Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft
File: hDz1u4drdyt63kMpBctpbxNMqjk.mft (raw, json)
Hash identifier: AUFLFM2kQxwjJrnyEOlCuLoDI8M/8tqYIUmFnO26I+s=
Subject key identifier: 38:B4:FD:74:0C:18:37:E1:C1:2E:4D:18:44:1C:A0:C1:DB:EF:6F:86
Authority key identifier: 84:3C:F5:BB:87:6B:77:2B:7A:DE:43:29:05:CB:69:6F:13:4C:AA:39
Certificate issuer: /CN=843cf5bb876b772b7ade432905cb696f134caa39
Certificate serial: 0199FC5873C78457E799BA9A462E47EC3389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 12:01:19 +0000
Manifest this update: Sun 19 Oct 2025 12:01:19 +0000
Manifest next update: Mon 20 Oct 2025 12:01:19 +0000
Files and hashes: 1: 8SOVzbdZRi1TiXuPdQBPQag2b1I.roa (hash: 4UxgH1Bm5rLISlPUt1abtwizcDNcCBaAAK4mH1Wxzxk=)
2: hDz1u4drdyt63kMpBctpbxNMqjk.crl (hash: LOtMyx2qZ3gjHqeJ9E7g5EC5S0FMh4t+Pupc3qbdPZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:73:c7:84:57:e7:99:ba:9a:46:2e:47:ec:33:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843cf5bb876b772b7ade432905cb696f134caa39
Validity
Not Before: Oct 19 12:01:19 2025 GMT
Not After : Oct 20 12:01:19 2025 GMT
Subject: CN=38b4fd740c1837e1c12e4d18441ca0c1dbef6f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:56:e8:e9:9e:c3:f9:1a:9e:df:42:66:6f:
b4:20:de:d7:28:33:ba:71:66:65:f4:76:06:e2:3c:
57:36:3e:ef:06:1d:34:08:e1:2a:60:c4:22:1e:a9:
e9:4b:5e:b6:25:2b:dc:41:24:43:e5:cc:38:ed:90:
57:6f:72:74:c0:94:d4:24:12:20:6c:05:83:0a:54:
96:0e:17:76:bb:04:c8:31:c6:88:ae:32:83:19:30:
26:22:b6:e3:ca:bb:f5:3a:9d:3a:45:50:a9:09:b7:
cd:70:00:5a:62:c8:05:03:2e:ba:c4:26:e1:ff:98:
de:5c:35:5a:04:e4:7b:6a:ca:87:97:9d:ae:e4:8d:
2f:10:ac:0a:84:f8:e0:f6:dc:5a:bc:8b:f8:31:cd:
d7:73:08:46:c6:3e:0c:3b:e6:9e:10:c1:f9:e4:06:
00:01:2d:d4:eb:59:3d:ef:cd:96:27:cc:b0:ca:21:
3e:98:c7:0e:75:b0:0b:ca:01:2b:3f:5a:30:7a:16:
54:ec:0e:77:2c:22:f8:e4:e1:13:85:18:48:de:42:
3e:f4:bc:ba:e6:f8:36:30:18:e8:36:a2:52:9f:ae:
f8:7b:f6:2e:a2:ff:2e:e6:d6:77:91:c5:73:40:72:
99:e1:27:d1:58:05:d5:32:36:f5:dd:ef:f3:07:8b:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B4:FD:74:0C:18:37:E1:C1:2E:4D:18:44:1C:A0:C1:DB:EF:6F:86
X509v3 Authority Key Identifier:
keyid:84:3C:F5:BB:87:6B:77:2B:7A:DE:43:29:05:CB:69:6F:13:4C:AA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:92:b3:b1:81:84:26:ea:a5:78:8e:67:84:db:f0:72:cc:9d:
4c:61:98:16:80:bb:b8:38:aa:b4:4e:c6:87:83:e3:9b:ad:24:
e2:ed:c6:aa:d2:9c:83:8d:b4:c6:56:3c:29:b1:a4:87:83:3f:
2d:f1:ef:7f:81:6e:d3:e4:78:bf:9a:9c:00:4a:54:3b:a0:15:
0c:32:71:39:20:62:3a:1f:95:c4:16:2d:52:74:1a:82:53:59:
5d:a2:62:77:43:19:bd:5d:69:55:43:1e:ae:b9:c4:90:08:ab:
e4:b0:fa:1e:c9:a6:00:96:1c:d3:e9:84:dc:61:21:98:58:f0:
67:50:db:eb:c0:42:47:c8:46:4e:5c:76:12:8f:06:fc:a9:94:
cd:ad:cd:26:fb:0b:52:fc:42:95:dc:50:45:b9:11:62:d1:44:
c9:e6:f9:5b:38:e6:49:1d:2f:97:3c:87:bd:8e:e7:40:7c:33:
97:d0:a0:a8:4f:0e:3f:55:ef:df:d2:a7:83:27:75:1b:b1:51:
09:9b:e3:f4:c8:32:be:d2:dd:a9:bb:53:9d:73:4f:67:e3:39:
d2:86:93:f5:fc:a6:c6:9e:74:b1:af:e9:7f:af:80:fa:3d:c9:
d2:e0:1e:2f:d3:a7:42:d8:11:33:5e:70:1c:0c:18:57:0a:8b:
0d:37:d2:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WHPHhFfnmbqaRi5H7DOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0M2NmNWJiODc2Yjc3MmI3YWRlNDMyOTA1Y2I2OTZmMTM0
Y2FhMzkwHhcNMjUxMDE5MTIwMTE5WhcNMjUxMDIwMTIwMTE5WjAzMTEwLwYDVQQD
EygzOGI0ZmQ3NDBjMTgzN2UxYzEyZTRkMTg0NDFjYTBjMWRiZWY2Zjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ERW6Omew/kant9CZm+0IN7XKDO6
cWZl9HYG4jxXNj7vBh00COEqYMQiHqnpS162JSvcQSRD5cw47ZBXb3J0wJTUJBIg
bAWDClSWDhd2uwTIMcaIrjKDGTAmIrbjyrv1Op06RVCpCbfNcABaYsgFAy66xCbh
/5jeXDVaBOR7asqHl52u5I0vEKwKhPjg9txavIv4Mc3XcwhGxj4MO+aeEMH55AYA
AS3U61k9782WJ8ywyiE+mMcOdbALygErP1owehZU7A53LCL45OEThRhI3kI+9Ly6
5vg2MBjoNqJSn674e/Yuov8u5tZ3kcVzQHKZ4SfRWAXVMjb13e/zB4tseQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDi0/XQMGDfhwS5NGEQcoMHb72+GMB8GA1UdIwQY
MBaAFIQ89buHa3cret5DKQXLaW8TTKo5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaER6MXU0ZHJkeXQ2M2tNcEJjdHBieE5NcWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81MTIyMTQtZTc4ZS00OTMxLWJmYmIt
MTZmNWE1NjM2MjQ0LzEvaER6MXU0ZHJkeXQ2M2tNcEJjdHBieE5NcWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny81MTIyMTQtZTc4ZS00OTMxLWJmYmItMTZmNWE1NjM2MjQ0
LzEvaER6MXU0ZHJkeXQ2M2tNcEJjdHBieE5NcWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZKzsYGE
JuqleI5nhNvwcsydTGGYFoC7uDiqtE7Gh4Pjm60k4u3GqtKcg420xlY8KbGkh4M/
LfHvf4Fu0+R4v5qcAEpUO6AVDDJxOSBiOh+VxBYtUnQaglNZXaJid0MZvV1pVUMe
rrnEkAir5LD6HsmmAJYc0+mE3GEhmFjwZ1Db68BCR8hGTlx2Eo8G/KmUza3NJvsL
UvxCldxQRbkRYtFEyeb5WzjmSR0vlzyHvY7nQHwzl9CgqE8OP1Xv39Kngyd1G7FR
CZvj9MgyvtLdqbtTnXNPZ+M50oaT9fymxp50sa/pf6+A+j3J0uAeL9OnQtgRM15w
HAwYVwqLDTfSag==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:21 2025 by rpki-client