Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
File: HKy3fiC3gUfUf4OUKU8Re1yE714.mft (raw, json)
Hash identifier: 97bVU/O0MqIaOP8xPxKEzLslQ/0iw+QC1BK/QzT248U=
Subject key identifier: 16:01:C5:DE:72:68:1D:FC:48:EE:8D:8A:04:6D:C8:60:9C:B3:5D:DC
Authority key identifier: 1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E
Certificate issuer: /CN=1cacb77e20b78147d47f8394294f117b5c84ef5e
Certificate serial: 019A4EF44893891ADCC2F3DED2D5E7E92562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
Manifest number: 11BF
Signing time: Tue 04 Nov 2025 13:00:23 +0000
Manifest this update: Tue 04 Nov 2025 13:00:23 +0000
Manifest next update: Wed 05 Nov 2025 13:00:23 +0000
Files and hashes: 1: HKy3fiC3gUfUf4OUKU8Re1yE714.crl (hash: CVkcGDfaEAMw33E996Imud0A95hJgqlfxas5rsgf63s=)
2: OoGFPfomo3cQZiCz4qsidreDjCc.roa (hash: nmvopa2kUZd9MIXgbeUNiD86irOgkmmL30is65pmYug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:48:93:89:1a:dc:c2:f3:de:d2:d5:e7:e9:25:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cacb77e20b78147d47f8394294f117b5c84ef5e
Validity
Not Before: Nov 4 13:00:23 2025 GMT
Not After : Nov 5 13:00:23 2025 GMT
Subject: CN=1601c5de72681dfc48ee8d8a046dc8609cb35ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:e5:69:ec:7b:68:67:78:5e:a2:0a:92:48:
c4:33:8b:dd:12:5f:b0:0b:8b:62:c2:0b:03:bc:2f:
86:2b:b8:da:1f:e5:94:00:a0:4b:6f:96:b0:1e:38:
9f:eb:16:25:49:75:5f:15:4b:07:83:99:cd:c5:48:
63:6f:2a:82:91:1e:1f:64:5f:e1:84:9a:11:78:f4:
9f:a2:ac:41:ca:df:73:5a:ee:65:27:c3:ba:0a:ee:
88:ce:da:be:62:6a:65:0d:ec:70:d1:d1:f8:a4:79:
3f:0e:f4:11:9b:1f:e6:3c:2a:ae:01:31:d9:e0:cd:
b9:b0:54:37:c2:59:c8:01:ea:65:7b:5c:a7:96:af:
a0:5c:81:c8:13:c9:48:b7:cb:f0:c9:5d:91:10:11:
a6:48:48:47:7f:be:14:ef:a9:a5:fb:01:0e:ba:f3:
b5:64:4b:2e:7f:b1:48:a4:c3:a5:52:fb:c5:0c:12:
9d:b2:50:2e:f9:7d:8e:a4:74:12:7f:d2:4a:03:78:
03:2c:d0:03:6c:e0:2d:24:ce:c6:fa:0b:71:b4:30:
9c:bd:b8:5b:65:c2:bd:6c:61:f4:70:9c:8d:0c:df:
d3:70:c0:9d:9e:e9:e4:bf:31:ba:b0:07:f3:89:d0:
f5:b9:18:40:5f:8e:6b:b0:dc:dd:e5:40:83:00:ce:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:01:C5:DE:72:68:1D:FC:48:EE:8D:8A:04:6D:C8:60:9C:B3:5D:DC
X509v3 Authority Key Identifier:
keyid:1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ea:1c:22:82:d2:6c:37:d6:fd:87:8a:b2:32:69:e4:63:7d:
95:4b:b5:ea:6c:06:52:15:83:17:da:d3:ee:61:93:73:89:ea:
30:05:d5:d5:6a:79:a2:e4:8d:e8:43:41:54:4b:28:56:7d:f5:
62:75:c1:18:b7:a5:e2:db:d4:b9:56:81:ef:ad:40:70:15:c4:
cf:8b:65:d6:f3:a1:3f:80:4d:18:60:6b:c0:fa:4a:56:84:2d:
55:e7:16:18:1a:87:d9:13:58:76:55:94:60:8a:65:f8:a1:66:
f4:5a:22:6a:40:6d:20:3f:48:ca:01:4f:94:8e:51:52:52:05:
0b:d7:51:1b:6d:cf:75:ee:28:54:5c:46:04:6a:88:33:ea:39:
fd:80:75:23:ba:b0:1e:46:65:fd:e7:4a:5e:af:ce:ab:a0:c0:
96:2f:20:cb:a7:56:84:98:ef:d7:81:1d:ec:05:c0:de:3c:c3:
f0:b4:79:f6:fd:e4:25:28:9d:7a:6d:15:9c:af:ea:c1:9c:e5:
78:8b:46:49:0c:3e:91:72:78:82:5e:b4:85:cd:9c:d7:86:a7:
8a:1e:97:15:2b:e3:e0:27:8c:2a:67:9b:f2:29:3f:24:e9:c9:
92:e5:ef:93:63:d3:88:00:cd:af:83:41:aa:34:d0:ba:1f:9b:
17:65:db:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:08 2025 by rpki-client