Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
File: H9e7sd5oCd9_blc_mrtk5gNhPKE.mft (raw, json)
Hash identifier: HpNF1bf0vr2+NsiDwpbbw6U52ikc4qs6rm9SrnhSpL0=
Subject key identifier: 09:03:BF:58:40:4C:24:51:09:4B:E9:7E:78:09:C2:79:7C:5A:91:12
Authority key identifier: 1F:D7:BB:B1:DE:68:09:DF:7F:6E:57:3F:9A:BB:64:E6:03:61:3C:A1
Certificate issuer: /CN=1fd7bbb1de6809df7f6e573f9abb64e603613ca1
Certificate serial: 019A01EC1498EB8C439C264825A9FB11EE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 14:00:40 +0000
Manifest this update: Mon 20 Oct 2025 14:00:40 +0000
Manifest next update: Tue 21 Oct 2025 14:00:40 +0000
Files and hashes: 1: H9e7sd5oCd9_blc_mrtk5gNhPKE.crl (hash: aY2eWE1Ex1wnsveNJW1kWbZpL+r7SABoqxKVN/zJpDE=)
2: hOjqFzmwDn3h8aF0jh7_FXo9ReI.roa (hash: CNoH2a1MzUmjFlMi/+aHXlooSM/YD9l7gB33O/u52sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:ec:14:98:eb:8c:43:9c:26:48:25:a9:fb:11:ee:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd7bbb1de6809df7f6e573f9abb64e603613ca1
Validity
Not Before: Oct 20 14:00:40 2025 GMT
Not After : Oct 21 14:00:40 2025 GMT
Subject: CN=0903bf58404c2451094be97e7809c2797c5a9112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:cd:53:83:7c:2b:74:41:61:c1:4c:81:0b:
0c:d9:ae:03:39:5f:b4:c8:4e:92:5d:9c:b1:09:1f:
0f:15:06:55:72:63:6b:69:d1:73:74:2d:14:61:ad:
72:c6:cc:2f:19:fb:5d:04:ab:72:7a:16:07:60:ef:
03:87:b3:08:65:8a:77:f8:97:9d:49:9c:ac:61:6d:
d5:39:69:dd:2e:04:54:31:a6:7f:a5:d5:e8:e0:aa:
5f:fd:c3:0a:a7:fb:a7:98:5b:b8:1c:78:f2:74:17:
ef:49:dd:ba:d9:7c:1c:71:8f:3b:79:56:9d:08:e7:
76:d7:6b:b9:a9:16:ad:0b:06:c4:df:1d:b8:c6:40:
5c:9a:6e:3a:8d:a6:82:1f:4f:31:94:50:1b:93:09:
40:05:3b:4a:5f:59:1e:76:88:04:ef:85:a2:a7:05:
1c:52:40:d5:6f:7b:66:f2:4c:d7:70:01:e9:b9:e8:
57:0b:97:02:bc:2a:4f:55:63:64:81:67:4a:9a:f0:
51:af:ab:a1:03:2a:60:c6:bc:12:b9:00:6d:7e:e3:
df:41:00:96:25:34:51:2c:4d:70:8e:cb:7b:04:76:
ad:03:c0:ee:17:b6:dc:e0:22:13:73:80:f8:a8:1a:
2a:da:10:d5:3e:86:92:d4:5e:5e:a2:b2:41:e8:fa:
b0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:03:BF:58:40:4C:24:51:09:4B:E9:7E:78:09:C2:79:7C:5A:91:12
X509v3 Authority Key Identifier:
keyid:1F:D7:BB:B1:DE:68:09:DF:7F:6E:57:3F:9A:BB:64:E6:03:61:3C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e5:a2:36:2d:94:06:bd:ff:7b:e0:42:a1:20:f8:5d:e2:ff:
12:20:db:8d:75:01:f0:ca:ca:34:8a:68:7f:55:50:75:85:29:
c4:8c:70:c6:d2:84:a3:d5:04:cc:d5:8b:3b:28:31:f5:0d:be:
e0:d4:c1:4c:2b:6f:33:07:07:1e:19:23:23:b2:03:9b:41:1f:
d8:ff:ad:bb:de:4b:34:4e:01:e2:fd:ea:fb:44:28:fd:18:b9:
bf:ae:c9:1c:e1:f3:9c:a0:a5:6c:33:9c:6d:a8:05:59:4d:18:
fb:32:21:63:32:f3:bd:47:bd:33:d9:8c:d1:6a:2a:70:62:02:
8d:84:85:74:f4:62:5b:cb:1a:d4:c8:cd:16:ce:eb:a3:bf:72:
37:a0:9b:b4:47:6a:d8:56:ef:1a:0e:20:98:27:bb:b0:c7:98:
5d:6c:91:63:03:c9:f2:16:fe:26:90:e4:8c:e0:74:e7:c4:3d:
d4:cc:e7:48:f9:b8:57:a6:70:f7:68:83:fc:53:d9:ac:d2:fd:
fd:80:fc:73:64:24:c9:18:7a:7d:0d:7a:0b:93:17:f8:6a:0d:
c9:ca:6d:6b:c4:90:79:46:eb:5a:eb:52:65:8a:c4:e0:03:cb:
e1:8a:f2:9f:53:88:1f:82:57:9a:b4:fd:4e:bf:ed:d5:bf:b8:
78:23:0a:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoB7BSY64xDnCZIJan7Ee6BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZDdiYmIxZGU2ODA5ZGY3ZjZlNTczZjlhYmI2NGU2MDM2
MTNjYTEwHhcNMjUxMDIwMTQwMDQwWhcNMjUxMDIxMTQwMDQwWjAzMTEwLwYDVQQD
EygwOTAzYmY1ODQwNGMyNDUxMDk0YmU5N2U3ODA5YzI3OTdjNWE5MTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cvNU4N8K3RBYcFMgQsM2a4DOV+0
yE6SXZyxCR8PFQZVcmNradFzdC0UYa1yxswvGftdBKtyehYHYO8Dh7MIZYp3+Jed
SZysYW3VOWndLgRUMaZ/pdXo4Kpf/cMKp/unmFu4HHjydBfvSd262XwccY87eVad
COd212u5qRatCwbE3x24xkBcmm46jaaCH08xlFAbkwlABTtKX1kedogE74WipwUc
UkDVb3tm8kzXcAHpuehXC5cCvCpPVWNkgWdKmvBRr6uhAypgxrwSuQBtfuPfQQCW
JTRRLE1wjst7BHatA8DuF7bc4CITc4D4qBoq2hDVPoaS1F5eorJB6Pqw/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkDv1hATCRRCUvpfngJwnl8WpESMB8GA1UdIwQY
MBaAFB/Xu7HeaAnff25XP5q7ZOYDYTyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDllN3NkNW9DZDlfYmxjX21ydGs1Z05oUEtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9mOGU4MDMtNDFmNS00NjY4LWFmYTUt
ZGIxM2FiYmU0ZTlhLzEvSDllN3NkNW9DZDlfYmxjX21ydGs1Z05oUEtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9mOGU4MDMtNDFmNS00NjY4LWFmYTUtZGIxM2FiYmU0ZTlh
LzEvSDllN3NkNW9DZDlfYmxjX21ydGs1Z05oUEtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOWiNi2U
Br3/e+BCoSD4XeL/EiDbjXUB8MrKNIpof1VQdYUpxIxwxtKEo9UEzNWLOygx9Q2+
4NTBTCtvMwcHHhkjI7IDm0Ef2P+tu95LNE4B4v3q+0Qo/Ri5v67JHOHznKClbDOc
bagFWU0Y+zIhYzLzvUe9M9mM0WoqcGICjYSFdPRiW8sa1MjNFs7ro79yN6CbtEdq
2FbvGg4gmCe7sMeYXWyRYwPJ8hb+JpDkjOB058Q91MznSPm4V6Zw92iD/FPZrNL9
/YD8c2QkyRh6fQ16C5MX+GoNycpta8SQeUbrWutSZYrE4APL4Yryn1OIH4JXmrT9
Tr/t1b+4eCMKCA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:42:06 2025 by rpki-client