Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: QnEKgKbq6eQNnqlRZH8gsTHvZG6q1oSadE2M/cbgk+U=
Subject key identifier: 54:7E:4E:48:50:F2:1F:25:36:4A:28:CD:B3:73:24:40:C1:42:F3:04
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 019A54515AC2FCD8ACCDD8C7572F1C0E0D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 0680
Signing time: Wed 05 Nov 2025 14:00:09 +0000
Manifest this update: Wed 05 Nov 2025 14:00:09 +0000
Manifest next update: Thu 06 Nov 2025 14:00:09 +0000
Files and hashes: 1: CpQOplnmKu5LLulHc8JnvbebR4w.roa (hash: 5reIQFf+aPQY/29qAhB9EgFnG+Par8TwmIu2wMdsT6g=)
2: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: TA1VI6zWWQuTJ62F6dxFG6+k3ppvctzfZiweB+bFGr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:5a:c2:fc:d8:ac:cd:d8:c7:57:2f:1c:0e:0d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Nov 5 14:00:09 2025 GMT
Not After : Nov 6 14:00:09 2025 GMT
Subject: CN=547e4e4850f21f25364a28cdb3732440c142f304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:04:ac:d5:71:41:73:59:f8:4e:db:01:3c:9f:
d5:32:69:93:21:76:55:8e:82:e3:13:66:b4:f6:4f:
45:39:e1:b5:3a:f1:dc:aa:87:3c:6b:f8:7b:d6:9b:
3a:dd:bc:2f:85:9c:3b:12:60:df:1a:dc:40:8e:51:
76:b7:bb:73:c7:a8:91:d1:30:c5:d6:fc:8f:a3:a8:
ce:24:c2:36:aa:b1:4a:de:ad:1c:3e:b3:0b:83:30:
65:e5:45:2b:05:dc:d9:70:b7:16:4c:da:a4:89:07:
ed:91:58:59:5e:1b:81:99:e2:21:96:ff:f9:5d:6f:
14:f6:5c:fd:6a:97:97:5d:55:0c:8a:63:72:66:cb:
0a:da:4b:2f:53:c4:1a:e3:2c:87:eb:ac:17:3e:81:
9e:b2:d9:49:66:44:63:90:b2:a1:f9:68:48:ec:c6:
87:cd:99:98:70:cd:6a:35:05:c0:10:34:6d:b0:28:
6b:b6:77:c8:6f:8b:b0:06:a0:0c:fb:e8:b7:68:98:
60:76:12:66:b0:6d:0c:11:f8:f5:74:ec:82:5c:3c:
9a:a3:93:3e:ab:bb:ae:54:03:39:9a:0f:ec:56:b1:
fd:0f:b7:b6:8f:9d:af:93:74:a9:d1:3b:ac:84:8d:
56:47:1c:0b:01:bd:66:bf:8a:e4:5f:46:01:c9:b4:
e8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7E:4E:48:50:F2:1F:25:36:4A:28:CD:B3:73:24:40:C1:42:F3:04
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3e:fe:4c:57:66:73:44:eb:17:db:ae:43:ab:4a:2f:c0:40:
62:14:8f:9a:17:75:43:36:c4:1d:9e:40:9b:86:fe:cc:cd:c2:
92:6d:78:3b:0b:f0:ac:95:97:33:79:6b:02:2b:12:d6:7c:b4:
9f:14:2a:00:63:6a:cd:27:5c:01:ef:37:bc:da:8e:13:65:fe:
ce:71:04:58:83:98:d7:1a:94:a3:6e:77:51:ec:2d:c5:9d:81:
53:ed:80:df:f3:74:a0:ae:12:76:88:c7:a2:b5:c9:c9:6e:a1:
b1:bc:67:ea:18:a1:0f:cc:fa:95:57:40:37:91:d1:9b:24:9d:
2b:2a:2c:94:fc:61:6b:be:e4:70:1a:13:fe:16:80:c9:94:2f:
ea:1a:67:74:fd:9f:70:eb:70:29:61:13:a4:63:8e:65:c8:c8:
19:b6:d1:83:00:a8:e1:7e:68:16:8f:6a:bb:8d:d2:12:97:01:
14:cf:a6:95:a8:2b:b6:85:90:11:b3:ac:bb:83:04:0c:7c:ee:
99:4f:cf:f0:0f:48:d2:23:49:f5:44:51:bc:d8:85:02:40:96:
cc:36:30:7a:24:4a:60:4d:0a:5e:cf:52:59:39:bc:1b:b0:24:
97:10:c1:da:f7:a0:9b:86:e0:7f:34:d2:31:d2:8c:f9:bd:b9:
92:6a:9d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:11:31 2025 by rpki-client