Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: A89RNBKbExXDSZkXWIYMU/vDROEJ6xhNMDUFoF6DhzI=
Subject key identifier: 79:DE:F3:06:30:66:1F:CB:1C:8D:EF:28:DB:97:3D:F2:16:31:74:62
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 0199FC58807D865AA497F61466224C7CB700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 06A2
Signing time: Sun 19 Oct 2025 12:01:22 +0000
Manifest this update: Sun 19 Oct 2025 12:01:22 +0000
Manifest next update: Mon 20 Oct 2025 12:01:22 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: Yaiu6Y0riLDlae5iT92hE1qa5UGiCbsAB6Y7Z0M+G6c=)
2: hQR0mmyfCcP0k0VyVReQd9TwA2Y.roa (hash: /yk+WBXgj9/PFpjinmPki6KFsYrLmbEwlVJawiNfh5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:80:7d:86:5a:a4:97:f6:14:66:22:4c:7c:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: Oct 19 12:01:22 2025 GMT
Not After : Oct 20 12:01:22 2025 GMT
Subject: CN=79def30630661fcb1c8def28db973df216317462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:eb:88:28:82:a7:5e:ed:c8:93:0f:e4:6d:0d:
55:63:78:14:2b:b4:76:44:57:cd:7f:c7:a6:4f:c9:
84:bf:c7:44:72:00:5b:60:cf:5d:76:59:98:8b:cf:
c3:41:ad:81:94:a3:c5:5e:5d:ab:fd:ab:0e:1c:9b:
52:86:8f:af:bf:b4:7e:25:27:33:38:de:3d:d6:ce:
c7:28:1b:5e:3a:59:50:fe:2b:87:ac:61:23:52:3b:
6a:d3:4c:e7:22:29:c5:83:f2:73:eb:c6:f1:5c:a4:
5f:17:ac:9b:c7:e0:60:29:9f:ce:81:71:02:74:99:
1d:e2:17:84:3e:cf:e0:8e:77:13:87:d7:5c:78:a8:
41:68:14:96:99:74:96:7f:d9:a0:d5:fa:51:d3:1c:
9e:5e:4c:d2:04:e9:b0:26:4a:82:d4:a9:7c:19:81:
51:41:ac:01:39:ed:b7:17:c0:a2:ea:c2:49:c9:f8:
c5:c0:a5:bb:d2:49:5d:6e:d1:2a:8d:f6:1c:38:48:
2c:79:d9:88:fc:d3:d5:e8:e3:80:9a:d3:4b:14:1a:
71:3b:86:b1:ec:f2:fa:02:6a:24:45:38:a9:c1:bf:
be:31:a8:47:42:41:1e:e4:e6:e9:b3:57:a2:94:5b:
eb:ec:bb:9b:d3:9c:ff:c4:89:db:bc:ad:7e:0f:06:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DE:F3:06:30:66:1F:CB:1C:8D:EF:28:DB:97:3D:F2:16:31:74:62
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f4:35:b1:cc:0d:5a:2e:c7:95:e2:eb:2f:a7:db:69:1a:21:b9:
6e:28:c9:ae:af:1a:c8:2c:9a:eb:ce:09:7b:c1:3f:01:b7:be:
cd:25:f0:65:aa:85:08:11:31:99:02:0f:f9:41:f7:f6:48:17:
30:33:44:2c:38:1e:56:18:73:68:b0:84:7e:b5:50:5b:a6:e5:
7f:0b:de:ed:84:52:88:7d:f5:26:69:aa:a8:9e:45:3b:f1:b8:
10:10:07:69:29:9b:f6:d5:56:c0:fb:96:df:c6:99:dc:2c:4b:
e8:84:17:d0:a3:8e:68:bd:ba:56:40:67:2e:11:86:99:df:68:
38:1b:04:1b:ea:b2:b7:49:49:25:9a:15:fb:a8:28:db:09:50:
1c:71:a7:d6:d2:1f:5e:13:75:26:18:a7:a1:0d:99:30:14:5a:
a5:86:8a:67:99:81:fb:9e:59:67:4b:98:0c:64:77:ae:1b:e3:
9b:bc:01:83:9d:b1:eb:be:cf:2a:c6:44:75:bb:3f:ba:34:c9:
26:5f:b0:81:20:04:f4:bd:2e:6f:5d:5a:ec:a7:6e:d1:25:5c:
56:92:69:22:b8:c3:18:78:f6:70:37:40:11:10:7c:87:c8:87:
ac:8a:c2:05:6f:e8:3f:24:3d:0a:3e:03:d3:5e:4a:34:29:59:
e6:50:ce:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WIB9hlqkl/YUZiJMfLcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzI1NjZhZDYyODkzNWM2ZWM3NWQwZWRkZDMxN2M3YjBh
NzY2OTMwHhcNMjUxMDE5MTIwMTIyWhcNMjUxMDIwMTIwMTIyWjAzMTEwLwYDVQQD
Eyg3OWRlZjMwNjMwNjYxZmNiMWM4ZGVmMjhkYjk3M2RmMjE2MzE3NDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OuIKIKnXu3Ikw/kbQ1VY3gUK7R2
RFfNf8emT8mEv8dEcgBbYM9ddlmYi8/DQa2BlKPFXl2r/asOHJtSho+vv7R+JScz
ON491s7HKBteOllQ/iuHrGEjUjtq00znIinFg/Jz68bxXKRfF6ybx+BgKZ/OgXEC
dJkd4heEPs/gjncTh9dceKhBaBSWmXSWf9mg1fpR0xyeXkzSBOmwJkqC1Kl8GYFR
QawBOe23F8Ci6sJJyfjFwKW70kldbtEqjfYcOEgsedmI/NPV6OOAmtNLFBpxO4ax
7PL6AmokRTipwb++MahHQkEe5Obps1eilFvr7Lub05z/xInbvK1+Dwa7HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHne8wYwZh/LHI3vKNuXPfIWMXRiMB8GA1UdIwQY
MBaAFBxyVmrWKJNcbsddDt3TF8ewp2aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMt
ZmM3NTIxYTI1YmJhLzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMtZmM3NTIxYTI1YmJh
LzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA9DWxzA1a
LseV4usvp9tpGiG5bijJrq8ayCya684Je8E/Abe+zSXwZaqFCBExmQIP+UH39kgX
MDNELDgeVhhzaLCEfrVQW6blfwve7YRSiH31JmmqqJ5FO/G4EBAHaSmb9tVWwPuW
38aZ3CxL6IQX0KOOaL26VkBnLhGGmd9oOBsEG+qyt0lJJZoV+6go2wlQHHGn1tIf
XhN1JhinoQ2ZMBRapYaKZ5mB+55ZZ0uYDGR3rhvjm7wBg52x677PKsZEdbs/ujTJ
Jl+wgSAE9L0ub11a7Kdu0SVcVpJpIrjDGHj2cDdAERB8h8iHrIrCBW/oPyQ9Cj4D
015KNClZ5lDO6w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:33 2025 by rpki-client