Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
File: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft (raw, json)
Hash identifier: k9OM+A66IIKeiwOcDw9U4aLCG6SDDVSqykgY68RXrD8=
Subject key identifier: 0A:C9:0F:B7:E9:CE:B3:77:60:B4:95:08:82:A3:0D:86:40:7A:BF:BF
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 0199FE104AD869B15013910F985D4DDEF847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
Manifest number: 075D
Signing time: Sun 19 Oct 2025 20:01:44 +0000
Manifest this update: Sun 19 Oct 2025 20:01:44 +0000
Manifest next update: Mon 20 Oct 2025 20:01:44 +0000
Files and hashes: 1: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl (hash: o/ZfYfLF/sUuZidaR0iKcIavE77ADTgMtH+WDUV+BcE=)
2: stpDfm6iNdDYaLxAEW54ErOGA3g.roa (hash: 0TvfMldTzQqqOzNlOoBnIsJUFfnXCRYAaac2mQAq9jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:4a:d8:69:b1:50:13:91:0f:98:5d:4d:de:f8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: Oct 19 20:01:44 2025 GMT
Not After : Oct 20 20:01:44 2025 GMT
Subject: CN=0ac90fb7e9ceb37760b4950882a30d86407abfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:1f:df:16:43:c5:ff:a5:2c:9c:a3:c1:94:
88:7d:e4:79:31:1d:5d:e0:53:e4:54:d4:cd:b4:6f:
5b:bd:cc:d8:b2:41:dd:d2:55:3d:30:c8:bd:fa:53:
74:ff:db:94:fa:91:39:78:f6:50:7a:a5:bc:3e:07:
9c:11:9f:d7:51:5c:e6:e6:55:ee:92:a9:6c:72:3f:
6f:fb:af:95:d0:3f:14:bb:ee:9b:c6:db:cf:14:56:
57:cd:7a:e1:a6:15:57:aa:83:c3:93:9a:7d:23:d8:
a6:a0:dd:14:cd:f3:da:0d:d7:d9:f2:10:09:21:e5:
68:01:18:f8:d3:23:54:74:fe:5d:35:0e:26:18:be:
57:0c:ec:e5:9c:bb:fb:cd:e6:dc:5f:77:35:17:04:
56:e9:6c:d2:7d:b5:7d:66:ea:b2:05:e6:0c:c0:09:
c9:83:33:2d:5e:85:23:78:dc:d2:6b:3c:d3:3e:f3:
03:a5:88:cb:0c:07:58:75:5d:c5:f7:66:62:51:1f:
43:c1:cf:69:5c:b5:99:27:04:45:e4:d1:56:c0:85:
8d:f6:1a:1f:68:fe:3a:d6:b8:be:d8:86:18:10:aa:
f7:2e:df:9c:9c:8f:f8:28:1d:ed:46:b7:08:5e:03:
21:41:19:bb:ad:ed:4c:5b:bb:8a:18:b2:c2:e7:cf:
c6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C9:0F:B7:E9:CE:B3:77:60:B4:95:08:82:A3:0D:86:40:7A:BF:BF
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fd:f8:05:0b:a3:72:5a:54:58:3d:17:1c:fd:b3:6e:bb:46:
f0:a2:e3:e1:69:d4:e7:c2:41:f1:21:3d:21:ea:f6:f0:d1:04:
7a:5f:99:6f:c5:c7:2a:ae:64:f4:82:f1:c5:fc:1a:2d:7e:5f:
52:02:49:51:cb:c0:32:05:b1:89:24:40:70:e9:03:fa:0c:2a:
b3:56:cc:c9:1a:ec:a7:54:29:b8:1e:45:95:52:3a:d1:e9:33:
22:a5:9b:a2:d0:27:b5:25:4e:46:3a:03:66:69:33:bd:c3:2e:
ab:a3:ad:80:80:e1:59:69:9c:c6:a2:e4:ef:4a:66:cd:09:43:
58:51:4f:aa:12:ee:7f:b9:3d:3d:00:12:92:ac:93:74:97:93:
14:fc:f6:98:e3:33:78:85:b9:ea:37:cc:e5:f0:ae:5e:a9:4c:
3f:69:41:45:84:e6:c0:bc:b0:fd:e5:05:64:c1:90:e4:e7:1b:
a0:a8:08:5c:51:fe:37:c1:c1:aa:a1:b9:bc:34:78:79:00:de:
12:af:e1:b7:6a:6c:0f:5d:f6:fa:9b:d1:99:30:f6:30:a0:01:
9d:d4:a9:6d:42:1b:f2:1b:11:91:d8:f4:3f:be:6b:87:01:34:
32:e1:be:e1:fb:77:c4:78:34:11:1f:8a:de:42:d3:83:11:82:
f9:8c:ef:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EErYabFQE5EPmF1N3vhHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZWRjNGMxOWUwMzNhMTY3ZTRhZjc5NWQ1NGUzNGI3MWVh
MDkzYzYwHhcNMjUxMDE5MjAwMTQ0WhcNMjUxMDIwMjAwMTQ0WjAzMTEwLwYDVQQD
EygwYWM5MGZiN2U5Y2ViMzc3NjBiNDk1MDg4MmEzMGQ4NjQwN2FiZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEMf3xZDxf+lLJyjwZSIfeR5MR1d
4FPkVNTNtG9bvczYskHd0lU9MMi9+lN0/9uU+pE5ePZQeqW8PgecEZ/XUVzm5lXu
kqlscj9v+6+V0D8Uu+6bxtvPFFZXzXrhphVXqoPDk5p9I9imoN0UzfPaDdfZ8hAJ
IeVoARj40yNUdP5dNQ4mGL5XDOzlnLv7zebcX3c1FwRW6WzSfbV9ZuqyBeYMwAnJ
gzMtXoUjeNzSazzTPvMDpYjLDAdYdV3F92ZiUR9Dwc9pXLWZJwRF5NFWwIWN9hof
aP461ri+2IYYEKr3Lt+cnI/4KB3tRrcIXgMhQRm7re1MW7uKGLLC58/GNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArJD7fpzrN3YLSVCIKjDYZAer+/MB8GA1UdIwQY
MBaAFB/txMGeAzoWfkr3ldVONLceoJPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kZjkxYzMtZDViOC00YTU4LWFlOWUt
MmY4NzliNTc1NGUxLzEvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kZjkxYzMtZDViOC00YTU4LWFlOWUtMmY4NzliNTc1NGUx
LzEvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmv34BQuj
clpUWD0XHP2zbrtG8KLj4WnU58JB8SE9Ier28NEEel+Zb8XHKq5k9ILxxfwaLX5f
UgJJUcvAMgWxiSRAcOkD+gwqs1bMyRrsp1QpuB5FlVI60ekzIqWbotAntSVORjoD
ZmkzvcMuq6OtgIDhWWmcxqLk70pmzQlDWFFPqhLuf7k9PQASkqyTdJeTFPz2mOMz
eIW56jfM5fCuXqlMP2lBRYTmwLyw/eUFZMGQ5OcboKgIXFH+N8HBqqG5vDR4eQDe
Eq/ht2psD132+pvRmTD2MKABndSpbUIb8hsRkdj0P75rhwE0MuG+4ft3xHg0ER+K
3kLTgxGC+YzvYw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:55 2025 by rpki-client