Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
File: HcKeV0nukcWjOujjC33J__OV_-Y.mft (raw, json)
Hash identifier: zYVKvcQTHgUWd4c24zKUF7cGUBcdw1o1FjFKZ1b0nCU=
Subject key identifier: 8D:03:7B:33:F8:A0:A3:6B:E6:DA:70:82:3D:2F:3E:AE:94:F3:DB:97
Authority key identifier: 1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
Certificate issuer: /CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Certificate serial: 019A71B785A3C34113E6384BCFB86BB49B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:00:43 +0000
Manifest this update: Tue 11 Nov 2025 07:00:43 +0000
Manifest next update: Wed 12 Nov 2025 07:00:43 +0000
Files and hashes: 1: HcKeV0nukcWjOujjC33J__OV_-Y.crl (hash: NOctrWy/r0aBhVvUc5U4vtT2Gy94CE9X9N8KdCQUtXs=)
2: z6MmCrjG_M-ly3NSz9op9zn2Kp8.roa (hash: RhWaGG++pr/cOsZo3DpIE+m6eX6qqpoZxRcmwUA1c6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:85:a3:c3:41:13:e6:38:4b:cf:b8:6b:b4:9b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Validity
Not Before: Nov 11 07:00:43 2025 GMT
Not After : Nov 12 07:00:43 2025 GMT
Subject: CN=8d037b33f8a0a36be6da70823d2f3eae94f3db97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:99:6a:cd:c8:28:19:6f:94:1d:67:15:7f:
73:a4:43:28:ac:c4:5a:60:6b:ac:b1:c2:47:6c:0f:
98:b7:56:2f:e9:0f:55:85:03:ee:13:8a:90:b4:93:
63:54:6f:52:5f:7f:4b:dd:37:c8:8d:50:9e:d1:c9:
22:8f:80:41:72:91:af:fc:3d:c8:69:5c:95:c6:b8:
88:c5:2f:ae:47:ef:39:c1:8d:3b:2b:b0:b6:04:94:
55:45:7c:4b:53:3c:aa:15:e6:52:f0:a0:5c:98:20:
62:15:ac:e0:6b:93:83:3b:26:35:0e:85:62:c9:c3:
b2:f3:cc:4f:dc:56:3c:38:8a:b6:10:64:b8:d2:a7:
8b:9f:1d:14:32:5c:3a:4a:a4:a0:82:09:a7:91:68:
e3:2f:9e:64:da:3c:56:ed:ec:26:8f:4d:96:50:8b:
7d:ff:47:ea:ac:eb:60:92:05:3f:57:12:dc:e3:a9:
71:9f:23:84:20:20:be:31:cc:fb:9b:9c:c8:cd:1b:
3d:7f:18:e6:4c:7c:ac:03:c4:40:7a:17:85:fd:49:
c2:58:3a:a9:b2:69:22:4c:dc:5e:41:e8:70:ac:9e:
8a:72:f1:56:0e:d4:54:e7:5d:c7:a5:f4:6d:07:d5:
69:d8:4e:a1:9d:5a:b0:ab:03:14:02:4b:26:8c:93:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:03:7B:33:F8:A0:A3:6B:E6:DA:70:82:3D:2F:3E:AE:94:F3:DB:97
X509v3 Authority Key Identifier:
keyid:1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:15:37:e0:aa:49:b6:e5:e2:28:03:ab:09:8e:02:1a:0c:49:
c2:22:b9:39:d2:f4:88:d9:a0:43:11:92:89:e7:ca:53:ab:99:
88:95:92:1c:73:48:92:15:ba:29:48:19:ca:e5:d9:a9:9b:83:
01:65:27:dd:88:ea:f2:b7:6d:00:e8:45:e6:5d:b9:f0:c1:fd:
45:2c:63:8f:2e:4f:5b:39:b5:b2:c2:4e:4e:a9:f0:33:26:6c:
7d:13:f0:39:f8:df:17:53:43:d3:84:46:6d:95:c5:a4:ca:81:
97:75:d2:db:56:69:7c:55:34:62:c7:2e:f1:6b:66:43:f4:b7:
35:ed:44:d0:dc:6c:d8:1f:53:95:f0:a5:ce:3e:0b:18:95:a1:
c1:ad:59:b4:2f:db:fe:f8:e9:44:94:68:c1:de:cc:6e:fb:7a:
10:b9:a4:b1:ec:1b:38:1f:e5:c1:13:bf:15:36:51:2b:9a:44:
31:ae:a3:3e:3d:57:19:84:7b:21:8c:0e:65:e7:d5:64:28:1f:
68:33:87:f5:e1:92:34:be:1d:2f:84:42:56:55:5f:da:d1:c5:
97:1a:99:0e:a1:26:c7:00:0d:86:76:55:f2:e2:15:a7:14:0d:
3c:eb:9d:cf:a9:67:05:a0:78:b4:a9:43:57:ad:4a:29:15:7d:
0c:cd:15:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt4Wjw0ET5jhLz7hrtJsLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYzI5ZTU3NDllZTkxYzVhMzNhZThlMzBiN2RjOWZmZjM5
NWZmZTYwHhcNMjUxMTExMDcwMDQzWhcNMjUxMTEyMDcwMDQzWjAzMTEwLwYDVQQD
Eyg4ZDAzN2IzM2Y4YTBhMzZiZTZkYTcwODIzZDJmM2VhZTk0ZjNkYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7qZas3IKBlvlB1nFX9zpEMorMRa
YGusscJHbA+Yt1Yv6Q9VhQPuE4qQtJNjVG9SX39L3TfIjVCe0ckij4BBcpGv/D3I
aVyVxriIxS+uR+85wY07K7C2BJRVRXxLUzyqFeZS8KBcmCBiFazga5ODOyY1DoVi
ycOy88xP3FY8OIq2EGS40qeLnx0UMlw6SqSgggmnkWjjL55k2jxW7ewmj02WUIt9
/0fqrOtgkgU/VxLc46lxnyOEICC+Mcz7m5zIzRs9fxjmTHysA8RAeheF/UnCWDqp
smkiTNxeQehwrJ6KcvFWDtRU513HpfRtB9Vp2E6hnVqwqwMUAksmjJN0GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0DezP4oKNr5tpwgj0vPq6U89uXMB8GA1UdIwQY
MBaAFB3CnldJ7pHFozro4wt9yf/zlf/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGNLZVYwbnVrY1dqT3VqakMzM0pfX09WXy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jMWQ5N2EtNWI5ZC00MGJiLTliMjct
NTNmZmE1Zjk5ODVjLzEvSGNLZVYwbnVrY1dqT3VqakMzM0pfX09WXy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9jMWQ5N2EtNWI5ZC00MGJiLTliMjctNTNmZmE1Zjk5ODVj
LzEvSGNLZVYwbnVrY1dqT3VqakMzM0pfX09WXy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBU34KpJ
tuXiKAOrCY4CGgxJwiK5OdL0iNmgQxGSiefKU6uZiJWSHHNIkhW6KUgZyuXZqZuD
AWUn3Yjq8rdtAOhF5l258MH9RSxjjy5PWzm1ssJOTqnwMyZsfRPwOfjfF1ND04RG
bZXFpMqBl3XS21ZpfFU0Yscu8WtmQ/S3Ne1E0Nxs2B9TlfClzj4LGJWhwa1ZtC/b
/vjpRJRowd7Mbvt6ELmksewbOB/lwRO/FTZRK5pEMa6jPj1XGYR7IYwOZefVZCgf
aDOH9eGSNL4dL4RCVlVf2tHFlxqZDqEmxwANhnZV8uIVpxQNPOudz6lnBaB4tKlD
V61KKRV9DM0V4Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:13 2025 by rpki-client