Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
File: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft (raw, json)
Hash identifier: zok8ehTg9VbZBoYJV3vN8Q5W55s32GwneV6hxR6SUNE=
Subject key identifier: 15:60:6C:CE:C8:37:54:FD:ED:88:A7:7E:C2:9B:2A:A3:65:9A:38:CD
Authority key identifier: 84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E
Certificate issuer: /CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e
Certificate serial: 0199FD341EEC8F2AA357F19312170BA7C7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
Manifest number: 0214
Signing time: Sun 19 Oct 2025 16:01:15 +0000
Manifest this update: Sun 19 Oct 2025 16:01:15 +0000
Manifest next update: Mon 20 Oct 2025 16:01:15 +0000
Files and hashes: 1: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl (hash: cmwYG48arD3K+ovcy1uE56nnK4OfpcdIqcKtSj8VuRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1e:ec:8f:2a:a3:57:f1:93:12:17:0b:a7:c7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e
Validity
Not Before: Oct 19 16:01:15 2025 GMT
Not After : Oct 20 16:01:15 2025 GMT
Subject: CN=15606ccec83754fded88a77ec29b2aa3659a38cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:82:25:9e:a9:15:76:da:8d:55:2b:33:0b:88:
79:ff:ca:80:6c:38:5a:16:3d:c2:af:4f:ca:32:b1:
53:b3:2d:5f:19:61:7e:6a:b2:aa:07:55:d7:ee:75:
29:21:ad:40:bc:91:01:22:f9:2e:40:08:1e:75:64:
9b:d1:a8:e7:6e:9d:83:71:55:7b:c6:08:f2:90:5b:
74:ad:b2:91:0c:f3:fc:cc:ea:01:a2:07:da:1c:63:
21:38:f7:fe:f2:69:8c:0d:a1:ce:48:26:d8:0d:46:
12:bd:34:63:ba:d2:f3:43:e7:72:ae:d3:14:98:98:
75:1b:55:f6:5f:27:4d:80:14:12:36:4d:2b:13:d5:
6d:f6:16:68:8b:f7:cc:d3:a3:ed:85:03:cd:58:0d:
82:eb:8d:a2:7c:ea:6e:3a:68:f2:08:74:a4:38:af:
4a:3a:08:43:bc:75:d6:2e:98:5b:35:da:93:01:b5:
ab:d7:6b:9a:19:bc:ab:e5:18:d0:3f:3c:29:d5:21:
cd:58:9b:eb:c0:eb:05:a6:05:20:b5:d8:70:50:25:
25:b0:5a:68:8c:19:35:a9:a2:e0:ba:e9:0b:95:4e:
9d:60:23:cf:ed:5a:49:a6:c3:c4:fc:cd:65:4b:dc:
a6:c0:a5:00:52:b4:22:51:f9:ac:f3:0b:a5:a7:8c:
b5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:60:6C:CE:C8:37:54:FD:ED:88:A7:7E:C2:9B:2A:A3:65:9A:38:CD
X509v3 Authority Key Identifier:
keyid:84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d9:56:c5:f9:c6:71:5d:73:c4:c5:66:b2:91:7a:14:27:4d:
83:8a:1a:9e:fd:a3:ff:9f:55:f4:f2:c7:b4:f5:49:fc:f0:4f:
7d:59:51:2b:0e:fe:ee:b6:84:d3:45:3b:ea:99:02:92:bb:a3:
53:44:90:90:9a:15:28:8b:ad:4e:0f:41:19:f5:89:fb:ef:c8:
ce:ce:f1:25:be:8b:90:b6:8c:96:05:ac:95:ad:f9:68:5c:f2:
9e:60:0b:62:5e:83:b9:51:74:c2:95:94:82:a4:59:d8:9b:84:
81:e8:a7:4d:83:14:ef:f9:30:2e:0e:23:ac:a6:33:24:2d:d3:
7a:55:50:42:ca:60:7a:31:cd:f6:a5:cd:67:91:b5:08:6b:7b:
d5:7c:64:f3:fc:5d:00:11:dd:97:b9:3d:9e:e0:3a:66:cc:52:
7e:40:1f:0d:ad:49:f2:53:e8:e3:65:48:bc:04:1e:09:d4:a8:
0c:12:8d:a3:cb:0d:b3:8d:18:48:e0:b9:d5:61:ca:3b:c1:23:
d6:a5:b8:2d:5c:a2:01:85:c7:e2:da:e7:c6:30:3f:25:18:47:
8c:bf:ff:de:82:60:d8:2b:8b:79:32:06:16:27:0e:d2:f5:0d:
3d:10:85:be:84:c2:b1:3c:45:0c:50:f5:68:81:2a:79:81:90:
55:e1:26:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NB7sjyqjV/GTEhcLp8e/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OTliNjZhMjY5OTZlYmQ1Y2FiMGMyZWMzYjY3YzAyNWJm
MTA5NGUwHhcNMjUxMDE5MTYwMTE1WhcNMjUxMDIwMTYwMTE1WjAzMTEwLwYDVQQD
EygxNTYwNmNjZWM4Mzc1NGZkZWQ4OGE3N2VjMjliMmFhMzY1OWEzOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YIlnqkVdtqNVSszC4h5/8qAbDha
Fj3Cr0/KMrFTsy1fGWF+arKqB1XX7nUpIa1AvJEBIvkuQAgedWSb0ajnbp2DcVV7
xgjykFt0rbKRDPP8zOoBogfaHGMhOPf+8mmMDaHOSCbYDUYSvTRjutLzQ+dyrtMU
mJh1G1X2XydNgBQSNk0rE9Vt9hZoi/fM06PthQPNWA2C642ifOpuOmjyCHSkOK9K
OghDvHXWLphbNdqTAbWr12uaGbyr5RjQPzwp1SHNWJvrwOsFpgUgtdhwUCUlsFpo
jBk1qaLguukLlU6dYCPP7VpJpsPE/M1lS9ymwKUAUrQiUfms8wulp4y1EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVgbM7IN1T97YinfsKbKqNlmjjNMB8GA1UdIwQY
MBaAFISZtmommW69XKsMLsO2fAJb8QlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEptMmFpYVpicjFjcXd3dXc3WjhBbHZ4Q1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wMWJkYWUtODZjNS00YzE1LWE5OTgt
NWM5ZjliYjJkYjExLzEvaEptMmFpYVpicjFjcXd3dXc3WjhBbHZ4Q1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wMWJkYWUtODZjNS00YzE1LWE5OTgtNWM5ZjliYjJkYjEx
LzEvaEptMmFpYVpicjFjcXd3dXc3WjhBbHZ4Q1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtlWxfnG
cV1zxMVmspF6FCdNg4oanv2j/59V9PLHtPVJ/PBPfVlRKw7+7raE00U76pkCkruj
U0SQkJoVKIutTg9BGfWJ++/Izs7xJb6LkLaMlgWsla35aFzynmALYl6DuVF0wpWU
gqRZ2JuEgeinTYMU7/kwLg4jrKYzJC3TelVQQspgejHN9qXNZ5G1CGt71Xxk8/xd
ABHdl7k9nuA6ZsxSfkAfDa1J8lPo42VIvAQeCdSoDBKNo8sNs40YSOC51WHKO8Ej
1qW4LVyiAYXH4trnxjA/JRhHjL//3oJg2CuLeTIGFicO0vUNPRCFvoTCsTxFDFD1
aIEqeYGQVeEmRQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:08 2025 by rpki-client