Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
File: HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft (raw, json)
Hash identifier: 6EXvBT+/wZMfC18d5uVlSDot0Zr759Z9EsEClvBV5IY=
Subject key identifier: BC:26:B7:73:51:F4:8A:ED:0A:EC:EF:73:AC:45:CA:74:C9:1D:50:A7
Authority key identifier: 1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
Certificate issuer: /CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Certificate serial: 019A7149BC29FC3362D54A02FBF450E9F89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
Manifest number: 145F
Signing time: Tue 11 Nov 2025 05:00:48 +0000
Manifest this update: Tue 11 Nov 2025 05:00:48 +0000
Manifest next update: Wed 12 Nov 2025 05:00:48 +0000
Files and hashes: 1: HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl (hash: ApVLd/HzHCUIH+TO+l0fGisvPjHmkbfAwhC8Kubi5r8=)
2: aW4RufV84k31ipqteYJMKE-MWns.roa (hash: TaIvFNKhSLJsRmqi1+QKHEIHNXDSbVD+wo6DE/PVLR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:bc:29:fc:33:62:d5:4a:02:fb:f4:50:e9:f8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Validity
Not Before: Nov 11 05:00:48 2025 GMT
Not After : Nov 12 05:00:48 2025 GMT
Subject: CN=bc26b77351f48aed0aecef73ac45ca74c91d50a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:c6:29:f7:0c:59:8e:e5:42:f5:b1:70:79:
a9:a0:9a:52:12:0f:91:4a:0e:3a:39:60:b6:05:38:
61:00:48:8a:2a:d0:e1:3b:82:25:68:e6:3b:92:2c:
8c:85:ce:05:5f:f9:23:76:44:9e:07:b6:cb:d8:5c:
00:01:01:5a:5d:6e:cc:b2:55:e6:a6:b2:da:51:d9:
c6:0d:7f:ff:ed:a2:6a:eb:a7:a5:8b:5e:f5:48:87:
73:c8:df:3c:9d:90:7f:d4:ac:72:08:9a:7e:27:45:
dd:1a:f8:13:00:b9:38:f0:83:6d:cd:49:6b:f3:45:
25:f5:ec:37:ad:e9:e6:fe:7e:ac:8b:81:a5:d7:33:
5c:08:28:a9:1e:38:ad:db:c3:bc:6c:d0:25:84:ee:
93:7f:48:84:57:ac:80:2d:3c:5d:fd:28:a0:ba:8e:
dd:43:90:37:71:75:20:4d:51:e4:3b:a0:4a:7b:ab:
f5:31:ac:42:15:00:55:65:35:aa:04:e0:50:5c:73:
d4:d6:83:ff:66:8f:d7:66:93:12:79:92:f5:00:0d:
a4:1f:8b:ba:cf:9f:de:e0:45:f0:0d:46:96:f3:8b:
25:24:81:0a:85:44:8d:bb:40:b3:0a:8f:6d:19:fa:
2a:f6:1d:46:a0:2e:a4:82:5e:b9:9a:5b:eb:06:8f:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:26:B7:73:51:F4:8A:ED:0A:EC:EF:73:AC:45:CA:74:C9:1D:50:A7
X509v3 Authority Key Identifier:
keyid:1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:07:ec:2c:a8:b5:eb:2b:64:35:7b:7f:ad:84:06:e1:80:0e:
f0:c0:cc:4a:39:38:3a:61:df:c4:c4:40:22:f9:13:f5:a6:2e:
30:b4:b1:9f:f5:5d:83:95:5e:82:27:fa:58:dd:20:27:84:a1:
c6:0a:37:5b:24:88:4d:8c:bc:7f:50:e5:05:0c:86:a3:cc:cf:
48:c8:12:a7:66:7e:7d:10:9a:05:26:dc:27:1b:2a:2f:9e:23:
61:69:5f:af:01:be:8f:4e:2b:1f:d9:18:bc:46:39:51:de:74:
e3:27:ba:5e:36:3e:00:38:99:42:5f:5b:41:90:9e:59:0f:20:
47:18:14:48:77:1d:df:0a:71:c2:52:50:fe:f1:eb:fe:bb:2a:
70:b3:f7:1b:60:fb:8b:c7:ec:51:2c:f9:40:3e:28:d5:b2:1b:
c5:9e:b1:cb:1a:1b:fa:a3:9e:5e:78:a8:f6:b8:2a:40:81:05:
3e:59:22:05:cd:76:ad:4e:f9:1a:91:f1:5b:34:43:f0:08:b2:
1a:2e:ea:ad:2f:ab:c2:ce:eb:43:34:ac:96:ba:31:2e:3e:f9:
ae:a5:68:c9:ea:49:ae:ca:c9:bc:51:ea:e5:da:15:80:7e:d5:
5d:d4:a5:7d:88:13:65:0c:7d:d8:93:f6:48:42:82:1b:b5:cc:
17:cc:b0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:10 2025 by rpki-client