Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
File: HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json)
Hash identifier: ajmeKFNJ0Tq4HwqduFRvGNzrxhpWAxxb7xIT2qGgiC0=
Subject key identifier: 17:58:18:73:03:D8:DE:F0:48:54:F3:E1:FE:67:2F:65:62:0B:22:B8
Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Certificate serial: 019A53E3D033C3317EFE2229D83E66841085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
Manifest number: 0A53
Signing time: Wed 05 Nov 2025 12:00:30 +0000
Manifest this update: Wed 05 Nov 2025 12:00:30 +0000
Manifest next update: Thu 06 Nov 2025 12:00:30 +0000
Files and hashes: 1: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: RtjNNdfAFqTXHsKX+I7OgSsv3sz5H4HCJloc8KW7o2o=)
2: lyeOPA3Hi3kUGDVfoF3VE8weizo.roa (hash: SK0Hu8MdGQh3m28Nprb3+ZaMXzQS8vnNx8UerT7YIyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:d0:33:c3:31:7e:fe:22:29:d8:3e:66:84:10:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Validity
Not Before: Nov 5 12:00:30 2025 GMT
Not After : Nov 6 12:00:30 2025 GMT
Subject: CN=1758187303d8def04854f3e1fe672f65620b22b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b8:bb:df:8c:fd:57:c6:bb:7d:24:12:e9:f2:
e3:2c:b9:ea:4c:39:7f:13:86:15:65:12:cc:8d:e1:
ff:dc:cc:e7:30:d9:29:27:dc:ec:84:4e:bb:bb:f6:
c9:6a:55:f8:cc:ab:81:29:03:a8:af:8d:20:c0:d1:
2a:eb:a0:d9:0c:68:bf:26:dd:9b:e0:73:79:4b:e4:
d8:c1:8c:a3:a2:cc:52:c7:c3:5f:15:9d:8c:31:a7:
3b:48:28:6e:56:35:53:cd:46:a0:3f:bc:49:2d:55:
e1:c7:b5:b1:e9:cd:b1:17:8f:d5:de:3d:f8:51:48:
f9:c6:9c:a8:92:ed:23:e2:41:bf:5f:bd:ce:d6:e0:
b9:91:d3:a3:33:76:5d:b8:8c:95:28:c6:a8:b1:ad:
83:dc:1a:89:78:9d:45:bb:e3:b2:79:f2:54:0b:df:
20:fc:c3:99:09:71:e1:cc:02:8b:c4:9e:29:bd:97:
04:0b:7d:fb:28:14:c6:71:c1:4e:0f:64:87:17:1a:
2f:13:9d:50:ba:23:82:33:a0:04:1b:14:00:1a:9a:
b0:e3:85:3a:d8:5b:80:22:b0:3e:e7:42:78:f7:74:
11:e6:29:2d:9c:d1:ae:92:f8:41:68:8d:2f:95:ee:
fb:e9:04:7c:c2:d6:23:71:9c:09:c2:50:06:0c:7c:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:58:18:73:03:D8:DE:F0:48:54:F3:E1:FE:67:2F:65:62:0B:22:B8
X509v3 Authority Key Identifier:
keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b4:24:6e:7f:4a:39:95:e5:e4:c7:56:2e:92:c8:34:ac:2a:
80:c9:da:ef:cc:fc:9c:e3:0a:3c:ec:3f:5c:71:4a:1c:fa:ed:
8a:46:a5:24:0b:07:ef:e5:dd:b6:89:c8:11:4d:6e:0c:63:d9:
bb:b4:bc:47:d0:74:31:56:35:25:9b:51:d7:37:62:af:cb:77:
d7:91:e1:7a:e2:a2:a3:9c:e2:5e:d8:1e:6d:c6:5a:15:da:81:
c9:a0:1f:e7:8f:f7:4a:6e:69:7e:ff:b5:a6:3b:9b:d5:a7:4e:
65:d6:ac:38:c3:4a:0b:cc:97:36:97:8c:fb:eb:fb:e9:a9:2f:
77:0c:d4:3f:2e:0a:bc:66:60:fe:b7:e8:95:95:4d:ae:07:c2:
f8:b0:af:26:ae:7b:b3:0a:1b:ae:24:1b:cf:e8:bd:45:8a:4b:
2e:e4:a6:86:ec:3f:04:82:42:4a:50:88:66:d0:60:0a:00:82:
fa:df:3d:9b:d5:48:3e:23:c2:46:c5:b5:2d:cf:6d:f7:61:35:
e2:6f:f5:89:c8:99:f5:b3:3d:78:0f:f2:1e:16:8e:e4:e6:ed:
51:1d:ed:1e:05:a9:69:cf:e9:25:d4:66:74:fd:c4:29:ab:d9:
16:4e:cf:bc:cc:5f:ac:94:94:2f:bf:df:98:71:ec:6e:ff:c0:
6f:71:ec:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:59:43 2025 by rpki-client