Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
File: hc-RCpREnqI6rGxAmgWEm-2l4ko.mft (raw, json)
Hash identifier: riRc0n1OrEmYMrHQM6W1qbO2Tn+07BcIMyIXjpxI7Bc=
Subject key identifier: 85:CA:14:92:44:94:00:3A:E4:D9:2B:26:92:29:A2:88:5A:23:E9:44
Authority key identifier: 85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
Certificate issuer: /CN=85cf910a94449ea23aac6c409a05849beda5e24a
Certificate serial: 019A71B7A946D80ADBB38A4942B14CD3B85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:00:53 +0000
Manifest this update: Tue 11 Nov 2025 07:00:53 +0000
Manifest next update: Wed 12 Nov 2025 07:00:53 +0000
Files and hashes: 1: hc-RCpREnqI6rGxAmgWEm-2l4ko.crl (hash: dQlsc2oySJF29e7Pc0J5fVpQIV4eWx7OEHVRLpa5a0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a9:46:d8:0a:db:b3:8a:49:42:b1:4c:d3:b8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85cf910a94449ea23aac6c409a05849beda5e24a
Validity
Not Before: Nov 11 07:00:53 2025 GMT
Not After : Nov 12 07:00:53 2025 GMT
Subject: CN=85ca14924494003ae4d92b269229a2885a23e944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:81:41:f7:2a:8c:9a:d1:7a:96:a7:4b:bd:
b4:99:9e:f7:98:f4:0c:7b:bf:47:8c:e9:2b:0f:b5:
f3:a4:00:11:7a:b7:e5:67:91:c6:8b:1e:bf:50:d7:
70:3b:20:a3:83:53:8c:e4:e7:02:89:97:f8:08:c6:
6d:70:09:24:37:33:ea:34:9a:d1:39:9a:40:04:11:
a1:36:7d:42:f2:bd:f8:2c:b8:69:66:db:20:45:ef:
3e:12:e9:c2:d8:e9:cc:3f:e6:9d:1b:32:58:b9:d5:
47:2c:1e:e5:ce:79:da:f0:21:d2:9e:92:9c:3f:5a:
b8:38:54:78:3c:0e:67:d0:8c:2c:48:2b:a3:68:7b:
70:4a:65:0b:f4:06:5e:e4:ee:1d:57:9b:67:32:19:
0f:f4:18:8c:98:8a:9a:e8:6a:99:ae:c7:6c:a9:69:
c7:f3:9e:3e:b7:12:bd:3c:52:da:51:56:a7:d9:5f:
6f:39:f2:86:d4:a8:f7:d5:6a:cd:76:41:7e:96:fd:
89:40:02:27:8a:49:47:88:e6:c7:20:3b:4c:4d:82:
22:bc:8f:7c:c5:08:a6:74:d2:b6:78:ef:5f:e7:ce:
86:12:84:fa:b9:b0:8c:b3:a4:2e:ce:55:89:c3:4c:
08:8d:0d:16:a7:72:10:03:9c:f9:c4:2d:2c:fd:68:
6b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CA:14:92:44:94:00:3A:E4:D9:2B:26:92:29:A2:88:5A:23:E9:44
X509v3 Authority Key Identifier:
keyid:85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ce:44:36:90:89:76:26:7d:5b:b5:8f:69:8f:00:53:21:d2:
4e:7e:31:52:92:3c:02:aa:c3:0a:4d:55:e2:39:93:e6:91:5b:
93:08:63:21:1f:8b:32:b2:0a:60:08:69:20:ba:19:93:0a:b8:
94:be:9e:c6:58:80:72:a1:b8:c5:b6:fe:08:b0:7f:1d:73:67:
eb:cd:61:f8:02:fd:1a:75:9c:3a:d9:c0:9e:0d:71:82:4a:d0:
28:85:bc:af:13:be:0e:ab:ff:1b:bb:a8:5f:e4:cd:12:0d:11:
97:1a:45:19:3c:77:61:d9:25:7b:1d:b1:97:20:b0:bc:11:3e:
0e:60:b9:44:62:04:c6:86:f2:ee:ce:5d:78:b4:ce:41:98:00:
b8:e1:58:a8:63:89:6e:95:2c:61:1a:c5:9f:2d:ad:d2:6c:ae:
5e:11:d3:be:92:1f:45:6c:66:24:5e:65:42:b9:93:55:62:a9:
70:e6:e6:2d:c8:0e:66:4a:44:b0:8c:33:86:cc:c3:ca:c7:1e:
60:81:79:53:c9:50:d8:d0:f9:40:01:d7:45:9c:f5:84:e4:c7:
be:67:e5:49:d2:31:8c:ca:fa:00:56:b0:06:2a:96:5e:aa:c9:
20:c2:cf:53:08:f7:eb:0c:0a:48:05:d1:57:a5:ba:86:15:c3:
62:64:f9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:33 2025 by rpki-client