Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/95ba48-f188-4d2c-88ff-f05afcc02800/1/HOQzXucbfY2fH_ye5ardH6-UXGU.mft
File: HOQzXucbfY2fH_ye5ardH6-UXGU.mft (raw, json)
Hash identifier: 9lqJtMTMyQsnko7ED60uTcWeuF2d3LgrxQOVekxao54=
Subject key identifier: A3:59:A5:43:C8:96:F3:DA:6A:0F:22:EF:CB:DD:89:5F:51:6C:25:C3
Authority key identifier: 1C:E4:33:5E:E7:1B:7D:8D:9F:1F:FC:9E:E5:AA:DD:1F:AF:94:5C:65
Certificate issuer: /CN=1ce4335ee71b7d8d9f1ffc9ee5aadd1faf945c65
Certificate serial: 0199FB0EF6058727DC11C9FDCEF7F2C61512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOQzXucbfY2fH_ye5ardH6-UXGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/95ba48-f188-4d2c-88ff-f05afcc02800/1/HOQzXucbfY2fH_ye5ardH6-UXGU.mft
Manifest number: 8C
Signing time: Sun 19 Oct 2025 06:01:25 +0000
Manifest this update: Sun 19 Oct 2025 06:01:25 +0000
Manifest next update: Mon 20 Oct 2025 06:01:25 +0000
Files and hashes: 1: HOQzXucbfY2fH_ye5ardH6-UXGU.crl (hash: v/LlCArqW6R8rPSxI4vDkPqe7FEPOdgJdob2ITepzSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/95ba48-f188-4d2c-88ff-f05afcc02800/1/HOQzXucbfY2fH_ye5ardH6-UXGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/95ba48-f188-4d2c-88ff-f05afcc02800/1/HOQzXucbfY2fH_ye5ardH6-UXGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOQzXucbfY2fH_ye5ardH6-UXGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:f6:05:87:27:dc:11:c9:fd:ce:f7:f2:c6:15:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ce4335ee71b7d8d9f1ffc9ee5aadd1faf945c65
Validity
Not Before: Oct 19 06:01:25 2025 GMT
Not After : Oct 20 06:01:25 2025 GMT
Subject: CN=a359a543c896f3da6a0f22efcbdd895f516c25c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:ad:3b:bf:6d:cd:d6:aa:c7:c3:9f:06:31:
10:f9:90:a8:2a:7a:ab:1f:ad:81:7b:a0:fc:43:e2:
73:c4:b9:be:c0:59:f9:2e:69:9d:29:fc:b3:95:a1:
3b:2d:a2:3f:dc:b2:56:27:76:18:f3:06:34:23:3f:
6b:85:27:7c:d6:c8:7e:b7:22:b1:46:cd:38:60:5d:
1f:25:3f:30:73:61:63:fe:d5:ee:b1:aa:de:35:c5:
1e:d8:56:23:93:08:71:44:67:50:20:e3:31:0b:a9:
bb:1c:a6:22:93:6d:28:ec:93:1e:3c:9f:d7:03:19:
e3:f4:a3:9f:39:2b:7b:ed:68:fb:a5:93:f0:59:82:
0e:cc:8d:fb:83:7b:66:ec:8c:b6:c6:a0:ee:d0:3b:
89:8d:fc:b1:c5:55:91:65:b5:1a:4c:72:79:c5:00:
24:dc:ba:c9:1f:42:3d:f5:68:2e:0d:6d:d2:a1:71:
53:2e:c6:be:71:47:e6:86:c1:69:9e:25:6b:95:29:
78:67:e4:b0:98:14:68:0b:28:fb:21:e0:33:1c:03:
06:c2:4e:15:76:04:5b:b9:a4:90:28:49:e9:5a:71:
31:41:d2:8f:b3:38:d5:1e:ae:8f:47:07:b9:53:5a:
b6:49:f6:b2:f4:a8:38:b2:1f:81:d5:3b:71:3c:98:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:59:A5:43:C8:96:F3:DA:6A:0F:22:EF:CB:DD:89:5F:51:6C:25:C3
X509v3 Authority Key Identifier:
keyid:1C:E4:33:5E:E7:1B:7D:8D:9F:1F:FC:9E:E5:AA:DD:1F:AF:94:5C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOQzXucbfY2fH_ye5ardH6-UXGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/95ba48-f188-4d2c-88ff-f05afcc02800/1/HOQzXucbfY2fH_ye5ardH6-UXGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/95ba48-f188-4d2c-88ff-f05afcc02800/1/HOQzXucbfY2fH_ye5ardH6-UXGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e5:69:b2:07:cd:0b:ad:3c:7d:b0:0a:85:69:42:ba:e9:e6:
63:d7:69:e6:70:20:c3:b4:4a:41:02:f2:f6:6c:25:0d:fb:37:
b0:d3:62:e5:d1:55:77:d6:e3:b9:8c:09:a0:06:42:d0:34:36:
00:38:e6:6e:f2:b8:f6:17:12:4a:30:c2:05:61:fe:62:2d:ff:
01:34:72:c4:2e:a9:3f:08:64:b2:06:e9:3a:fb:3b:ac:8d:78:
c3:b0:63:fb:e3:aa:45:a7:8d:05:8d:66:77:6c:44:b8:cb:de:
1a:a7:c6:bd:6e:81:d7:4b:05:c3:69:a5:93:5e:77:2a:b2:6f:
41:da:58:1b:88:58:11:0f:b6:85:35:94:d0:61:2b:ac:23:ac:
87:31:0e:29:d8:a8:2b:e3:09:23:90:d0:38:de:5b:c4:18:07:
8f:02:c3:48:4d:24:6e:d8:a5:d8:57:bb:f0:bb:b1:9e:26:01:
ce:b5:d2:cd:8d:2e:03:65:4b:22:29:79:71:78:32:ae:10:aa:
82:5f:4c:62:3f:79:19:fc:e7:09:9c:a9:b2:72:3d:f7:f4:b2:
9e:c7:19:db:4e:f8:9f:98:7c:29:d4:6b:a0:b4:cc:b3:4c:fd:
9c:db:49:89:89:1c:89:98:81:87:bd:bf:e1:2d:5c:61:6a:48:
24:f0:ab:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DvYFhyfcEcn9zvfyxhUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZTQzMzVlZTcxYjdkOGQ5ZjFmZmM5ZWU1YWFkZDFmYWY5
NDVjNjUwHhcNMjUxMDE5MDYwMTI1WhcNMjUxMDIwMDYwMTI1WjAzMTEwLwYDVQQD
EyhhMzU5YTU0M2M4OTZmM2RhNmEwZjIyZWZjYmRkODk1ZjUxNmMyNWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbetO79tzdaqx8OfBjEQ+ZCoKnqr
H62Be6D8Q+JzxLm+wFn5LmmdKfyzlaE7LaI/3LJWJ3YY8wY0Iz9rhSd81sh+tyKx
Rs04YF0fJT8wc2Fj/tXusareNcUe2FYjkwhxRGdQIOMxC6m7HKYik20o7JMePJ/X
Axnj9KOfOSt77Wj7pZPwWYIOzI37g3tm7Iy2xqDu0DuJjfyxxVWRZbUaTHJ5xQAk
3LrJH0I99WguDW3SoXFTLsa+cUfmhsFpniVrlSl4Z+SwmBRoCyj7IeAzHAMGwk4V
dgRbuaSQKEnpWnExQdKPszjVHq6PRwe5U1q2Sfay9Kg4sh+B1TtxPJik/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNZpUPIlvPaag8i78vdiV9RbCXDMB8GA1UdIwQY
MBaAFBzkM17nG32Nnx/8nuWq3R+vlFxlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE9Relh1Y2JmWTJmSF95ZTVhcmRINi1VWEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi85NWJhNDgtZjE4OC00ZDJjLTg4ZmYt
ZjA1YWZjYzAyODAwLzEvSE9Relh1Y2JmWTJmSF95ZTVhcmRINi1VWEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi85NWJhNDgtZjE4OC00ZDJjLTg4ZmYtZjA1YWZjYzAyODAw
LzEvSE9Relh1Y2JmWTJmSF95ZTVhcmRINi1VWEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOVpsgfN
C608fbAKhWlCuunmY9dp5nAgw7RKQQLy9mwlDfs3sNNi5dFVd9bjuYwJoAZC0DQ2
ADjmbvK49hcSSjDCBWH+Yi3/ATRyxC6pPwhksgbpOvs7rI14w7Bj++OqRaeNBY1m
d2xEuMveGqfGvW6B10sFw2mlk153KrJvQdpYG4hYEQ+2hTWU0GErrCOshzEOKdio
K+MJI5DQON5bxBgHjwLDSE0kbtil2Fe78LuxniYBzrXSzY0uA2VLIil5cXgyrhCq
gl9MYj95GfznCZypsnI99/SynscZ2074n5h8KdRroLTMs0z9nNtJiYkciZiBh72/
4S1cYWpIJPCrGw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:19 2025 by rpki-client