Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
File: hc-RCpREnqI6rGxAmgWEm-2l4ko.mft (raw, json)
Hash identifier: nDJYXMjcMf4yGWcA1u6weOBhtDGG/9wro09Nhszj3a8=
Subject key identifier: 24:44:5E:7C:E3:96:5A:D7:BB:79:25:20:9C:99:7D:97:7C:56:02:2B
Authority key identifier: 85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
Certificate issuer: /CN=85cf910a94449ea23aac6c409a05849beda5e24a
Certificate serial: 0199FDD9E89E70EEF6631048B9D8E2B97E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:02:20 +0000
Manifest this update: Sun 19 Oct 2025 19:02:20 +0000
Manifest next update: Mon 20 Oct 2025 19:02:20 +0000
Files and hashes: 1: hc-RCpREnqI6rGxAmgWEm-2l4ko.crl (hash: G8ltKJwcNUxjBkToPdeM3U56bR1rHylU4f+izwPutWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:e8:9e:70:ee:f6:63:10:48:b9:d8:e2:b9:7e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85cf910a94449ea23aac6c409a05849beda5e24a
Validity
Not Before: Oct 19 19:02:20 2025 GMT
Not After : Oct 20 19:02:20 2025 GMT
Subject: CN=24445e7ce3965ad7bb7925209c997d977c56022b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f2:33:37:55:9a:49:25:8d:29:83:96:68:39:
d0:ac:e5:9c:6f:f1:29:7b:3b:9c:ef:25:a8:91:5a:
b4:c0:aa:9a:21:e6:b9:d5:88:66:46:71:44:e6:67:
57:c6:e1:0f:a2:71:c1:30:0c:e8:c7:2f:cb:1e:28:
64:dc:fe:0d:54:7e:3d:5f:0c:e1:f9:4e:dd:70:92:
68:1f:42:21:2b:4f:09:2b:5e:de:30:a7:c0:6c:43:
2a:c3:b5:27:ac:3a:08:3a:ad:57:d6:41:b2:b6:74:
5d:bb:75:5a:c5:c5:18:17:16:fe:94:73:86:3a:2b:
0e:d7:6b:fe:4c:3a:97:6c:bd:ec:1e:8f:c2:99:76:
93:b6:d6:50:da:b3:fb:fc:81:91:36:5b:6a:f9:0e:
df:2a:22:f5:e9:65:80:7a:7e:18:c3:09:df:53:c4:
63:33:af:9b:90:e5:31:63:51:f6:91:9d:45:e4:5f:
ff:75:81:bf:8b:0c:67:60:7e:b2:6b:10:e5:ed:27:
b9:cc:87:fc:bf:bc:b4:e4:85:af:07:34:93:ed:4d:
0f:f7:19:49:2c:94:7f:ed:04:c9:c6:7b:79:4b:dd:
9f:b0:76:24:95:9a:bb:d6:70:6b:8b:25:e5:15:7e:
78:ee:0d:07:8b:57:ff:e9:dd:b1:4c:dc:d8:2d:55:
a6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:44:5E:7C:E3:96:5A:D7:BB:79:25:20:9C:99:7D:97:7C:56:02:2B
X509v3 Authority Key Identifier:
keyid:85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d7:75:0c:c3:3b:48:9a:29:12:4c:22:95:8b:ce:12:84:16:
b0:ce:1b:a0:1d:ef:51:d5:f9:f4:93:56:0c:3c:d5:ad:c8:7a:
d0:a4:0f:78:10:1c:58:db:2e:36:e4:ac:79:c9:97:89:42:ba:
e2:89:9d:d6:a2:6f:d7:a4:f7:20:56:c4:ce:1a:fd:0e:f8:40:
e5:3a:dc:21:70:c6:75:d2:7c:ff:cd:e7:ad:3c:bf:6f:ab:d8:
b8:b1:a0:d6:bb:49:41:d5:5d:b0:e3:96:bb:c4:39:b1:48:28:
62:00:e5:72:8b:c8:c9:0d:f1:b9:13:69:bd:33:7f:38:32:54:
11:2c:7e:63:a6:dc:8b:ab:88:b3:c2:4b:92:7d:39:ad:d3:2e:
99:00:5b:c1:62:28:20:b6:4e:f8:29:16:45:13:37:f1:44:0e:
d5:97:7d:67:16:b9:e3:8c:89:cd:ff:2b:da:b0:a9:08:fe:8c:
28:6c:fe:e7:ff:74:64:8a:17:36:ab:5b:66:ab:47:d4:8c:52:
dd:c1:8d:f0:6b:3e:c3:fd:b1:40:ed:b5:f4:64:8f:d1:48:d7:
11:66:f3:7b:1c:06:dc:56:26:b2:27:eb:5f:1c:e9:f7:7d:9e:
9b:f0:91:dc:c9:75:77:0e:9f:e6:2f:6f:b3:c9:1b:f4:ae:3f:
fb:30:c5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:18 2025 by rpki-client