Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
File: HvpZajEmrOApxtcNUpJX4Hs4ugY.mft (raw, json)
Hash identifier: fruHPEDeEhWXbudjgNECSPGf3THePxNAfuW/7nhXsNo=
Subject key identifier: 6F:08:F3:97:FB:F6:1E:1C:E9:50:D5:2C:13:83:00:BD:27:56:DA:67
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 0199FC58459D1723CB018B53C0757AAD709F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 12:01:07 +0000
Manifest this update: Sun 19 Oct 2025 12:01:07 +0000
Manifest next update: Mon 20 Oct 2025 12:01:07 +0000
Files and hashes: 1: 3rLuW8QzyohR5G8GlpoQPu-Q6-s.roa (hash: F/8n4kYq76m4ZS+34MKi7W7c5dmdl0PtvWuG8cLJRrQ=)
2: 5ExX7PElDwhZvsqUirscS-kfnho.roa (hash: bqRW9TpS9PZv6OIHrk3qUk9RHaZcJhV08bnl4u3kvQE=)
3: HvpZajEmrOApxtcNUpJX4Hs4ugY.crl (hash: U8AnrPAErE/CS7ifzbRSDEG/Q1WXS9xN9F+c/2Qouu4=)
4: SUGGbjb1_Jk1qcT2JM8WcjQsO3o.roa (hash: oGVNqEXP6azb1lMS8LZZ+mpr73t/MEzsv974PdYYkYc=)
5: Z1aPPPc81U2W2p-hUbb2wEiLSrc.roa (hash: 2YYRPX4gY5ODPttZebzHcbGfP4UENAWKSJvWHEPrLO0=)
6: n-W5m8Lx-i-ynu-cgERA98e1TOA.roa (hash: 4MuuW1m/TV8O5IZ0i/ayNAC7gzR7V1teSLC1JE5/iDs=)
7: pMSZccnz2cyq4EAmIRmDcUPtCn0.roa (hash: rRJO86ohCtFwFSEvJg481KQrtUgLqQRd6A69YZTm2Ng=)
8: ySmmDjcV5o8HMr8fci-zFbiYdNg.roa (hash: QRYJ/tIaqmXv+2YeufSiFwnuiLCPfX4BPxDANJPYOl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:45:9d:17:23:cb:01:8b:53:c0:75:7a:ad:70:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Oct 19 12:01:07 2025 GMT
Not After : Oct 20 12:01:07 2025 GMT
Subject: CN=6f08f397fbf61e1ce950d52c138300bd2756da67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:80:a3:7e:1e:97:79:a5:9b:ab:45:34:0f:c8:
ac:1e:a7:db:df:d5:6b:14:3e:24:a0:e7:59:1d:7d:
56:fd:13:37:ab:d3:7e:97:d9:f8:1a:cd:dc:82:c4:
05:86:c8:31:20:a2:44:a7:aa:73:dd:ba:c6:b4:63:
ac:d4:cc:5a:92:97:dc:0b:96:ba:aa:ee:e7:e4:1c:
0c:5f:75:83:a8:cd:e9:21:9d:fb:34:91:87:48:37:
f1:47:91:a0:39:85:a8:1c:16:14:c2:ef:cc:5f:f3:
54:cd:93:c9:74:ee:39:d4:85:df:47:a8:2e:00:d2:
01:f8:d3:4b:c3:bd:9e:95:42:f2:dd:25:a3:4e:73:
8a:1e:4c:e3:6d:09:56:87:0c:fb:0d:47:af:3b:3f:
22:9d:60:88:50:ec:f9:16:bd:89:63:69:45:3a:eb:
8a:6d:36:03:ea:5b:56:1d:a2:c8:dc:41:16:4b:2b:
1f:38:e4:89:49:3d:7e:06:1b:8d:d2:f7:4a:e3:cf:
f2:22:f8:d4:00:88:29:35:3a:e1:d8:ef:80:ab:1d:
32:a1:d5:a4:02:e8:0e:c6:5d:d9:8e:9b:92:99:74:
61:a4:ad:7c:c1:71:c5:79:e3:8d:4b:7f:58:e5:6b:
38:e1:2b:16:1e:01:94:97:23:22:ed:72:5f:88:72:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:08:F3:97:FB:F6:1E:1C:E9:50:D5:2C:13:83:00:BD:27:56:DA:67
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ae:10:8d:87:06:0e:db:49:74:c6:41:eb:55:59:37:4f:6b:
64:b2:21:03:bd:d4:60:92:3e:26:92:64:aa:69:01:b7:5e:2f:
12:40:e9:f9:04:6e:6f:0f:ab:16:84:9f:52:c6:f5:a5:ab:e4:
4f:eb:dd:bb:96:90:69:8f:49:16:22:c7:64:dd:67:94:34:2a:
e5:e1:d3:96:b7:52:64:cb:95:57:68:9f:77:24:7b:f1:bb:e9:
aa:55:4e:1a:d6:dd:7b:2e:19:a4:36:69:00:0e:25:e2:ce:95:
69:02:e2:89:4f:2e:9c:4c:8a:57:cc:6c:41:01:06:21:2f:e1:
39:37:4d:8e:23:70:fd:da:3d:e0:5b:f0:69:75:7f:31:8b:ae:
de:be:60:de:25:dc:4c:d3:bd:07:a8:e2:0a:6f:4e:ba:db:5e:
77:1b:0f:80:29:0d:45:60:c3:be:b9:13:0d:73:f2:fd:90:9a:
cc:0f:c9:a9:5c:d5:a4:34:2f:f9:24:da:05:ea:b9:75:b0:a2:
48:3a:87:f2:bd:4a:89:d1:d8:63:94:67:5f:35:19:68:72:0a:
16:05:e1:89:2f:47:08:8b:99:fe:d3:ea:8d:c4:79:77:31:ca:
bf:6b:99:f9:3f:f5:52:07:73:bc:4b:c7:2a:da:0a:f1:98:0d:
b3:0e:35:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WEWdFyPLAYtTwHV6rXCfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZmE1OTZhMzEyNmFjZTAyOWM2ZDcwZDUyOTI1N2UwN2Iz
OGJhMDYwHhcNMjUxMDE5MTIwMTA3WhcNMjUxMDIwMTIwMTA3WjAzMTEwLwYDVQQD
Eyg2ZjA4ZjM5N2ZiZjYxZTFjZTk1MGQ1MmMxMzgzMDBiZDI3NTZkYTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YCjfh6XeaWbq0U0D8isHqfb39Vr
FD4koOdZHX1W/RM3q9N+l9n4Gs3cgsQFhsgxIKJEp6pz3brGtGOs1MxakpfcC5a6
qu7n5BwMX3WDqM3pIZ37NJGHSDfxR5GgOYWoHBYUwu/MX/NUzZPJdO451IXfR6gu
ANIB+NNLw72elULy3SWjTnOKHkzjbQlWhwz7DUevOz8inWCIUOz5Fr2JY2lFOuuK
bTYD6ltWHaLI3EEWSysfOOSJST1+BhuN0vdK48/yIvjUAIgpNTrh2O+Aqx0yodWk
AugOxl3ZjpuSmXRhpK18wXHFeeONS39Y5Ws44SsWHgGUlyMi7XJfiHLNOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8I85f79h4c6VDVLBODAL0nVtpnMB8GA1UdIwQY
MBaAFB76WWoxJqzgKcbXDVKSV+B7OLoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODIt
OWQwYzYyMDczNWYxLzEvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODItOWQwYzYyMDczNWYx
LzEvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf64QjYcG
DttJdMZB61VZN09rZLIhA73UYJI+JpJkqmkBt14vEkDp+QRubw+rFoSfUsb1pavk
T+vdu5aQaY9JFiLHZN1nlDQq5eHTlrdSZMuVV2ifdyR78bvpqlVOGtbdey4ZpDZp
AA4l4s6VaQLiiU8unEyKV8xsQQEGIS/hOTdNjiNw/do94FvwaXV/MYuu3r5g3iXc
TNO9B6jiCm9OuttedxsPgCkNRWDDvrkTDXPy/ZCazA/JqVzVpDQv+STaBeq5dbCi
SDqH8r1KidHYY5RnXzUZaHIKFgXhiS9HCIuZ/tPqjcR5dzHKv2uZ+T/1UgdzvEvH
KtoK8ZgNsw41yQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:34 2025 by rpki-client