Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
File: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft (raw, json)
Hash identifier: AEGzwoDkQjrSpWGbdAslN+XlVvS/xUJB5Vc+Z19It+I=
Subject key identifier: 01:2C:20:72:F2:34:77:6B:3A:34:19:B7:30:46:7A:0C:3F:74:8B:FD
Authority key identifier: 1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
Certificate issuer: /CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Certificate serial: 019A4EF4C703F9FCF9F5205B8EA43B41E6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
Manifest number: 0A44
Signing time: Tue 04 Nov 2025 13:00:55 +0000
Manifest this update: Tue 04 Nov 2025 13:00:55 +0000
Manifest next update: Wed 05 Nov 2025 13:00:55 +0000
Files and hashes: 1: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl (hash: nsxdPQD6KFeBC9U2BOuZ+PB1scqwnXXJaFV8lyIxZ2E=)
2: f0JNWqb0_sxkiR-fghzvzpbVYUw.roa (hash: RhuCzYejuWMbfNGSM6on7Cw2OZveLgiaD9vSRL8ll5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c7:03:f9:fc:f9:f5:20:5b:8e:a4:3b:41:e6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Validity
Not Before: Nov 4 13:00:55 2025 GMT
Not After : Nov 5 13:00:55 2025 GMT
Subject: CN=012c2072f234776b3a3419b730467a0c3f748bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:9e:d2:27:9a:50:c7:84:05:cd:7b:12:a1:
22:a7:12:a2:b3:df:9f:e1:f2:cf:d5:92:e7:72:1f:
eb:78:95:56:f9:3a:ed:de:e5:ee:ae:21:e9:0e:71:
9b:e5:a2:a5:86:89:56:98:b3:27:46:c6:ce:33:5b:
74:35:3d:3d:da:9f:5e:b5:92:3c:1e:5d:9d:10:e6:
c8:8b:fb:5b:69:94:0b:87:08:ec:94:5c:7f:59:38:
8d:74:cd:42:19:f6:b3:c4:2d:26:6b:b0:ac:f2:bc:
88:b3:07:47:08:7f:73:8a:c1:e0:bc:e4:6a:45:c0:
01:1d:b5:8b:4b:b3:37:3e:e4:8d:f9:2e:f4:fb:de:
4b:6e:d4:56:8d:c9:d9:43:ee:87:79:99:d7:1e:ad:
04:7c:6c:44:b5:02:0c:3f:35:32:d7:dd:5d:72:3d:
61:2f:9b:03:28:40:d2:d9:4e:e9:ea:4f:9c:44:8a:
c9:69:84:38:31:97:71:fe:25:c8:c0:9d:a6:72:ff:
f0:4a:3b:35:5e:da:bd:21:d6:26:ce:5b:61:d7:41:
8a:d0:db:35:ae:bb:f8:e3:63:30:65:fb:e8:af:f9:
83:bd:02:b4:a6:15:39:c6:11:98:bc:45:80:0d:18:
6f:ec:4d:b4:29:26:ad:99:36:dc:a7:71:ee:f7:2f:
e8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2C:20:72:F2:34:77:6B:3A:34:19:B7:30:46:7A:0C:3F:74:8B:FD
X509v3 Authority Key Identifier:
keyid:1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:45:d8:ae:44:fa:85:0c:c4:17:54:1d:d4:14:5a:96:94:61:
9d:53:bf:9a:95:4b:4f:69:23:bd:a7:fd:60:cc:42:19:bb:bd:
aa:4b:14:fd:e9:a1:5a:c6:d5:87:f7:f6:5c:af:64:b0:ab:ad:
f3:ba:e6:f5:ee:57:95:69:cb:c8:f6:70:2c:16:89:db:1e:c7:
93:b1:47:e0:47:81:82:95:21:15:70:02:97:5a:1f:cb:ff:60:
18:79:a8:67:9d:83:ab:26:b6:fb:02:c3:93:b1:a0:07:1f:79:
4a:4f:a5:97:5b:b4:27:83:f5:dc:ae:fa:8a:b3:6e:05:07:f7:
79:92:8d:c8:c3:f1:0e:f0:5d:ad:d9:0b:83:b5:3d:5e:69:cb:
1b:4f:12:6e:d3:3b:24:91:88:60:b8:c9:8b:7b:46:e9:9b:6e:
ad:0f:49:ae:b2:a1:d7:71:4b:e9:a5:35:fe:2b:70:b2:f4:1c:
47:a0:a9:4d:a9:71:29:3c:bf:e4:87:2c:df:9b:d2:d8:90:34:
e4:3d:17:68:fb:33:85:cb:c5:2d:78:ff:49:fc:01:96:ab:96:
e3:6a:5d:98:7b:ad:8f:dd:4b:b0:7a:cc:1e:7d:8f:e1:ae:1d:
b6:8b:72:35:4f:a2:e1:b3:0a:11:9e:44:9d:5e:cf:05:b0:15:
d9:ba:4a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:59 2025 by rpki-client