Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier: /9FysozTuP1P3+QU3lPnBg1pFNOzx2nJeNEpp8TnVHU=
Subject key identifier: 9A:80:C4:7A:04:91:E5:EF:1C:8E:24:60:3B:B0:27:70:C5:3A:59:CE
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 0199FC214447BA269C5D193539EBABEEC913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number: 0BE0
Signing time: Sun 19 Oct 2025 11:01:02 +0000
Manifest this update: Sun 19 Oct 2025 11:01:02 +0000
Manifest next update: Mon 20 Oct 2025 11:01:02 +0000
Files and hashes: 1: FauikgvNNACdpAzUUwIbibw2Em4.roa (hash: 8jW5hQYV+ARAXMnoLfnFrZz8WqDDHC709Wsf3diASrY=)
2: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: Q0OkTagMA8lU01a3HHF3DqTwBwbY65SHS3jMBocdXqs=)
3: RTuoPdvywC_wXQboVeXZhnsBE8c.roa (hash: eSP6Qd1xbWVau/rn0W/JU8IDdXr668CVKvYbLZet0E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:44:47:ba:26:9c:5d:19:35:39:eb:ab:ee:c9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Oct 19 11:01:02 2025 GMT
Not After : Oct 20 11:01:02 2025 GMT
Subject: CN=9a80c47a0491e5ef1c8e24603bb02770c53a59ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:bf:c5:5a:04:b0:05:2e:67:03:06:51:72:
c2:1e:dd:8b:ba:24:3f:ed:d0:d3:20:6c:31:61:58:
b8:70:42:49:cf:b3:2e:ed:24:37:76:64:be:b2:c4:
fe:c0:4b:c7:b0:17:45:8e:f1:b6:d0:f0:d2:11:76:
57:14:ce:43:ba:b4:4b:fc:92:91:0d:99:25:bc:cd:
c2:35:46:ba:18:34:e0:6c:35:7c:42:22:84:39:91:
f2:a1:4d:c8:0b:22:03:5f:c2:d2:14:1b:bc:40:01:
b0:93:e2:ff:67:10:73:38:bd:4a:48:6f:7f:4c:16:
19:de:54:c2:d8:ef:f7:72:ad:89:80:ca:59:fa:f4:
6b:3b:c9:06:5a:cb:7c:8c:53:99:c8:25:e9:78:62:
ec:ca:b6:29:38:0a:a6:ae:42:c8:67:7f:79:0b:9a:
56:fa:43:2d:63:61:31:19:79:3c:c1:88:ce:4e:89:
7a:f6:a3:84:fe:7f:a3:80:dc:29:e8:6b:3e:19:3e:
04:77:ef:b2:41:40:7f:ba:3a:78:88:67:50:c7:1c:
82:cb:32:af:5f:9e:7c:94:6e:08:d0:b3:a1:f3:3e:
32:39:55:d1:59:4a:8a:1d:aa:52:30:66:5f:1e:b9:
be:e7:01:99:ac:37:33:c1:56:55:50:9e:ab:64:00:
9b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:80:C4:7A:04:91:E5:EF:1C:8E:24:60:3B:B0:27:70:C5:3A:59:CE
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:af:4f:0a:8d:4f:06:47:40:48:d5:8e:02:70:71:d4:3f:97:
bd:bf:d9:3b:68:1f:02:01:15:f7:dd:db:40:c3:74:c1:b2:a9:
6b:50:23:fb:96:58:d6:16:5a:6f:c9:cb:17:f4:f4:2d:e6:c2:
67:3d:bd:69:93:cd:24:24:88:b8:83:d0:f4:cf:f1:70:88:c2:
3c:23:b8:6e:c6:6a:8f:ae:0e:6b:40:47:fc:ff:54:47:87:cf:
4a:d0:3b:f1:bc:33:73:bd:74:46:c8:3e:c9:f4:06:50:a9:d7:
b8:a4:68:a9:5e:12:cc:93:e0:83:e3:a1:44:f0:62:b8:6f:fb:
04:86:91:13:a3:60:c5:96:4a:72:2d:10:87:40:5c:39:71:d1:
06:c6:31:eb:07:a5:6d:7b:28:24:95:d4:7c:5e:78:0b:fc:a3:
48:f0:b7:47:f5:64:88:6b:dc:67:98:23:f0:cd:bd:39:82:ef:
2e:37:35:1a:a3:1d:2a:5f:a5:f3:33:32:88:f0:7b:5a:6a:dc:
da:9a:c8:5b:2b:93:28:0d:39:0c:59:b6:19:d5:f6:b3:36:31:
da:94:19:ef:76:47:43:71:be:52:98:16:c3:6d:97:35:2a:7c:
75:1c:d1:6b:24:c7:19:07:7c:2f:e8:57:13:38:94:ec:f0:f5:
9f:a1:7a:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IURHuiacXRk1Oeur7skTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMDQ2Y2RlODUxMjgwMmIxNDkzM2IzNGEyMmY3NzY1ZTI5
NWQyYWIwHhcNMjUxMDE5MTEwMTAyWhcNMjUxMDIwMTEwMTAyWjAzMTEwLwYDVQQD
Eyg5YTgwYzQ3YTA0OTFlNWVmMWM4ZTI0NjAzYmIwMjc3MGM1M2E1OWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSi/xVoEsAUuZwMGUXLCHt2LuiQ/
7dDTIGwxYVi4cEJJz7Mu7SQ3dmS+ssT+wEvHsBdFjvG20PDSEXZXFM5DurRL/JKR
DZklvM3CNUa6GDTgbDV8QiKEOZHyoU3ICyIDX8LSFBu8QAGwk+L/ZxBzOL1KSG9/
TBYZ3lTC2O/3cq2JgMpZ+vRrO8kGWst8jFOZyCXpeGLsyrYpOAqmrkLIZ395C5pW
+kMtY2ExGXk8wYjOTol69qOE/n+jgNwp6Gs+GT4Ed++yQUB/ujp4iGdQxxyCyzKv
X558lG4I0LOh8z4yOVXRWUqKHapSMGZfHrm+5wGZrDczwVZVUJ6rZACbiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqAxHoEkeXvHI4kYDuwJ3DFOlnOMB8GA1UdIwQY
MBaAFB8EbN6FEoArFJM7NKIvd2XildKrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHdSczNvVVNnQ3NVa3pzMG9pOTNaZUtWMHFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84MGU3NDAtMmM4Yy00NWE2LTkzOGMt
MjE5YjlmNmY5MDg3LzEvSHdSczNvVVNnQ3NVa3pzMG9pOTNaZUtWMHFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS84MGU3NDAtMmM4Yy00NWE2LTkzOGMtMjE5YjlmNmY5MDg3
LzEvSHdSczNvVVNnQ3NVa3pzMG9pOTNaZUtWMHFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKq9PCo1P
BkdASNWOAnBx1D+Xvb/ZO2gfAgEV993bQMN0wbKpa1Aj+5ZY1hZab8nLF/T0LebC
Zz29aZPNJCSIuIPQ9M/xcIjCPCO4bsZqj64Oa0BH/P9UR4fPStA78bwzc710Rsg+
yfQGUKnXuKRoqV4SzJPgg+OhRPBiuG/7BIaRE6NgxZZKci0Qh0BcOXHRBsYx6wel
bXsoJJXUfF54C/yjSPC3R/VkiGvcZ5gj8M29OYLvLjc1GqMdKl+l8zMyiPB7Wmrc
2prIWyuTKA05DFm2GdX2szYx2pQZ73ZHQ3G+UpgWw22XNSp8dRzRayTHGQd8L+hX
EziU7PD1n6F6eQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:00 2025 by rpki-client