Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
File: H5TRopzOJhU7k0-0fC7iFnS7hcs.mft (raw, json)
Hash identifier: 6iP6+BVTDN41E2JwmUZ2Dz5EZR3n5Kv8G+tPAtq0kpQ=
Subject key identifier: 4B:4E:8A:A5:94:CB:6A:B8:A3:13:4B:89:FD:88:5A:AA:1A:61:BA:58
Authority key identifier: 1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
Certificate issuer: /CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Certificate serial: 0199FC586FE87161F98B6E5881E523BF721E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
Manifest number: 138D
Signing time: Sun 19 Oct 2025 12:01:18 +0000
Manifest this update: Sun 19 Oct 2025 12:01:18 +0000
Manifest next update: Mon 20 Oct 2025 12:01:18 +0000
Files and hashes: 1: H5TRopzOJhU7k0-0fC7iFnS7hcs.crl (hash: uzG5S86Cux6X3bHvY7Sh+pA1KQGUjUXdliqPH5bKeTA=)
2: YYH7gX5PCoeeZlfZBkDnE5fZPGw.roa (hash: UwEIySf0ujQ0bIXU2dedyQ3b/IuoBDp7UIw7LsZq4qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6f:e8:71:61:f9:8b:6e:58:81:e5:23:bf:72:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Validity
Not Before: Oct 19 12:01:18 2025 GMT
Not After : Oct 20 12:01:18 2025 GMT
Subject: CN=4b4e8aa594cb6ab8a3134b89fd885aaa1a61ba58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:78:f9:06:a1:b4:db:de:b3:8f:f5:83:09:
a8:af:d2:7b:84:7f:36:2e:86:d0:20:34:b6:1f:11:
f7:b6:70:22:5f:72:f3:d5:12:ce:07:3a:78:cb:11:
40:e3:73:c7:2e:48:7c:85:23:a0:02:0c:43:2d:1e:
9f:47:e7:5e:3f:70:01:af:52:4e:f9:a2:36:15:04:
4b:2b:55:ee:1c:88:c0:10:78:e4:16:0e:bb:81:0f:
e5:bc:d9:0a:d2:99:af:dc:f5:5f:33:8e:1a:89:ab:
a3:59:6a:e2:ad:41:36:d9:30:2f:5b:27:72:7d:ca:
0d:3e:be:48:68:b1:e6:e7:e5:f5:52:f5:c3:33:a4:
71:eb:92:8b:a2:ab:ab:fd:51:38:5a:af:9f:36:18:
54:4f:c7:14:27:02:25:4f:d8:30:27:d9:2f:7e:90:
e4:39:54:6e:e9:09:8a:b6:80:ee:e7:5e:d0:5c:a1:
8e:47:12:4d:01:0d:90:eb:f4:d1:13:ad:5e:65:1b:
09:60:72:a9:48:9a:69:8e:04:52:5f:bc:f0:0e:d4:
9c:96:86:a8:e3:08:2d:c8:ba:de:1a:78:81:59:47:
ac:0d:8a:6d:d4:a4:6a:c0:65:5e:8e:cb:3a:eb:4a:
f8:47:14:fc:f0:64:68:21:05:62:ef:7d:0e:b3:d5:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4E:8A:A5:94:CB:6A:B8:A3:13:4B:89:FD:88:5A:AA:1A:61:BA:58
X509v3 Authority Key Identifier:
keyid:1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ae:e4:9a:af:65:6a:ee:11:ab:51:4f:e0:8e:07:ab:7e:34:
a0:13:40:2e:21:62:46:a2:81:5d:66:c2:b5:f7:cf:c7:0f:ad:
74:ee:14:a9:03:7a:3a:1e:1c:d6:1d:7b:e0:b5:3d:b0:7c:f3:
a2:2c:0f:76:61:ba:80:e8:b2:f9:bf:69:d8:bb:7d:2b:06:ad:
13:ff:77:83:f2:ac:72:20:87:94:05:3c:e5:f3:d9:18:1a:bd:
93:96:8d:85:be:6f:e3:d5:2e:54:fd:5e:19:2f:95:ad:4a:40:
9a:21:f9:13:3a:50:5c:af:1c:fa:be:70:fa:b0:24:d4:c4:dd:
16:50:39:1b:ca:b9:05:a9:8d:8c:93:94:34:57:af:f1:d2:92:
37:29:ae:a2:7b:cd:ee:54:a2:4d:77:99:8b:fe:fb:fe:44:97:
d1:ec:42:df:17:33:d7:f1:4f:8b:21:de:d0:a2:b1:ec:98:d7:
04:12:5c:bf:49:2d:56:70:ad:9b:39:a8:fd:c3:11:78:d4:09:
e8:ba:d6:04:49:9c:50:68:b3:fb:aa:67:09:fc:5e:97:ca:a4:
eb:6c:0d:7f:0a:b6:42:60:31:c7:b9:7d:cc:ce:d1:cb:86:70:
0b:9d:57:cf:3f:35:a5:cb:c0:01:39:bf:ab:ea:32:9c:4d:c5:
c9:d6:85:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WG/ocWH5i25YgeUjv3IeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOTRkMWEyOWNjZTI2MTUzYjkzNGZiNDdjMmVlMjE2NzRi
Yjg1Y2IwHhcNMjUxMDE5MTIwMTE4WhcNMjUxMDIwMTIwMTE4WjAzMTEwLwYDVQQD
Eyg0YjRlOGFhNTk0Y2I2YWI4YTMxMzRiODlmZDg4NWFhYTFhNjFiYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnJ4+QahtNves4/1gwmor9J7hH82
LobQIDS2HxH3tnAiX3Lz1RLOBzp4yxFA43PHLkh8hSOgAgxDLR6fR+deP3ABr1JO
+aI2FQRLK1XuHIjAEHjkFg67gQ/lvNkK0pmv3PVfM44aiaujWWrirUE22TAvWydy
fcoNPr5IaLHm5+X1UvXDM6Rx65KLoqur/VE4Wq+fNhhUT8cUJwIlT9gwJ9kvfpDk
OVRu6QmKtoDu517QXKGORxJNAQ2Q6/TRE61eZRsJYHKpSJppjgRSX7zwDtScloao
4wgtyLreGniBWUesDYpt1KRqwGVejss660r4RxT88GRoIQVi730Os9VUmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtOiqWUy2q4oxNLif2IWqoaYbpYMB8GA1UdIwQY
MBaAFB+U0aKcziYVO5NPtHwu4hZ0u4XLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yY2I2M2YtMTYxMy00NTliLTgxMTUt
NTU0Y2FiYjlhZDA1LzEvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8yY2I2M2YtMTYxMy00NTliLTgxMTUtNTU0Y2FiYjlhZDA1
LzEvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATK7kmq9l
au4Rq1FP4I4Hq340oBNALiFiRqKBXWbCtffPxw+tdO4UqQN6Oh4c1h174LU9sHzz
oiwPdmG6gOiy+b9p2Lt9KwatE/93g/KsciCHlAU85fPZGBq9k5aNhb5v49UuVP1e
GS+VrUpAmiH5EzpQXK8c+r5w+rAk1MTdFlA5G8q5BamNjJOUNFev8dKSNymuonvN
7lSiTXeZi/77/kSX0exC3xcz1/FPiyHe0KKx7JjXBBJcv0ktVnCtmzmo/cMReNQJ
6LrWBEmcUGiz+6pnCfxel8qk62wNfwq2QmAxx7l9zM7Ry4ZwC51Xzz81pcvAATm/
q+oynE3FydaFXA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:37 2025 by rpki-client