Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
File: HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft (raw, json)
Hash identifier: u95x2uGiJXlirWpawTf1BlSBMPfTepAGTtdihk2MY7Q=
Subject key identifier: 62:E3:BC:C1:A9:0B:0D:51:2E:36:D5:65:B9:B9:18:E5:FE:23:5F:A8
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial: 019A4E4F79333DB16E9CF1C31358589F907C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 10:00:22 +0000
Manifest this update: Tue 04 Nov 2025 10:00:22 +0000
Manifest next update: Wed 05 Nov 2025 10:00:22 +0000
Files and hashes: 1: HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl (hash: wBhecyir1UhzUH1aGaJk3nyKAOB1qWN5oXu9cE51EPo=)
2: JrMu8Fv-EJ0gYHcDKiU_A3eevzc.roa (hash: 6s6fSOnj2fawBTt5pakrIRbKDkLV0dgDjLyUP/ka7Zs=)
3: Yv3OBlam3VOOyrqHnKRvnmbQqTE.roa (hash: c4F3qlWubFRDD6IUHkMCGZaiuQoE5JPsyXqZuaXssXk=)
4: sZOw6ZmAV-eW5usk1RjXBfJwu3k.roa (hash: xYRWDuxjHSuoMKKmk6k/DnQlZPxerY0wU1cLVyqv9fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:79:33:3d:b1:6e:9c:f1:c3:13:58:58:9f:90:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Validity
Not Before: Nov 4 10:00:22 2025 GMT
Not After : Nov 5 10:00:22 2025 GMT
Subject: CN=62e3bcc1a90b0d512e36d565b9b918e5fe235fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:10:cc:dd:18:d7:1e:6a:6d:cd:7e:cc:1d:
54:0f:c0:c3:d5:94:91:cb:dc:20:86:5d:61:12:36:
98:00:90:11:88:76:73:fc:87:db:5c:04:6d:cc:98:
22:2c:04:49:09:2d:7c:8c:ef:8f:27:0f:43:15:e7:
a7:33:10:b5:b9:32:7c:d7:d1:71:56:4a:90:7c:3b:
4b:db:41:81:5a:80:54:1f:c4:9e:ae:ed:42:ba:5d:
2c:8b:9a:e6:4a:22:a7:75:fb:0f:4e:68:3e:3c:c7:
c4:29:fa:b3:27:5c:a6:89:99:75:18:8c:94:a5:95:
a2:8a:e2:01:df:ca:91:c8:b2:b9:34:17:98:17:83:
32:77:df:10:db:84:54:4c:22:b8:a6:90:1b:78:53:
41:8b:6b:0a:9a:0a:b7:c9:c9:2e:02:d2:22:61:a1:
bf:71:45:3f:ea:ce:df:59:4d:80:82:53:48:4c:b7:
39:16:68:b7:d1:25:20:54:ff:af:7e:29:bd:61:ce:
af:39:df:5c:31:73:95:3c:e2:0f:5d:8f:ef:51:39:
46:fa:0e:de:c2:17:6e:23:c5:d1:96:e8:4e:97:ea:
70:30:cd:23:c1:d2:9f:ce:3f:f0:a7:49:bc:28:bf:
58:e2:59:3b:c4:d8:49:2c:9b:e5:1b:57:27:d7:cf:
01:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E3:BC:C1:A9:0B:0D:51:2E:36:D5:65:B9:B9:18:E5:FE:23:5F:A8
X509v3 Authority Key Identifier:
keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:74:72:66:ea:39:d2:d8:ce:bf:37:c3:71:45:4c:69:34:2f:
46:f8:c0:17:8e:9e:46:85:43:a7:17:6f:22:1b:3b:13:3d:73:
56:d3:a9:48:c2:85:d1:3b:37:7b:1b:21:ab:9a:40:c7:4b:9c:
fb:18:c2:c7:92:55:ea:fd:22:49:62:41:c5:e2:4a:8b:90:a7:
b2:04:68:1e:29:69:79:cd:66:1c:76:6a:c4:d1:50:5d:72:17:
b7:b2:d6:26:56:cc:c4:1a:90:d2:73:14:d3:c2:dc:77:82:2c:
9b:1f:00:c5:a5:4c:c1:b4:e3:23:fc:8b:1e:b4:1c:d4:2f:1f:
da:a2:7a:da:e6:2a:11:fa:f5:83:e0:1a:c6:15:87:99:b7:60:
79:12:ee:9f:5a:d7:ab:6d:7f:18:39:96:3f:bc:0d:6e:f8:d7:
e5:f6:e5:b6:cb:a1:bf:4b:d0:af:0b:92:ca:9e:bb:16:4e:5f:
81:df:3a:8e:5a:6d:7e:07:5c:ca:b2:72:91:8b:09:f5:d3:cb:
c2:ba:7e:2a:e4:16:43:ca:b4:8c:94:d4:5e:75:b2:1a:22:5e:
dc:43:7a:20:31:18:cd:f6:b0:46:41:7a:d8:f2:7d:a0:c3:37:
d7:55:b2:22:c0:60:37:61:77:f6:ff:ba:4e:5a:3d:bb:5d:79:
31:cb:38:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:03 2025 by rpki-client