Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier: 5bCIcZsVNxypTu37Nm7Nk5lrUekssR7ex8SbgF/Bhk4=
Subject key identifier: A0:6A:3E:A8:22:4A:97:87:72:04:13:4A:1A:C0:AE:D7:BF:D6:3D:87
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 019A4DAAA9C4C771C418D82B4C966D369858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number: 03E0
Signing time: Tue 04 Nov 2025 07:00:21 +0000
Manifest this update: Tue 04 Nov 2025 07:00:21 +0000
Manifest next update: Wed 05 Nov 2025 07:00:21 +0000
Files and hashes: 1: 8-kkwcK7J3DxZVf5MGzOJYHQ7BI.roa (hash: rhq0p1ekXajroUDi/6gbWVszGGw1Hl0Cw7VvrAiAjNE=)
2: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: IQ4GAuqX1dGge+wOnf9Qq/nscZSzHw/S3/rbNDNi2Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:a9:c4:c7:71:c4:18:d8:2b:4c:96:6d:36:98:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Nov 4 07:00:21 2025 GMT
Not After : Nov 5 07:00:21 2025 GMT
Subject: CN=a06a3ea8224a97877204134a1ac0aed7bfd63d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:50:34:14:4a:45:21:be:3d:f4:1b:ca:1b:
fe:ad:71:b5:99:47:c2:d0:a6:bb:58:4f:38:e0:ad:
57:d9:a6:0e:8e:8e:91:5f:05:0b:ed:7f:8d:80:20:
05:21:b6:66:a6:6d:0b:b2:db:04:79:5e:4d:28:c9:
54:e7:5c:7c:40:15:e1:08:27:af:a6:83:55:b6:50:
9a:2c:72:74:bb:de:95:07:3c:28:f5:23:74:a6:ec:
96:98:a6:15:6e:50:ac:01:8f:0d:91:2c:2a:f1:22:
68:dc:92:71:fc:81:0d:4f:27:5c:15:80:ae:fa:2b:
6d:1c:d5:35:2c:9c:ce:b0:dc:67:e1:70:55:86:27:
da:5c:76:59:18:e0:21:d3:cb:6c:f7:ec:83:ee:7c:
9b:7a:8b:98:bf:ac:53:70:35:23:8a:cf:75:98:93:
52:fe:0c:01:cb:7e:85:55:79:4d:25:1d:e5:5d:b0:
29:1d:d6:dd:3c:0f:83:41:87:11:7c:57:e6:96:a3:
cb:49:3e:3b:81:ed:69:8a:13:28:9b:5c:2f:04:66:
57:13:42:74:42:2e:86:0e:c1:8e:1a:01:45:fc:fb:
b6:1e:a1:f2:a7:29:a1:7f:74:e2:9a:d2:5c:c8:74:
7a:cd:4b:e0:e6:cc:30:e9:5d:cc:3c:c0:a2:a2:d7:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6A:3E:A8:22:4A:97:87:72:04:13:4A:1A:C0:AE:D7:BF:D6:3D:87
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c9:b1:36:59:0e:95:d6:72:ab:41:72:a3:89:ec:b3:f1:bb:
31:eb:7a:49:3e:95:1f:fd:75:0e:a8:51:29:e3:2e:62:d1:39:
1e:3d:d8:11:b7:9a:f3:2e:6f:51:78:5d:85:89:53:43:ee:fa:
5b:32:64:30:b0:7e:d3:8c:7e:72:aa:1f:d6:d1:d4:6d:3e:aa:
ec:d1:54:18:d3:79:16:f6:d0:70:a0:ed:f9:8f:53:c3:40:99:
98:ca:ff:9a:17:a1:c9:e9:8e:7d:38:03:96:d2:63:ea:da:ef:
f7:be:61:d5:28:b5:27:b7:04:fe:bc:ac:2f:65:36:06:09:86:
ed:79:a8:86:32:17:c3:03:e7:6f:c9:b9:9a:b9:52:7d:ca:de:
03:2d:5c:f4:22:61:a3:78:47:51:79:d0:93:d7:30:e7:82:15:
4b:97:4d:b0:4b:9c:fc:b8:1e:e6:aa:60:31:68:30:09:a4:b5:
4a:cb:06:7f:3f:0a:a9:ea:b8:91:cd:cc:16:dd:e7:c4:66:5e:
33:6e:d1:25:ba:f7:ce:26:4e:d4:9d:b2:30:19:a8:69:8a:1d:
0b:63:82:f9:c0:7e:6d:5b:b3:6f:7e:98:5c:33:de:06:af:66:
c9:39:1f:6a:11:33:79:45:cd:4a:05:5a:aa:64:5c:09:bc:4c:
8a:d6:06:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:31 2025 by rpki-client