Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
File: HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json)
Hash identifier: GPNYUgAD8Ow0q2NubVCsAwkJGI8riwLsedNAbe/4d6Q=
Subject key identifier: A3:65:4B:E0:F4:78:51:61:FD:46:90:FB:56:E4:45:3A:44:AE:96:06
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial: 019A71B8298C611FE9EAF07D611550093854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
Manifest number: 10AD
Signing time: Tue 11 Nov 2025 07:01:25 +0000
Manifest this update: Tue 11 Nov 2025 07:01:25 +0000
Manifest next update: Wed 12 Nov 2025 07:01:25 +0000
Files and hashes: 1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: rBZH+JWwKKF6GbFEo8vr0w+A5ja9Venc9l7NhL8viTE=)
2: kk1RvulsDSTUcsB-uonoLPTmX_c.roa (hash: 8TFkWIExCyZU8KrfnY1OXWc5V95rzbge2YPptcmVOsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:29:8c:61:1f:e9:ea:f0:7d:61:15:50:09:38:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Validity
Not Before: Nov 11 07:01:25 2025 GMT
Not After : Nov 12 07:01:25 2025 GMT
Subject: CN=a3654be0f4785161fd4690fb56e4453a44ae9606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:f0:00:71:bf:8e:55:b7:d0:00:51:8a:03:
ba:2a:5d:b9:e3:0a:51:b9:6a:f0:d4:21:cb:bb:5f:
2f:d1:6e:30:fc:50:f9:bd:3a:53:9e:35:52:fa:f0:
d6:f3:ff:31:a3:01:85:b1:ce:97:cc:da:ae:79:92:
f6:35:bc:60:d4:32:f5:43:ff:c9:4b:c1:ec:15:5a:
8a:1b:e1:a7:6b:94:a9:b8:4c:08:a4:e8:b0:e3:4f:
6b:27:55:86:9d:9e:7d:4d:d9:b7:a5:5a:6c:3b:9d:
bf:33:13:2d:e6:fd:a0:60:cb:88:78:37:f3:e0:8f:
38:97:3e:78:17:b0:26:a7:d7:9f:95:65:b1:8e:e9:
8d:6d:78:6a:08:0a:ea:20:ab:cd:62:4a:d3:90:32:
11:a1:84:65:ea:0c:94:05:48:19:47:a6:77:bb:e4:
8d:00:74:2c:0f:a7:08:67:92:76:55:30:5c:e5:5a:
5b:c1:43:f4:0f:71:41:5c:b1:8c:0f:d9:bf:35:4e:
4e:cd:d1:05:2b:cf:09:03:52:bc:ce:89:2d:f5:c3:
b4:df:09:d8:a0:5e:e0:0c:00:02:f0:3e:9c:c0:fb:
be:df:84:66:dd:bb:c1:e8:77:a6:f7:b1:05:76:11:
0b:a3:95:02:84:82:ea:e2:5a:cb:b9:64:d4:6f:09:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:65:4B:E0:F4:78:51:61:FD:46:90:FB:56:E4:45:3A:44:AE:96:06
X509v3 Authority Key Identifier:
keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:96:48:a1:b5:7c:8c:bd:2b:c1:10:26:6d:bd:6e:3c:4a:2a:
22:a4:61:aa:30:a5:64:92:51:4e:02:d9:01:f4:38:3c:fe:4f:
7a:2c:d2:3a:c0:99:85:75:a7:3e:66:ba:5a:3b:95:cb:a2:79:
b0:9f:59:59:67:1b:aa:3f:11:64:98:db:a8:16:30:32:6d:95:
d4:d8:94:f4:96:ea:90:34:27:86:93:9b:1a:30:8d:05:bc:bd:
56:b3:a3:01:63:cf:49:98:40:fa:f4:b5:23:db:6e:5c:40:49:
48:77:78:68:05:97:eb:de:6c:6b:e3:3f:34:aa:ec:96:82:50:
f0:24:2d:fb:04:de:6d:4e:5b:f7:c5:9e:14:55:e1:a0:23:c7:
9c:fd:c0:51:f9:4a:71:6e:fa:bc:69:9f:06:2f:3c:00:27:4a:
89:ac:15:ae:29:9e:9c:b8:05:28:1b:da:52:67:0b:a6:36:62:
96:f0:4a:20:30:57:48:73:50:fc:24:a0:28:1a:0e:18:ec:0d:
a6:29:40:8a:08:11:b6:3f:dd:a9:4c:36:3e:f3:09:2c:58:d4:
72:77:d3:6a:78:1f:85:3e:d0:45:9b:c8:9e:a7:0d:2a:7e:f9:
53:c2:19:49:bb:23:6a:32:9b:81:d6:bf:19:46:58:37:aa:20:
e6:5b:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:57 2025 by rpki-client