Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
File: HCiwfBV6XcYTySZNr4nnyGDjPmM.mft (raw, json)
Hash identifier: G7BY2feGMHsPapaSrn5WekcqYmQuPv4ASqM1pnd6wiM=
Subject key identifier: 2F:4A:5A:84:FF:36:05:87:39:EC:30:AD:1A:2C:D7:13:D7:5E:0B:C2
Authority key identifier: 1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
Certificate issuer: /CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Certificate serial: 019A4EF4172066E3875399745C63354AFC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
Manifest number: 1719
Signing time: Tue 04 Nov 2025 13:00:10 +0000
Manifest this update: Tue 04 Nov 2025 13:00:10 +0000
Manifest next update: Wed 05 Nov 2025 13:00:10 +0000
Files and hashes: 1: HCiwfBV6XcYTySZNr4nnyGDjPmM.crl (hash: NYpLYbfAys+JP7G45o77xQThbJ4bMioUcLdV650xHos=)
2: f0vhGxR72MG9W3aRCoI9VCH2wQA.roa (hash: PDzMyuMmfdbsbyADvkBIQZLummxADm7ztnq8hanW6ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:17:20:66:e3:87:53:99:74:5c:63:35:4a:fc:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Validity
Not Before: Nov 4 13:00:10 2025 GMT
Not After : Nov 5 13:00:10 2025 GMT
Subject: CN=2f4a5a84ff36058739ec30ad1a2cd713d75e0bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:d6:09:b9:9c:d8:e8:8b:d8:b8:f7:b5:ba:
8c:bb:1e:6c:06:38:64:72:e5:ea:56:d3:3a:0d:38:
10:43:82:77:77:f0:24:42:e3:46:9d:e5:ba:dd:ce:
f7:22:b8:3f:e9:86:8e:5b:21:80:e6:a5:ea:2c:45:
71:32:83:30:dd:04:8e:17:2b:ab:2a:26:4c:4a:a5:
1a:4c:35:9b:f8:d4:cd:e7:a1:eb:cd:4d:25:14:7a:
37:ad:8b:c4:6f:ee:c8:87:62:01:10:02:b3:3c:b3:
22:a8:c5:ec:b7:d9:eb:21:21:4e:72:ed:2c:f3:8f:
d2:d8:57:3e:9f:14:f7:d1:0a:dd:6e:e7:82:b8:be:
69:86:a7:3d:79:ae:52:c0:1f:ff:50:4d:74:0e:4d:
bc:be:ab:0d:d7:5e:37:5f:a8:c1:23:c6:81:ec:ed:
9e:77:1c:b4:6a:5d:7d:46:93:7b:09:b7:93:71:23:
83:a1:ee:c3:e7:da:74:b5:de:17:fe:f1:47:98:25:
7d:cf:7c:7c:0b:8e:35:7b:f4:e9:1e:f3:83:03:9e:
db:80:c6:56:b7:a3:ac:8c:5a:95:cd:e6:f7:43:e5:
c4:a0:a3:1b:e2:66:80:8d:ed:cd:bc:94:4e:f2:c3:
56:e6:cd:45:75:b9:4a:2b:b8:f5:16:17:b4:1e:47:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4A:5A:84:FF:36:05:87:39:EC:30:AD:1A:2C:D7:13:D7:5E:0B:C2
X509v3 Authority Key Identifier:
keyid:1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3d:18:47:69:b3:64:81:2f:2c:1e:b5:a9:c6:8f:c3:e3:9d:
02:27:4b:20:e2:0e:24:91:31:f1:56:a7:44:af:a2:92:dc:34:
07:40:88:9f:2a:ba:c6:f0:d0:11:18:2d:af:4c:71:c3:71:0b:
eb:34:23:d1:ec:89:fc:3b:5f:72:75:cd:6a:37:e4:96:f6:3d:
d1:ce:9a:63:26:91:10:c2:68:cb:c6:af:69:ec:fc:ad:33:28:
a3:ab:ea:b3:3e:16:c9:2d:e7:19:18:d6:44:2d:12:a0:d7:f3:
23:b8:c5:b8:e0:1e:9d:39:58:44:2f:d9:c3:78:83:57:23:23:
af:c2:87:e4:43:64:95:66:e5:77:3e:01:3b:ae:32:fb:c0:3c:
8e:d0:3b:a0:7d:a0:97:e2:86:49:0a:f8:c9:05:01:a8:c2:6f:
0c:04:bc:ca:e2:5a:79:97:5a:0a:71:ae:8b:8c:65:4f:00:35:
b8:1d:46:ba:a2:41:63:b3:e3:22:81:c1:e2:1f:96:e5:6a:47:
2a:87:bb:56:50:8b:18:f4:29:8a:2c:f1:96:36:d3:58:71:9d:
2b:c1:b3:8e:b5:a2:82:b7:15:a4:40:87:0f:30:c3:a7:ec:8a:
0d:0d:c8:91:7e:d5:ea:49:28:36:c0:b6:c2:29:c3:92:38:02:
67:35:37:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:02 2025 by rpki-client