Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
File: HRUAB3Kzw_orvXcn09OJORoUYz4.mft (raw, json)
Hash identifier: APGOOXjIgMv9M/T4GTdWWEEXVwqmgeqKToibj2CLtLo=
Subject key identifier: 99:17:0B:0E:F9:F8:B2:33:A7:E5:34:2A:24:0A:D6:D0:4E:71:DB:4C
Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Certificate serial: 0199FCC6C01ED5329ADD2391B74E7D32D671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
Manifest number: 0502
Signing time: Sun 19 Oct 2025 14:01:47 +0000
Manifest this update: Sun 19 Oct 2025 14:01:47 +0000
Manifest next update: Mon 20 Oct 2025 14:01:47 +0000
Files and hashes: 1: 94kIYfqeFgknlBrr_TOvpCgSdqU.roa (hash: 81jYnPOJR+qUf9stNF6tQ8TBm+nuWM6vD4G5gF21A04=)
2: HRUAB3Kzw_orvXcn09OJORoUYz4.crl (hash: HhHcZBuzFZqxdeO2Er9A89FSjST0Zanl2XlBMtmdqIA=)
3: l4DfAejnNf8QL8LGIhGHT7CKlPg.roa (hash: UVDw7ayj2zIkMp75EMvrYNj0kdy6A1Nen9DvYGACBW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c0:1e:d5:32:9a:dd:23:91:b7:4e:7d:32:d6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Validity
Not Before: Oct 19 14:01:47 2025 GMT
Not After : Oct 20 14:01:47 2025 GMT
Subject: CN=99170b0ef9f8b233a7e5342a240ad6d04e71db4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:63:18:5d:f3:61:40:92:23:a8:aa:f5:0a:
19:e3:cc:57:d2:d5:c1:b2:7d:18:44:da:a1:70:eb:
de:44:3c:95:80:8e:fe:78:e7:8f:e4:7d:c6:6f:1f:
94:5b:b8:a2:0d:29:70:e6:39:71:2c:93:da:0c:47:
b2:d8:17:cd:83:d2:57:c1:3f:48:89:4c:86:9e:ad:
1b:47:40:fa:9c:3d:9a:31:87:a9:26:01:fa:50:37:
61:9c:91:e4:c7:fe:e3:9c:e8:18:84:be:5b:39:66:
3c:fd:4e:f0:84:35:2a:36:e9:ff:07:e1:70:26:84:
b3:8e:c9:46:4f:50:47:a9:fa:7e:81:a9:bf:ca:00:
a1:39:32:ae:8f:63:2e:cd:47:41:62:c3:6f:99:24:
42:ab:ad:66:54:05:86:5c:96:95:aa:8b:40:66:af:
cc:20:22:85:b6:f1:81:85:bb:d8:79:57:b8:3c:c6:
8b:74:ba:71:69:90:21:1c:9c:05:1c:99:f2:3a:91:
ec:d9:78:d0:18:e2:4b:e7:5b:0c:50:d0:d2:1c:fb:
65:7e:59:a9:8a:6b:a7:fa:bf:d1:53:cf:a8:d4:6c:
ac:29:50:89:9a:26:5d:b7:33:b6:e9:ca:73:e4:55:
78:f6:cc:90:db:7f:bd:0a:fd:7b:a1:01:18:cf:7f:
b2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:17:0B:0E:F9:F8:B2:33:A7:E5:34:2A:24:0A:D6:D0:4E:71:DB:4C
X509v3 Authority Key Identifier:
keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:28:04:4f:5a:85:59:52:0c:3d:1b:38:a0:7d:cc:85:a6:62:
12:d3:ef:01:ff:4a:32:9d:61:e0:a0:fc:a7:58:c6:f6:d2:6c:
aa:d6:14:44:04:44:48:18:3c:af:07:cb:bc:7c:9f:51:31:3c:
f2:19:1a:85:77:89:da:eb:03:74:37:f6:fa:32:26:2e:34:af:
64:41:57:1b:e0:94:11:2b:e7:30:a6:3b:fe:c1:cd:fb:82:37:
cc:05:00:c5:13:ba:17:4b:50:96:30:c8:41:89:73:72:9e:a6:
7e:49:2b:79:ed:30:33:cb:fc:78:2c:d1:1f:64:e9:31:c1:d3:
fc:f9:d4:cf:75:a0:d9:06:1d:d7:b0:0d:03:0e:42:3a:fa:6d:
6a:cf:67:b7:a4:23:cd:f8:67:05:df:ad:9d:2c:96:48:a7:2a:
94:60:b1:56:e6:fd:2e:67:bf:83:9c:a8:b3:74:d3:51:f0:36:
0b:12:7d:64:07:3b:35:bc:e8:55:2e:b6:0c:61:43:71:fa:cb:
4f:64:83:c7:62:f7:23:6b:d9:e8:bd:23:63:d5:d3:d3:84:9d:
ae:0c:c5:19:69:4e:3a:4d:d4:6a:64:fe:80:d3:03:fe:f9:02:
3b:b8:92:12:11:ce:fa:ef:c1:b6:06:0b:fa:4b:45:67:91:98:
51:0e:29:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xsAe1TKa3SORt059MtZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMTUwMDA3NzJiM2MzZmEyYmJkNzcyN2QzZDM4OTM5MWEx
NDYzM2UwHhcNMjUxMDE5MTQwMTQ3WhcNMjUxMDIwMTQwMTQ3WjAzMTEwLwYDVQQD
Eyg5OTE3MGIwZWY5ZjhiMjMzYTdlNTM0MmEyNDBhZDZkMDRlNzFkYjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0NjGF3zYUCSI6iq9QoZ48xX0tXB
sn0YRNqhcOveRDyVgI7+eOeP5H3Gbx+UW7iiDSlw5jlxLJPaDEey2BfNg9JXwT9I
iUyGnq0bR0D6nD2aMYepJgH6UDdhnJHkx/7jnOgYhL5bOWY8/U7whDUqNun/B+Fw
JoSzjslGT1BHqfp+gam/ygChOTKuj2MuzUdBYsNvmSRCq61mVAWGXJaVqotAZq/M
ICKFtvGBhbvYeVe4PMaLdLpxaZAhHJwFHJnyOpHs2XjQGOJL51sMUNDSHPtlflmp
imun+r/RU8+o1GysKVCJmiZdtzO26cpz5FV49syQ23+9Cv17oQEYz3+ygQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkXCw75+LIzp+U0KiQK1tBOcdtMMB8GA1UdIwQY
MBaAFB0VAAdys8P6K713J9PTiTkaFGM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jZDY0NzgtY2VmNi00YTcwLWI0ODgt
YjIxMjlmYjRjYTVhLzEvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9jZDY0NzgtY2VmNi00YTcwLWI0ODgtYjIxMjlmYjRjYTVh
LzEvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCgET1qF
WVIMPRs4oH3MhaZiEtPvAf9KMp1h4KD8p1jG9tJsqtYURARESBg8rwfLvHyfUTE8
8hkahXeJ2usDdDf2+jImLjSvZEFXG+CUESvnMKY7/sHN+4I3zAUAxRO6F0tQljDI
QYlzcp6mfkkree0wM8v8eCzRH2TpMcHT/PnUz3Wg2QYd17ANAw5COvptas9nt6Qj
zfhnBd+tnSyWSKcqlGCxVub9Lme/g5yos3TTUfA2CxJ9ZAc7NbzoVS62DGFDcfrL
T2SDx2L3I2vZ6L0jY9XT04SdrgzFGWlOOk3UamT+gNMD/vkCO7iSEhHO+u/BtgYL
+ktFZ5GYUQ4pjw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:23 2025 by rpki-client