Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
File: HXJHHgJd46gqjfWKrm4S4x1s0FA.mft (raw, json)
Hash identifier: NopipfaTfpDES8yYdfeAEnl9/SzL8yhDf2GSpY6e9B0=
Subject key identifier: E6:AA:EB:63:AB:76:39:1A:58:E5:C5:1F:1C:49:0F:C5:6C:E7:12:9D
Authority key identifier: 1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50
Certificate issuer: /CN=1d72471e025de3a82a8df58aae6e12e31d6cd050
Certificate serial: 0199FB7C86FB31168E1868719BE65508C1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
Manifest number: 0114
Signing time: Sun 19 Oct 2025 08:01:06 +0000
Manifest this update: Sun 19 Oct 2025 08:01:06 +0000
Manifest next update: Mon 20 Oct 2025 08:01:06 +0000
Files and hashes: 1: HXJHHgJd46gqjfWKrm4S4x1s0FA.crl (hash: 4aXrQJ865DJCZC/3LBzC3HARsuV/5t5llmDTtZvTZX8=)
2: fj04IAgRtLyt8FxauXRHzCCY2dM.roa (hash: RQPUjLROTiuPGUSBn8RZIchppB8l2w9Yk7LM8XCFoI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:86:fb:31:16:8e:18:68:71:9b:e6:55:08:c1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d72471e025de3a82a8df58aae6e12e31d6cd050
Validity
Not Before: Oct 19 08:01:06 2025 GMT
Not After : Oct 20 08:01:06 2025 GMT
Subject: CN=e6aaeb63ab76391a58e5c51f1c490fc56ce7129d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:6d:5c:56:d6:56:90:3c:0f:39:b2:e3:84:
72:a3:f5:ba:64:2f:d6:aa:d1:75:78:ca:d3:b3:14:
b7:b4:b9:9d:6d:fc:f9:da:3d:34:20:f9:2f:15:31:
70:c5:f4:eb:3d:47:cc:f5:a6:17:e4:af:09:bb:49:
e9:fa:e6:f5:2a:54:71:97:fd:aa:61:52:28:eb:30:
7b:ff:0a:6e:19:d7:9d:76:0a:e8:d3:c6:6b:d6:57:
e1:cb:28:10:37:00:19:bb:3f:6f:20:00:2d:a9:7f:
ff:e8:40:5c:24:28:9f:ac:e9:0f:33:c8:48:a0:89:
3f:b7:3f:00:19:54:30:ff:a3:e6:4b:55:0f:ce:e6:
91:64:ed:5a:0e:a6:e5:97:06:f0:30:22:43:bf:00:
f4:86:95:d8:7c:d2:c4:7c:b6:91:17:67:1b:ee:c1:
d5:b5:db:25:81:19:f7:e9:fb:c1:f3:ea:36:f0:0b:
60:2a:48:fe:ad:50:90:03:0c:b5:aa:5f:63:61:ba:
9b:15:05:77:5c:1e:7c:dc:63:a1:e5:8e:7a:68:76:
90:80:79:43:f1:ea:4d:ae:0c:38:9a:ae:92:93:c1:
68:0f:42:ae:c6:90:f7:5a:de:a5:95:12:17:af:cd:
5c:b3:17:59:d0:0c:0f:a7:48:f2:b7:da:f2:ff:31:
93:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AA:EB:63:AB:76:39:1A:58:E5:C5:1F:1C:49:0F:C5:6C:E7:12:9D
X509v3 Authority Key Identifier:
keyid:1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:25:56:8d:83:b4:33:0b:b6:97:6a:0e:3e:0e:5f:94:0d:2b:
4d:4e:7e:de:95:18:49:82:4d:20:10:b0:88:b8:b0:e0:9e:e7:
fb:c6:3f:2f:9d:8a:88:1f:78:ff:44:ff:67:b6:27:a6:72:f7:
46:60:87:c9:ac:ff:ee:8b:5f:38:47:c4:3d:b0:e8:24:81:6f:
8c:f8:72:37:5c:74:73:f7:2b:77:34:37:7a:85:9c:6b:4e:22:
a4:80:4a:cf:d8:cb:df:b5:75:8e:75:fb:8a:0c:13:e4:43:a0:
60:a5:ac:0f:f9:9b:8c:a1:00:9b:5c:12:93:14:9d:93:13:b2:
33:24:13:3b:a9:cd:80:39:b9:a3:a2:2d:8d:5f:19:b8:ab:37:
cb:ee:d1:ce:cf:41:16:75:4f:c2:01:59:30:27:8c:da:34:de:
f9:81:24:39:f5:0b:5f:30:af:4d:b0:4e:8c:09:5e:06:ca:c8:
35:46:91:9e:ee:71:04:b6:0b:18:a5:86:b7:7b:72:0c:b0:47:
85:7f:da:fd:7f:f0:72:f8:f3:04:a8:7a:4e:08:a2:97:41:f4:
35:8d:e2:76:89:66:64:5a:7f:e3:65:69:47:b5:88:8a:6e:c3:
77:28:ec:8f:ae:8f:85:f5:5d:02:47:b5:c9:0a:97:f7:b6:ff:
3a:8c:8f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:20 2025 by rpki-client