Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
File: hLDKyDjyguBClI-dKyzVdU0ujEc.mft (raw, json)
Hash identifier: F+/jQfcc/fS9XZ8CbtOpemJ0E9uNnsTepSeNrCAjGME=
Subject key identifier: DF:18:1F:70:D8:76:D3:B0:EF:9D:56:9A:4B:D7:2D:15:CB:16:1B:C0
Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Certificate serial: 0199FCFD7977F5D118A26FE2CA4550FF6681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:33 +0000
Manifest this update: Sun 19 Oct 2025 15:01:33 +0000
Manifest next update: Mon 20 Oct 2025 15:01:33 +0000
Files and hashes: 1: hLDKyDjyguBClI-dKyzVdU0ujEc.crl (hash: pLpE0MAdgK4exYytYvSKcxpbh0Av7vibEk9VcyhUEbA=)
2: mq2WK1BWz4a2Yo_KhLxZIcR7xCc.roa (hash: Qcby8Wr2h6htBY3phdXczNrS5qR9unpp5KemIo49KRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:79:77:f5:d1:18:a2:6f:e2:ca:45:50:ff:66:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Validity
Not Before: Oct 19 15:01:33 2025 GMT
Not After : Oct 20 15:01:33 2025 GMT
Subject: CN=df181f70d876d3b0ef9d569a4bd72d15cb161bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:51:1e:61:33:2d:33:e9:2e:99:06:16:8b:
90:78:cf:6d:19:c5:82:f2:70:d2:c9:c7:6c:32:f2:
15:06:cb:14:d1:69:d2:b4:a2:8f:e4:9f:8b:f4:c9:
a2:5d:de:5a:65:75:d9:ad:b8:e8:32:be:10:0e:17:
c7:ad:78:5b:5f:3a:9e:79:3b:14:5a:af:9e:1f:58:
08:11:57:af:b1:f9:c3:c8:75:28:0d:9e:a4:20:8e:
b4:24:19:41:c5:47:76:92:a6:59:45:ec:31:14:50:
35:7d:d0:8c:8b:80:00:72:77:0b:cc:b5:7e:9d:b1:
33:7c:23:e7:34:2f:59:fa:c7:b0:df:f5:52:bb:29:
2b:65:78:98:3a:f2:9e:8c:dc:bc:ee:43:12:95:c5:
2c:69:d5:27:cb:86:60:da:5f:c4:4d:29:05:11:c9:
b6:7c:2f:11:5d:0d:1a:00:7f:70:3c:c9:c8:7c:4e:
a7:28:8c:c9:6c:36:f0:88:04:1d:39:7a:1c:9e:61:
71:2e:06:88:f0:2e:25:a5:2f:1f:e4:ed:43:36:b5:
b7:a8:27:63:de:2e:4d:ed:8c:74:b7:95:3c:88:57:
98:0d:eb:ff:59:da:21:7c:4c:9c:fc:71:88:da:56:
54:e2:7c:bb:a2:95:8c:f0:11:f5:dd:18:db:38:bb:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:18:1F:70:D8:76:D3:B0:EF:9D:56:9A:4B:D7:2D:15:CB:16:1B:C0
X509v3 Authority Key Identifier:
keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:aa:8f:69:ad:42:3f:93:88:d6:d3:79:3b:97:fd:cb:d3:25:
32:60:2a:e2:d7:f2:4d:99:d0:38:5b:d3:dd:7b:d0:49:18:a3:
66:c6:27:41:b4:1f:3d:ed:fd:8f:e9:df:3b:11:2e:1c:63:b1:
c0:17:8c:4a:68:82:a2:69:cb:98:23:26:3c:c3:8f:d5:c4:15:
27:59:ee:fd:4f:07:2f:c9:f1:c3:07:4a:a7:1d:93:d1:ea:30:
9e:56:42:1e:ad:09:10:33:47:8f:11:29:32:e8:99:b3:da:9c:
a7:a3:60:21:1a:c1:9c:97:b0:f7:9e:58:c2:ba:8c:48:a8:19:
c4:c4:ad:94:91:b6:ab:ff:d3:a1:8e:28:20:5c:28:5f:3d:cf:
e2:3c:6a:e8:63:2f:35:55:f3:61:f6:3f:90:e2:79:69:b4:2f:
88:86:44:3e:07:7a:70:0c:c1:a7:c2:6a:96:2c:71:2a:97:7c:
c4:02:81:6c:8b:15:b5:41:c7:7d:62:ca:51:30:3e:18:df:f4:
a9:41:c0:a0:0a:84:b4:56:06:9c:8e:9a:46:db:a3:7f:10:b7:
e3:38:64:03:8f:a9:56:b3:35:69:82:ed:69:e2:7f:21:7b:b4:
15:6f:22:15:d6:51:0b:88:18:73:ea:83:93:14:a6:c2:0f:5d:
4d:1a:33:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/Xl39dEYom/iykVQ/2aBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjBjYWM4MzhmMjgyZTA0Mjk0OGY5ZDJiMmNkNTc1NGQy
ZThjNDcwHhcNMjUxMDE5MTUwMTMzWhcNMjUxMDIwMTUwMTMzWjAzMTEwLwYDVQQD
EyhkZjE4MWY3MGQ4NzZkM2IwZWY5ZDU2OWE0YmQ3MmQxNWNiMTYxYmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEdRHmEzLTPpLpkGFouQeM9tGcWC
8nDSycdsMvIVBssU0WnStKKP5J+L9MmiXd5aZXXZrbjoMr4QDhfHrXhbXzqeeTsU
Wq+eH1gIEVevsfnDyHUoDZ6kII60JBlBxUd2kqZZRewxFFA1fdCMi4AAcncLzLV+
nbEzfCPnNC9Z+sew3/VSuykrZXiYOvKejNy87kMSlcUsadUny4Zg2l/ETSkFEcm2
fC8RXQ0aAH9wPMnIfE6nKIzJbDbwiAQdOXocnmFxLgaI8C4lpS8f5O1DNrW3qCdj
3i5N7Yx0t5U8iFeYDev/WdohfEyc/HGI2lZU4ny7opWM8BH13RjbOLue8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8YH3DYdtOw751WmkvXLRXLFhvAMB8GA1UdIwQY
MBaAFISwysg48oLgQpSPnSss1XVNLoxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lOTQ4N2YtZmRjNy00MGE3LThhNjct
MWJlNjljYTM5M2JhLzEvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lOTQ4N2YtZmRjNy00MGE3LThhNjctMWJlNjljYTM5M2Jh
LzEvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6qPaa1C
P5OI1tN5O5f9y9MlMmAq4tfyTZnQOFvT3XvQSRijZsYnQbQfPe39j+nfOxEuHGOx
wBeMSmiComnLmCMmPMOP1cQVJ1nu/U8HL8nxwwdKpx2T0eownlZCHq0JEDNHjxEp
MuiZs9qcp6NgIRrBnJew955YwrqMSKgZxMStlJG2q//ToY4oIFwoXz3P4jxq6GMv
NVXzYfY/kOJ5abQviIZEPgd6cAzBp8JqlixxKpd8xAKBbIsVtUHHfWLKUTA+GN/0
qUHAoAqEtFYGnI6aRtujfxC34zhkA4+pVrM1aYLtaeJ/IXu0FW8iFdZRC4gYc+qD
kxSmwg9dTRozSQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:06 2025 by rpki-client