Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
File: hjT51JOsy2gJAPRHofLJ97KzWKw.mft (raw, json)
Hash identifier: Hsv48IwgOZuvd1rJ3ZQFI1JknXr6v/EP2H9Zm7zY/Sg=
Subject key identifier: A7:73:39:24:0B:F4:1E:26:88:DA:D9:17:BC:05:64:ED:8C:E0:DC:A8
Authority key identifier: 86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
Certificate issuer: /CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Certificate serial: 019A01B57B4310D7AB970961E7961D4A3ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 13:01:01 +0000
Manifest this update: Mon 20 Oct 2025 13:01:01 +0000
Manifest next update: Tue 21 Oct 2025 13:01:01 +0000
Files and hashes: 1: hjT51JOsy2gJAPRHofLJ97KzWKw.crl (hash: 8C0bYMURdLig2MqLzspdIH/YqoSA20dJJzr0B96TbXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:7b:43:10:d7:ab:97:09:61:e7:96:1d:4a:3e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Validity
Not Before: Oct 20 13:01:01 2025 GMT
Not After : Oct 21 13:01:01 2025 GMT
Subject: CN=a77339240bf41e2688dad917bc0564ed8ce0dca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fd:f8:1e:45:ab:5b:e9:89:6d:d5:12:3e:2e:
b1:6e:b9:72:88:f3:94:9a:6d:49:f3:e2:27:4a:f0:
c8:99:7f:69:ce:14:c2:6c:82:88:5b:7a:6a:9e:ef:
d0:0b:ae:d4:4f:aa:82:4f:da:e3:a0:b8:68:57:49:
91:18:1c:bb:4b:a8:bc:e1:e6:24:ae:f9:a6:69:1e:
bd:54:dd:65:1e:ab:e0:84:34:08:dc:56:36:eb:8a:
fa:e9:a5:42:5d:f6:4f:a7:72:59:2c:58:d3:0c:e0:
6b:05:51:05:70:13:e4:90:d1:f8:24:e1:6b:b4:66:
44:c2:d7:82:d4:ac:8e:05:ba:63:47:05:d7:bd:81:
23:de:9f:d1:3d:18:9a:c2:5d:84:d8:4d:7e:a8:4f:
ca:a7:1b:a5:fe:15:5d:f9:31:77:55:ef:f5:af:27:
d7:d2:f2:71:1b:e3:0a:6b:c1:7a:c2:5a:21:2a:40:
9c:97:35:d7:57:d4:21:7e:59:a8:53:41:88:27:c6:
2d:07:be:6a:19:45:9d:ee:97:07:7c:54:1b:d4:33:
b3:bc:03:eb:8f:b2:89:bd:80:eb:e6:5b:65:1c:33:
64:8e:95:f7:12:70:48:a8:c0:c8:24:73:06:ae:06:
a3:40:49:37:26:45:dd:6e:94:57:ab:3c:ed:7f:c0:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:73:39:24:0B:F4:1E:26:88:DA:D9:17:BC:05:64:ED:8C:E0:DC:A8
X509v3 Authority Key Identifier:
keyid:86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c8:e7:bf:72:d0:ed:88:52:5d:31:ca:7d:d0:a0:a8:ac:93:
5e:c6:10:d6:ff:22:c3:c4:e1:21:93:a0:5b:0f:ec:2b:99:a9:
a7:52:c2:6d:1e:84:9d:d6:67:47:75:f8:6d:ad:3d:f5:f7:82:
1f:60:be:d3:67:1e:de:4e:96:df:b5:c5:8e:25:62:a8:3a:c3:
5f:cc:3c:1f:46:c3:ac:f9:bf:0d:92:bb:4b:8a:45:ab:d9:da:
4f:e1:be:eb:b7:79:27:90:1f:a6:22:20:07:7f:9a:42:07:6d:
94:63:9c:5f:e3:1c:ad:ac:1b:d9:b6:63:1a:08:6f:26:ee:89:
1e:c5:9d:10:41:ef:a3:e9:b2:03:09:35:36:b5:9e:ec:fe:78:
3f:f2:d7:04:21:ab:1a:86:85:32:2f:2a:f5:63:a9:e5:9d:13:
ec:1e:6e:2d:54:b3:7f:fa:43:6b:70:8d:e1:e5:81:54:83:57:
f3:31:b8:e7:6f:4f:26:f9:15:4e:8d:4a:37:ab:aa:82:f2:82:
93:c3:6d:1f:28:21:fa:db:55:a7:1c:55:26:8b:1c:4e:cc:13:
fe:e2:b5:8b:6d:f0:d2:af:70:72:f3:33:0c:a2:7f:f2:f8:5f:
d2:9f:eb:b1:77:44:f6:cc:7e:e9:70:8d:31:57:fc:65:bc:a8:
82:bf:0f:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtXtDENerlwlh55YdSj7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MzRmOWQ0OTNhY2NiNjgwOTAwZjQ0N2ExZjJjOWY3YjJi
MzU4YWMwHhcNMjUxMDIwMTMwMTAxWhcNMjUxMDIxMTMwMTAxWjAzMTEwLwYDVQQD
EyhhNzczMzkyNDBiZjQxZTI2ODhkYWQ5MTdiYzA1NjRlZDhjZTBkY2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/34HkWrW+mJbdUSPi6xbrlyiPOU
mm1J8+InSvDImX9pzhTCbIKIW3pqnu/QC67UT6qCT9rjoLhoV0mRGBy7S6i84eYk
rvmmaR69VN1lHqvghDQI3FY264r66aVCXfZPp3JZLFjTDOBrBVEFcBPkkNH4JOFr
tGZEwteC1KyOBbpjRwXXvYEj3p/RPRiawl2E2E1+qE/Kpxul/hVd+TF3Ve/1ryfX
0vJxG+MKa8F6wlohKkCclzXXV9QhflmoU0GIJ8YtB75qGUWd7pcHfFQb1DOzvAPr
j7KJvYDr5ltlHDNkjpX3EnBIqMDIJHMGrgajQEk3JkXdbpRXqzztf8B7IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdzOSQL9B4miNrZF7wFZO2M4NyoMB8GA1UdIwQY
MBaAFIY0+dSTrMtoCQD0R6Hyyfeys1isMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGpUNTFKT3N5MmdKQVBSSG9mTEo5N0t6V0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MzAyNTUtYjZlNS00NWZjLWI3NzYt
YjQzMGJkMjFhMjliLzEvaGpUNTFKT3N5MmdKQVBSSG9mTEo5N0t6V0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81MzAyNTUtYjZlNS00NWZjLWI3NzYtYjQzMGJkMjFhMjli
LzEvaGpUNTFKT3N5MmdKQVBSSG9mTEo5N0t6V0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMjnv3LQ
7YhSXTHKfdCgqKyTXsYQ1v8iw8ThIZOgWw/sK5mpp1LCbR6EndZnR3X4ba099feC
H2C+02ce3k6W37XFjiViqDrDX8w8H0bDrPm/DZK7S4pFq9naT+G+67d5J5AfpiIg
B3+aQgdtlGOcX+Mcrawb2bZjGghvJu6JHsWdEEHvo+myAwk1NrWe7P54P/LXBCGr
GoaFMi8q9WOp5Z0T7B5uLVSzf/pDa3CN4eWBVINX8zG4529PJvkVTo1KN6uqgvKC
k8NtHygh+ttVpxxVJoscTswT/uK1i23w0q9wcvMzDKJ/8vhf0p/rsXdE9sx+6XCN
MVf8Zbyogr8P7A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:02:28 2025 by rpki-client