Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
File: HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json)
Hash identifier: rrHCJiZyfVAQuTycSsSSUucMJ9aaboEI3Z9Yt1KK7Qo=
Subject key identifier: 3C:47:74:4A:D1:AF:2F:A5:56:D9:3D:EB:C7:6D:E8:AB:10:AF:E9:5D
Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
Certificate issuer: /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Certificate serial: 019A55D27D371D36C61CD8A64F77CBF02B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
Manifest number: 0DB1
Signing time: Wed 05 Nov 2025 21:00:49 +0000
Manifest this update: Wed 05 Nov 2025 21:00:49 +0000
Manifest next update: Thu 06 Nov 2025 21:00:49 +0000
Files and hashes: 1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: YOF+uDPW4kJVlDEXUiAhyPpAOyRU/p9+z6PKe2tooUA=)
2: j4nA-5dcYXHEDW8ahrcEwwSSveI.roa (hash: B4JnjqZ19Obadp4A6xUEPeEjzogbr5ee2D1zydPWFcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:d2:7d:37:1d:36:c6:1c:d8:a6:4f:77:cb:f0:2b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Validity
Not Before: Nov 5 21:00:49 2025 GMT
Not After : Nov 6 21:00:49 2025 GMT
Subject: CN=3c47744ad1af2fa556d93debc76de8ab10afe95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:47:fd:af:76:a1:8c:81:b9:79:6b:32:26:
b0:de:e9:30:91:4d:11:2a:1e:e8:ae:b5:90:03:4f:
bd:fe:23:c6:5f:a3:34:8d:91:1e:c8:6c:04:92:89:
fb:c7:be:10:58:4a:ff:49:3d:db:f2:89:2d:5b:68:
58:1c:6e:cd:ac:f1:8b:81:f2:9c:15:20:59:f2:b9:
a2:a2:f1:ec:16:c4:38:b8:0a:43:32:ad:07:60:ed:
21:de:c9:22:70:4d:b8:30:1a:73:20:13:6f:42:92:
06:ac:9d:43:d0:7d:b0:06:81:8c:52:54:e3:4f:03:
39:4b:e2:84:b4:c1:ca:c4:bb:87:00:36:f6:b1:74:
4f:ae:9d:87:5c:bd:8b:2c:2b:7d:3c:57:d4:50:f9:
38:5f:a7:83:77:07:fe:86:aa:54:8c:55:34:22:5b:
2e:37:6d:44:63:cb:1e:af:0b:69:a4:33:b4:ad:05:
92:65:b4:86:ae:d5:07:a6:e2:c6:ac:e2:27:2e:ba:
57:01:4f:e6:15:ad:9e:e0:2a:19:43:42:34:20:56:
e2:bf:0b:9b:90:60:23:40:00:93:ee:77:de:da:a0:
a7:42:8e:72:0a:6a:a6:8d:b1:c8:49:d3:f6:59:25:
d8:f4:ca:9f:69:1c:67:5b:f8:44:a0:cb:bd:5d:c1:
b6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:47:74:4A:D1:AF:2F:A5:56:D9:3D:EB:C7:6D:E8:AB:10:AF:E9:5D
X509v3 Authority Key Identifier:
keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b0:6e:7a:25:99:9f:4f:af:40:08:83:af:c7:29:bb:26:1e:
35:7c:ff:49:c8:78:8d:e5:68:ee:cc:ea:2c:30:6d:c1:a0:e0:
54:aa:a6:bb:81:50:f2:aa:4a:a0:80:49:cf:60:50:78:d3:23:
39:08:a2:90:ac:4a:49:07:c5:59:38:57:1c:66:f1:c1:66:69:
c0:06:c8:1c:0b:b3:f4:6d:8d:a6:c6:20:cb:8a:dd:fa:e3:f7:
f6:3e:7f:29:e4:e5:44:7a:b7:b3:27:72:0c:7e:bd:af:5e:6b:
4c:24:fb:b3:30:f1:1f:a0:d1:13:eb:a0:d0:47:ff:aa:7a:94:
cd:38:35:c8:82:87:ee:c8:39:29:7d:ef:22:4a:20:a9:25:88:
5d:69:20:17:39:7a:1d:c9:d7:33:7c:cd:76:83:1a:54:79:a7:
36:96:ec:c7:b9:55:bf:f7:ad:e8:61:b4:a6:ac:eb:ed:9b:27:
1a:9a:c5:c8:f5:33:c4:41:cd:02:b6:9f:3a:04:06:37:b1:52:
ea:a2:71:82:6b:f8:7a:a4:7d:4e:0a:ff:da:87:29:70:a1:19:
57:9d:1f:ff:b0:37:d5:05:4c:9e:85:b0:e4:e4:c8:22:4a:d4:
e6:c3:f8:e9:c8:9d:e9:bb:0b:96:ff:2a:43:d1:63:ca:93:20:
d8:28:1e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:35:04 2025 by rpki-client