Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
File: HCM-7mJMGSxsfa2hQy3gueeLCbo.mft (raw, json)
Hash identifier: uSmGARvCeGbPngk5dhZOZ+Yy48gX0Ie+NMWNyaNS+DI=
Subject key identifier: 3D:32:4B:77:13:D7:01:78:C0:63:1C:E8:4C:FC:8F:DE:96:79:41:94
Authority key identifier: 1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
Certificate issuer: /CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Certificate serial: 019A4DE232721FC946B868D4688224076A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 08:01:00 +0000
Manifest this update: Tue 04 Nov 2025 08:01:00 +0000
Manifest next update: Wed 05 Nov 2025 08:01:00 +0000
Files and hashes: 1: HCM-7mJMGSxsfa2hQy3gueeLCbo.crl (hash: mFGXxXjtkKQVeg7E2FbUn3pSlMRpQUYuiZi1L24U/O8=)
2: K45e82x9WOXI8E3rbiZhpm6Y1c8.roa (hash: b1lnr/cxWdJYHM4gx0SMdfk+T7jlT+eQyoUM+qzNzCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:32:72:1f:c9:46:b8:68:d4:68:82:24:07:6a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Validity
Not Before: Nov 4 08:01:00 2025 GMT
Not After : Nov 5 08:01:00 2025 GMT
Subject: CN=3d324b7713d70178c0631ce84cfc8fde96794194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:00:f7:49:e8:4d:5b:0e:68:97:a1:87:9c:5e:
d0:b9:0b:b1:32:f3:d6:bd:1c:88:7e:38:ce:43:27:
75:a5:22:24:f6:13:25:4e:16:6d:b5:a6:8b:e8:82:
a4:2b:c4:53:6b:a7:4f:b2:03:4e:8e:68:f3:b3:f5:
4e:7c:47:e1:eb:dc:f4:61:6b:e3:cf:82:ab:16:4a:
0d:64:cd:10:71:ec:9d:0d:f0:74:be:9d:a5:8a:49:
36:f2:c7:4d:83:0a:6f:a3:23:6f:a3:1e:e6:ed:d2:
a3:2f:8f:84:d2:3d:34:5e:d5:3f:39:b3:9a:ce:1a:
0c:55:9f:81:c6:eb:ed:b3:b5:c8:89:93:ca:b6:2d:
a3:4b:18:37:25:55:c8:67:4c:5b:47:cf:62:f3:9d:
ac:e7:e3:9e:a8:7f:cf:e1:8f:fb:49:bb:44:f6:f7:
ca:0f:5b:8a:1d:68:eb:21:91:8f:8d:39:91:f9:76:
ee:49:ae:2b:08:25:87:68:1c:03:73:60:43:87:d3:
66:9a:08:05:a6:e0:53:3b:39:9d:e4:11:51:51:cb:
e1:84:69:24:e7:58:9c:51:5d:0b:75:28:64:88:bf:
47:14:d8:93:5e:2c:e3:e8:93:0d:36:45:d1:48:95:
8c:ee:7e:e7:4b:6c:e7:78:51:ca:de:e6:95:a0:cd:
60:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:32:4B:77:13:D7:01:78:C0:63:1C:E8:4C:FC:8F:DE:96:79:41:94
X509v3 Authority Key Identifier:
keyid:1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ff:8d:7f:f0:3d:14:d8:eb:67:cc:dc:cb:04:5f:69:21:d4:
b8:1e:02:2d:d2:f7:00:dd:dc:32:05:2f:dd:f1:22:d1:63:a8:
d5:0d:3f:26:54:c1:32:19:ee:f1:3a:ce:aa:d8:05:af:8b:f3:
38:76:09:90:91:34:55:1e:8e:d0:12:96:01:e3:e3:e1:17:9d:
40:40:bc:25:76:45:f0:94:9c:f0:50:ee:8e:f0:7b:ff:5f:dd:
5b:4b:50:81:fc:9b:94:b9:03:1c:21:0c:4b:f3:b0:61:ba:73:
3d:7e:41:53:8e:c6:b9:72:89:3c:45:1f:79:39:1a:86:04:59:
2b:d1:c1:03:0c:e6:b9:6f:67:1e:44:65:26:94:ea:2d:b0:2c:
09:c6:7c:2b:80:fa:a1:26:59:e0:9a:b9:eb:f1:f5:55:93:40:
2c:73:3f:81:20:08:63:aa:95:0c:cf:03:cf:7d:e5:9c:6f:e6:
06:f8:4a:9a:91:10:b6:47:22:a8:39:a4:b3:6a:83:a7:e5:4c:
f7:8b:fa:35:90:95:de:51:9f:58:a7:cf:51:a6:b3:0b:2d:23:
f2:79:4b:e7:95:c7:b9:a4:f3:5d:ce:db:29:60:d1:b3:cb:36:
4e:8c:f5:18:3a:39:b3:53:0b:3d:00:ff:e6:dd:7b:b6:8f:d3:
e2:45:46:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:55 2025 by rpki-client