Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
File: HjCmImLcyyGgEEs07bgrlRXKzfs.mft (raw, json)
Hash identifier: 4gSU37H3hmNFxNPJcd3zaE8lwztYq+7yC2kaoVwre7g=
Subject key identifier: C0:76:B6:3B:D8:90:44:4F:DB:1A:31:D8:43:04:05:D0:2B:2A:38:A2
Authority key identifier: 1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
Certificate issuer: /CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Certificate serial: 019A7149E437FAA0FAB43D77349616E90242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 05:00:59 +0000
Manifest this update: Tue 11 Nov 2025 05:00:59 +0000
Manifest next update: Wed 12 Nov 2025 05:00:59 +0000
Files and hashes: 1: 99ovKIs7DqoXCFgMc3tY-Dn815s.roa (hash: LCqxC97TPyTHpUsMAjf+F4zipAHzhEXoBKAv7DqvaTU=)
2: HjCmImLcyyGgEEs07bgrlRXKzfs.crl (hash: UhZ98hWPgx16EjHWGixwigALO8XcQAvIIbN9VuFccCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e4:37:fa:a0:fa:b4:3d:77:34:96:16:e9:02:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Validity
Not Before: Nov 11 05:00:59 2025 GMT
Not After : Nov 12 05:00:59 2025 GMT
Subject: CN=c076b63bd890444fdb1a31d8430405d02b2a38a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:27:ea:26:ee:50:21:66:bc:5f:0b:a0:2f:
4b:44:7f:bb:4e:60:9f:36:2d:1f:ad:59:97:ec:b8:
15:1c:3a:3b:bd:fb:40:48:4d:a6:58:6c:59:aa:92:
8a:b8:30:9a:8d:e7:f9:dd:ba:d7:c9:35:d3:15:42:
3f:e7:95:82:1e:71:24:f0:11:d5:eb:1f:93:50:b6:
b8:95:86:74:0f:a4:79:ab:e3:06:05:37:6f:76:12:
4e:ce:6c:a8:99:42:5f:fe:7b:ab:d9:02:11:47:7d:
29:cd:60:a2:1a:0d:eb:f6:2e:54:74:fe:a2:0e:25:
b3:d2:db:a1:8f:31:e9:6c:6d:1a:ec:85:50:4a:31:
dc:df:53:c3:30:46:44:99:9c:7a:00:98:b2:98:bf:
b9:ac:50:16:36:d7:b3:35:c4:45:8b:8d:b4:67:c7:
d7:31:0d:85:52:42:6e:7b:c8:d4:c1:8c:bb:51:2e:
01:91:c9:14:e8:5f:fe:91:b8:ec:01:d1:03:c1:34:
b8:db:5d:8a:ff:b1:4e:3b:ce:f7:b0:f2:cd:62:17:
19:e1:28:26:77:1c:8f:dc:43:c3:1c:bc:80:63:47:
0e:3c:06:8e:35:f8:77:be:fb:82:07:e8:dd:1d:d9:
ba:69:b4:6b:31:d9:01:04:7d:1e:6f:d7:69:23:e5:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:76:B6:3B:D8:90:44:4F:DB:1A:31:D8:43:04:05:D0:2B:2A:38:A2
X509v3 Authority Key Identifier:
keyid:1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4e:f1:d0:a2:17:0d:39:8c:dd:5e:c3:cb:b2:7a:6c:b3:e6:
21:0a:e1:39:21:f3:c6:76:e6:47:c2:47:31:50:7f:5b:a7:d4:
9b:a7:79:f6:a4:0a:fe:7a:2e:43:7b:e1:08:78:d7:37:50:73:
82:58:ad:90:8a:d0:93:12:d3:61:5c:8e:21:3f:90:cc:b5:5e:
d4:41:13:3d:e9:4a:80:5f:bc:db:6b:0a:81:c4:e5:43:f4:61:
13:9e:ae:a2:29:93:ae:84:38:4a:a0:f9:fc:87:c2:2e:50:d2:
9a:e9:e5:ec:47:bd:35:58:b8:3c:18:53:fd:6b:77:cd:79:0e:
cb:68:c1:2f:28:56:23:c7:f9:8a:e7:d2:dc:2e:c6:5e:1c:36:
d8:a3:bd:e8:4e:c1:29:06:f0:f3:c4:97:7e:c1:46:5c:3d:a3:
79:01:0c:fc:77:19:d0:12:b8:c2:83:16:9e:79:76:57:be:62:
f5:8d:1f:5f:d0:fa:32:f5:73:d5:2a:86:ee:d4:3c:41:cd:aa:
a8:4d:4a:e8:8f:a4:14:3d:65:8b:83:98:ae:d2:20:15:e3:4e:
ab:1a:cc:68:c9:13:18:5e:4c:c4:bc:bc:13:30:7c:84:04:f7:
63:e9:3a:59:3d:c4:fd:f3:e1:18:c9:5b:8a:03:f6:ad:48:03:
c0:71:02:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:25 2025 by rpki-client