Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
File: HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft (raw, json)
Hash identifier: KixbWake8/hHiP6Q9YcNpUmbjGBeaZ1M6YwB5FJE5Xo=
Subject key identifier: 0C:44:0E:0A:0F:7C:83:B0:DA:8C:F9:EE:96:1A:56:87:48:A0:02:D4
Authority key identifier: 1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
Certificate issuer: /CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Certificate serial: 0199FDD8D42103CF20FB97334AE9B3070A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
Manifest number: 163D
Signing time: Sun 19 Oct 2025 19:01:09 +0000
Manifest this update: Sun 19 Oct 2025 19:01:09 +0000
Manifest next update: Mon 20 Oct 2025 19:01:09 +0000
Files and hashes: 1: HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl (hash: oqCvTaqXtbflpqFXSBz7zQpehH7P6x9meWYRnHNxuQc=)
2: bDOy4M4R57nj8_Sff5gfBKz-LP0.roa (hash: vm1SQ0etoIa7LbOonRtmj5Ah0LoPLSlL7NdxQSQ76i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d4:21:03:cf:20:fb:97:33:4a:e9:b3:07:0a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Validity
Not Before: Oct 19 19:01:09 2025 GMT
Not After : Oct 20 19:01:09 2025 GMT
Subject: CN=0c440e0a0f7c83b0da8cf9ee961a568748a002d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:77:d6:40:49:64:49:63:d4:19:4c:1f:63:f4:
31:93:ff:99:b0:0c:ae:9d:17:a5:6f:60:33:3b:d5:
d2:85:a3:8e:68:39:00:5a:1a:de:a1:68:d5:8a:61:
8a:63:86:f4:9b:0b:23:04:60:bc:94:99:46:81:18:
b6:de:3b:0d:11:6e:02:1d:49:36:f3:3d:dd:b9:9d:
30:7b:df:95:8a:99:b3:04:9c:9f:48:31:aa:7d:c2:
eb:ef:47:0f:46:4d:fc:de:3a:2e:95:66:71:2c:a8:
f0:b1:14:3f:e5:3f:db:b1:f5:28:74:63:bd:d8:e8:
15:cf:8d:f2:de:56:45:aa:24:f1:c6:0c:4d:ec:37:
36:b1:34:18:fd:21:dc:da:76:f0:8b:cf:05:19:46:
76:dd:1b:04:5a:62:a9:de:27:b4:40:ed:43:d7:38:
6b:66:1d:78:3c:69:a9:e0:d0:47:3f:df:2b:33:e1:
20:62:30:d9:39:d1:9b:b5:b9:eb:66:9e:f0:4f:39:
8c:21:16:54:dc:f5:9f:58:ce:03:4d:6b:84:a0:15:
0c:4c:2e:91:35:e4:79:1a:53:32:c0:3b:27:04:24:
11:25:31:fd:b3:8a:a0:e3:21:31:1d:01:8c:12:2e:
a7:f3:02:a2:52:a5:27:47:98:87:70:4e:64:a7:73:
b7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:44:0E:0A:0F:7C:83:B0:DA:8C:F9:EE:96:1A:56:87:48:A0:02:D4
X509v3 Authority Key Identifier:
keyid:1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9e:95:30:34:70:41:ae:75:93:11:2c:2d:36:91:fe:f8:86:
a5:e8:fb:4c:50:23:4a:a4:34:0c:bc:4f:72:eb:86:c2:5e:58:
34:d7:b3:c3:a8:5c:4c:16:42:68:f0:c0:7a:48:13:cc:e8:18:
f0:c8:00:34:84:91:26:53:f7:94:2c:3d:f3:05:2c:a0:6e:0a:
f5:46:70:d2:dd:40:09:3b:e2:fd:1f:f5:5e:f8:d3:45:fe:72:
1d:83:a6:31:d1:55:21:2f:3a:e7:ba:ff:4c:0b:48:44:01:ea:
f9:08:7e:76:ff:c7:f5:a5:d8:33:8f:20:2b:b4:84:19:e0:d9:
8f:81:e7:61:a0:e8:b5:4a:a0:1b:d2:cc:02:94:6d:a9:6f:14:
b1:a5:40:87:56:9c:cd:2d:1f:73:e5:b9:d2:65:ca:a0:0c:40:
df:f8:0e:b8:6e:af:64:e6:65:fa:c5:0c:b3:ac:25:22:7e:bd:
52:ce:e7:2e:9d:c1:22:fe:1b:e7:ef:1a:da:8b:8c:bf:62:b4:
94:30:db:49:e9:07:32:c7:9c:72:b2:d2:2c:5a:89:8c:8b:4d:
3f:3c:80:0c:a1:de:7f:fe:32:33:bf:64:f4:2f:65:b6:e8:dc:
d1:c5:9d:a7:80:93:bb:a3:49:39:76:62:79:ad:11:00:ed:1f:
1e:5c:73:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92NQhA88g+5czSumzBwoFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmFjMTI0NmEyZTBlYTk3YTBjMjI5NWI3M2RkYmUwMDZk
MGVkMmMwHhcNMjUxMDE5MTkwMTA5WhcNMjUxMDIwMTkwMTA5WjAzMTEwLwYDVQQD
EygwYzQ0MGUwYTBmN2M4M2IwZGE4Y2Y5ZWU5NjFhNTY4NzQ4YTAwMmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHfWQElkSWPUGUwfY/Qxk/+ZsAyu
nRelb2AzO9XShaOOaDkAWhreoWjVimGKY4b0mwsjBGC8lJlGgRi23jsNEW4CHUk2
8z3duZ0we9+VipmzBJyfSDGqfcLr70cPRk383joulWZxLKjwsRQ/5T/bsfUodGO9
2OgVz43y3lZFqiTxxgxN7Dc2sTQY/SHc2nbwi88FGUZ23RsEWmKp3ie0QO1D1zhr
Zh14PGmp4NBHP98rM+EgYjDZOdGbtbnrZp7wTzmMIRZU3PWfWM4DTWuEoBUMTC6R
NeR5GlMywDsnBCQRJTH9s4qg4yExHQGMEi6n8wKiUqUnR5iHcE5kp3O3sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxEDgoPfIOw2oz57pYaVodIoALUMB8GA1UdIwQY
MBaAFBwqwSRqLg6pegwilbc92+AG0O0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENyQkpHb3VEcWw2RENLVnR6M2I0QWJRN1N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wZGU3ZTEtYmY3Zi00MzRmLTk1OTEt
OGQ0NmUwOWRmOWYzLzEvSENyQkpHb3VEcWw2RENLVnR6M2I0QWJRN1N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wZGU3ZTEtYmY3Zi00MzRmLTk1OTEtOGQ0NmUwOWRmOWYz
LzEvSENyQkpHb3VEcWw2RENLVnR6M2I0QWJRN1N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQp6VMDRw
Qa51kxEsLTaR/viGpej7TFAjSqQ0DLxPcuuGwl5YNNezw6hcTBZCaPDAekgTzOgY
8MgANISRJlP3lCw98wUsoG4K9UZw0t1ACTvi/R/1XvjTRf5yHYOmMdFVIS8657r/
TAtIRAHq+Qh+dv/H9aXYM48gK7SEGeDZj4HnYaDotUqgG9LMApRtqW8UsaVAh1ac
zS0fc+W50mXKoAxA3/gOuG6vZOZl+sUMs6wlIn69Us7nLp3BIv4b5+8a2ouMv2K0
lDDbSekHMseccrLSLFqJjItNPzyADKHef/4yM79k9C9ltujc0cWdp4CTu6NJOXZi
ea0RAO0fHlxzrQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:38 2025 by rpki-client