Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier: zWIQOeXN13lf+ibGuzzYBiWyGLvkxQptCXf53KR1DwI=
Subject key identifier: 80:DE:63:7A:E2:35:5F:F4:3E:50:35:B5:56:34:20:CC:74:75:E4:F2
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial: 0199FB7CFF12910850C6D08C56714720DF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number: 0575
Signing time: Sun 19 Oct 2025 08:01:36 +0000
Manifest this update: Sun 19 Oct 2025 08:01:36 +0000
Manifest next update: Mon 20 Oct 2025 08:01:36 +0000
Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: 1DIMgmiV9MV4SwzkXFxqC0LOJZp3DOKJCYWOB2YtcQk=)
2: KnSUOMU4LVOd-681gUpAeZxW9tU.roa (hash: T8JMOCVoClcG2l35uDfqB6bKR7EcaF1TmNNZKykQwnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ff:12:91:08:50:c6:d0:8c:56:71:47:20:df:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Validity
Not Before: Oct 19 08:01:36 2025 GMT
Not After : Oct 20 08:01:36 2025 GMT
Subject: CN=80de637ae2355ff43e5035b5563420cc7475e4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:b9:f7:b8:d6:a3:0c:b8:34:07:31:64:59:
47:95:40:fe:40:75:ca:f5:77:6a:0b:75:8d:d1:27:
7f:8a:ec:c6:3d:b2:97:77:fe:1b:9e:23:b6:65:81:
27:2b:ef:c4:e3:6b:ef:66:e9:22:da:dc:df:72:44:
cb:a9:49:29:f1:75:19:96:08:26:8f:d8:10:75:c4:
bf:3c:f4:0c:7b:a8:7a:de:46:43:10:ca:a5:74:63:
53:f4:f3:d6:c0:a2:5b:20:05:4c:86:8c:9d:41:9f:
ff:d6:c5:c2:f7:cc:e6:aa:ea:f4:03:a0:51:64:ea:
05:90:d8:b6:3c:b3:ac:14:30:b3:2d:18:01:26:5a:
bb:e5:6c:1a:29:ab:4c:28:d3:69:bf:06:d1:11:59:
86:42:38:ff:9d:c4:60:a3:d3:3e:7c:19:99:3b:85:
4b:f0:a0:5f:da:15:63:d4:7e:4a:ec:23:d0:db:92:
16:08:2c:e5:27:f9:be:e9:85:71:90:aa:61:dd:97:
1c:b0:f1:9b:f7:46:62:77:9b:34:a8:72:e0:25:d8:
04:aa:c4:a0:1e:46:d7:32:96:59:7a:53:47:9a:60:
9b:95:3f:dc:49:1e:24:9c:12:b3:b0:3d:40:e6:cb:
0a:e7:0d:dd:8e:8d:f7:5b:f8:92:47:a9:87:89:d6:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DE:63:7A:E2:35:5F:F4:3E:50:35:B5:56:34:20:CC:74:75:E4:F2
X509v3 Authority Key Identifier:
keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:04:83:d1:c8:7b:af:c9:21:b5:a5:89:cd:2b:79:bf:22:47:
dd:21:94:ad:00:12:53:fd:6c:48:69:77:37:4d:b8:b1:4b:71:
f8:1b:dc:33:1e:f1:65:b5:0f:fe:84:f8:3f:e0:dd:08:30:51:
bf:c0:f8:29:37:d0:81:f8:a2:85:be:9c:a5:47:ef:d0:2b:f1:
23:8c:c6:ce:01:46:84:19:7c:d8:26:af:fb:62:17:9c:26:f1:
a7:fd:a7:c8:78:02:98:ae:f6:55:28:25:f7:20:4c:09:71:7a:
7d:6d:4e:ee:6c:34:5d:5c:9d:fe:5d:ce:83:0d:9f:1f:25:a5:
2f:30:ff:4c:62:fa:c4:c7:67:27:71:ea:60:33:fe:31:6d:14:
18:a9:9e:99:4a:2e:b4:2f:60:3f:68:4e:bc:f3:89:da:eb:3a:
ef:32:df:e7:ef:28:39:2e:cb:42:d2:9b:e2:b2:5e:cb:95:87:
7a:99:e6:18:e3:d8:7c:2a:af:e4:b7:47:06:66:fc:9e:4b:ab:
8a:0c:31:5b:2d:d7:ce:0a:3f:17:7d:73:3b:dc:4e:69:6e:b4:
cc:2c:25:10:23:ea:ca:21:2e:47:92:79:d2:7e:fb:a3:e6:6c:
40:06:9f:ef:b0:39:53:fc:5b:53:21:0f:83:7e:f3:ba:27:63:
df:c4:e5:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fP8SkQhQxtCMVnFHIN8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjY2FhYjBiMGRlZmM5M2MzMmY4MGM0NGIwODJmYjI5MDVm
MjNjNjIwHhcNMjUxMDE5MDgwMTM2WhcNMjUxMDIwMDgwMTM2WjAzMTEwLwYDVQQD
Eyg4MGRlNjM3YWUyMzU1ZmY0M2U1MDM1YjU1NjM0MjBjYzc0NzVlNGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYG597jWowy4NAcxZFlHlUD+QHXK
9XdqC3WN0Sd/iuzGPbKXd/4bniO2ZYEnK+/E42vvZuki2tzfckTLqUkp8XUZlggm
j9gQdcS/PPQMe6h63kZDEMqldGNT9PPWwKJbIAVMhoydQZ//1sXC98zmqur0A6BR
ZOoFkNi2PLOsFDCzLRgBJlq75WwaKatMKNNpvwbREVmGQjj/ncRgo9M+fBmZO4VL
8KBf2hVj1H5K7CPQ25IWCCzlJ/m+6YVxkKph3ZccsPGb90Zid5s0qHLgJdgEqsSg
HkbXMpZZelNHmmCblT/cSR4knBKzsD1A5ssK5w3djo33W/iSR6mHidb0ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDeY3riNV/0PlA1tVY0IMx0deTyMB8GA1UdIwQY
MBaAFBzKqwsN78k8MvgMRLCC+ykF8jxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ODdhYWUtMTEzMS00ZDljLTg1OTQt
Njk0N2YwMmFjNmFmLzEvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83ODdhYWUtMTEzMS00ZDljLTg1OTQtNjk0N2YwMmFjNmFm
LzEvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgSD0ch7
r8khtaWJzSt5vyJH3SGUrQASU/1sSGl3N024sUtx+BvcMx7xZbUP/oT4P+DdCDBR
v8D4KTfQgfiihb6cpUfv0CvxI4zGzgFGhBl82Cav+2IXnCbxp/2nyHgCmK72VSgl
9yBMCXF6fW1O7mw0XVyd/l3Ogw2fHyWlLzD/TGL6xMdnJ3HqYDP+MW0UGKmemUou
tC9gP2hOvPOJ2us67zLf5+8oOS7LQtKb4rJey5WHepnmGOPYfCqv5LdHBmb8nkur
igwxWy3Xzgo/F31zO9xOaW60zCwlECPqyiEuR5J50n77o+ZsQAaf77A5U/xbUyEP
g37zuidj38TlGA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:14 2025 by rpki-client