Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
File: HFGW3tW6XWhucJXG1cY4xrj4uto.mft (raw, json)
Hash identifier: gRtTLdw+sm8vITi5oWUp6p842WSRoaJlQIrMrXB/86w=
Subject key identifier: 65:00:59:33:17:68:50:38:1E:1D:AB:67:7B:04:C2:6C:C2:51:16:5C
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: 019A54C0006A8E2806693EA5DFBC33478FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
Manifest number: 1055
Signing time: Wed 05 Nov 2025 16:01:00 +0000
Manifest this update: Wed 05 Nov 2025 16:01:00 +0000
Manifest next update: Thu 06 Nov 2025 16:01:00 +0000
Files and hashes: 1: HFGW3tW6XWhucJXG1cY4xrj4uto.crl (hash: E4Qzey/tErpe0cEqSQlYvPXswv1WxxvFZiNda8CzGPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:00:6a:8e:28:06:69:3e:a5:df:bc:33:47:8f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: Nov 5 16:01:00 2025 GMT
Not After : Nov 6 16:01:00 2025 GMT
Subject: CN=65005933176850381e1dab677b04c26cc251165c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:d9:0d:c4:7d:9d:0a:ec:53:ab:9c:88:b2:
8b:73:72:bf:29:fc:51:c8:5b:1c:c7:9b:65:7c:bc:
0c:c1:f0:60:43:6e:74:1c:d0:a1:76:e6:b4:5a:46:
74:2a:86:77:e8:19:50:ba:22:e0:a9:26:f2:8b:f0:
08:58:20:fa:5f:93:52:7b:7d:fe:cb:fd:03:da:73:
c9:2c:31:10:62:05:06:9e:36:ee:3c:24:fe:d5:ca:
c2:72:6e:b1:76:87:3d:d4:25:60:2b:19:f1:98:dc:
dc:d2:5b:aa:10:42:3e:79:c7:4f:70:35:fe:cf:70:
4e:ca:90:97:f5:b2:03:dd:07:d0:37:92:86:51:77:
66:06:5e:e1:0d:40:0e:62:ad:04:88:95:04:c5:0d:
83:ea:92:84:b9:d9:63:81:ea:a3:c4:86:86:3e:57:
ca:e1:16:46:51:9b:27:50:48:84:b8:2e:e7:02:bd:
8d:e1:a9:30:08:af:e3:58:e5:45:9e:8a:fa:58:a5:
30:56:f1:58:5b:7c:ed:88:bf:9e:09:4c:20:3c:cf:
36:ad:bf:4a:8d:39:3f:f1:b7:be:87:7d:8d:33:94:
a3:b8:d1:df:63:63:99:39:e5:8a:b1:67:4f:01:09:
38:ef:bc:66:1a:15:b2:ad:7f:04:1c:8f:f3:13:e5:
e2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:00:59:33:17:68:50:38:1E:1D:AB:67:7B:04:C2:6C:C2:51:16:5C
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:77:b8:57:b3:d7:b4:80:3e:3e:c8:8e:ba:9e:14:07:86:95:
18:23:42:61:0a:d0:81:54:aa:cd:ad:6e:86:32:4f:9f:f6:64:
d2:47:de:7b:40:5f:bc:05:fe:1d:01:b6:2d:62:ab:ff:cb:bb:
d1:62:a8:00:d1:fa:2b:84:a7:39:fc:1a:98:30:06:bc:09:dd:
d5:23:20:f7:23:88:46:51:09:d3:99:f8:a3:fe:a5:a7:7f:4b:
42:7f:da:06:5c:5f:62:10:ab:1f:69:f0:9f:d8:8a:47:11:a8:
19:f4:4e:d7:3f:f6:2f:89:9a:63:cc:81:b5:b1:85:22:2f:89:
d7:b2:01:d0:64:54:1a:25:6a:ed:6c:d7:48:53:ac:5f:e2:e8:
9a:a7:23:59:30:42:fb:92:9b:3e:dc:ff:b9:93:8b:ac:3d:7f:
dd:9f:5b:86:ef:88:df:89:4d:a2:73:4b:29:e6:d7:2b:25:da:
ef:83:79:e1:5c:ee:26:59:c4:80:36:01:e6:16:30:88:72:28:
7b:b2:04:6e:ab:6b:e9:09:82:a5:f4:9c:25:a8:db:c4:c2:6f:
94:62:5a:89:34:52:9d:df:ff:ca:12:5d:cb:a3:7b:a6:3f:60:
63:32:c7:6a:e8:ff:35:d2:e7:16:17:53:72:3e:78:6b:8e:3f:
3f:f3:58:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:41:42 2025 by rpki-client