Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: 6C110RDTUbSEQF0i2pbTmfzNGiesMvdQrmjy6D2AoJk=
Subject key identifier: D7:6E:C9:BA:E3:34:A1:2F:A0:7A:13:5F:F1:9E:8A:33:2F:2C:96:DE
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 019A4F98F6EEE5B71C6C43348794BAB1B357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 0DCD
Signing time: Tue 04 Nov 2025 16:00:16 +0000
Manifest this update: Tue 04 Nov 2025 16:00:16 +0000
Manifest next update: Wed 05 Nov 2025 16:00:16 +0000
Files and hashes: 1: 2X95sls0uWU5PgwEsuvbZMPdH28.roa (hash: WAXbNwzmu9B4g0l97d8oAvrkNfSo32YmgajceOiYDlc=)
2: 44WcjUyhdWbouJas9-vY_4pr1wA.roa (hash: Qx8y85cpYAiQ8a63DXW295iCOgGuHySiBFYnU925DiI=)
3: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: PBGc/TLBhky1S7UfSnF6lG4Wax9E0as89YmcM0BIoxc=)
4: fRE2vmwaleUiCvDWsnGTFljoLXg.roa (hash: cXGlfKUnhuEwN1qNGkHimtKeqEP4GZPiithL8Ca7L8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:f6:ee:e5:b7:1c:6c:43:34:87:94:ba:b1:b3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Nov 4 16:00:16 2025 GMT
Not After : Nov 5 16:00:16 2025 GMT
Subject: CN=d76ec9bae334a12fa07a135ff19e8a332f2c96de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:d7:c3:a6:0e:c1:05:a4:f1:ba:5b:ee:b8:
4a:e8:ff:10:3e:28:e2:68:0e:0e:e2:ac:0e:e5:c8:
7d:b8:e5:6e:3c:e2:d3:07:92:65:d6:4c:ef:50:1f:
e9:95:8e:01:77:5c:70:af:f8:f8:04:14:6f:40:f9:
aa:27:ff:9e:c9:38:45:51:c4:ad:f2:8a:d4:31:4c:
fa:5b:30:31:60:c6:36:78:f3:74:1c:4d:76:da:62:
c0:15:aa:0c:c0:3f:f4:3a:0e:1d:5e:0e:7f:1c:55:
c8:af:b5:87:e1:74:82:7a:46:29:d8:e1:55:0b:a1:
dd:32:60:2e:c0:ed:24:9b:19:04:53:b8:82:49:e5:
20:5e:e3:51:a8:88:0e:6d:c1:57:cc:b3:20:89:af:
b7:a7:ed:52:01:b4:07:e0:0c:28:14:c5:79:15:62:
0f:19:bb:cf:37:89:ea:82:76:81:ec:3c:81:33:1f:
fb:ac:0c:7a:0b:d5:63:2d:17:43:3d:47:0e:c6:68:
be:9d:8c:2b:2e:7c:63:0e:b0:9b:4b:57:12:24:bd:
9a:47:41:cb:14:05:a5:e0:a8:3f:f0:17:1e:cf:f9:
15:30:4b:4d:e2:4a:6b:8b:86:56:b5:8d:e3:47:c0:
1e:f3:eb:76:ac:38:0d:70:be:1f:c3:fa:45:e7:de:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6E:C9:BA:E3:34:A1:2F:A0:7A:13:5F:F1:9E:8A:33:2F:2C:96:DE
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:12:d8:89:42:cf:fd:90:23:e5:c8:d0:ad:ae:26:e9:f2:77:
33:61:b3:94:06:c7:e1:8f:1c:f8:df:35:86:45:fc:1c:13:75:
86:1d:5d:71:0b:61:a7:ca:33:6b:b2:e2:8d:38:bc:3d:0e:23:
15:b1:e7:89:f6:ae:1b:22:67:33:ac:3f:41:8c:16:32:2f:70:
9a:a0:48:5f:60:0c:a2:7e:3a:23:65:55:e0:13:f4:82:f8:b9:
1c:8e:5f:bc:08:92:db:73:84:bf:df:43:91:73:d3:6c:1f:c3:
c0:b6:22:4b:d1:76:8f:a4:b4:bb:61:1a:6b:36:06:c8:90:3c:
36:0f:8d:5b:52:27:e2:25:ca:50:a9:34:1d:45:d5:11:7d:c2:
51:ac:97:ec:4d:22:0c:e6:04:71:9a:0e:1f:f6:e3:95:34:4d:
bc:d8:02:21:03:70:9a:c7:66:c1:0b:1d:23:e1:ee:14:87:4e:
ae:3d:1a:72:d8:c4:34:6c:bb:62:0d:62:b8:ac:99:00:b1:3c:
b5:fb:fb:25:49:31:49:5d:99:9d:41:a6:78:15:8a:88:e1:95:
3f:02:de:88:46:50:df:f7:c0:b9:4b:41:0f:97:ca:e7:22:88:
13:6b:ba:bf:eb:90:4c:f2:36:0d:73:fc:6d:8f:2a:d9:39:e0:
23:13:76:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:02 2025 by rpki-client