Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
File: HjmCheIngn2PLFHx6plzV1VL5hI.mft (raw, json)
Hash identifier: Ju6TpZOw9TQnos1JrQjbF4BePm2h9+9XeHtOFXc87mk=
Subject key identifier: 9C:9B:7B:D4:AE:44:47:AD:73:DA:F5:3A:8D:E4:A0:AF:31:64:8B:61
Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
Certificate issuer: /CN=1e398285e227827d8f2c51f1ea997357554be612
Certificate serial: 019A71EED7B514360F4B6DD779F5A0A1639D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
Manifest number: 1726
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: HjmCheIngn2PLFHx6plzV1VL5hI.crl (hash: xyt3S7shzi95EoC2LcAXtTQz249akUcSMvOmLWRwS6o=)
2: gq0u0nuGqZ56yv0huU0NYxq2Tuw.roa (hash: BWs37rngd3jbS0e8ne6CGjqZDK9zmWcTutRQQlknGKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d7:b5:14:36:0f:4b:6d:d7:79:f5:a0:a1:63:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=9c9b7bd4ae4447ad73daf53a8de4a0af31648b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:88:a9:06:5a:98:2e:e1:23:00:e7:22:cf:5a:
e7:54:83:99:00:48:4f:17:dc:2f:89:aa:4d:a9:db:
c3:b5:7e:81:5d:42:c4:3f:e5:fd:cc:12:16:c1:89:
8c:5c:90:f3:f2:73:3d:40:92:1f:78:c9:98:4d:74:
36:23:85:9f:cc:04:03:c5:bf:95:af:ba:4f:2f:a7:
da:b5:44:f4:37:63:d8:d0:91:44:eb:d2:e6:47:25:
b3:fb:82:6b:67:a3:b9:3d:08:71:bc:92:06:42:85:
04:db:88:f7:d8:c3:4b:85:e9:c4:34:77:e2:6b:f4:
d9:96:9b:0e:59:ef:c6:60:8f:bf:9a:48:54:43:f5:
4a:82:0a:48:bd:13:76:9e:61:17:07:22:49:e3:b8:
29:03:e5:cb:ee:02:c7:c1:f6:7d:64:c1:19:06:fa:
4b:df:4b:b0:a9:33:f4:a3:b5:3d:f0:94:63:d9:e0:
c5:a5:56:b8:92:8c:e9:51:94:39:a5:a7:26:0e:c7:
42:ec:c4:b0:32:93:31:93:ab:bc:16:01:b0:d1:4c:
42:07:1e:08:e9:15:94:a1:1f:b3:7d:25:1b:b6:76:
de:5e:c9:ef:75:03:40:38:66:00:a4:5f:3c:16:dd:
47:49:8e:8b:7e:b9:18:98:9c:2a:84:8d:dc:4b:7d:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9B:7B:D4:AE:44:47:AD:73:DA:F5:3A:8D:E4:A0:AF:31:64:8B:61
X509v3 Authority Key Identifier:
keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:99:b8:ae:5c:48:60:3f:df:e1:7c:ef:9f:df:62:94:25:b4:
99:1f:ce:75:a6:60:6d:7f:ca:cc:8e:42:63:8e:df:18:e1:f7:
ee:88:75:31:d9:8f:70:ed:23:e7:b6:56:1a:5c:08:41:66:e0:
65:2b:75:bf:81:e6:3f:83:35:39:20:7a:ac:bd:28:48:31:77:
ad:63:f1:75:9f:ac:b6:45:6c:b0:9b:bc:7d:51:67:68:52:6f:
d2:1b:af:b3:96:92:7e:82:81:b1:27:9a:a8:60:e1:d3:73:fd:
1d:e8:24:3d:fa:43:98:c5:e6:1b:a4:03:86:2d:ae:88:4e:de:
02:db:88:51:6d:bb:71:9f:a4:97:1f:0a:7d:e2:e5:e2:e7:99:
85:48:0d:48:e8:3b:de:26:93:25:4f:37:81:fa:aa:fb:4d:28:
48:b8:a3:3e:2c:b3:7a:35:7d:83:72:34:73:d3:61:d7:2e:b4:
e0:14:46:83:1c:59:43:3d:81:91:b4:5b:33:b4:78:d4:2c:b9:
ca:8c:7c:45:05:6b:77:86:9e:63:8f:05:2e:97:d5:f5:f9:23:
1b:93:e8:5d:63:80:9f:06:b3:da:f2:56:30:95:d5:c7:4d:ec:
bd:37:28:e9:28:ab:6c:15:ee:bb:27:a6:10:29:50:74:ab:f4:
6b:d3:92:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7te1FDYPS23XefWgoWOdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMzk4Mjg1ZTIyNzgyN2Q4ZjJjNTFmMWVhOTk3MzU3NTU0
YmU2MTIwHhcNMjUxMTExMDgwMTA5WhcNMjUxMTEyMDgwMTA5WjAzMTEwLwYDVQQD
Eyg5YzliN2JkNGFlNDQ0N2FkNzNkYWY1M2E4ZGU0YTBhZjMxNjQ4YjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74ipBlqYLuEjAOciz1rnVIOZAEhP
F9wviapNqdvDtX6BXULEP+X9zBIWwYmMXJDz8nM9QJIfeMmYTXQ2I4WfzAQDxb+V
r7pPL6fatUT0N2PY0JFE69LmRyWz+4JrZ6O5PQhxvJIGQoUE24j32MNLhenENHfi
a/TZlpsOWe/GYI+/mkhUQ/VKggpIvRN2nmEXByJJ47gpA+XL7gLHwfZ9ZMEZBvpL
30uwqTP0o7U98JRj2eDFpVa4kozpUZQ5pacmDsdC7MSwMpMxk6u8FgGw0UxCBx4I
6RWUoR+zfSUbtnbeXsnvdQNAOGYApF88Ft1HSY6LfrkYmJwqhI3cS30dGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJybe9SuREetc9r1Oo3koK8xZIthMB8GA1UdIwQY
MBaAFB45goXiJ4J9jyxR8eqZc1dVS+YSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zMDk5ODAtYWZkNy00NTY5LWEyNWIt
ZTkwOWU0MWEwN2U1LzEvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8zMDk5ODAtYWZkNy00NTY5LWEyNWItZTkwOWU0MWEwN2U1
LzEvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5m4rlxI
YD/f4Xzvn99ilCW0mR/OdaZgbX/KzI5CY47fGOH37oh1MdmPcO0j57ZWGlwIQWbg
ZSt1v4HmP4M1OSB6rL0oSDF3rWPxdZ+stkVssJu8fVFnaFJv0huvs5aSfoKBsSea
qGDh03P9HegkPfpDmMXmG6QDhi2uiE7eAtuIUW27cZ+klx8KfeLl4ueZhUgNSOg7
3iaTJU83gfqq+00oSLijPiyzejV9g3I0c9Nh1y604BRGgxxZQz2BkbRbM7R41Cy5
yox8RQVrd4aeY48FLpfV9fkjG5PoXWOAnwaz2vJWMJXVx03svTco6SirbBXuuyem
EClQdKv0a9OSkg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:30 2025 by rpki-client