Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
File: hcAE7tTPscJ2cTgiL_wJUooqXIY.mft (raw, json)
Hash identifier: Lg3JUeoM8DdIM41mQ/j3YqPVMcsCiPNWEa+fbhnT2Uc=
Subject key identifier: 3C:E9:B4:E9:53:7F:16:D6:3F:F0:21:A8:16:C9:D2:8E:E0:36:EC:29
Authority key identifier: 85:C0:04:EE:D4:CF:B1:C2:76:71:38:22:2F:FC:09:52:8A:2A:5C:86
Certificate issuer: /CN=85c004eed4cfb1c2767138222ffc09528a2a5c86
Certificate serial: 019A725C8EB8E4C94B7CEB2D6E69A0F008E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
Manifest number: DC
Signing time: Tue 11 Nov 2025 10:00:59 +0000
Manifest this update: Tue 11 Nov 2025 10:00:59 +0000
Manifest next update: Wed 12 Nov 2025 10:00:59 +0000
Files and hashes: 1: 7TL45FNYtrXr6cYEMzlJ0xM19tA.roa (hash: AkAdvmK+KKLZ/hW3c+GoX6JUBJ/Tn/r+Hpuz7kRNXhI=)
2: hcAE7tTPscJ2cTgiL_wJUooqXIY.crl (hash: 4p4eVFGzxPA2tafuR+AgKvMz0XVtvaDC2rZ+8Nhw7og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:8e:b8:e4:c9:4b:7c:eb:2d:6e:69:a0:f0:08:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c004eed4cfb1c2767138222ffc09528a2a5c86
Validity
Not Before: Nov 11 10:00:59 2025 GMT
Not After : Nov 12 10:00:59 2025 GMT
Subject: CN=3ce9b4e9537f16d63ff021a816c9d28ee036ec29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:97:79:d0:5c:6f:d9:54:aa:7d:37:ca:41:
7b:77:30:ee:99:2d:d3:3e:8f:07:b2:e6:c0:ca:f1:
c8:21:4d:83:fc:ff:29:51:77:cf:7d:07:97:b4:6a:
c8:d0:1f:4c:8d:fd:65:a1:a5:22:00:96:56:e2:5e:
c6:2c:8c:48:2f:d7:94:e3:e1:84:13:4c:d1:53:c3:
1b:82:68:74:8c:73:0a:61:b1:03:7c:b5:9c:18:d9:
ba:3d:37:a5:03:02:00:e5:8d:8b:25:4f:e3:00:f0:
00:87:ec:c2:f8:74:5d:30:cc:0d:04:4f:5f:76:4e:
88:81:6f:57:bf:16:b3:c5:dd:1a:44:16:dc:5d:5e:
2c:60:1c:f3:36:9c:64:77:ce:21:b8:dc:98:6d:ba:
70:38:25:39:32:04:63:33:e8:4a:43:ec:56:6a:e6:
62:46:7c:b6:08:cc:6a:6e:f7:61:93:10:dc:b7:6f:
b8:7f:47:d5:52:13:db:95:bb:28:3b:9e:e2:fd:9b:
d2:f0:b3:f4:97:9f:26:41:ca:e0:10:91:2c:0e:69:
6f:f0:9d:bd:56:52:5f:e7:79:1e:97:76:b8:07:3d:
ad:01:c4:29:7b:e9:9d:87:c8:7a:d0:35:0a:b9:d0:
3f:01:1a:03:49:b1:1b:e4:72:29:ad:90:de:68:15:
64:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E9:B4:E9:53:7F:16:D6:3F:F0:21:A8:16:C9:D2:8E:E0:36:EC:29
X509v3 Authority Key Identifier:
keyid:85:C0:04:EE:D4:CF:B1:C2:76:71:38:22:2F:FC:09:52:8A:2A:5C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a6:89:e7:1d:22:c8:0a:3f:7d:49:67:ab:21:56:bd:f1:71:
27:91:4a:9e:d9:12:74:f0:1f:90:5f:d2:7e:a5:69:5c:be:2c:
11:6c:1c:f4:b2:8e:19:32:24:fd:7c:5c:78:8d:e9:58:ef:4a:
1a:65:8e:a7:49:70:85:89:e6:c1:24:cd:43:42:60:ed:e3:34:
26:f3:0d:dd:f1:14:66:5f:b1:70:7c:a7:ef:37:30:70:19:b7:
92:d0:dd:f1:80:d6:c9:2e:77:6b:6d:65:52:1b:44:08:9d:9d:
e0:96:f4:31:c3:cf:49:65:20:0f:e2:ba:51:73:bc:74:59:33:
13:f5:dc:de:37:de:26:06:1b:0a:28:57:21:97:78:23:7d:42:
39:a5:e6:ed:8b:42:17:2d:07:84:61:a3:8d:45:b8:94:54:21:
da:74:fe:f6:fa:8c:d7:91:c8:cb:cc:3a:6a:1d:58:f7:e7:d4:
95:5c:76:65:9a:21:87:17:58:a7:23:1f:fb:7a:3f:83:60:86:
73:c5:2a:6f:48:92:c8:60:22:20:6e:af:2c:44:58:2a:d7:5f:
c6:7e:aa:15:b9:de:4c:39:47:31:be:2c:d6:a5:4b:ba:2a:b6:
33:eb:ac:92:4c:19:22:3d:35:37:0b:1f:7d:b0:58:97:3b:f4:
85:32:5a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:41 2025 by rpki-client