Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
File: HCM-7mJMGSxsfa2hQy3gueeLCbo.mft (raw, json)
Hash identifier: dOWLvoh55zFHke5S0qfMCe+FV9kdRthBI9HyVhVhx3U=
Subject key identifier: 29:FF:08:F1:9F:C0:84:72:0A:DC:7A:89:57:68:13:2A:08:46:60:AB
Authority key identifier: 1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
Certificate issuer: /CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Certificate serial: 019A70A58262D9FD2553761D278BD44EDE5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 02:01:26 +0000
Manifest this update: Tue 11 Nov 2025 02:01:26 +0000
Manifest next update: Wed 12 Nov 2025 02:01:26 +0000
Files and hashes: 1: HCM-7mJMGSxsfa2hQy3gueeLCbo.crl (hash: KSW4n/YbqiVh9vaxLTLYxjLVzZOehzGXPsi7kjNXYhA=)
2: K45e82x9WOXI8E3rbiZhpm6Y1c8.roa (hash: b1lnr/cxWdJYHM4gx0SMdfk+T7jlT+eQyoUM+qzNzCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:82:62:d9:fd:25:53:76:1d:27:8b:d4:4e:de:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Validity
Not Before: Nov 11 02:01:26 2025 GMT
Not After : Nov 12 02:01:26 2025 GMT
Subject: CN=29ff08f19fc084720adc7a895768132a084660ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:40:0d:4b:37:58:48:36:53:ea:84:97:63:
90:d8:aa:df:86:4d:26:dc:e1:94:ab:95:b1:ea:32:
9b:6e:b2:e4:73:7f:29:37:42:57:7f:b8:9f:e6:1a:
bb:e2:b1:ae:5b:8f:d3:35:7d:01:b7:80:17:cc:82:
86:92:93:05:a6:7a:16:6b:71:83:f2:9e:5b:20:16:
c7:c5:e3:f9:34:a6:5a:04:c9:1a:53:bf:64:0d:07:
52:cb:d7:92:90:86:49:b6:b2:f9:ec:4f:70:ad:dc:
5a:83:74:87:0b:ba:4d:6d:8e:ed:1b:4f:68:b4:2f:
50:1e:23:92:24:49:d3:e0:cb:96:4c:e2:36:b8:be:
fc:e0:6f:d1:c1:e6:21:30:f8:f0:d3:88:1c:a5:53:
f7:b4:93:28:a8:06:e6:30:19:54:ee:17:c3:7e:f6:
40:2a:c6:10:b5:f3:5c:ec:5c:6a:1a:52:36:8e:6a:
68:4e:0d:99:f0:9a:dc:98:c7:5f:aa:04:bb:41:79:
8f:49:a0:df:50:c3:5c:70:0b:c8:b1:c3:7a:aa:21:
94:07:0b:60:a4:0f:34:a6:46:ed:74:62:2a:15:f0:
73:6e:26:e2:9e:a7:e6:1b:06:ff:16:04:9b:5e:2f:
b7:63:0a:38:07:52:1e:66:01:a5:89:6a:8a:a8:e2:
e8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FF:08:F1:9F:C0:84:72:0A:DC:7A:89:57:68:13:2A:08:46:60:AB
X509v3 Authority Key Identifier:
keyid:1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:24:ad:06:eb:80:19:6b:85:fd:cc:c3:e3:92:c0:b3:f5:b9:
d5:29:cd:6d:9c:61:09:40:88:53:12:30:cd:00:1f:39:b9:67:
77:7b:78:a9:c2:03:90:d8:9c:86:1a:92:b2:2a:1d:35:c7:40:
1e:8e:04:bd:dc:94:f6:6b:fc:88:57:13:00:25:74:a8:a3:1f:
00:e3:0b:bf:91:50:3e:ed:5e:d5:78:56:59:5f:9c:45:64:80:
87:2b:a8:a1:01:ef:86:49:be:e5:22:58:7c:cb:a3:3e:46:84:
ca:2e:17:95:7d:47:de:64:83:9f:94:91:21:71:ca:1c:d7:58:
84:f9:68:dc:a8:d4:df:b6:34:d7:1c:49:b8:c0:e0:30:62:fb:
a1:e9:ad:89:20:7f:6f:eb:4b:91:c4:3a:d6:a7:d5:8f:94:91:
31:af:0a:e9:22:da:9e:26:bd:f4:22:b5:f9:a9:1d:c9:b0:21:
33:05:ea:9b:8e:66:02:bd:f0:66:fd:a9:8a:e1:89:0b:ca:91:
b0:f9:49:a2:85:33:75:ec:fe:52:9e:57:74:d5:22:0d:79:e7:
a5:9f:fd:40:e2:43:10:be:95:1e:8e:fc:86:db:1a:f2:b6:d9:
c8:e5:1c:a2:b9:cf:4d:91:55:9d:fc:92:fd:c7:8c:b8:b4:eb:
ff:76:05:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpYJi2f0lU3YdJ4vUTt5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjMzZWVlNjI0YzE5MmM2YzdkYWRhMTQzMmRlMGI5ZTc4
YjA5YmEwHhcNMjUxMTExMDIwMTI2WhcNMjUxMTEyMDIwMTI2WjAzMTEwLwYDVQQD
EygyOWZmMDhmMTlmYzA4NDcyMGFkYzdhODk1NzY4MTMyYTA4NDY2MGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9lADUs3WEg2U+qEl2OQ2Krfhk0m
3OGUq5Wx6jKbbrLkc38pN0JXf7if5hq74rGuW4/TNX0Bt4AXzIKGkpMFpnoWa3GD
8p5bIBbHxeP5NKZaBMkaU79kDQdSy9eSkIZJtrL57E9wrdxag3SHC7pNbY7tG09o
tC9QHiOSJEnT4MuWTOI2uL784G/RweYhMPjw04gcpVP3tJMoqAbmMBlU7hfDfvZA
KsYQtfNc7FxqGlI2jmpoTg2Z8JrcmMdfqgS7QXmPSaDfUMNccAvIscN6qiGUBwtg
pA80pkbtdGIqFfBzbibinqfmGwb/FgSbXi+3Ywo4B1IeZgGliWqKqOLo7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCn/CPGfwIRyCtx6iVdoEyoIRmCrMB8GA1UdIwQY
MBaAFBwjPu5iTBksbH2toUMt4Lnniwm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jNWJlZjctMjViMy00NDYzLWIzYmYt
NTdhOTUxZjQ5OTMwLzEvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jNWJlZjctMjViMy00NDYzLWIzYmYtNTdhOTUxZjQ5OTMw
LzEvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyStBuuA
GWuF/czD45LAs/W51SnNbZxhCUCIUxIwzQAfOblnd3t4qcIDkNichhqSsiodNcdA
Ho4EvdyU9mv8iFcTACV0qKMfAOMLv5FQPu1e1XhWWV+cRWSAhyuooQHvhkm+5SJY
fMujPkaEyi4XlX1H3mSDn5SRIXHKHNdYhPlo3KjU37Y01xxJuMDgMGL7oemtiSB/
b+tLkcQ61qfVj5SRMa8K6SLania99CK1+akdybAhMwXqm45mAr3wZv2piuGJC8qR
sPlJooUzdez+Up5XdNUiDXnnpZ/9QOJDEL6VHo78htsa8rbZyOUcornPTZFVnfyS
/ceMuLTr/3YF1g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:50 2025 by rpki-client