Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
File: HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json)
Hash identifier: M7BbQAaJP8Nq89VbLfFL/vOyTrk6RCRq8ySUW4qMXZc=
Subject key identifier: 3A:AA:8D:E7:E9:DE:DE:E3:FA:7A:92:78:75:A8:4D:D2:8A:E2:A2:91
Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Certificate serial: 0199FCFD573D5ED0FF1515ED319E06EA5B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
Manifest number: 0A26
Signing time: Sun 19 Oct 2025 15:01:25 +0000
Manifest this update: Sun 19 Oct 2025 15:01:25 +0000
Manifest next update: Mon 20 Oct 2025 15:01:25 +0000
Files and hashes: 1: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: GeSI4vZK6qZn56geAfd89zhx49HJ6mzRO6fMC2m6pI8=)
2: lyeOPA3Hi3kUGDVfoF3VE8weizo.roa (hash: SK0Hu8MdGQh3m28Nprb3+ZaMXzQS8vnNx8UerT7YIyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:57:3d:5e:d0:ff:15:15:ed:31:9e:06:ea:5b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Validity
Not Before: Oct 19 15:01:25 2025 GMT
Not After : Oct 20 15:01:25 2025 GMT
Subject: CN=3aaa8de7e9dedee3fa7a927875a84dd28ae2a291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:09:63:1e:18:30:8b:32:0c:ac:22:5c:73:64:
ca:b4:7f:53:b2:b2:21:d2:14:89:2e:f4:0e:4a:71:
95:fd:cf:e8:40:ee:34:c7:24:88:9f:c4:05:f4:54:
cb:6c:e7:d8:37:ac:99:8a:76:29:2e:a7:a2:db:56:
67:f3:65:26:a1:37:1d:3d:62:19:0f:56:61:df:13:
c3:4d:93:10:78:46:0e:fd:7d:eb:78:2b:be:d5:34:
f4:92:0c:a9:c1:e6:44:dd:54:a4:ce:15:c1:10:df:
2f:6c:2e:90:3c:2d:1a:3d:ff:03:fb:85:52:82:ba:
f2:d2:f3:f3:66:aa:0a:1c:34:bb:21:36:42:52:e0:
72:c9:a4:2d:19:e6:1f:7c:fe:b3:d6:d6:0e:31:a1:
d2:c7:5c:78:97:7b:da:7a:72:0b:15:a8:0c:4e:c9:
b8:83:21:42:6c:f8:63:b4:0e:1a:72:50:75:43:90:
63:ce:6d:a1:55:68:aa:94:ce:6e:67:af:35:74:dd:
7c:e9:52:ed:13:f3:8f:7f:58:f2:17:5f:01:0f:f8:
14:2d:0f:3d:50:27:9f:49:93:9b:09:b8:d2:9a:bc:
e1:39:5b:5f:e2:99:be:cd:fb:e0:90:d5:d0:05:d4:
70:ed:c2:83:ca:6c:e6:37:b7:73:e0:3f:a5:aa:79:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AA:8D:E7:E9:DE:DE:E3:FA:7A:92:78:75:A8:4D:D2:8A:E2:A2:91
X509v3 Authority Key Identifier:
keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ae:d1:05:da:de:3d:8a:44:52:d2:68:bb:cb:94:75:26:2d:
5b:b4:08:76:57:ac:ee:29:1e:f7:0c:ea:60:d3:da:5d:55:a6:
2d:b2:91:7f:12:27:ab:62:66:9b:97:e7:04:8d:25:7a:4f:b7:
30:04:dc:5a:ff:a9:25:15:19:1d:9e:c7:0c:01:ac:27:ed:1c:
d3:e8:57:62:ad:ae:bb:12:43:2c:c8:88:89:fe:b2:1d:dd:4f:
a1:64:1c:54:f9:cb:15:db:61:13:33:d8:6f:b0:ce:9c:76:50:
b1:17:17:e9:0d:12:83:bc:04:30:5e:57:1e:f7:2c:a6:8d:55:
6b:b7:1d:79:ff:11:5f:52:19:ac:a3:76:a7:19:d2:14:52:e8:
23:6f:12:de:9a:bc:d8:40:40:f1:32:73:82:79:ab:d8:64:fd:
d2:c4:08:91:ac:1b:a0:01:31:dc:27:dd:14:2a:7d:75:1f:87:
af:7e:27:3b:e3:dd:af:81:e7:88:8c:f9:46:f4:98:49:f3:d0:
a5:15:45:ae:49:48:2f:77:cb:82:9a:72:b4:10:43:83:a3:3d:
36:70:9e:ec:c3:b5:a9:ce:31:bb:e2:e5:85:4c:0a:d6:21:8e:
58:b2:0b:13:ee:2b:44:54:d0:91:3b:0a:47:54:30:ec:d2:3f:
e4:cb:4d:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/Vc9XtD/FRXtMZ4G6lt7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjQyZjJlOTQ1YzZhNzJlZTI4ZjhjODBlODBkNDg4NDMz
ZTM3YTMwHhcNMjUxMDE5MTUwMTI1WhcNMjUxMDIwMTUwMTI1WjAzMTEwLwYDVQQD
EygzYWFhOGRlN2U5ZGVkZWUzZmE3YTkyNzg3NWE4NGRkMjhhZTJhMjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QljHhgwizIMrCJcc2TKtH9TsrIh
0hSJLvQOSnGV/c/oQO40xySIn8QF9FTLbOfYN6yZinYpLqei21Zn82UmoTcdPWIZ
D1Zh3xPDTZMQeEYO/X3reCu+1TT0kgypweZE3VSkzhXBEN8vbC6QPC0aPf8D+4VS
grry0vPzZqoKHDS7ITZCUuByyaQtGeYffP6z1tYOMaHSx1x4l3vaenILFagMTsm4
gyFCbPhjtA4aclB1Q5Bjzm2hVWiqlM5uZ681dN186VLtE/OPf1jyF18BD/gULQ89
UCefSZObCbjSmrzhOVtf4pm+zfvgkNXQBdRw7cKDymzmN7dz4D+lqnmiTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqqjefp3t7j+nqSeHWoTdKK4qKRMB8GA1UdIwQY
MBaAFBwkLy6UXGpy7ij4yA6A1IhDPjejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEt
Y2E3OGVmNTgyNmNhLzEvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEtY2E3OGVmNTgyNmNh
LzEvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXq7RBdre
PYpEUtJou8uUdSYtW7QIdles7ike9wzqYNPaXVWmLbKRfxInq2Jmm5fnBI0lek+3
MATcWv+pJRUZHZ7HDAGsJ+0c0+hXYq2uuxJDLMiIif6yHd1PoWQcVPnLFdthEzPY
b7DOnHZQsRcX6Q0Sg7wEMF5XHvcspo1Va7cdef8RX1IZrKN2pxnSFFLoI28S3pq8
2EBA8TJzgnmr2GT90sQIkawboAEx3CfdFCp9dR+Hr34nO+Pdr4HniIz5RvSYSfPQ
pRVFrklIL3fLgppytBBDg6M9NnCe7MO1qc4xu+LlhUwK1iGOWLILE+4rRFTQkTsK
R1Qw7NI/5MtN7w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:31 2025 by rpki-client