Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: 4Lhmv22C/30+mp72bxQh6m/3LjLli3MoOCHd1FdcFig=
Subject key identifier: C7:A4:A0:79:8F:78:D3:1B:21:DB:34:33:A2:2E:1A:DC:12:69:D2:88
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 019A52D25357F997FEAC9AD106D917A257A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 101C
Signing time: Wed 05 Nov 2025 07:01:46 +0000
Manifest this update: Wed 05 Nov 2025 07:01:46 +0000
Manifest next update: Thu 06 Nov 2025 07:01:46 +0000
Files and hashes: 1: GtM4pSsiK5eSfyxXfFff62QmvIQ.roa (hash: d17WNX33kwLBGAgNh9bS/nIhg2dh/WqffpjSyAJ5+FM=)
2: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: aTP2Mkqp4tqloIL0JJyv/dRO7u3RtS4tjCxhUw9gwJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:53:57:f9:97:fe:ac:9a:d1:06:d9:17:a2:57:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Nov 5 07:01:46 2025 GMT
Not After : Nov 6 07:01:46 2025 GMT
Subject: CN=c7a4a0798f78d31b21db3433a22e1adc1269d288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dc:18:3b:68:88:69:13:3e:e1:b6:14:97:38:
01:9d:50:0a:df:10:ea:59:06:98:2c:93:ae:9f:3e:
32:75:28:cf:06:d0:b9:3a:c5:2c:8b:07:f0:92:8c:
a0:e0:b9:f8:a1:20:4b:f6:cc:5d:5b:e5:46:50:43:
28:7c:30:7a:9a:7e:f5:90:5c:0f:5d:33:cd:8b:66:
7f:e2:b1:f0:88:73:29:54:04:ce:40:21:0e:df:69:
c3:d1:eb:ca:7d:36:e8:b0:53:33:82:f5:6b:16:cd:
00:a4:4d:29:25:5c:68:95:f0:3d:d1:d6:38:5e:4a:
88:d9:10:bf:de:69:ae:91:cc:2a:2d:e5:75:84:f8:
3c:1c:ee:fc:43:97:4d:4a:2d:87:58:27:45:78:4d:
a9:9a:83:d0:a3:69:e0:59:12:d9:6f:37:49:38:fb:
c9:c5:c3:1d:00:b1:a0:43:a5:56:9f:8e:06:5a:97:
47:be:24:be:b4:e1:c4:1f:11:c9:8f:33:03:bb:30:
45:01:9f:58:14:a2:2a:38:af:2b:b7:95:47:f1:d0:
62:ff:3f:48:c4:60:ee:de:b4:f5:a7:3c:5e:fc:a7:
7a:a7:34:d9:9d:e5:5a:4f:13:81:cb:03:8d:9d:43:
63:aa:7b:57:93:a0:25:97:17:02:39:c1:0d:68:5b:
e9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A4:A0:79:8F:78:D3:1B:21:DB:34:33:A2:2E:1A:DC:12:69:D2:88
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ea:b5:26:2c:b3:34:a8:ba:73:5e:7b:ee:94:9c:4b:98:cd:
17:d8:90:65:7c:09:93:c0:95:03:5a:b8:a7:56:95:c2:bb:e6:
84:04:cf:4e:42:61:5d:15:01:0e:85:b1:4c:4f:c4:b4:97:8a:
d0:26:2a:2c:88:ce:7c:9b:a0:2d:f5:a3:00:6f:af:90:81:8c:
87:d2:9e:31:69:df:6f:9b:7d:cc:9c:84:d0:91:cd:e1:5f:49:
4d:e1:0c:90:32:c2:9d:5a:2b:17:ce:ef:1b:ea:68:0d:24:51:
9a:a2:0b:d8:b0:7d:99:f8:4f:0e:df:5f:de:bf:82:a7:1c:57:
8d:ca:f8:63:b3:1a:bb:1b:44:55:bc:7b:e2:ce:31:e9:13:07:
55:7b:e5:fd:7a:65:eb:c3:a1:3b:7b:c9:a9:93:8b:13:f0:d4:
e3:83:07:c8:c9:21:10:b6:47:31:f8:78:0f:d0:f6:4a:22:45:
c7:f1:ec:1e:27:68:09:64:9c:16:b2:cc:07:69:bb:c9:db:78:
36:f9:3d:c8:a2:91:64:4a:8a:04:dc:91:39:e4:e3:11:50:59:
73:69:fa:ae:9c:ac:4f:dc:f9:2d:24:eb:c1:73:5b:4d:f9:ed:
18:4c:83:6e:52:5a:fd:eb:69:30:3d:28:ae:1d:a6:c7:5e:4c:
d0:95:a6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:33:07 2025 by rpki-client