Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: J89i1bX5SIzaBsHS6yllJZQc4SAE9soZYAaH+c5T+1g=
Subject key identifier: 5C:22:86:58:1B:A0:EC:F7:62:8B:2C:74:EE:4F:08:D7:2C:C2:35:98
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 019A03353A42CD1EF957EF15150C64EC51A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 0656
Signing time: Mon 20 Oct 2025 20:00:11 +0000
Manifest this update: Mon 20 Oct 2025 20:00:11 +0000
Manifest next update: Tue 21 Oct 2025 20:00:11 +0000
Files and hashes: 1: CpQOplnmKu5LLulHc8JnvbebR4w.roa (hash: 5reIQFf+aPQY/29qAhB9EgFnG+Par8TwmIu2wMdsT6g=)
2: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: U8s277yPVRtlm26t1dhdK/i+7EfTlqMd57BTgQMwRKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:35:3a:42:cd:1e:f9:57:ef:15:15:0c:64:ec:51:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Oct 20 20:00:11 2025 GMT
Not After : Oct 21 20:00:11 2025 GMT
Subject: CN=5c2286581ba0ecf7628b2c74ee4f08d72cc23598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:c1:28:96:e6:70:7a:60:9a:f3:39:19:a2:
1a:2b:19:2b:05:25:3e:4a:62:0b:56:1b:73:fe:1c:
ab:af:b0:a3:14:9a:87:23:9d:46:c6:d5:cd:dc:58:
df:41:f2:9d:69:72:37:ff:aa:ef:fe:cb:ab:3c:03:
aa:c1:4a:1a:b2:8d:a6:0e:e4:41:cb:a7:82:41:f4:
c1:01:e1:dd:db:af:fd:fc:02:ac:f3:6a:6e:ed:f9:
e4:d2:49:d0:8c:dc:a4:16:b9:13:d1:69:c5:02:24:
1c:99:b4:28:6d:f8:99:6f:83:2d:17:e8:44:6b:51:
32:c4:80:50:25:c2:50:f3:52:79:f8:0b:45:f0:60:
d9:bb:da:7c:e8:f8:6f:d7:da:41:e4:1b:3e:0e:59:
fb:d4:b0:ac:07:43:96:37:74:fb:f5:a0:19:c0:ec:
34:04:82:5d:2a:84:c7:0d:29:b9:d4:20:52:a8:bf:
07:df:e6:0b:ab:73:72:ef:4b:87:e3:40:85:59:58:
b6:c9:0a:b4:36:6f:13:80:12:2e:0f:b1:7d:40:90:
51:02:aa:78:7c:89:88:e9:99:40:77:d2:06:9c:e4:
d6:eb:90:16:42:bb:ea:b6:01:bd:bc:5a:1c:49:9f:
e7:15:9b:11:df:3c:d2:8a:c8:12:ca:05:45:e4:e0:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:22:86:58:1B:A0:EC:F7:62:8B:2C:74:EE:4F:08:D7:2C:C2:35:98
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:45:c4:ec:9f:79:da:1f:47:ae:7f:18:97:9d:32:25:9d:75:
e2:b1:05:7f:9b:1a:5b:8f:09:7b:21:27:5b:5a:98:94:c6:33:
7d:40:9d:8c:9a:19:88:d3:c8:e4:6b:11:bb:6c:8a:61:a8:a6:
04:b5:3b:81:c3:ac:10:cd:eb:55:77:e0:bc:01:b3:a7:41:7c:
8a:25:2b:be:53:5a:28:69:3a:59:0d:68:74:fb:59:0d:12:7c:
73:df:06:26:73:4f:b2:d7:da:11:40:ba:56:02:36:6f:1b:b7:
f6:1e:5c:41:c0:89:78:8f:c1:a3:fa:b3:cd:fe:06:6c:5d:f6:
54:c2:49:72:22:eb:7b:88:f9:ae:f8:d6:e9:d4:7b:1c:76:c2:
6d:bc:d3:af:a3:27:bf:99:08:ae:56:79:ea:3b:ae:a1:5c:06:
9f:1d:5e:81:11:c8:5b:c3:2f:ad:7b:b5:9b:cb:b5:01:82:38:
8f:eb:9d:ef:1a:87:ae:bd:b2:65:bc:10:14:6d:c4:63:64:d9:
d5:12:7a:04:ad:d6:46:92:bc:c0:29:30:84:3f:71:ed:27:c5:
55:93:69:0e:32:76:21:3f:fe:44:c2:3f:54:88:14:e6:2e:07:
55:1e:81:06:f4:99:f5:2f:47:13:44:bf:35:4e:6a:91:82:c5:
98:32:ec:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoDNTpCzR75V+8VFQxk7FGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjcxNmVmMDlmYWU0OTBjYzdjZGJkMzYwOTRkYjVmM2Qw
YTFjNzIwHhcNMjUxMDIwMjAwMDExWhcNMjUxMDIxMjAwMDExWjAzMTEwLwYDVQQD
Eyg1YzIyODY1ODFiYTBlY2Y3NjI4YjJjNzRlZTRmMDhkNzJjYzIzNTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEPBKJbmcHpgmvM5GaIaKxkrBSU+
SmILVhtz/hyrr7CjFJqHI51GxtXN3FjfQfKdaXI3/6rv/surPAOqwUoaso2mDuRB
y6eCQfTBAeHd26/9/AKs82pu7fnk0knQjNykFrkT0WnFAiQcmbQobfiZb4MtF+hE
a1EyxIBQJcJQ81J5+AtF8GDZu9p86Phv19pB5Bs+Dln71LCsB0OWN3T79aAZwOw0
BIJdKoTHDSm51CBSqL8H3+YLq3Ny70uH40CFWVi2yQq0Nm8TgBIuD7F9QJBRAqp4
fImI6ZlAd9IGnOTW65AWQrvqtgG9vFocSZ/nFZsR3zzSisgSygVF5OAhZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwihlgboOz3YossdO5PCNcswjWYMB8GA1UdIwQY
MBaAFBwnFu8J+uSQzHzb02CU2189ChxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENjVzd3bjY1SkRNZk52VFlKVGJYejBLSEhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82YTdlYTItYWJmZC00NGQyLWE3YWUt
MTRkMWFjMzRhNWYyLzEvSENjVzd3bjY1SkRNZk52VFlKVGJYejBLSEhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82YTdlYTItYWJmZC00NGQyLWE3YWUtMTRkMWFjMzRhNWYy
LzEvSENjVzd3bjY1SkRNZk52VFlKVGJYejBLSEhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUXE7J95
2h9Hrn8Yl50yJZ114rEFf5saW48JeyEnW1qYlMYzfUCdjJoZiNPI5GsRu2yKYaim
BLU7gcOsEM3rVXfgvAGzp0F8iiUrvlNaKGk6WQ1odPtZDRJ8c98GJnNPstfaEUC6
VgI2bxu39h5cQcCJeI/Bo/qzzf4GbF32VMJJciLre4j5rvjW6dR7HHbCbbzTr6Mn
v5kIrlZ56juuoVwGnx1egRHIW8MvrXu1m8u1AYI4j+ud7xqHrr2yZbwQFG3EY2TZ
1RJ6BK3WRpK8wCkwhD9x7SfFVZNpDjJ2IT/+RMI/VIgU5i4HVR6BBvSZ9S9HE0S/
NU5qkYLFmDLsGw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:42:17 2025 by rpki-client