Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: hOvNHUmx22FXXRc4JUwzcdfkqTQ46sE20q4NWXw/CFU=
Subject key identifier: 37:92:3E:6C:FD:72:A2:48:9C:55:AE:00:DD:B7:AE:6B:CB:27:FA:B4
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 019A71B92BB524FE2EAD743065CB45F2A1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 07FD
Signing time: Tue 11 Nov 2025 07:02:32 +0000
Manifest this update: Tue 11 Nov 2025 07:02:32 +0000
Manifest next update: Wed 12 Nov 2025 07:02:32 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: RlWYsygP7vkWB1ARD5dm5sf1wlfZ8DAG2VuMnumqoNk=)
2: zBo_iKzjdrZH1koNuXflz2DEVFo.roa (hash: oSU216GFvs9sVu0bzYiGAj3iuq0J8sZNKxXjgiMItjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2b:b5:24:fe:2e:ad:74:30:65:cb:45:f2:a1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Nov 11 07:02:32 2025 GMT
Not After : Nov 12 07:02:32 2025 GMT
Subject: CN=37923e6cfd72a2489c55ae00ddb7ae6bcb27fab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:2c:26:13:c1:88:49:cc:96:82:32:94:67:
39:fd:8c:a9:3d:99:d6:24:cd:18:b6:9c:3c:70:db:
c3:b9:0c:db:57:fc:69:d0:dd:7d:1c:8e:f9:39:b5:
b3:d2:90:fe:59:f5:fa:88:06:77:38:ea:28:38:18:
ac:41:64:f2:66:2f:3d:54:77:b1:b3:dd:4e:70:02:
1f:5a:be:00:6b:bf:85:71:66:64:fa:4c:7a:14:b0:
6e:15:c8:1a:97:54:92:45:e2:03:47:e7:40:e5:ab:
1b:6f:13:9d:8f:45:b4:36:06:4e:34:f7:64:8e:cc:
99:7a:a5:1b:f2:06:59:b4:26:92:36:0e:95:87:a7:
36:5c:7a:33:d1:4e:3a:b1:33:a4:56:88:f4:41:f6:
e4:04:25:28:15:9a:d4:a6:7d:4a:6a:72:6c:08:e7:
a5:13:a6:a7:d4:96:e8:44:f8:7a:9c:2d:33:35:48:
62:1e:99:62:b9:8b:9b:c5:eb:2b:a5:45:87:c7:4d:
3a:d2:9b:f0:69:de:2c:fe:6b:bd:32:e4:d2:25:21:
8d:b7:c4:d8:c0:55:5b:31:04:94:ba:b4:20:26:86:
1b:83:e7:25:59:0d:c8:a4:28:5f:d9:ba:ca:bc:46:
0a:03:76:ba:97:42:ec:9c:fe:73:a7:fa:96:f1:3b:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:92:3E:6C:FD:72:A2:48:9C:55:AE:00:DD:B7:AE:6B:CB:27:FA:B4
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:20:4b:32:35:7c:5e:6c:86:b0:2e:47:48:f8:5d:2a:b3:db:
77:45:eb:41:a5:c1:09:81:7f:bb:bc:3b:03:6e:76:45:e7:8d:
1d:aa:06:bd:a8:23:ac:86:11:2b:91:2f:e7:7b:83:72:59:5d:
d7:0d:4c:b5:bc:c8:71:c9:6e:9f:02:cb:ac:1f:20:37:e1:d3:
19:90:31:46:c5:88:8a:bd:2b:35:63:d1:a9:67:ea:f4:d4:3b:
8b:4b:61:e3:e9:a1:f4:91:7c:34:53:84:0b:05:92:9d:bf:16:
29:89:08:92:21:4e:7b:d1:74:eb:d0:ac:fc:2d:7d:b5:56:70:
ea:74:6b:30:42:82:6d:7f:97:ef:71:ff:a8:d0:70:4d:34:95:
e7:c2:e3:fa:d2:bc:c9:b5:2e:55:c3:fd:a6:b4:56:f7:c0:a1:
f6:72:1c:2a:e1:89:82:ff:8f:6d:bb:bf:31:82:58:8b:8b:1a:
c0:fb:0d:0c:9e:67:59:00:b4:db:af:a8:2e:57:b9:08:4b:1f:
4b:1f:f1:c0:01:32:ed:fe:78:5b:5b:b1:12:4d:b7:61:85:74:
ad:b7:7c:e1:a4:2f:cc:ca:b4:d7:57:61:2b:78:3c:65:5a:6c:
da:43:cd:a4:9b:9d:19:c9:7e:43:5e:1b:e1:1b:e5:1b:72:a4:
0c:be:c8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:26 2025 by rpki-client