Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
File: HjmCheIngn2PLFHx6plzV1VL5hI.mft (raw, json)
Hash identifier: qMc8KX1Yxl913qD9AmD2GH3FiMCVyC7fv17eXzlnQaY=
Subject key identifier: C9:10:58:71:90:0A:2C:61:E6:8A:45:1C:77:F2:11:87:62:9C:C3:1E
Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
Certificate issuer: /CN=1e398285e227827d8f2c51f1ea997357554be612
Certificate serial: 019A4F2B7B1F846BBA1A085261CFBA3CD9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 14:00:40 +0000
Manifest this update: Tue 04 Nov 2025 14:00:40 +0000
Manifest next update: Wed 05 Nov 2025 14:00:40 +0000
Files and hashes: 1: HjmCheIngn2PLFHx6plzV1VL5hI.crl (hash: 6glUs7vVd6nMfBmSmomhL5/wHczdPT6vvs8jj1mPSAA=)
2: gq0u0nuGqZ56yv0huU0NYxq2Tuw.roa (hash: BWs37rngd3jbS0e8ne6CGjqZDK9zmWcTutRQQlknGKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:7b:1f:84:6b:ba:1a:08:52:61:cf:ba:3c:d9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612
Validity
Not Before: Nov 4 14:00:40 2025 GMT
Not After : Nov 5 14:00:40 2025 GMT
Subject: CN=c9105871900a2c61e68a451c77f21187629cc31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:74:e2:92:56:9e:97:96:a6:c0:ba:8d:d3:a7:
95:75:b1:60:38:f7:7f:4a:b3:0f:28:44:3c:a7:2d:
cd:5e:07:95:55:a3:23:0d:f6:76:03:91:1f:d3:d0:
e6:88:af:f9:59:05:d8:06:28:36:cf:cc:2b:5a:39:
cf:fd:f4:83:1e:50:13:6d:5b:e0:15:41:bf:31:81:
51:ba:b9:32:17:88:cc:f2:b5:a7:a4:41:41:e4:a6:
e7:9d:ca:7f:cd:39:c8:9e:30:ba:2a:79:e4:1d:4a:
fb:13:6d:7e:50:69:59:95:46:bf:da:ac:3e:13:54:
14:fc:0d:43:90:55:38:87:95:4e:26:a2:c8:43:7c:
21:7f:75:c9:52:95:97:d6:e5:37:cc:8b:02:c2:6a:
49:7f:05:3b:60:99:b6:59:ec:77:00:fe:04:5e:4c:
ef:96:ec:c9:64:be:2e:d8:8a:be:8a:4e:75:6e:5c:
83:59:8c:bf:de:40:3d:8f:ac:a7:ee:bd:13:e9:ca:
a1:d4:dd:21:cd:a8:4a:5c:e1:66:4e:46:18:0b:b6:
74:09:3e:5d:eb:88:95:23:89:f4:20:ab:59:7c:65:
5d:ec:76:98:07:2f:b6:dd:85:b6:04:91:a1:00:ba:
77:a8:e6:d3:76:68:29:69:ca:e1:47:49:7c:4c:07:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:10:58:71:90:0A:2C:61:E6:8A:45:1C:77:F2:11:87:62:9C:C3:1E
X509v3 Authority Key Identifier:
keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:67:e3:c5:db:49:99:a5:aa:41:d7:cc:cd:04:4a:fe:94:16:
ff:0f:0f:39:33:21:4d:f0:88:d7:73:4d:e9:7b:9b:98:b2:cf:
ed:f1:1c:d5:69:56:98:ed:39:c1:63:9c:20:31:77:1a:03:7e:
4b:8c:c0:92:25:70:ec:ed:ec:4d:1c:1b:38:97:d4:bc:cb:fb:
51:b4:0c:a0:3e:f1:14:1f:1f:b2:6a:4e:15:d6:ce:36:32:f8:
25:0f:38:d0:80:1d:ad:f5:1d:b3:f2:2e:df:87:f2:07:e8:7e:
6f:79:45:f9:4b:ac:da:ba:7c:f2:4d:45:b5:46:fa:87:a3:12:
e3:8a:1e:c0:4e:df:b3:17:3d:7e:e5:49:1f:1e:53:e3:d4:5b:
dc:a4:43:4b:a7:44:4c:e9:20:2f:7e:9a:68:43:41:85:31:10:
98:cd:ba:ce:de:a5:e3:4c:95:9a:79:4b:83:75:88:ac:9b:5b:
71:9a:fd:ad:e2:55:3b:a8:77:7a:78:31:ac:92:4e:06:a9:5a:
e8:73:fb:bf:56:7e:5d:0e:5f:0a:39:93:04:cc:9c:f6:bd:d0:
21:cc:a0:85:d3:dc:20:89:5f:0c:a3:a7:39:ec:b9:d6:70:a2:
a5:51:74:a1:41:c8:4e:5b:d2:2f:7e:f5:89:5a:ef:8f:00:c3:
87:18:bd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:13 2025 by rpki-client