Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json)
Hash identifier: Dk7VZ3CQXWoaAcq8Huii0x5moaBu3jVBfyK1gRZBvUA=
Subject key identifier: 69:89:DD:0C:26:20:84:CF:35:3F:8D:40:11:76:2F:A3:16:1C:C5:A3
Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Certificate serial: 019A4C97DC1D4B7739E8937B8FD2C627372F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
Manifest number: 1391
Signing time: Tue 04 Nov 2025 02:00:11 +0000
Manifest this update: Tue 04 Nov 2025 02:00:11 +0000
Manifest next update: Wed 05 Nov 2025 02:00:11 +0000
Files and hashes: 1: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: L3miTlcK9V4BYKqtJCkExexEsm0uM1dX4xhMIem3eSk=)
2: UYoraKeZIaoa2wVuoomivtXbxRQ.roa (hash: 64MFcCCoNK8y5TAb4sImtBVWhOrUKow/FlcIn/ABu34=)
3: bce9mz0b3BUGOMHAJWY8rMCRxek.roa (hash: IEeWzdb92Rel/sak0WfNMG3iDCwAJHBVrKmaRSr9eNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:dc:1d:4b:77:39:e8:93:7b:8f:d2:c6:27:37:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Validity
Not Before: Nov 4 02:00:11 2025 GMT
Not After : Nov 5 02:00:11 2025 GMT
Subject: CN=6989dd0c262084cf353f8d4011762fa3161cc5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e3:86:8a:7d:9d:b1:df:ec:08:23:03:38:64:
d3:a3:fb:39:00:a2:51:9b:03:f3:02:ea:14:2e:b1:
96:f4:79:8a:d0:b0:b0:6d:f9:ce:79:a2:02:e5:32:
8f:68:a9:ef:23:78:47:95:16:92:82:94:d0:fa:42:
72:1b:15:cc:c1:4d:6e:4c:a7:07:0c:39:3e:0f:4d:
b3:77:e4:dc:5f:9c:26:ad:6c:e8:b1:f4:e4:66:c8:
75:33:6f:b4:4a:26:5d:f1:b2:2f:5f:fe:60:c5:7d:
8a:8d:8b:15:7b:7b:49:ae:37:fa:12:88:4f:79:bd:
f4:dd:51:ef:37:8d:50:72:68:fc:ea:b6:d2:13:e7:
6e:05:6e:ae:b0:c4:19:9f:3b:7e:4c:6d:88:8f:fc:
d5:9b:ee:57:72:be:3e:7a:00:2a:d7:c3:f2:aa:c3:
3c:67:69:80:3b:a8:da:51:83:4a:7c:83:bb:25:f9:
c8:87:ea:73:3e:5f:70:6c:f8:b4:71:03:29:ce:a1:
55:b7:51:e4:23:48:53:51:87:ad:b6:91:db:b7:a0:
b1:d5:ad:68:3d:24:1d:50:47:06:b4:e1:e5:16:bd:
86:86:73:b4:72:25:51:75:cd:03:af:71:14:6d:c4:
b9:ca:ee:4e:d5:98:3f:77:56:28:6d:eb:4e:54:71:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:89:DD:0C:26:20:84:CF:35:3F:8D:40:11:76:2F:A3:16:1C:C5:A3
X509v3 Authority Key Identifier:
keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:79:fa:9e:5f:44:a3:06:82:0f:07:11:1e:f8:94:cc:21:7b:
e6:95:68:46:8b:d4:86:82:a7:4f:4c:d6:94:ec:39:ff:a6:01:
8b:76:9c:08:81:92:cf:58:6f:4a:63:4f:70:75:6c:68:59:75:
ed:94:19:df:d3:f6:df:d9:fc:1b:2f:5d:a8:5e:47:5a:03:73:
f4:5e:a5:bb:1c:fd:40:28:14:17:e5:34:e8:1b:b6:62:e9:95:
df:e3:bf:41:4e:db:1f:34:69:80:b8:ee:34:8e:4a:96:82:6a:
f2:b0:a0:e4:44:19:2c:f6:9e:7e:66:79:20:8c:17:6c:b7:8f:
31:b4:8d:5a:83:70:2e:7e:2b:8f:47:10:fc:50:9a:96:78:2a:
58:3a:8a:b3:b5:eb:1e:d5:22:2b:f8:7e:95:3b:25:28:3e:5f:
2e:91:8d:67:dc:e7:da:64:81:1b:77:06:bd:2b:7b:a6:04:33:
64:de:48:f5:32:94:63:dd:4c:a7:a0:19:25:cd:1b:7f:5d:51:
ec:7a:44:72:7c:ee:bc:e6:e1:d1:8a:45:ff:bc:86:67:fd:4f:
a3:c5:fa:07:83:0a:6f:4d:e4:9d:54:15:e3:35:a7:35:f2:67:
4c:eb:cb:f1:5b:2c:7b:87:b3:ab:50:d1:de:e3:95:11:0d:59:
e6:fd:31:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:22 2025 by rpki-client