Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
File: HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft (raw, json)
Hash identifier: LlIIJ6LjUq1f9atSfkM2+p4iCOCxDDZ/xtCw6YIHLz0=
Subject key identifier: 83:C0:9B:E4:04:BB:B6:74:E2:6B:06:35:DD:2A:DF:2A:C3:B9:D4:88
Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
Certificate issuer: /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Certificate serial: 0199FFC7BBC4F89907A6EA9E1B1D10A7E80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
Manifest number: 1635
Signing time: Mon 20 Oct 2025 04:01:43 +0000
Manifest this update: Mon 20 Oct 2025 04:01:43 +0000
Manifest next update: Tue 21 Oct 2025 04:01:43 +0000
Files and hashes: 1: 7Uvp6r5GtLtDblaOxc-Xb4Tnilc.roa (hash: pSYNsxlb943anM3s10VieWyFa7UKpRe9Vz625JGzG6g=)
2: HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl (hash: bzLtfz70/EfV0qi3+EPuVe7EPFlZXVqNKXwNRUEPYPQ=)
3: eg7fhNdpROAUHy6qw77Qs2byi9Y.roa (hash: +DdhEKVICFbvbrCM7pp6/vAQohYV0VdhfUhy9Z1h54o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:bb:c4:f8:99:07:a6:ea:9e:1b:1d:10:a7:e8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Validity
Not Before: Oct 20 04:01:43 2025 GMT
Not After : Oct 21 04:01:43 2025 GMT
Subject: CN=83c09be404bbb674e26b0635dd2adf2ac3b9d488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:db:f7:b1:f2:51:fa:b0:c1:82:3e:c0:94:
b2:6f:37:f0:b9:6f:2a:62:53:14:a4:67:21:71:15:
02:84:1b:6e:1b:8c:17:56:0e:41:bb:ae:1d:b2:59:
43:1b:33:0c:02:83:fd:fa:5e:28:b1:07:a2:00:21:
fb:41:54:fa:19:a8:99:4b:11:98:4f:e0:d3:c5:f2:
f6:05:5c:b0:27:7c:d2:65:5b:1b:1e:d6:5e:7a:88:
c8:be:1b:f7:78:96:17:1a:96:45:b6:31:f0:48:1a:
1d:ac:8e:0a:7d:07:46:0c:75:c6:f7:c5:d7:ab:59:
4b:61:f2:13:a1:45:31:72:7c:a4:b2:ba:68:b5:97:
a4:f1:03:14:8f:d3:0c:8a:63:ff:f5:51:8a:e0:aa:
d8:88:9b:0f:8e:c9:61:f8:13:c8:c5:cd:ec:8e:32:
c0:d3:5a:04:02:a6:85:52:79:16:d9:a9:7a:c1:34:
57:9c:23:16:ba:ee:0d:41:ca:a2:b4:fa:cf:b9:47:
f5:c8:d8:50:d8:aa:89:ce:f0:4c:77:1a:f7:f7:b4:
d6:ee:ba:cc:df:2e:ba:35:15:1a:b7:cc:f5:8b:34:
c6:63:61:76:a7:74:36:69:00:8f:99:46:f1:1e:61:
3c:05:33:d5:60:02:bb:fb:1e:b5:75:64:95:5e:41:
c0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C0:9B:E4:04:BB:B6:74:E2:6B:06:35:DD:2A:DF:2A:C3:B9:D4:88
X509v3 Authority Key Identifier:
keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a9:6a:7b:eb:44:fa:b3:df:05:1e:1e:3f:24:84:a4:19:76:
97:3b:10:21:44:d9:7a:56:d6:94:9c:54:66:ac:b2:b5:27:1b:
16:39:17:14:22:cd:19:25:d9:e5:a7:c2:dd:ef:e5:8f:e2:fb:
9d:ad:e1:09:ac:72:74:bc:a7:ee:ec:71:18:fc:eb:5a:73:19:
ff:d2:e3:17:0e:31:f9:5f:e4:fc:55:25:27:0b:13:30:1c:88:
bd:40:29:64:45:de:76:a3:65:d9:d3:33:dd:6d:59:71:5a:8e:
66:ce:b2:1a:bc:2f:07:b0:50:13:d4:46:89:07:4d:ea:34:b5:
aa:eb:20:16:c0:ea:6c:35:bb:92:a9:2e:4a:cc:3d:a5:41:54:
ec:d4:1e:c2:0e:44:7b:c1:80:eb:77:53:ca:38:ce:12:45:28:
42:f6:f6:04:20:4c:ed:44:7e:23:51:a7:73:51:77:8c:b2:77:
e7:5f:06:e2:b2:2c:7b:54:ef:ca:e2:7f:11:8d:76:45:02:0a:
4f:ea:6b:48:6f:71:c4:e4:b4:79:be:bc:2e:67:f2:c3:92:b7:
b0:66:e7:e8:2a:05:89:69:44:5d:01:4f:d6:29:96:57:1f:f1:
03:54:ed:f2:20:13:bd:54:18:c2:09:3e:67:56:09:bd:5a:92:
f5:2a:28:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x7vE+JkHpuqeGx0Qp+gLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMDYxNGUxOTVjMTY1NmEyOGU4YjE5YjIyNzg0ZThiNTVi
YjQ1MzMwHhcNMjUxMDIwMDQwMTQzWhcNMjUxMDIxMDQwMTQzWjAzMTEwLwYDVQQD
Eyg4M2MwOWJlNDA0YmJiNjc0ZTI2YjA2MzVkZDJhZGYyYWMzYjlkNDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfHb97HyUfqwwYI+wJSybzfwuW8q
YlMUpGchcRUChBtuG4wXVg5Bu64dsllDGzMMAoP9+l4osQeiACH7QVT6GaiZSxGY
T+DTxfL2BVywJ3zSZVsbHtZeeojIvhv3eJYXGpZFtjHwSBodrI4KfQdGDHXG98XX
q1lLYfIToUUxcnyksrpotZek8QMUj9MMimP/9VGK4KrYiJsPjslh+BPIxc3sjjLA
01oEAqaFUnkW2al6wTRXnCMWuu4NQcqitPrPuUf1yNhQ2KqJzvBMdxr397TW7rrM
3y66NRUat8z1izTGY2F2p3Q2aQCPmUbxHmE8BTPVYAK7+x61dWSVXkHA7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPAm+QEu7Z04msGNd0q3yrDudSIMB8GA1UdIwQY
MBaAFB8GFOGVwWVqKOixmyJ4TotVu0UzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHdZVTRaWEJaV29vNkxHYkluaE9pMVc3UlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xMGViY2MtYzgzMi00ZDMzLTg4YjUt
YmVmODcyZGFlY2U3LzEvSHdZVTRaWEJaV29vNkxHYkluaE9pMVc3UlRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xMGViY2MtYzgzMi00ZDMzLTg4YjUtYmVmODcyZGFlY2U3
LzEvSHdZVTRaWEJaV29vNkxHYkluaE9pMVc3UlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKlqe+tE
+rPfBR4ePySEpBl2lzsQIUTZelbWlJxUZqyytScbFjkXFCLNGSXZ5afC3e/lj+L7
na3hCaxydLyn7uxxGPzrWnMZ/9LjFw4x+V/k/FUlJwsTMByIvUApZEXedqNl2dMz
3W1ZcVqOZs6yGrwvB7BQE9RGiQdN6jS1qusgFsDqbDW7kqkuSsw9pUFU7NQewg5E
e8GA63dTyjjOEkUoQvb2BCBM7UR+I1Gnc1F3jLJ3518G4rIse1TvyuJ/EY12RQIK
T+prSG9xxOS0eb68Lmfyw5K3sGbn6CoFiWlEXQFP1imWVx/xA1Tt8iATvVQYwgk+
Z1YJvVqS9SoouQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:26:18 2025 by rpki-client