Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier: ypavmn27vcOlLwSeufnmd0iU8Lez2Pm8AhgATDK+6L0=
Subject key identifier: 64:8A:53:2F:2C:70:7B:81:D0:5E:70:F1:64:4E:01:7F:CB:C4:5A:DE
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial: 019A4E86418B0164411C16670C2DD4E9E420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number: 05A0
Signing time: Tue 04 Nov 2025 11:00:12 +0000
Manifest this update: Tue 04 Nov 2025 11:00:12 +0000
Manifest next update: Wed 05 Nov 2025 11:00:12 +0000
Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: KRmvAfNWLpXleppr563Y/WfIPzBUVbevGmFb9ChYGn4=)
2: KnSUOMU4LVOd-681gUpAeZxW9tU.roa (hash: T8JMOCVoClcG2l35uDfqB6bKR7EcaF1TmNNZKykQwnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:41:8b:01:64:41:1c:16:67:0c:2d:d4:e9:e4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Validity
Not Before: Nov 4 11:00:12 2025 GMT
Not After : Nov 5 11:00:12 2025 GMT
Subject: CN=648a532f2c707b81d05e70f1644e017fcbc45ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:7a:40:60:9a:72:d6:ca:95:e3:3f:2a:f9:
ae:61:65:00:58:78:a4:8d:af:a9:8f:20:ad:de:ba:
14:9a:22:37:18:cb:bd:a4:93:b8:98:93:bf:4e:be:
41:af:e4:0c:c1:f2:02:1a:d0:9a:b5:33:9b:3e:7c:
6a:fb:19:c9:ab:e3:a6:4a:48:2f:49:96:2e:ce:e5:
5d:18:c7:f7:be:d3:cd:ec:71:9d:af:e3:81:25:6e:
2d:61:30:84:d3:c0:c7:75:73:2b:dc:6c:10:6e:26:
61:ca:6a:67:f3:6f:e7:0c:ff:8a:aa:ad:58:62:00:
89:ca:98:aa:e0:f1:4c:67:8c:79:95:40:c4:61:d8:
f9:fa:65:cd:6f:d0:40:11:08:1d:d4:13:f5:14:c7:
5f:3c:82:43:22:0c:55:45:bf:20:80:35:ac:2e:00:
3f:ba:b6:6e:7e:20:a5:d4:7a:e4:de:d1:25:74:b2:
23:ff:93:6f:d5:b9:49:85:f3:25:33:a9:67:6c:7e:
03:b7:01:6f:b7:13:0e:99:06:2b:38:90:56:53:c6:
44:10:e1:ec:22:7f:d3:b2:52:a5:4e:89:70:5e:28:
63:9b:ec:d1:35:63:9b:44:14:b8:db:4d:f1:6f:56:
0a:a0:4d:fa:6d:40:cf:10:17:8f:e5:ce:5e:ea:50:
05:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8A:53:2F:2C:70:7B:81:D0:5E:70:F1:64:4E:01:7F:CB:C4:5A:DE
X509v3 Authority Key Identifier:
keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:38:de:e7:80:f2:aa:27:f6:71:35:cc:70:a1:2f:9c:b7:d9:
79:9c:f7:de:5c:ac:13:30:84:94:02:da:38:ab:e7:f9:63:68:
94:70:14:42:b8:4d:3a:fb:b3:3a:03:d8:63:46:39:ff:d3:ec:
49:3f:13:9a:6e:bf:bb:7d:99:61:22:b2:15:63:b5:3b:b2:4e:
7d:b4:f2:ea:33:59:0d:c1:e3:ef:dc:c1:27:37:27:22:bf:8d:
0e:d8:1f:ad:41:a0:47:ba:3e:c6:37:61:09:4e:30:f9:10:d4:
83:cc:5a:92:e6:27:fd:07:f5:4d:35:17:63:8d:ad:e9:6f:3f:
56:59:03:c1:ec:ab:db:2d:12:60:cb:fb:1c:51:99:59:19:63:
fe:71:39:c1:46:9d:cb:89:fd:4f:b9:76:c9:86:5f:c2:cd:df:
65:ae:a5:ba:b8:05:c8:d4:6a:cc:66:9d:92:a6:84:44:a2:a7:
ec:7e:41:7b:a7:84:97:b8:ea:be:ac:60:ba:24:a1:6b:13:bd:
9c:df:87:e0:e2:ce:d3:19:30:1d:79:26:64:34:30:61:fa:b3:
49:b6:4a:03:d8:51:d5:2f:78:13:45:8a:13:24:9a:78:b8:dd:
a1:e3:76:8a:3b:f2:88:b0:5b:73:63:41:ce:00:27:f7:14:12:
a7:70:85:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:06 2025 by rpki-client