Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
File: HCz1cnHCuPBLqn5jqbgQPVID1_g.mft (raw, json)
Hash identifier: QjOwMqcKljss6JcTRzd3c3PDnpa3HB6iuih4WvVnYcE=
Subject key identifier: 02:D2:C9:32:E1:FF:FE:69:0C:22:C5:60:0A:85:8E:12:08:CC:EF:B8
Authority key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
Certificate issuer: /CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Certificate serial: 0199FC21AFA8A6A02F3D4F3179CBA6B27B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
Manifest number: 0F3D
Signing time: Sun 19 Oct 2025 11:01:30 +0000
Manifest this update: Sun 19 Oct 2025 11:01:30 +0000
Manifest next update: Mon 20 Oct 2025 11:01:30 +0000
Files and hashes: 1: HCz1cnHCuPBLqn5jqbgQPVID1_g.crl (hash: 9thY1V3zjEIhsP1kwYfX7HmJR9kS1T78YqjzWZYljp0=)
2: vH3uZ08iyiY8zb-A3dRrracn6LQ.roa (hash: zmUAFJf99C5ECEtVBxVkr25oo8bxiW5B47UWFtDZGZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:af:a8:a6:a0:2f:3d:4f:31:79:cb:a6:b2:7b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Validity
Not Before: Oct 19 11:01:30 2025 GMT
Not After : Oct 20 11:01:30 2025 GMT
Subject: CN=02d2c932e1fffe690c22c5600a858e1208ccefb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:8f:17:cf:ad:c8:70:e0:4d:99:ca:12:05:
2e:9c:0c:68:72:02:ba:b2:10:4a:c0:3f:b0:54:26:
97:df:0c:99:40:28:a3:e8:f7:f4:bb:99:d7:5c:ca:
00:c2:02:ee:89:7f:2b:ca:d9:be:c7:12:ec:4a:e6:
6f:2f:d4:97:ef:4b:5c:30:e6:f1:8f:ae:d8:14:d2:
10:b7:af:cc:0a:c9:43:ee:49:cb:42:dd:86:cd:23:
53:c3:2a:a5:7b:58:74:cd:83:f9:2f:a8:30:25:b4:
b7:6c:7d:13:19:57:95:25:cb:e2:e2:92:1d:7a:4d:
b2:0f:3d:4d:2a:cc:9e:81:43:98:cf:f9:08:fb:53:
8d:c5:56:ba:71:1a:fd:07:ed:fc:21:f2:62:38:85:
b3:21:da:35:54:58:06:c8:e5:ed:a0:d6:10:de:6c:
42:24:43:5a:7d:80:5c:94:e7:ab:56:d3:16:10:f7:
a9:e6:b6:fe:94:b3:3a:3c:9a:e1:16:34:2d:9c:7f:
87:2d:a0:fa:23:58:d3:ba:72:b6:d7:1b:d8:32:f2:
11:b9:a6:c3:01:a9:b1:16:e4:bf:6b:ba:55:d3:13:
ab:3d:5d:72:ea:2a:a6:2e:4d:67:09:88:e2:f4:40:
90:f5:cd:83:1a:a7:6f:df:8f:27:6d:bd:f5:1a:e6:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D2:C9:32:E1:FF:FE:69:0C:22:C5:60:0A:85:8E:12:08:CC:EF:B8
X509v3 Authority Key Identifier:
keyid:1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:50:a0:a8:fc:dd:82:55:66:9e:b6:1e:ba:c3:10:c1:d1:df:
e0:97:11:b3:28:ae:c1:6a:04:60:26:d4:d5:9d:a4:1a:75:d0:
3a:89:fc:96:d4:cb:41:8a:7a:79:7b:0c:4b:02:78:ce:e9:72:
38:be:8c:3a:36:0c:09:c8:dd:4d:cc:9d:c6:f2:4c:eb:c3:78:
ab:46:c2:5e:42:09:94:32:ed:51:be:c0:ad:75:af:69:05:0d:
5d:3b:cb:fc:16:30:6a:db:12:9b:74:b9:9a:1d:06:8b:2f:00:
f4:6d:84:2a:3a:9b:da:36:29:62:fd:1c:9d:ff:33:b4:99:49:
d7:3e:46:e3:e3:68:6c:76:29:5e:6a:f8:3c:d3:fe:5c:46:8b:
12:d3:de:07:23:82:a8:3b:aa:ac:a5:42:2f:2b:05:01:0b:71:
47:17:0f:b8:22:69:68:a8:9a:4b:43:95:17:56:d5:70:d9:f3:
fd:3c:96:be:5e:a6:38:df:e8:d3:a6:4c:22:5b:1e:3b:bd:d0:
e7:55:ad:58:1b:ed:8f:ba:02:92:b5:fd:5f:ca:29:77:c2:97:
cd:48:7a:83:c8:b4:1b:9f:c3:cc:e5:8a:e6:50:f8:13:2c:a8:
4b:93:78:6f:a8:3e:ce:58:eb:72:ce:12:0a:99:98:96:0c:36:
be:4c:84:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:16 2025 by rpki-client