Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: J1Jvf9NPC9uVtSmswz9wiCgk5w71SKGOi5OIjz8BXUw=
Subject key identifier: 55:4C:2D:5D:60:53:53:42:19:B5:7C:E4:3E:99:B2:84:B4:49:22:1F
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 019A27E67ABE31E50DDCB1991822337FFC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 0669
Signing time: Mon 27 Oct 2025 23:00:07 +0000
Manifest this update: Mon 27 Oct 2025 23:00:07 +0000
Manifest next update: Tue 28 Oct 2025 23:00:07 +0000
Files and hashes: 1: CpQOplnmKu5LLulHc8JnvbebR4w.roa (hash: 5reIQFf+aPQY/29qAhB9EgFnG+Par8TwmIu2wMdsT6g=)
2: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: 4FioQ4ZJL6L9oaUWDf9TH7b1PKeixecYKA3wkDX2vtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:e6:7a:be:31:e5:0d:dc:b1:99:18:22:33:7f:fc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Oct 27 23:00:07 2025 GMT
Not After : Oct 28 23:00:07 2025 GMT
Subject: CN=554c2d5d6053534219b57ce43e99b284b449221f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:31:4b:d6:ae:01:60:8a:44:6d:9c:d6:05:37:
cc:be:ae:56:c8:d3:8b:d6:fd:43:ed:d0:91:25:fd:
73:65:76:e7:bc:c9:3f:24:2d:c9:9e:e1:c0:5c:d9:
3b:56:49:a9:f8:e9:0f:b5:9a:8b:ba:4a:cc:50:dc:
35:02:24:81:c8:52:7b:b1:0e:f1:a8:80:a5:39:fc:
0c:53:9b:14:22:41:3a:84:d3:65:2b:84:a6:2c:70:
9b:33:48:3d:1d:67:28:da:e0:85:67:95:a4:fe:64:
28:83:62:99:8c:53:1d:e8:4e:15:a9:15:48:e2:71:
c8:ce:9a:b9:ac:5a:fd:58:5f:70:41:a9:f5:d3:45:
a7:f0:f7:5b:37:aa:f9:ae:df:1b:70:47:b0:b2:16:
90:10:54:eb:67:f0:06:04:47:02:a9:af:36:e8:d0:
79:1c:57:5f:a4:21:10:13:7f:79:1a:d9:05:8b:9e:
f8:df:64:86:12:a6:eb:de:58:f4:15:7f:9c:72:4e:
f1:2e:51:a8:08:a3:2a:c7:46:47:8f:ec:d0:11:d7:
ac:ee:e8:80:41:90:6d:dd:3b:1d:0d:ae:87:9c:3a:
e1:38:b7:96:87:24:f2:2f:50:d5:6d:d3:2c:77:be:
71:ef:33:27:c1:87:87:73:c3:65:f1:88:cf:75:93:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4C:2D:5D:60:53:53:42:19:B5:7C:E4:3E:99:B2:84:B4:49:22:1F
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:55:83:61:81:aa:79:26:8e:f4:86:af:3e:28:21:0a:5b:a0:
2c:fc:ea:8f:02:24:03:4c:dc:a6:f3:8a:96:20:8d:6a:78:a2:
fc:c6:74:3e:3a:a1:f5:3b:f5:c9:88:a3:70:ac:57:91:82:a7:
37:3d:fb:06:cc:ec:ad:3e:a5:3e:47:6a:2a:67:4b:65:be:50:
6f:23:e4:98:6f:1e:ac:f6:5c:2a:f8:5f:59:3c:30:97:a4:be:
d0:e8:85:ac:1c:b4:ae:ca:f4:08:30:2b:17:53:01:7a:40:75:
88:80:39:80:e1:d9:c0:60:3d:3d:b1:de:44:d8:ad:73:dd:45:
cc:4b:6c:84:34:f3:bd:ac:27:20:49:80:03:d3:e4:80:54:fa:
ec:d0:56:05:71:a6:81:01:99:68:f3:d6:ed:1e:6c:74:5e:d0:
72:b8:19:cc:4e:1b:83:54:a5:5b:82:a4:7e:c9:d6:ce:1c:bd:
4d:42:2e:9f:12:57:37:0e:49:06:ca:6d:d5:2d:b9:fa:94:0d:
63:8f:11:8f:5b:69:b9:59:ec:4b:0e:3b:ff:07:af:95:54:8f:
9b:39:71:11:25:40:b2:90:ee:16:21:06:92:92:c8:f8:b3:cd:
22:de:6e:19:ca:d5:4a:bf:98:cc:8f:99:78:bb:13:5d:fe:ba:
f8:ef:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 05:35:26 2025 by rpki-client