Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
File: HCz1cnHCuPBLqn5jqbgQPVID1_g.mft (raw, json)
Hash identifier: GyPP0TGTHOD+y9arcHzRVB0XLLjrAG5WyYBbz2XmCtM=
Subject key identifier: 65:21:9A:FC:19:FE:5B:C6:20:85:A0:A2:FE:A9:F0:BD:B5:30:E4:9D
Authority key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
Certificate issuer: /CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Certificate serial: 019A1CF538034F31D1E2BF3F98BDF97C56F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
Manifest number: 0F4E
Signing time: Sat 25 Oct 2025 20:00:23 +0000
Manifest this update: Sat 25 Oct 2025 20:00:23 +0000
Manifest next update: Sun 26 Oct 2025 20:00:23 +0000
Files and hashes: 1: HCz1cnHCuPBLqn5jqbgQPVID1_g.crl (hash: QLYCOc0GbzfkaTL+gOSwMaTEsAF+79OdLg0B5PAie88=)
2: vH3uZ08iyiY8zb-A3dRrracn6LQ.roa (hash: zmUAFJf99C5ECEtVBxVkr25oo8bxiW5B47UWFtDZGZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:f5:38:03:4f:31:d1:e2:bf:3f:98:bd:f9:7c:56:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Validity
Not Before: Oct 25 20:00:23 2025 GMT
Not After : Oct 26 20:00:23 2025 GMT
Subject: CN=65219afc19fe5bc62085a0a2fea9f0bdb530e49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:43:98:21:46:ab:0f:b0:b8:3c:9e:f6:30:
be:77:f6:3e:b1:67:9d:1f:7d:0f:34:6a:36:16:b1:
a7:d0:a2:9d:89:7c:b6:bd:36:af:3b:77:23:c9:b8:
f2:ef:de:29:47:95:3c:01:0b:c5:01:39:63:5a:43:
b9:f0:32:0a:67:51:ad:a1:d2:b2:92:22:01:8d:91:
31:9e:0e:13:ef:95:23:4f:33:9b:75:0b:73:52:c5:
c5:5b:13:18:b7:9c:bb:bc:91:80:eb:b7:85:a5:41:
33:d9:8a:54:8d:20:a5:14:0a:b6:78:36:46:54:1c:
f6:61:3d:96:c1:97:be:b5:71:fa:a7:23:6e:9c:57:
f6:0c:74:02:a9:07:4e:b4:a9:19:bb:ef:6b:55:91:
62:d6:61:b9:4c:82:2c:6a:5f:2c:8e:28:63:f1:e0:
24:bb:b5:46:76:ef:f3:7e:6b:01:6b:6c:5d:59:ea:
cc:0e:c5:3a:11:12:e7:cb:4b:86:36:d2:ed:d0:b3:
58:19:44:a8:25:2b:18:7c:d2:e6:85:22:7f:b7:b0:
55:21:d0:4f:eb:cf:cd:56:1e:fd:85:e5:c2:ed:ab:
a2:c1:6c:93:ba:6b:ed:8e:39:91:ce:10:2b:05:eb:
0d:5a:0c:4f:a9:85:5e:70:4d:73:c2:d0:c9:1c:2b:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:21:9A:FC:19:FE:5B:C6:20:85:A0:A2:FE:A9:F0:BD:B5:30:E4:9D
X509v3 Authority Key Identifier:
keyid:1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e2:a1:e3:8d:93:c0:af:31:bb:b2:cb:45:fe:c6:79:ac:92:
8d:71:83:a5:50:0e:56:9b:ea:89:96:08:76:25:f7:05:2b:a1:
31:3f:99:da:24:b3:6a:aa:2c:f2:31:3e:c8:2e:ea:a3:5e:12:
16:54:ab:0b:fb:c3:03:76:9f:4c:e5:0c:07:60:64:f5:2c:9a:
9b:07:e4:2d:02:0b:48:b3:b3:49:c6:4e:0b:0a:01:66:a4:e9:
da:57:da:b8:d1:25:37:4e:d2:94:46:ab:ff:ad:92:95:9f:86:
71:10:6b:bb:cf:c9:82:3e:2a:c5:95:a6:46:bf:a9:11:f0:ba:
36:f1:b4:54:01:d8:ae:9a:34:8a:07:93:5f:fc:22:cf:eb:c8:
c2:af:4d:75:85:e4:de:6a:b3:3d:f8:9f:0b:41:35:ae:9b:a2:
f0:48:8f:db:8e:be:fb:bd:55:47:2d:18:de:4f:32:d5:ea:65:
5c:6c:48:1c:b1:7a:d0:65:cd:b4:a2:64:66:8b:e1:be:07:a5:
c4:7d:b1:38:20:fd:06:a3:22:94:59:af:ea:10:c8:05:08:27:
12:ec:d3:ea:6b:83:ad:b9:2d:25:12:59:75:f6:25:bc:92:e3:
55:fa:98:29:56:e6:48:36:29:d8:aa:f2:33:89:47:75:7e:03:
c8:fb:c7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:02:34 2025 by rpki-client