Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: e7r8kb32yYqSGXNMgXNacM6RelYMWkcTBaawxLIznRA=
Subject key identifier: 09:AB:21:B9:64:69:FC:4C:C7:A1:D8:F8:16:36:4D:B2:66:30:9E:E2
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 019A50E2F79642E4D414FDF9F69D92648D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 07EC
Signing time: Tue 04 Nov 2025 22:00:42 +0000
Manifest this update: Tue 04 Nov 2025 22:00:42 +0000
Manifest next update: Wed 05 Nov 2025 22:00:42 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: gzKclQwa6+chcE0MUdAKzf5I2OUQW8iFMw7qlZazIA8=)
2: zBo_iKzjdrZH1koNuXflz2DEVFo.roa (hash: oSU216GFvs9sVu0bzYiGAj3iuq0J8sZNKxXjgiMItjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:f7:96:42:e4:d4:14:fd:f9:f6:9d:92:64:8d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Nov 4 22:00:42 2025 GMT
Not After : Nov 5 22:00:42 2025 GMT
Subject: CN=09ab21b96469fc4cc7a1d8f816364db266309ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:ef:39:37:60:aa:e1:da:00:7f:94:a8:b5:
1d:b9:68:d6:08:5a:ba:7c:d1:e3:fc:e2:98:f5:ae:
bd:1c:34:6c:ea:d3:75:88:9c:9c:3a:9b:a2:e2:97:
09:33:23:56:37:c9:e9:51:f3:ca:76:3e:82:e8:9c:
45:0a:2c:4d:af:81:13:33:3c:29:8e:d6:6b:fa:19:
22:df:61:13:84:d2:aa:23:f1:08:61:56:38:cb:90:
b0:6e:6b:20:5a:83:ae:7f:e4:80:78:cf:64:46:d9:
b3:a0:b7:38:2e:ff:89:c7:71:94:a7:c5:a1:f9:14:
92:b5:4b:41:b5:e0:25:0d:0f:b5:26:05:04:a4:ff:
f8:ca:89:a0:2d:e3:a3:d7:b9:86:2f:ca:9e:6e:4c:
38:b1:ea:d6:57:46:85:6c:93:cb:61:77:96:90:a2:
04:98:a6:81:02:5d:e7:85:46:e0:43:5e:64:cf:fc:
6a:ee:d0:5a:43:e1:b0:c0:a1:bd:18:64:45:f7:0e:
52:63:82:49:90:80:fe:d2:56:9a:bb:18:51:95:db:
e9:bc:08:a2:cd:1c:81:ea:52:65:21:df:64:70:f3:
52:f1:40:bc:58:c9:39:ad:db:03:49:3d:c7:d4:48:
49:fb:01:f7:b6:68:2c:85:16:96:09:36:56:57:98:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AB:21:B9:64:69:FC:4C:C7:A1:D8:F8:16:36:4D:B2:66:30:9E:E2
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5f:ad:5f:b6:a5:31:07:37:cf:ed:60:04:9e:3a:14:4b:03:
f8:a0:71:36:ce:9d:95:1c:6b:dc:48:17:1d:67:a9:90:60:fb:
b3:de:51:22:67:6a:eb:a9:05:2e:1a:5c:7a:eb:05:bb:24:d1:
7e:24:f0:f5:f0:80:7b:13:44:61:26:2c:b0:47:d5:ed:69:0a:
63:cb:b9:58:74:42:db:e0:81:72:30:d8:fb:3a:e2:6b:f7:dd:
a0:ce:a2:59:7e:d0:bc:a9:dc:e9:ec:41:5e:4e:80:6b:6f:32:
8d:ab:17:a3:a0:e5:1f:ca:aa:94:33:64:de:63:b3:78:99:80:
5b:92:2c:2d:81:97:ff:7d:fe:f3:27:fb:0f:27:b9:fd:90:49:
a5:41:d7:85:a5:8d:5f:81:f3:bc:91:63:b4:eb:0a:ff:3a:e4:
70:78:fd:bb:b7:27:cf:42:75:c4:97:6a:56:b5:b2:64:9f:19:
bd:89:f1:4c:0a:64:c5:fc:3f:03:0c:d3:45:2e:51:67:88:db:
93:ac:b7:c7:ac:7f:9d:c0:4c:da:76:27:f3:cf:b9:03:b3:f2:
95:e1:14:40:0b:a4:87:a7:1b:d6:93:84:c0:d0:49:a4:bf:02:
40:98:24:81:4b:d5:04:41:50:38:c8:53:83:d4:15:87:a0:5d:
1f:0b:3d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:51:29 2025 by rpki-client