Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
File: HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft (raw, json)
Hash identifier: bls9VThTqW3fDW0e7E18r86dEdCDFEpNVZwNYxHG89A=
Subject key identifier: 34:54:60:FA:A4:AC:E2:CE:50:22:4C:5D:B3:8B:DC:1B:0C:23:8C:44
Authority key identifier: 1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
Certificate issuer: /CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Certificate serial: 019A71B7DBD73E6616D4A9CD176AB59910F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
Manifest number: 1679
Signing time: Tue 11 Nov 2025 07:01:06 +0000
Manifest this update: Tue 11 Nov 2025 07:01:06 +0000
Manifest next update: Wed 12 Nov 2025 07:01:06 +0000
Files and hashes: 1: HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl (hash: Ks2CEfyCQMlsiiq6Qek6qWY0grWpjK48LlH2vWlA448=)
2: bDOy4M4R57nj8_Sff5gfBKz-LP0.roa (hash: vm1SQ0etoIa7LbOonRtmj5Ah0LoPLSlL7NdxQSQ76i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:db:d7:3e:66:16:d4:a9:cd:17:6a:b5:99:10:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Validity
Not Before: Nov 11 07:01:06 2025 GMT
Not After : Nov 12 07:01:06 2025 GMT
Subject: CN=345460faa4ace2ce50224c5db38bdc1b0c238c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:46:7e:8a:17:4f:b9:61:9e:f5:37:c8:18:
c0:8c:df:e3:a4:8e:61:a5:38:a3:cf:6b:3f:11:36:
dc:f9:65:03:0b:59:65:77:21:62:38:33:cc:22:64:
d9:de:b9:3d:d4:7a:c4:69:10:03:a9:6b:f5:61:11:
22:db:90:18:f8:28:9b:5c:de:64:43:cc:59:bd:67:
e0:37:f3:8c:b9:6d:95:f3:75:9c:b2:04:58:43:ea:
e9:7f:03:01:99:84:38:d4:4c:60:0a:65:a3:9a:24:
06:3b:e7:9e:74:ee:8e:09:9d:1d:89:23:10:eb:a3:
5b:71:23:1d:de:71:7f:32:f5:39:39:ae:c0:5e:60:
25:49:3e:db:11:10:1b:57:ba:fc:79:55:76:7a:bd:
a3:26:46:e0:61:de:04:82:2c:da:96:7f:6e:41:44:
d6:6a:f4:c4:f8:fe:d9:98:0b:a5:b7:fc:3e:59:2e:
fe:55:ca:60:d1:37:b3:c1:93:fd:2a:49:3d:8c:35:
7e:6b:01:66:a9:99:b3:b8:98:92:8a:06:c5:77:94:
5e:8b:49:39:d6:07:e6:49:5b:2e:3d:eb:79:4c:f9:
d1:fe:5a:60:df:f7:75:c4:62:73:16:e6:f9:a3:fe:
ef:01:87:0d:29:d1:6a:d8:4d:b6:f6:18:03:8c:e6:
8b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:54:60:FA:A4:AC:E2:CE:50:22:4C:5D:B3:8B:DC:1B:0C:23:8C:44
X509v3 Authority Key Identifier:
keyid:1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5f:eb:fd:60:36:78:50:16:f7:c5:2f:58:85:41:78:4f:4e:
1b:da:52:bc:08:7a:b5:6c:cf:74:d1:9b:86:00:1b:50:dc:f5:
81:0c:8f:d2:de:64:ee:a6:4e:e2:bc:60:9c:87:eb:dc:57:fd:
a0:79:51:12:5a:29:9f:b5:19:02:1a:42:7e:ae:13:e4:8a:00:
6b:47:d3:fb:18:3f:5e:ed:80:80:17:73:fd:e7:1a:fa:fb:fc:
3f:b7:0c:ec:1d:91:0d:dd:ff:2c:ff:12:cf:b2:3e:d2:5f:0d:
62:e1:61:f1:6b:99:0b:c2:b4:f0:c0:31:58:f6:d9:a7:e7:90:
c8:9f:c6:0e:cb:c6:cd:24:cd:db:9f:64:99:5f:0c:41:9c:37:
52:9c:4c:93:89:75:a5:17:53:72:68:f1:19:fb:7a:4e:69:81:
d2:c4:f7:2d:76:34:15:45:de:7a:e7:e6:4e:05:9e:82:4a:91:
b5:75:7a:a5:3f:2e:79:f3:d2:e3:62:89:68:79:3b:3a:90:dc:
97:94:86:8c:53:eb:cd:bc:3f:b5:bc:28:8d:b0:36:86:19:0e:
6a:e0:f9:b1:47:57:b3:b2:e7:86:fa:a0:1b:fc:82:82:c2:1c:
5e:24:0f:71:02:ca:df:41:6c:cd:0b:7b:90:4e:33:69:7c:af:
8a:52:20:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:41 2025 by rpki-client