38:82:b0:76:
0e:ce:71:e8:68:f1:d2:38:f9:b0:59:65:03:e7:bb:69:82:d0:
32:ae:d4:0f:10:fa:e8:aa:f8:bb:c9:c2:56:e3:d0:a9:1f:8e:
3e:92:5e:c6:52:31:3b:f0:a1:ef:75:4b:5c:9a:79:4b:d2:ae:
f4:c7:48:dc:cd:43:cf:f8:d9:dc:7a:ac:8a:d3:9e:e5:7c:78:
17:56:8e:e7:b8:c4:af:0b:a0:50:58:b4:ee:9c:b9:12:41:c3:
f9:fb:a7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:41 2025 by rpki-client