Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
File: HGce_RKBEUKXWJ51k6fgUFTZJVs.mft (raw, json)
Hash identifier: A4eZX6r6tSZT9xUuBIHJPLWDAiFi0RFnPr4PsePMKx0=
Subject key identifier: 1A:2D:E0:2E:81:9B:20:33:03:54:74:FA:C5:C1:84:A6:A0:DC:BE:D3
Authority key identifier: 1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
Certificate issuer: /CN=1c671efd1281114297589e7593a7e05054d9255b
Certificate serial: 019A722644D1B989020F663230FD26672964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
Manifest number: 121F
Signing time: Tue 11 Nov 2025 09:01:41 +0000
Manifest this update: Tue 11 Nov 2025 09:01:41 +0000
Manifest next update: Wed 12 Nov 2025 09:01:41 +0000
Files and hashes: 1: HGce_RKBEUKXWJ51k6fgUFTZJVs.crl (hash: mMsuQpOtLR535aY+yfM76qWe+ur0EvQvFKc5ES1AqI8=)
2: quzeBvB4K-uCJUdGNl5lumOg01g.roa (hash: NUc87tmJZd1YHslvV2s3oIDhhEPpWQvZDbTgS+MJ6oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:44:d1:b9:89:02:0f:66:32:30:fd:26:67:29:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c671efd1281114297589e7593a7e05054d9255b
Validity
Not Before: Nov 11 09:01:41 2025 GMT
Not After : Nov 12 09:01:41 2025 GMT
Subject: CN=1a2de02e819b2033035474fac5c184a6a0dcbed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:df:de:0c:55:88:31:be:e7:b7:57:2e:e6:14:
b4:d5:94:e3:89:13:61:b6:f3:1c:68:9c:cd:db:f2:
ed:ac:d1:3e:64:97:94:06:39:bf:2e:cc:8d:5a:4a:
8b:7c:1b:9e:d8:10:01:74:26:a0:8a:87:ee:8a:3b:
82:6e:a7:53:58:1b:7e:09:6e:60:f3:6d:75:51:2d:
2c:3e:63:50:42:ff:ba:46:12:e0:fb:6d:a0:05:98:
c6:da:10:f9:02:2f:b9:0d:14:ca:65:f4:ad:ba:9e:
62:09:ac:1d:c4:37:74:ea:01:24:39:e1:0b:b4:ac:
21:aa:e5:a7:df:58:f4:18:51:53:6e:71:52:ae:b9:
20:ae:3c:5f:59:d3:4a:7a:f7:9b:8f:51:a4:fb:a5:
40:7c:12:54:03:67:09:96:88:56:3d:23:f5:90:a0:
29:7c:13:75:fa:69:d7:b9:32:a4:51:37:2a:54:cc:
f0:5a:34:08:d0:42:62:00:ac:0f:86:ef:fc:8f:7b:
ac:1a:ef:fc:72:06:f6:c4:19:4b:f9:59:8f:52:af:
8e:82:3b:50:0e:55:9a:d2:9c:80:f1:71:dd:3e:b0:
b9:63:fe:a1:7a:10:65:fa:f9:3f:2d:05:df:ff:7f:
a8:01:fc:d3:89:7a:d6:55:93:78:33:2b:41:bc:2d:
de:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2D:E0:2E:81:9B:20:33:03:54:74:FA:C5:C1:84:A6:A0:DC:BE:D3
X509v3 Authority Key Identifier:
keyid:1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8c:18:fc:24:f2:3b:50:7d:1f:42:c7:8c:ee:0a:f4:37:73:
80:89:3c:54:5a:b8:bc:f7:97:60:36:bd:cb:29:7c:72:a4:5a:
7a:8d:82:24:e8:90:4f:2b:0b:43:1c:64:1c:91:3c:49:f4:5e:
4d:93:4b:62:09:95:49:24:4b:da:5a:d6:42:98:a4:5d:ab:7c:
e8:c1:dc:24:08:2a:6b:80:08:bb:89:1d:2b:af:c6:ef:c6:aa:
f9:5b:41:29:4c:07:e3:d0:46:20:f9:16:81:dd:79:fd:61:71:
b1:58:f5:2d:13:4f:27:e3:09:9e:96:3a:37:c5:6a:7b:6f:fc:
ec:39:3f:bf:c0:d1:dc:29:13:7d:f8:9b:e8:3b:00:3e:b7:f7:
61:0e:e9:b3:c7:54:7f:0f:ce:56:b3:29:89:10:3d:98:09:16:
96:6d:5f:dd:5f:05:5e:27:30:55:93:ea:5d:2c:50:03:a7:53:
f1:24:72:3c:a6:fc:59:cd:a4:98:ef:93:f6:2a:ad:7d:b0:14:
f5:9f:0c:86:3c:75:5d:b3:87:89:05:98:6a:df:7c:2d:2e:ca:
d4:ec:43:c1:65:30:6d:5d:64:a7:a6:6f:3b:f0:8b:82:2b:56:
7f:09:7d:69:fb:bf:78:5c:c2:a4:94:f4:75:d2:29:5e:13:75:
71:c2:17:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:45 2025 by rpki-client