Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
File: hZtbaj2CvQDtMcbOs66nrVke5Tc.mft (raw, json)
Hash identifier: M8wiaLhxZdiJouKoO2MaPI+WxAugSnu5Ku1mC2zz9+A=
Subject key identifier: CB:02:58:12:69:93:C8:22:CF:3A:AE:71:1F:1A:D3:7C:C8:89:4D:B8
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Certificate issuer: /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial: 0199FC58ADA08D07DBBD4F60A5671B24B9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
Manifest number: 078B
Signing time: Sun 19 Oct 2025 12:01:33 +0000
Manifest this update: Sun 19 Oct 2025 12:01:33 +0000
Manifest next update: Mon 20 Oct 2025 12:01:33 +0000
Files and hashes: 1: hZtbaj2CvQDtMcbOs66nrVke5Tc.crl (hash: C0zAFo73A6vul9wok3PwaRJwdDT+zm+GBCNWSbM597I=)
2: iDoekYbnPiOIxLiqr48QVJjIZ7I.roa (hash: BFGeDsq9cIJPFhHXYs9ml2z2YYV20g/bd7ZbGgfmSrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ad:a0:8d:07:db:bd:4f:60:a5:67:1b:24:b9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Validity
Not Before: Oct 19 12:01:33 2025 GMT
Not After : Oct 20 12:01:33 2025 GMT
Subject: CN=cb0258126993c822cf3aae711f1ad37cc8894db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:ca:94:3e:19:b1:68:64:0c:16:32:d7:1b:
bf:50:29:12:3f:1b:93:16:95:a9:86:9f:8f:cc:58:
43:0b:f7:31:07:65:1c:b2:83:da:70:ac:e7:3b:f3:
27:d1:f2:44:e0:7e:3e:6f:76:0f:fa:74:dc:68:64:
da:d0:42:66:10:ef:da:b6:cd:fc:f6:54:ef:8c:3d:
ce:e8:5f:8f:b9:09:31:60:51:c3:57:99:eb:80:0d:
e9:e4:95:e8:a0:52:31:3d:b6:99:d1:90:7c:09:9d:
49:9b:24:50:62:88:31:69:33:b6:79:74:e9:1d:3a:
fc:77:22:64:45:22:d7:23:9e:bf:a4:dc:97:39:35:
de:1e:35:38:91:dc:9a:32:30:68:23:59:a5:f9:a8:
8a:fe:09:25:53:55:b5:42:f2:d0:54:50:d8:e6:c5:
30:51:00:0e:f3:a3:6f:36:b2:0d:28:bb:9b:67:ed:
0f:ed:11:bf:01:43:31:cf:8e:1b:9b:a9:1e:30:de:
3d:9c:6d:5e:38:6f:6c:cf:d3:1e:25:d6:20:60:97:
de:2c:5f:69:30:49:e0:65:14:44:08:1e:66:0b:54:
8b:ef:01:36:45:13:5d:6f:dd:ae:34:2c:ef:e3:c3:
b9:7a:aa:4e:86:b1:53:19:01:59:9d:81:cc:fd:d5:
e4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:02:58:12:69:93:C8:22:CF:3A:AE:71:1F:1A:D3:7C:C8:89:4D:B8
X509v3 Authority Key Identifier:
keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7a:55:9f:b9:ac:05:a1:fc:1e:7b:48:d1:62:72:11:e4:7e:
de:3c:f1:00:0a:16:24:28:a4:1b:6d:fd:19:7f:64:06:7e:38:
fe:44:b3:ba:e9:20:62:b8:4d:41:d1:db:71:05:17:ad:71:62:
39:d2:9e:bb:fa:c7:51:46:c0:3c:5d:15:ba:2c:5d:21:22:0a:
21:49:19:27:7d:45:ba:f5:14:15:74:ba:67:52:06:6b:13:ff:
1d:7c:f4:72:82:9c:c3:1a:f5:47:f0:c0:92:31:94:90:4c:9a:
1e:af:2e:32:90:7a:ca:82:5f:75:24:8c:60:93:31:aa:c5:62:
63:ee:8e:3d:7a:69:2f:ad:58:32:f5:5e:12:6e:95:32:76:25:
02:bf:be:82:b1:9f:ea:72:f6:5a:42:97:d2:17:46:67:e3:e5:
c8:96:f7:10:74:5b:74:bf:34:f9:09:aa:cc:65:1d:fe:c5:62:
35:5a:09:3e:1f:5b:2e:42:4a:e4:f7:31:55:ef:14:81:14:23:
10:5c:48:6a:d7:9d:50:37:ea:c1:b5:0f:07:8b:f1:90:78:71:
f2:c6:a0:f2:c3:64:d4:68:42:52:79:15:de:56:c2:a7:9d:ab:
71:c9:39:aa:19:c7:7f:67:1f:fd:b0:82:89:a4:ee:fd:92:8f:
0a:6f:44:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WK2gjQfbvU9gpWcbJLn4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OWI1YjZhM2Q4MmJkMDBlZDMxYzZjZWIzYWVhN2FkNTkx
ZWU1MzcwHhcNMjUxMDE5MTIwMTMzWhcNMjUxMDIwMTIwMTMzWjAzMTEwLwYDVQQD
EyhjYjAyNTgxMjY5OTNjODIyY2YzYWFlNzExZjFhZDM3Y2M4ODk0ZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lLKlD4ZsWhkDBYy1xu/UCkSPxuT
FpWphp+PzFhDC/cxB2UcsoPacKznO/Mn0fJE4H4+b3YP+nTcaGTa0EJmEO/ats38
9lTvjD3O6F+PuQkxYFHDV5nrgA3p5JXooFIxPbaZ0ZB8CZ1JmyRQYogxaTO2eXTp
HTr8dyJkRSLXI56/pNyXOTXeHjU4kdyaMjBoI1ml+aiK/gklU1W1QvLQVFDY5sUw
UQAO86NvNrINKLubZ+0P7RG/AUMxz44bm6keMN49nG1eOG9sz9MeJdYgYJfeLF9p
MEngZRRECB5mC1SL7wE2RRNdb92uNCzv48O5eqpOhrFTGQFZnYHM/dXkZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsCWBJpk8gizzqucR8a03zIiU24MB8GA1UdIwQY
MBaAFIWbW2o9gr0A7THGzrOup61ZHuU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84ZWRiODItY2UyYi00NGUxLTkyY2Qt
MmZjOWU2YjZmYzk2LzEvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84ZWRiODItY2UyYi00NGUxLTkyY2QtMmZjOWU2YjZmYzk2
LzEvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3pVn7ms
BaH8HntI0WJyEeR+3jzxAAoWJCikG239GX9kBn44/kSzuukgYrhNQdHbcQUXrXFi
OdKeu/rHUUbAPF0VuixdISIKIUkZJ31FuvUUFXS6Z1IGaxP/HXz0coKcwxr1R/DA
kjGUkEyaHq8uMpB6yoJfdSSMYJMxqsViY+6OPXppL61YMvVeEm6VMnYlAr++grGf
6nL2WkKX0hdGZ+PlyJb3EHRbdL80+QmqzGUd/sViNVoJPh9bLkJK5PcxVe8UgRQj
EFxIatedUDfqwbUPB4vxkHhx8sag8sNk1GhCUnkV3lbCp52rcck5qhnHf2cf/bCC
iaTu/ZKPCm9E7A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:31 2025 by rpki-client