Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
File: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft (raw, json)
Hash identifier: vOMQp2sP6ThZS9rwiXH8yDbSXqDGzoQgCirFEkGFgP8=
Subject key identifier: 30:B7:F7:2F:00:FD:97:48:38:C7:73:82:F6:56:9A:9F:35:86:B9:57
Authority key identifier: 1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
Certificate issuer: /CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Certificate serial: 019A71B77FBDDEAB9FEB0DCAEC2B58BFF2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:00:42 +0000
Manifest this update: Tue 11 Nov 2025 07:00:42 +0000
Manifest next update: Wed 12 Nov 2025 07:00:42 +0000
Files and hashes: 1: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl (hash: eneJgEpQM1gSRr8vdSemSfagu4lSC7aDojlyxaYvKEM=)
2: zWwWyLKfCmRpNmwFBTvojnygc1I.roa (hash: rn4lqHeH4XjZAogo04iFGrMuS15xr6iivrKPmjp5V94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:7f:bd:de:ab:9f:eb:0d:ca:ec:2b:58:bf:f2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Validity
Not Before: Nov 11 07:00:42 2025 GMT
Not After : Nov 12 07:00:42 2025 GMT
Subject: CN=30b7f72f00fd974838c77382f6569a9f3586b957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:38:5f:51:fd:19:61:06:31:67:c9:a3:49:
37:db:fe:20:3a:b7:32:6c:bf:48:ba:81:09:32:15:
d4:b6:60:24:a8:74:47:3d:79:d4:e1:23:76:ff:f4:
77:0a:61:71:4d:fd:e4:0b:56:63:b7:c8:96:ef:54:
53:ed:5e:a8:42:98:4f:61:4d:36:de:64:b1:39:09:
78:b1:c4:9d:6e:58:28:60:50:e3:88:da:b7:09:cc:
a8:fe:fe:3e:8f:ee:7c:c1:c1:32:5a:6d:65:3a:67:
76:d6:89:3b:19:a1:73:11:00:a5:90:cf:4f:2e:15:
41:3b:e2:cb:4c:17:51:33:e3:4f:ca:4d:14:a5:30:
51:8a:09:10:ce:5c:b0:b2:e6:55:2f:4c:ab:f0:2f:
e1:4b:9a:85:df:96:87:ee:be:5f:7b:d4:67:d8:f4:
93:d0:c8:ce:eb:10:56:97:53:1a:2a:b8:4f:51:3c:
f7:64:c7:bf:bd:99:c0:b3:6d:c4:0e:4f:94:49:fe:
a0:87:79:85:f1:e7:43:96:42:0b:a1:4e:1d:b8:91:
e0:d7:2b:7c:24:a8:c2:22:f7:85:46:9d:9a:53:6e:
b3:e7:5a:bb:b4:2a:69:be:13:e9:d2:d8:e3:ca:c0:
e1:f2:9f:18:bd:83:26:55:ff:ca:54:e8:59:f2:b5:
9f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B7:F7:2F:00:FD:97:48:38:C7:73:82:F6:56:9A:9F:35:86:B9:57
X509v3 Authority Key Identifier:
keyid:1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:24:ee:44:e5:78:29:be:58:d0:bc:8c:99:de:6f:14:34:ec:
05:37:99:82:8e:64:ad:ce:46:4d:91:b3:4b:e8:6d:a2:19:15:
3a:24:f5:f7:59:e4:ba:cc:24:c2:9b:dd:7a:6f:2a:a8:17:d4:
d7:87:05:f0:fa:66:1e:7c:cf:b2:b7:c3:c3:c8:0a:9f:82:d1:
d2:e5:db:5d:5c:05:4d:99:7c:16:26:d1:13:bc:2b:9b:ff:09:
3b:cd:fc:07:96:26:e8:19:ec:8c:ec:5a:2d:87:22:73:ac:e6:
9b:b6:ad:38:f9:c0:dc:47:f6:b9:ab:9c:69:0b:ea:3d:29:d5:
82:c1:af:7f:b0:c1:e4:d4:12:24:cd:31:9e:c7:30:c2:c0:86:
3e:5c:07:39:f4:6b:33:ed:e1:84:09:4b:f8:e7:5a:fa:e2:6e:
32:68:a1:3a:9a:9d:2d:23:f1:50:99:ba:2e:69:0f:fd:27:82:
b8:92:bb:f7:3e:0d:45:4f:16:51:b0:64:a3:d7:eb:4f:87:85:
32:36:f6:52:82:aa:64:5f:06:95:9d:19:65:d3:d7:12:f5:0a:
1e:ab:a5:90:a5:50:e6:74:f6:fd:3c:ab:d4:05:ab:67:8e:22:
11:42:a3:f5:6c:8d:45:a6:21:94:04:ac:43:b7:30:97:3b:00:
c8:26:b5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:36:17 2025 by rpki-client