Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
File: hcNSXWi2ERZWThbh3U5WywNcnIU.mft (raw, json)
Hash identifier: 7qn4a6458IpZeIdtUIjjGRQmi0+NUdN9VmONCS17CQY=
Subject key identifier: 29:19:AB:A3:EC:A1:92:08:39:E9:7C:DF:18:2B:44:07:6E:4B:2E:DD
Authority key identifier: 85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
Certificate issuer: /CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Certificate serial: 0199FD6B5DF3A491B52D47F823774F3FE6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 17:01:36 +0000
Manifest this update: Sun 19 Oct 2025 17:01:36 +0000
Manifest next update: Mon 20 Oct 2025 17:01:36 +0000
Files and hashes: 1: hEPXQgU_4RM48GU6YHvdaeu2Uew.roa (hash: Y8wvnBW02yBGPfnw7ReZF8CB9IAoGOhz+Y/sJITIMzc=)
2: hcNSXWi2ERZWThbh3U5WywNcnIU.crl (hash: XbzVyRpHCVflRa0y0Fgmq/HnM+OTVjQq7DLd7m35fhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:5d:f3:a4:91:b5:2d:47:f8:23:77:4f:3f:e6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Validity
Not Before: Oct 19 17:01:36 2025 GMT
Not After : Oct 20 17:01:36 2025 GMT
Subject: CN=2919aba3eca1920839e97cdf182b44076e4b2edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:35:07:1f:5d:f8:68:43:87:6c:87:bb:67:
1b:6a:e3:df:fd:c3:4d:f9:11:a3:12:c5:44:cd:04:
ca:7d:71:30:da:b2:42:4a:9f:26:40:87:81:f8:08:
f5:78:1f:0c:b7:9a:93:3c:0b:af:6c:26:bb:54:41:
ab:e3:7e:81:40:99:af:7c:2b:9c:c3:10:41:a6:a8:
de:f4:58:c0:6e:30:f5:34:03:2e:5d:55:ae:af:1f:
80:3c:b0:f0:55:5a:d6:56:ce:71:3f:e8:36:cf:55:
a4:a9:27:c9:33:eb:f8:24:b9:57:92:c5:3c:a9:c8:
fa:32:5e:b6:30:fb:33:ae:7f:c3:d4:93:f4:2b:21:
25:6f:11:1a:2c:be:65:8e:1c:bf:d6:13:59:ff:dc:
c0:bb:9b:f4:82:93:39:20:19:bb:8e:00:57:f6:74:
eb:1b:6e:df:cc:c3:70:fe:6a:88:37:36:ba:f8:56:
6a:d1:b4:91:6a:0d:bd:03:30:25:35:d5:b0:bf:d4:
b6:0c:ba:fa:53:b0:f9:e8:6b:50:7a:a5:05:fc:4d:
19:05:86:11:77:7c:76:54:fe:ad:e1:f3:ae:b9:56:
c3:04:c4:9d:28:26:5d:25:cd:44:5c:a6:f2:d0:35:
a9:c3:bc:14:9e:9c:28:1a:3c:dc:e5:c6:08:55:b5:
1a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:19:AB:A3:EC:A1:92:08:39:E9:7C:DF:18:2B:44:07:6E:4B:2E:DD
X509v3 Authority Key Identifier:
keyid:85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b5:57:c9:47:d4:02:63:2e:11:e0:13:20:b8:38:cb:66:db:
e8:53:57:11:d9:d0:3c:1c:90:d7:cf:da:ce:2e:2b:d0:c8:91:
4f:c1:44:c5:b8:7e:99:44:51:82:48:e0:2f:d9:86:09:9b:3c:
3d:2d:11:d9:c0:b0:d0:f6:0d:61:23:36:7e:b0:53:d1:e3:02:
db:59:c4:58:fb:a5:64:41:9c:de:4d:2e:f2:bf:01:c6:77:87:
92:bf:50:61:9b:38:ab:71:23:2d:fc:c8:4b:6c:f8:9f:0b:1a:
31:ea:cd:34:26:0c:c2:dd:45:22:0d:bb:84:20:fa:c1:06:b2:
fb:c1:d3:89:29:c2:ca:73:30:c1:f7:57:e2:33:b7:a7:1a:7d:
d7:64:21:db:ab:a5:2d:c8:99:8b:9a:77:0b:fa:e6:43:1d:03:
af:be:65:15:4a:52:4c:ca:ae:ca:27:4c:12:cb:b0:5e:05:ad:
89:3b:ab:f4:40:0e:c6:3a:4e:fb:c2:cd:a2:2f:c1:54:88:60:
35:e7:d8:1c:8f:4f:d9:24:eb:45:f7:96:bd:fc:d2:98:d5:8e:
90:a3:d1:2c:4c:52:d3:99:ad:31:66:2d:5c:40:47:a8:ec:0e:
5f:fe:2c:bb:e7:78:f7:73:06:76:e9:ef:63:ef:60:2d:e8:07:
74:0e:5d:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9a13zpJG1LUf4I3dPP+bMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YzM1MjVkNjhiNjExMTY1NjRlMTZlMWRkNGU1NmNiMDM1
YzljODUwHhcNMjUxMDE5MTcwMTM2WhcNMjUxMDIwMTcwMTM2WjAzMTEwLwYDVQQD
EygyOTE5YWJhM2VjYTE5MjA4MzllOTdjZGYxODJiNDQwNzZlNGIyZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSU1Bx9d+GhDh2yHu2cbauPf/cNN
+RGjEsVEzQTKfXEw2rJCSp8mQIeB+Aj1eB8Mt5qTPAuvbCa7VEGr436BQJmvfCuc
wxBBpqje9FjAbjD1NAMuXVWurx+APLDwVVrWVs5xP+g2z1WkqSfJM+v4JLlXksU8
qcj6Ml62MPszrn/D1JP0KyElbxEaLL5ljhy/1hNZ/9zAu5v0gpM5IBm7jgBX9nTr
G27fzMNw/mqINza6+FZq0bSRag29AzAlNdWwv9S2DLr6U7D56GtQeqUF/E0ZBYYR
d3x2VP6t4fOuuVbDBMSdKCZdJc1EXKby0DWpw7wUnpwoGjzc5cYIVbUaRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkZq6PsoZIIOel83xgrRAduSy7dMB8GA1UdIwQY
MBaAFIXDUl1othEWVk4W4d1OVssDXJyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGNOU1hXaTJFUlpXVGhiaDNVNVd5d05jbklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85ZmJlYzEtZWJkMi00MWJhLTgzZDkt
Njk0ZGJmYWRkYjhmLzEvaGNOU1hXaTJFUlpXVGhiaDNVNVd5d05jbklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi85ZmJlYzEtZWJkMi00MWJhLTgzZDktNjk0ZGJmYWRkYjhm
LzEvaGNOU1hXaTJFUlpXVGhiaDNVNVd5d05jbklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArrVXyUfU
AmMuEeATILg4y2bb6FNXEdnQPByQ18/azi4r0MiRT8FExbh+mURRgkjgL9mGCZs8
PS0R2cCw0PYNYSM2frBT0eMC21nEWPulZEGc3k0u8r8BxneHkr9QYZs4q3EjLfzI
S2z4nwsaMerNNCYMwt1FIg27hCD6wQay+8HTiSnCynMwwfdX4jO3pxp912Qh26ul
LciZi5p3C/rmQx0Dr75lFUpSTMquyidMEsuwXgWtiTur9EAOxjpO+8LNoi/BVIhg
NefYHI9P2STrRfeWvfzSmNWOkKPRLExS05mtMWYtXEBHqOwOX/4su+d493MGdunv
Y+9gLegHdA5duw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:20 2025 by rpki-client