Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
File: Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft (raw, json)
Hash identifier: c6bar7Hqdtw/mJZBKc8kfJmrq7dFuWeEN0ayePw2irE=
Subject key identifier: 5B:71:A4:19:12:B2:E7:0D:E4:23:AB:20:C7:AB:85:D2:7D:CA:82:64
Authority key identifier: 1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3
Certificate issuer: /CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3
Certificate serial: 0199FC587261400B7C508D59A01BC82B2EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
Manifest number: 0D10
Signing time: Sun 19 Oct 2025 12:01:18 +0000
Manifest this update: Sun 19 Oct 2025 12:01:18 +0000
Manifest next update: Mon 20 Oct 2025 12:01:18 +0000
Files and hashes: 1: Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl (hash: bz4y4jLmvkwM+fwXkK2+UJExOTRMucqWOoMrL4CbWmY=)
2: oaQkn5zr2sFy17og-aVMkuLXdds.roa (hash: VtZ3pTO5W1yzA+ps5HMSQhypm611YNtn0vckyLuCUAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:72:61:40:0b:7c:50:8d:59:a0:1b:c8:2b:2e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3
Validity
Not Before: Oct 19 12:01:18 2025 GMT
Not After : Oct 20 12:01:18 2025 GMT
Subject: CN=5b71a41912b2e70de423ab20c7ab85d27dca8264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:b1:ef:b1:2a:b5:6d:2c:9c:29:85:45:dc:
ed:2a:e9:34:ce:89:e2:05:13:46:1a:83:71:a1:e9:
59:b4:f1:62:cf:43:be:8a:6c:fa:7f:c6:fa:56:d9:
f3:b9:15:81:0b:2e:6c:25:35:d4:99:bf:33:8c:87:
f3:37:a7:40:e6:6d:d0:1a:5e:21:84:ea:c0:c7:17:
e1:9c:7e:27:0b:43:71:f5:a3:e0:4b:25:cd:55:7e:
02:be:ba:ad:10:80:9d:55:34:50:04:8b:19:2f:9c:
0a:ac:bd:fe:c5:dc:b4:56:53:73:1e:2b:02:00:c7:
3b:c0:c0:12:c6:50:0b:6c:e4:c0:c9:84:f6:56:7c:
96:e1:85:70:38:87:91:1e:f4:ce:99:dc:f3:8a:89:
b0:e2:34:96:ec:9e:54:ad:51:de:54:65:22:8f:a1:
33:cc:54:ba:30:bd:1c:dc:ac:88:cb:bc:db:96:02:
f6:dc:dd:70:0b:a9:57:6d:2b:13:42:b3:b7:f0:ec:
a0:c0:94:0f:ba:d6:d3:03:47:cb:d7:4b:10:e1:23:
63:b1:90:04:81:ad:ab:50:51:e5:a2:c8:4e:e9:97:
06:01:70:0f:c4:67:a5:fd:3f:06:f8:0e:8f:a0:5b:
2b:73:10:d9:a6:e4:d0:65:f9:d5:19:f1:c6:9f:a9:
7f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:71:A4:19:12:B2:E7:0D:E4:23:AB:20:C7:AB:85:D2:7D:CA:82:64
X509v3 Authority Key Identifier:
keyid:1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:48:3c:d6:56:0d:74:87:08:84:e8:f6:ff:22:db:65:45:86:
b1:ba:12:24:35:34:ac:34:14:bc:bb:21:12:75:cb:35:fe:6a:
9d:1f:2c:78:63:c2:e3:56:bb:59:5b:05:f5:a6:0e:96:0f:c8:
9c:a6:cf:60:f5:4d:5c:60:b7:fc:c2:b5:96:fa:b3:99:2e:59:
f1:09:56:e0:a8:f6:b7:7f:d4:4a:2e:e7:0d:30:2b:f0:db:7a:
98:64:41:2d:09:76:1c:c2:54:ae:1b:dd:f7:d3:d1:88:7d:d5:
08:29:ac:31:71:81:26:26:9f:7a:fc:26:21:49:81:d6:52:82:
5b:a2:59:a0:4f:12:10:de:38:75:78:02:70:b8:bc:95:91:66:
7e:e2:d0:47:86:33:12:45:9f:8e:87:59:9c:d7:66:92:a5:41:
a1:04:89:9d:35:62:96:eb:ef:b9:f1:a1:7d:51:04:9f:72:2c:
31:90:4d:b7:3e:82:7d:7e:0c:10:52:07:b6:a2:e4:8a:7d:fc:
d3:11:70:0b:6a:99:c7:10:0d:05:5a:df:e3:83:2a:52:87:d5:
5b:f7:a7:3a:16:6e:5d:e5:94:c4:2f:1b:f5:58:0a:be:d9:dd:
19:87:13:45:c8:3a:3c:f8:97:56:ac:c3:c5:38:69:fc:c8:d4:
86:bc:20:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WHJhQAt8UI1ZoBvIKy68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNDdlMmJmMzk3NDcyMWVhZmJmYjhjMzFmYzUyNzMwMzlk
NTA1ZjMwHhcNMjUxMDE5MTIwMTE4WhcNMjUxMDIwMTIwMTE4WjAzMTEwLwYDVQQD
Eyg1YjcxYTQxOTEyYjJlNzBkZTQyM2FiMjBjN2FiODVkMjdkY2E4MjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7qx77EqtW0snCmFRdztKuk0zoni
BRNGGoNxoelZtPFiz0O+imz6f8b6VtnzuRWBCy5sJTXUmb8zjIfzN6dA5m3QGl4h
hOrAxxfhnH4nC0Nx9aPgSyXNVX4CvrqtEICdVTRQBIsZL5wKrL3+xdy0VlNzHisC
AMc7wMASxlALbOTAyYT2VnyW4YVwOIeRHvTOmdzziomw4jSW7J5UrVHeVGUij6Ez
zFS6ML0c3KyIy7zblgL23N1wC6lXbSsTQrO38OygwJQPutbTA0fL10sQ4SNjsZAE
ga2rUFHloshO6ZcGAXAPxGel/T8G+A6PoFsrcxDZpuTQZfnVGfHGn6l/oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtxpBkSsucN5COrIMerhdJ9yoJkMB8GA1UdIwQY
MBaAFB5H4r85dHIer7+4wx/FJzA51QXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGtmaXZ6bDBjaDZ2djdqREg4VW5NRG5WQmZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hZmExMDYtNmFmOC00MzEwLWI0ZDQt
ZTM2OWQ2NjAyZTZmLzEvSGtmaXZ6bDBjaDZ2djdqREg4VW5NRG5WQmZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9hZmExMDYtNmFmOC00MzEwLWI0ZDQtZTM2OWQ2NjAyZTZm
LzEvSGtmaXZ6bDBjaDZ2djdqREg4VW5NRG5WQmZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUg81lYN
dIcIhOj2/yLbZUWGsboSJDU0rDQUvLshEnXLNf5qnR8seGPC41a7WVsF9aYOlg/I
nKbPYPVNXGC3/MK1lvqzmS5Z8QlW4Kj2t3/USi7nDTAr8Nt6mGRBLQl2HMJUrhvd
99PRiH3VCCmsMXGBJiafevwmIUmB1lKCW6JZoE8SEN44dXgCcLi8lZFmfuLQR4Yz
EkWfjodZnNdmkqVBoQSJnTViluvvufGhfVEEn3IsMZBNtz6CfX4MEFIHtqLkin38
0xFwC2qZxxANBVrf44MqUofVW/enOhZuXeWUxC8b9VgKvtndGYcTRcg6PPiXVqzD
xThp/MjUhrwgGg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:21 2025 by rpki-client