Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: y8+ZIQhWwCmyzgZlDzU60HoI4WD35L3kJAygLtheSeI=
Subject key identifier: 32:EC:FA:04:5C:C5:ED:41:35:0A:A1:41:B3:E6:2C:3A:3E:77:3A:80
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 019A563FC231C655EDD3ADDF3984A8066128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 0681
Signing time: Wed 05 Nov 2025 23:00:10 +0000
Manifest this update: Wed 05 Nov 2025 23:00:10 +0000
Manifest next update: Thu 06 Nov 2025 23:00:10 +0000
Files and hashes: 1: CpQOplnmKu5LLulHc8JnvbebR4w.roa (hash: 5reIQFf+aPQY/29qAhB9EgFnG+Par8TwmIu2wMdsT6g=)
2: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: nQ8AWNffPPeiiZORdKZ9rmIgj4L/e+3vgB0SI9B9tG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:3f:c2:31:c6:55:ed:d3:ad:df:39:84:a8:06:61:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Nov 5 23:00:10 2025 GMT
Not After : Nov 6 23:00:10 2025 GMT
Subject: CN=32ecfa045cc5ed41350aa141b3e62c3a3e773a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:a3:b2:c4:d9:a7:cd:b5:99:98:98:4e:9f:
01:c0:ea:0e:83:a4:06:04:44:79:1b:f9:eb:58:22:
30:78:63:41:43:6c:c7:33:b8:90:83:28:9c:24:e1:
5e:3a:25:a1:6c:ca:af:8d:0d:f7:e7:b7:5b:00:20:
0c:42:99:70:20:4c:ed:49:19:26:06:bd:2c:3c:08:
00:32:e7:d1:a7:e6:17:d8:75:66:0b:f8:62:17:b4:
42:53:78:7a:eb:71:94:c4:08:89:70:9f:35:d8:3d:
13:8a:ca:fb:f5:b7:84:22:88:a6:b2:e8:da:8c:a3:
0e:8c:66:91:2b:3b:e4:80:73:44:f0:1a:87:b5:14:
35:40:c1:74:a0:94:6e:79:b5:5f:c2:94:cd:1c:14:
e9:7b:f6:2b:1d:03:1c:35:f3:dd:b3:56:b4:5d:16:
13:2b:a8:0b:6d:bd:79:45:33:1f:be:69:ca:66:9b:
02:0f:3a:2e:79:cf:3b:42:b8:91:41:ad:a2:ae:5d:
cb:60:ae:5c:8b:6f:16:ed:f9:fd:d3:e1:20:8c:33:
13:8f:3b:7f:17:37:f7:f5:13:74:81:6a:5d:e8:45:
9f:b0:be:f6:7c:10:30:99:1f:61:10:43:66:c8:0f:
bc:9e:a4:ab:e1:6f:5b:0c:e7:46:d7:4a:d0:7b:ce:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EC:FA:04:5C:C5:ED:41:35:0A:A1:41:B3:E6:2C:3A:3E:77:3A:80
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a6:cc:40:53:80:b8:0a:ec:12:96:04:87:af:5c:0a:17:5b:
60:db:1b:62:59:ee:f3:cf:29:22:56:fe:dc:f1:d9:71:6e:02:
04:da:3a:5c:c7:9b:47:20:c4:78:c8:35:cf:cd:b4:95:33:79:
e5:1a:74:d4:7f:78:09:43:e4:93:e8:31:ba:4a:8e:17:63:92:
e4:1d:c9:da:eb:f3:d9:2d:68:73:cd:4f:6a:dd:e6:51:fa:5b:
5e:04:ca:cf:9f:df:84:77:02:0b:4e:61:e4:64:d0:af:6c:8f:
bd:f9:2b:b3:bf:af:0d:a3:2a:7c:59:5a:ac:d4:32:e9:72:c6:
00:52:d1:19:ee:48:34:da:f4:fc:48:01:6b:08:62:6a:ae:d4:
7b:dc:46:97:07:25:c2:e8:69:20:dc:d4:9f:b0:a2:ed:3a:e0:
95:c2:13:78:16:a0:d7:e3:bc:97:36:e3:f2:49:13:77:2e:7c:
3f:d4:3f:ea:71:a5:e6:ff:8e:34:97:4f:83:37:81:06:b1:c0:
97:04:8f:7e:30:40:20:61:d1:36:1d:18:7f:6b:8f:05:a9:2a:
4c:72:a1:b6:95:97:50:66:77:56:ed:ac:85:41:8f:59:23:c3:
ad:76:31:02:11:4c:0b:1c:e2:84:2b:e1:b8:28:7f:a1:f9:b9:
80:16:d8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:06:03 2025 by rpki-client