Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
File: HjmCheIngn2PLFHx6plzV1VL5hI.mft (raw, json)
Hash identifier: 8X+A+wS5whWmw8C1zJxOcInOYe40p5v1w/0ZAmmiq14=
Subject key identifier: F5:59:E9:41:A7:23:CC:AF:80:B4:64:26:D5:3F:13:C9:50:8B:A3:A5
Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
Certificate issuer: /CN=1e398285e227827d8f2c51f1ea997357554be612
Certificate serial: 0199FFFE688A356DBEA9ED11759F7B554ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
Manifest number: 16EB
Signing time: Mon 20 Oct 2025 05:01:26 +0000
Manifest this update: Mon 20 Oct 2025 05:01:26 +0000
Manifest next update: Tue 21 Oct 2025 05:01:26 +0000
Files and hashes: 1: HjmCheIngn2PLFHx6plzV1VL5hI.crl (hash: cbdpn33h4vdoZJr2sLr+aHHeN/RR7NbKBcRAycEeph8=)
2: gq0u0nuGqZ56yv0huU0NYxq2Tuw.roa (hash: BWs37rngd3jbS0e8ne6CGjqZDK9zmWcTutRQQlknGKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:68:8a:35:6d:be:a9:ed:11:75:9f:7b:55:4e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612
Validity
Not Before: Oct 20 05:01:26 2025 GMT
Not After : Oct 21 05:01:26 2025 GMT
Subject: CN=f559e941a723ccaf80b46426d53f13c9508ba3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:09:f0:f6:ad:54:c4:91:6c:ce:b1:1f:81:
1b:2a:c0:41:53:83:88:15:86:5e:75:5b:63:03:9a:
a3:82:8b:dc:ef:df:f2:c5:9b:cc:d6:ad:fb:38:83:
83:fe:a0:a6:c1:e9:8d:17:88:1e:11:3e:69:59:10:
0c:95:cd:6c:b7:75:4f:d1:6d:d9:c0:ec:fe:6a:ea:
a4:de:9d:a1:76:58:e4:4a:52:3b:b5:7a:38:9c:37:
b0:68:50:4a:78:b1:29:d1:be:21:8f:4a:2e:c8:5b:
b8:6d:ed:b0:44:0b:17:77:a1:0e:d4:1f:fc:55:1d:
38:a1:f4:05:fa:f9:d5:f8:bf:80:8f:21:2d:b7:99:
10:c3:9f:a2:a3:5d:e5:7b:20:b2:5b:8c:18:a3:6f:
40:71:d4:17:f8:e1:ff:40:10:a8:c1:17:d7:a2:d1:
f8:be:88:25:15:6e:a1:bc:3e:a6:87:d2:f4:2e:16:
73:a1:ab:0e:bb:65:31:56:bd:b2:83:f2:22:58:a0:
bb:f3:d3:d4:6f:10:db:44:b7:d1:ff:1d:f5:e5:a9:
29:04:ba:af:08:38:c8:88:5a:31:70:62:62:c3:f8:
ae:27:5b:9e:ed:e5:a4:93:7a:6d:f0:2c:99:03:a4:
40:87:d8:f7:7e:c5:2d:ff:c0:04:92:a2:65:8c:70:
4b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:59:E9:41:A7:23:CC:AF:80:B4:64:26:D5:3F:13:C9:50:8B:A3:A5
X509v3 Authority Key Identifier:
keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:88:c3:95:17:d6:6e:77:8e:9d:93:86:88:52:7a:7f:85:6c:
8a:f2:10:ea:25:92:0a:88:e4:7f:c7:6c:2f:29:6f:4e:cc:5a:
50:4c:a9:f3:37:85:23:05:fb:37:49:db:c1:38:7b:e1:5c:5c:
f7:cc:57:a3:5a:48:fe:d1:84:68:a4:e6:88:75:49:77:a5:f5:
85:78:e4:41:50:26:7a:b4:00:39:c5:11:bc:74:4d:c4:6c:7c:
0a:a5:ac:c2:d4:30:21:ec:cb:70:c8:69:6a:60:6b:e4:c9:f7:
2c:1b:ec:93:33:f1:6c:34:b7:52:f4:4a:4b:29:ae:2d:1b:ae:
26:f7:26:74:99:2f:d2:0f:27:8f:b8:8e:fc:6a:15:6a:ce:a1:
e0:29:2e:87:7c:f0:af:9e:fe:52:19:26:c3:6a:bf:99:ad:47:
1a:15:53:d1:bd:76:2b:f1:61:af:45:7a:d1:05:bd:14:08:4b:
53:93:81:8c:ec:09:b0:95:3e:d2:49:c4:25:db:e0:7e:31:75:
08:ae:21:43:d1:7f:80:ce:d7:c6:d7:f0:9e:29:d7:6f:a0:1f:
c0:75:75:01:e1:2e:5f:65:d3:53:87:99:7c:35:c4:ff:64:bf:
98:6d:89:04:3e:e5:52:70:5c:00:bb:e3:f9:32:d9:7e:77:e3:
e9:cf:26:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//miKNW2+qe0RdZ97VU7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMzk4Mjg1ZTIyNzgyN2Q4ZjJjNTFmMWVhOTk3MzU3NTU0
YmU2MTIwHhcNMjUxMDIwMDUwMTI2WhcNMjUxMDIxMDUwMTI2WjAzMTEwLwYDVQQD
EyhmNTU5ZTk0MWE3MjNjY2FmODBiNDY0MjZkNTNmMTNjOTUwOGJhM2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW4J8PatVMSRbM6xH4EbKsBBU4OI
FYZedVtjA5qjgovc79/yxZvM1q37OIOD/qCmwemNF4geET5pWRAMlc1st3VP0W3Z
wOz+auqk3p2hdljkSlI7tXo4nDewaFBKeLEp0b4hj0ouyFu4be2wRAsXd6EO1B/8
VR04ofQF+vnV+L+AjyEtt5kQw5+io13leyCyW4wYo29AcdQX+OH/QBCowRfXotH4
voglFW6hvD6mh9L0LhZzoasOu2UxVr2yg/IiWKC789PUbxDbRLfR/x315akpBLqv
CDjIiFoxcGJiw/iuJ1ue7eWkk3pt8CyZA6RAh9j3fsUt/8AEkqJljHBLeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVZ6UGnI8yvgLRkJtU/E8lQi6OlMB8GA1UdIwQY
MBaAFB45goXiJ4J9jyxR8eqZc1dVS+YSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zMDk5ODAtYWZkNy00NTY5LWEyNWIt
ZTkwOWU0MWEwN2U1LzEvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8zMDk5ODAtYWZkNy00NTY5LWEyNWItZTkwOWU0MWEwN2U1
LzEvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYjDlRfW
bneOnZOGiFJ6f4VsivIQ6iWSCojkf8dsLylvTsxaUEyp8zeFIwX7N0nbwTh74Vxc
98xXo1pI/tGEaKTmiHVJd6X1hXjkQVAmerQAOcURvHRNxGx8CqWswtQwIezLcMhp
amBr5Mn3LBvskzPxbDS3UvRKSymuLRuuJvcmdJkv0g8nj7iO/GoVas6h4Ckuh3zw
r57+Uhkmw2q/ma1HGhVT0b12K/Fhr0V60QW9FAhLU5OBjOwJsJU+0knEJdvgfjF1
CK4hQ9F/gM7XxtfwninXb6AfwHV1AeEuX2XTU4eZfDXE/2S/mG2JBD7lUnBcALvj
+TLZfnfj6c8mow==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:20:02 2025 by rpki-client