Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
File: hJ463_A6q2LV2yI6w7NeKpuqTqM.mft (raw, json)
Hash identifier: FHZ7GiAZXxYJvmB0N6dyU04mOf5rHEFZptO9xdT8o1c=
Subject key identifier: 89:EF:87:08:B6:86:01:C8:81:21:B7:8D:C0:64:D4:04:C1:EA:4B:B4
Authority key identifier: 84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
Certificate issuer: /CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Certificate serial: 0199FFC894743E6F9AB46B7ADDB403755ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 04:02:39 +0000
Manifest this update: Mon 20 Oct 2025 04:02:39 +0000
Manifest next update: Tue 21 Oct 2025 04:02:39 +0000
Files and hashes: 1: SlIgtDyTd5cpyZ5qiIfHEefhUu8.roa (hash: cWooIQqAZCDw8Hk2WoTdEVBzSQhgQYC7c4wf4oYDYYU=)
2: hJ463_A6q2LV2yI6w7NeKpuqTqM.crl (hash: I8aBpUauIWhXVBMOmvLXxAuGCTjnWyYF7SJQNsBc6f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:94:74:3e:6f:9a:b4:6b:7a:dd:b4:03:75:5e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Validity
Not Before: Oct 20 04:02:39 2025 GMT
Not After : Oct 21 04:02:39 2025 GMT
Subject: CN=89ef8708b68601c88121b78dc064d404c1ea4bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c9:09:f2:c4:b5:c8:2b:12:7c:eb:c5:08:89:
a0:ab:d4:54:5b:36:c8:1c:94:10:82:08:9b:6e:e3:
3c:5f:63:94:6c:81:d4:dd:1e:75:25:d1:24:f2:56:
77:a3:8d:30:68:39:51:e9:a7:84:2c:54:2d:9b:41:
76:32:f6:b4:20:bc:a1:3a:62:df:e3:fc:18:4e:76:
b9:2b:02:c7:d8:d2:08:07:6c:cd:19:ef:c4:52:2e:
7c:b6:26:f4:a1:1e:0c:62:97:ee:88:be:db:7f:9f:
c7:bb:7f:e2:c0:89:79:e0:36:25:ba:1c:38:9b:b5:
c4:fc:ad:87:ba:2c:87:b1:20:a2:56:aa:d2:d8:5c:
d6:61:69:63:15:5c:d3:2f:7a:a1:1d:cd:e1:11:f8:
d4:ec:43:40:b2:13:7e:80:69:74:c9:26:de:d7:6a:
22:ed:a9:4e:79:e3:02:30:32:dd:1a:b0:ea:b1:aa:
4d:a3:c9:24:74:b1:e0:25:73:24:18:fd:35:14:68:
2a:f0:33:71:eb:a5:7d:7c:15:96:52:35:57:ff:5e:
22:07:62:14:fb:bc:8a:e1:8a:e3:ac:56:ac:59:1e:
2d:4e:bb:08:02:e2:bf:c4:5f:7a:7d:f9:49:ee:67:
3a:91:38:c2:90:db:ca:d7:7d:84:d1:a8:86:5e:80:
b4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EF:87:08:B6:86:01:C8:81:21:B7:8D:C0:64:D4:04:C1:EA:4B:B4
X509v3 Authority Key Identifier:
keyid:84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b6:ed:e9:bf:07:ba:d1:1f:d5:b1:21:bf:12:b4:cf:a3:d5:
54:4b:4f:4a:4f:a6:d7:c2:dc:eb:b0:19:7e:7f:ee:48:1b:fc:
11:33:0d:07:93:93:9e:a0:7d:62:3c:a7:62:0a:5e:19:52:ef:
40:df:da:b3:62:15:49:83:de:8f:63:3f:de:7c:70:04:44:09:
2f:6b:d9:c7:72:88:61:ee:69:20:5f:72:a9:da:49:25:de:25:
db:56:17:28:a2:a5:ac:fb:8a:3a:43:94:b3:97:c3:60:24:02:
67:f1:9a:5f:ea:0a:ac:d8:07:7c:9e:7f:6a:c0:3e:b8:63:8b:
91:6d:0e:01:38:56:df:78:dd:64:65:c7:fb:d7:44:a0:50:33:
6b:99:be:29:92:c8:49:1c:7d:e6:f7:47:fd:a6:5c:6f:6d:1b:
5c:2e:b0:29:b6:02:3d:bf:e6:11:ff:3c:c9:b8:f2:ea:c4:fb:
a0:cc:11:9e:c6:8e:b4:9f:21:b5:d5:bb:6a:2d:48:1e:ab:34:
8c:b9:6b:7b:73:e7:48:35:d4:26:12:e8:3b:26:81:0e:5b:f7:
4e:01:5d:f3:a2:2c:e2:c4:33:19:76:d4:68:61:9a:44:8f:0e:
30:02:31:64:41:52:b5:65:f4:c6:29:0b:83:56:f4:46:7f:83:
f0:f4:3a:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yJR0Pm+atGt63bQDdV7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OWUzYWRmZjAzYWFiNjJkNWRiMjIzYWMzYjM1ZTJhOWJh
YTRlYTMwHhcNMjUxMDIwMDQwMjM5WhcNMjUxMDIxMDQwMjM5WjAzMTEwLwYDVQQD
Eyg4OWVmODcwOGI2ODYwMWM4ODEyMWI3OGRjMDY0ZDQwNGMxZWE0YmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MkJ8sS1yCsSfOvFCImgq9RUWzbI
HJQQggibbuM8X2OUbIHU3R51JdEk8lZ3o40waDlR6aeELFQtm0F2Mva0ILyhOmLf
4/wYTna5KwLH2NIIB2zNGe/EUi58tib0oR4MYpfuiL7bf5/Hu3/iwIl54DYluhw4
m7XE/K2HuiyHsSCiVqrS2FzWYWljFVzTL3qhHc3hEfjU7ENAshN+gGl0ySbe12oi
7alOeeMCMDLdGrDqsapNo8kkdLHgJXMkGP01FGgq8DNx66V9fBWWUjVX/14iB2IU
+7yK4YrjrFasWR4tTrsIAuK/xF96fflJ7mc6kTjCkNvK132E0aiGXoC0fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInvhwi2hgHIgSG3jcBk1ATB6ku0MB8GA1UdIwQY
MBaAFISeOt/wOqti1dsiOsOzXiqbqk6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEo0NjNfQTZxMkxWMnlJNnc3TmVLcHVxVHFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8xYzFhNDktNDI4NS00OGJlLWExMGUt
ZWQxNjAwZjg3MmJiLzEvaEo0NjNfQTZxMkxWMnlJNnc3TmVLcHVxVHFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8xYzFhNDktNDI4NS00OGJlLWExMGUtZWQxNjAwZjg3MmJi
LzEvaEo0NjNfQTZxMkxWMnlJNnc3TmVLcHVxVHFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbbt6b8H
utEf1bEhvxK0z6PVVEtPSk+m18Lc67AZfn/uSBv8ETMNB5OTnqB9YjynYgpeGVLv
QN/as2IVSYPej2M/3nxwBEQJL2vZx3KIYe5pIF9yqdpJJd4l21YXKKKlrPuKOkOU
s5fDYCQCZ/GaX+oKrNgHfJ5/asA+uGOLkW0OAThW33jdZGXH+9dEoFAza5m+KZLI
SRx95vdH/aZcb20bXC6wKbYCPb/mEf88ybjy6sT7oMwRnsaOtJ8htdW7ai1IHqs0
jLlre3PnSDXUJhLoOyaBDlv3TgFd86Is4sQzGXbUaGGaRI8OMAIxZEFStWX0xikL
g1b0Rn+D8PQ61A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:58:38 2025 by rpki-client