Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
File: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft (raw, json)
Hash identifier: tXHlzr7iDNealjgouxfycZ2SQ3Ljsl14ORIYUOhNtFM=
Subject key identifier: E9:2F:3A:8E:02:E0:B1:29:D5:07:E0:19:61:59:D6:30:05:F8:92:B7
Authority key identifier: 1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
Certificate issuer: /CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Certificate serial: 019A71B8A3386B14F8F642ABBA0EC9CFDD77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
Manifest number: 0A56
Signing time: Tue 11 Nov 2025 07:01:56 +0000
Manifest this update: Tue 11 Nov 2025 07:01:56 +0000
Manifest next update: Wed 12 Nov 2025 07:01:56 +0000
Files and hashes: 1: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl (hash: 8np4/fT1khHBIqf8Bnp9ApXzKgzAMNodJLRfztnV1dw=)
2: f0JNWqb0_sxkiR-fghzvzpbVYUw.roa (hash: RhuCzYejuWMbfNGSM6on7Cw2OZveLgiaD9vSRL8ll5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a3:38:6b:14:f8:f6:42:ab:ba:0e:c9:cf:dd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Validity
Not Before: Nov 11 07:01:56 2025 GMT
Not After : Nov 12 07:01:56 2025 GMT
Subject: CN=e92f3a8e02e0b129d507e0196159d63005f892b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:73:84:14:ae:82:12:c4:49:80:2f:c1:2b:e7:
b1:b9:66:a6:7f:95:e8:b8:ae:01:14:1b:26:2c:85:
35:5a:c6:3e:44:ba:0c:bc:60:a5:fc:ff:3d:17:2f:
35:0c:23:01:0d:c2:a5:06:85:fc:e1:7f:01:36:6f:
09:84:5e:19:ce:42:d0:dc:ed:1a:bd:b0:24:79:9f:
1a:6c:12:81:c1:f6:1e:38:ef:37:f6:52:10:13:2a:
64:ba:b6:76:06:6f:92:b3:6a:dc:65:90:1a:36:2e:
49:0c:92:91:5c:a6:a8:bb:eb:c5:0c:05:4a:46:7d:
1f:6e:2a:db:1d:29:96:5e:88:b1:88:cb:bf:0f:30:
7f:5b:aa:4d:8c:f7:ce:dd:fc:b9:6b:d0:75:ba:6a:
62:cf:12:56:cb:4e:08:16:d2:73:d9:ae:a9:c6:51:
ce:df:9b:42:a9:92:ca:00:1c:73:64:c3:5e:22:17:
dd:9d:5b:3d:8f:99:aa:21:27:93:a6:e7:2c:75:53:
12:5e:ba:8f:88:6c:09:b4:d9:28:89:c8:21:29:32:
c5:ea:70:53:64:cc:4b:75:ce:e7:d4:c4:31:5d:f4:
f8:4d:cd:2a:f7:d1:a1:fc:32:11:62:80:49:1e:ec:
d2:9e:f1:0a:2d:08:4e:b4:14:fe:29:e6:16:8e:b3:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2F:3A:8E:02:E0:B1:29:D5:07:E0:19:61:59:D6:30:05:F8:92:B7
X509v3 Authority Key Identifier:
keyid:1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:39:10:ce:21:7e:4b:a4:54:28:e0:9e:20:ef:19:50:6d:1f:
fc:b4:f1:cb:8e:27:80:89:3b:24:56:f7:2e:a7:f3:69:84:8c:
8d:c2:99:ef:97:8d:01:75:92:13:86:68:2d:0b:52:b7:8f:b5:
5a:e5:bb:1c:34:a1:c5:29:b8:e1:6c:90:5d:fc:3f:54:cf:10:
de:d1:2d:3b:31:9b:d2:ac:88:bd:1f:79:95:25:06:48:fb:b4:
0f:e5:6d:77:30:70:89:9a:35:4e:eb:78:e5:e6:9b:06:93:71:
6d:d7:42:27:1c:77:92:62:88:3d:c5:6f:d2:eb:0c:06:75:80:
7f:d4:93:3e:e6:ce:77:db:9f:84:1e:b7:5c:83:f5:6a:81:07:
4d:0f:6c:64:fb:a9:13:41:d4:8b:ab:f0:bb:cc:9b:cb:c3:2c:
00:c2:6e:5b:cd:6f:c0:23:f5:8b:f6:4c:88:bc:f4:af:85:11:
ef:db:cd:6c:56:fb:99:6e:47:fe:e5:9a:4b:bf:c1:7c:6d:6c:
62:be:11:a6:8b:69:57:c4:b0:8c:d4:f0:2d:5a:a2:01:2f:f5:
78:c6:23:e4:af:98:e4:7e:0d:70:52:18:f2:65:d5:7b:ba:50:
72:b4:1e:52:8f:ea:b9:4f:8e:4e:ed:5c:62:9a:7c:f5:db:9c:
41:f5:53:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:33 2025 by rpki-client