Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
File: HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft (raw, json)
Hash identifier: pi05K3VoCahVBB0iL5L09DgVSBsIC8owwYXi1GYf9gg=
Subject key identifier: 77:FD:A5:5A:9F:FC:E2:8D:40:0F:82:D8:DB:B8:A9:7A:2C:93:29:75
Authority key identifier: 1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
Certificate issuer: /CN=1e40ab40e53860871250e9bac4e163339710595d
Certificate serial: 019A7225B8B5855B998C2862E5EC3EE22482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
Manifest number: 0E03
Signing time: Tue 11 Nov 2025 09:01:05 +0000
Manifest this update: Tue 11 Nov 2025 09:01:05 +0000
Manifest next update: Wed 12 Nov 2025 09:01:05 +0000
Files and hashes: 1: HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl (hash: ZZRIOck0EqwxCrpkiyXM8wpNoGTtwNl72BkZ0lnxpZM=)
2: obxxCWwwodKEQItq-LvA1UofY7E.roa (hash: EDnG/ruD1T9KRKhZcI5dsIBjNgSOpQ6QRSsT8ooYu6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b8:b5:85:5b:99:8c:28:62:e5:ec:3e:e2:24:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e40ab40e53860871250e9bac4e163339710595d
Validity
Not Before: Nov 11 09:01:05 2025 GMT
Not After : Nov 12 09:01:05 2025 GMT
Subject: CN=77fda55a9ffce28d400f82d8dbb8a97a2c932975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:cb:7d:ef:bf:b1:88:e3:1e:9f:92:98:19:
02:77:68:65:01:ec:21:9c:8d:99:1a:4c:bc:23:46:
4b:c8:bc:f7:e0:c1:85:fe:f2:ce:6e:23:15:fb:e2:
3b:59:b3:39:10:44:7d:a3:91:5e:80:23:81:0c:d4:
d2:2d:45:58:3e:37:48:f8:41:c4:ec:5f:f3:ba:ec:
59:a3:ea:ac:ea:19:9e:db:90:51:14:39:82:0d:fe:
9d:39:37:a7:48:78:41:4e:a9:5b:5e:64:06:69:f5:
47:fb:c9:13:a7:c1:e1:be:3a:f3:64:41:36:75:70:
c2:f1:64:c4:f0:2e:88:77:92:64:42:9d:0f:3f:b8:
2b:85:4d:f0:e4:18:68:93:c5:6b:ff:c7:e8:33:d7:
7c:78:a1:9a:f7:d0:75:27:2c:3b:36:b1:7e:bb:1e:
49:49:26:8a:f2:17:82:72:e5:86:56:ee:d7:55:86:
01:4d:72:cf:72:77:74:2c:fc:2a:e4:b4:b4:be:3e:
e2:cb:f9:91:2e:63:87:fe:7a:e4:3b:16:e5:3d:34:
1c:bd:ef:1b:02:2f:cf:2f:70:19:97:ce:7a:de:20:
23:e0:48:15:55:7d:51:ce:4f:7e:da:b5:4c:b8:76:
e3:ef:3d:52:e2:36:06:21:b2:65:0c:7e:22:61:77:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FD:A5:5A:9F:FC:E2:8D:40:0F:82:D8:DB:B8:A9:7A:2C:93:29:75
X509v3 Authority Key Identifier:
keyid:1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a8:6e:c4:3b:3c:df:bf:e7:a8:85:5f:8f:91:09:f4:07:8d:
cd:8c:59:d4:4a:b6:01:e2:fb:bd:b3:ab:41:f9:3a:ce:cc:44:
4d:f5:64:95:dc:c3:9b:2e:77:16:e0:2e:ec:c5:5e:d8:02:ef:
00:c4:89:c3:ff:58:fb:71:fc:52:fe:34:38:c0:80:24:61:23:
05:e4:cc:55:66:f6:0f:ed:d5:a1:12:0d:c1:86:46:fd:a5:60:
ea:0c:91:8b:55:92:17:da:7d:ed:66:fa:f6:ab:5c:17:1e:3c:
45:d5:43:ed:0f:41:0a:1f:91:92:37:d4:63:ba:d2:66:e6:37:
4d:7d:dd:21:b9:08:12:98:17:2c:a0:64:ef:6f:e6:38:cd:49:
8f:e7:13:c9:8c:d3:37:f4:72:74:bc:22:c0:af:6c:59:78:81:
49:01:b7:3e:0b:70:a1:8f:29:27:83:a0:fc:22:81:06:9f:68:
bf:d3:5c:6f:50:f2:36:f1:73:2c:d7:4a:e6:3c:53:9e:bd:d2:
2c:72:31:6a:64:26:c9:61:b8:db:d2:cd:6a:42:da:c8:30:4d:
4b:eb:6d:5d:4c:a2:3f:2d:d5:cb:ca:64:df:7e:c5:fb:2d:3d:
77:32:86:d5:82:35:b7:71:d2:03:6a:9a:ca:53:07:7c:92:8e:
11:fb:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:21 2025 by rpki-client