Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
File: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft (raw, json)
Hash identifier: 48LcTvdDJJwWjSmqncDDaHAfSKP3U2vBvKXL5VDpRig=
Subject key identifier: 73:6E:7F:49:7C:6C:26:A2:BC:C6:27:FB:1C:20:29:A8:3C:30:FA:F5
Authority key identifier: 1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
Certificate issuer: /CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Certificate serial: 0199FBEAE6693F44AEC05E99B9B7E3B3A098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
Manifest number: 0A19
Signing time: Sun 19 Oct 2025 10:01:39 +0000
Manifest this update: Sun 19 Oct 2025 10:01:39 +0000
Manifest next update: Mon 20 Oct 2025 10:01:39 +0000
Files and hashes: 1: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl (hash: rh32J1zoFAf4zOdzANwO/ICrX3ZpidPj17kPSd1QoJo=)
2: f0JNWqb0_sxkiR-fghzvzpbVYUw.roa (hash: RhuCzYejuWMbfNGSM6on7Cw2OZveLgiaD9vSRL8ll5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e6:69:3f:44:ae:c0:5e:99:b9:b7:e3:b3:a0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Validity
Not Before: Oct 19 10:01:39 2025 GMT
Not After : Oct 20 10:01:39 2025 GMT
Subject: CN=736e7f497c6c26a2bcc627fb1c2029a83c30faf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:8a:62:27:63:fa:b1:0e:73:14:b2:e6:78:
db:6a:66:31:5f:15:0f:7b:bb:4e:b9:b0:77:2e:07:
0b:8c:ee:6b:7b:32:48:69:f1:27:40:76:56:8e:10:
bb:c7:3f:16:a1:b7:6e:cb:dc:39:1b:0f:33:46:bb:
9a:4e:07:b0:de:f7:18:d9:72:d1:b0:82:23:d2:f4:
96:aa:56:62:9e:34:3e:bd:45:eb:7d:ad:7b:c1:55:
39:db:34:03:3e:42:92:e8:89:e6:5e:87:d1:32:fe:
9d:c6:a4:c9:9f:51:b5:dd:77:fe:aa:d4:25:a3:50:
ff:e9:b6:55:27:54:d0:e4:a3:af:a9:c6:66:66:fa:
52:f4:13:5a:dc:17:e0:45:b2:58:e6:15:68:df:df:
39:b3:f8:8f:9a:f2:f9:51:15:90:49:e2:5f:7e:24:
71:8c:86:ca:09:e7:d8:e0:81:34:26:89:88:76:5e:
04:16:54:f8:c0:cf:93:ba:07:1d:72:94:84:83:bc:
47:00:04:f3:6a:94:88:27:47:8a:69:0e:ff:13:72:
fb:75:47:3f:66:0e:86:dc:de:88:28:74:b5:83:32:
3a:d6:12:6d:ed:42:67:b0:ac:91:49:49:ad:67:20:
ba:9d:75:57:92:90:bd:5b:63:c1:f7:73:c7:da:f8:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6E:7F:49:7C:6C:26:A2:BC:C6:27:FB:1C:20:29:A8:3C:30:FA:F5
X509v3 Authority Key Identifier:
keyid:1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6c:89:c1:b2:a4:9a:16:84:32:97:92:e6:ba:82:3f:2b:af:
84:dd:95:fb:90:70:00:71:ce:1c:57:2a:f2:fe:49:f0:28:81:
2e:a5:db:4d:fd:02:2b:1f:a0:66:dc:3b:e7:71:59:bf:ab:33:
90:d5:43:49:d3:0e:c5:76:6a:92:ac:ce:70:3b:46:e9:99:6a:
d2:3f:7b:17:7b:f3:09:7e:2d:b9:72:e6:42:52:76:c9:69:6b:
8d:e6:8f:3c:dd:1b:90:0f:06:f8:d9:02:b4:bd:ed:c2:b1:43:
94:3d:9f:b4:d4:93:ab:77:a3:fd:d2:c6:13:97:e8:83:bd:65:
8d:ae:39:a1:b8:38:18:0b:74:5f:24:81:80:0a:38:dc:1c:d6:
06:d2:fa:15:7f:42:77:3b:ad:40:09:25:c7:63:18:7a:67:ca:
81:f1:f1:e6:ce:6a:d9:ad:7e:38:df:b4:b3:fe:c6:46:89:88:
3b:44:fb:c2:82:c1:dc:a7:8b:88:c7:e6:2a:ef:9f:7c:62:be:
79:67:bf:2c:5c:b7:c6:e7:8b:fa:b3:6e:72:ce:59:be:96:f6:
b0:0a:74:d9:61:cc:af:03:e6:67:31:5a:ad:32:57:0d:4b:a3:
9e:fc:0c:1f:36:20:42:0d:67:dc:7f:7a:e8:cc:7d:d8:2d:52:
91:a1:38:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:43 2025 by rpki-client