Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier: GRDc6aTYLvXxGyCGNfSL/tRLnWXfyyJsplHKUvtWoH8=
Subject key identifier: EC:C4:21:52:44:45:AE:A5:BD:E0:59:8D:C6:49:33:8F:49:DB:BE:AE
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 019A003563A565EDB36E8CD6D90651B14688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number: 03C3
Signing time: Mon 20 Oct 2025 06:01:30 +0000
Manifest this update: Mon 20 Oct 2025 06:01:30 +0000
Manifest next update: Tue 21 Oct 2025 06:01:30 +0000
Files and hashes: 1: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: xSMD6iDJqL23q78KvlmmGPdJboVWp6dvNCJHOSwVIrs=)
2: nKTvZPJPqdCXiSwzyA9j5IjgzXg.roa (hash: IlnUSzXgTeo7Aecj19DyZcjG2TpAU9jXATfOU6kk97U=)
3: zNxBSM9LhOTwYtAP52MRH2hzZ_o.roa (hash: 51C5X4gm2WkYmwXfFe/uw6oyIL71jLkdgjDOyTD+5rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:63:a5:65:ed:b3:6e:8c:d6:d9:06:51:b1:46:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Oct 20 06:01:30 2025 GMT
Not After : Oct 21 06:01:30 2025 GMT
Subject: CN=ecc421524445aea5bde0598dc649338f49dbbeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:82:70:16:e2:a8:55:ce:a8:61:f0:03:6a:
61:7c:44:57:d7:1a:2f:7e:ce:27:bd:9c:75:99:ec:
c4:0e:85:26:d9:63:25:d0:ee:f4:b7:99:6d:bb:8b:
b3:f7:b3:c6:df:db:be:81:7d:42:c3:14:16:ff:bc:
c8:67:2c:82:28:72:45:2d:85:f5:42:c1:a6:aa:3d:
da:9a:b4:81:af:dd:11:db:44:3c:08:15:14:69:9a:
a3:55:0a:e5:88:f1:3c:cd:27:5e:a2:1a:7a:fa:20:
d0:54:d0:3d:e6:56:05:5f:40:26:08:87:97:bb:e6:
0d:86:71:49:c5:7c:73:d8:5d:ef:8d:01:01:18:20:
08:c6:ff:18:b7:9d:26:f5:f7:d5:f9:f1:82:94:59:
43:e9:69:d8:75:31:e0:1d:93:34:b6:85:96:41:4c:
8c:2c:f4:ac:f7:18:39:0a:f6:31:e5:9e:47:af:b7:
e1:45:b2:52:44:fc:8d:ad:63:e7:a8:97:b0:59:c9:
fe:6d:c0:64:56:86:87:77:39:ce:cc:11:c7:ec:15:
fb:e7:1e:9c:ef:ab:c7:6d:3f:67:a8:25:91:11:3c:
1e:ba:22:6e:ff:9e:0a:af:9f:b6:c9:61:d0:12:d4:
47:ec:07:1a:20:c5:81:9e:f1:7d:f3:41:ae:08:56:
b0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C4:21:52:44:45:AE:A5:BD:E0:59:8D:C6:49:33:8F:49:DB:BE:AE
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:26:d5:eb:37:d4:9b:34:b7:9f:05:24:73:78:b8:84:92:d9:
bd:3c:cf:4f:42:ef:04:5c:9e:ee:41:b3:1f:a8:56:68:df:18:
c1:b7:2c:54:b4:e5:fa:4b:6e:38:5c:1c:70:cc:70:96:c3:5d:
0b:03:e5:eb:69:63:80:92:68:e5:3b:c4:93:7d:d8:ba:9b:ef:
19:f0:4d:16:0a:7c:4e:be:c3:7e:24:94:43:b3:01:8b:d1:48:
6c:49:a5:00:be:0a:dc:b4:69:cd:d7:20:9b:80:a2:8a:64:d5:
6e:0a:e2:02:d0:66:ab:77:2e:fe:d7:e5:c9:86:ff:d4:0e:f1:
4b:5e:48:9a:d6:d7:d8:a0:eb:4c:ce:e3:9d:f1:ea:51:32:b6:
c1:ba:8f:ea:47:a0:8b:8c:aa:3a:f3:25:d3:a1:93:48:95:7c:
ab:6e:d7:8c:02:96:40:37:69:f9:9c:ee:09:20:0c:ca:db:b6:
22:3f:26:76:9b:d8:67:3d:05:4c:6e:e8:46:15:18:2d:57:fc:
34:69:5e:e1:55:4f:5e:8c:c8:7f:22:c9:42:4d:a7:3f:f9:d7:
7f:b0:42:a4:ae:e5:d8:db:f3:6e:37:2d:65:f2:0c:3a:8e:78:
5c:60:f7:36:4f:4b:de:ea:0f:af:26:6d:e0:4b:f0:3d:e0:bf:
49:fa:29:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANWOlZe2zbozW2QZRsUaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGUyYTIwN2Y2OTc3MjE0YTk1N2E4ZTE0OGQxZjhiNWE1
Y2QwODIwHhcNMjUxMDIwMDYwMTMwWhcNMjUxMDIxMDYwMTMwWjAzMTEwLwYDVQQD
EyhlY2M0MjE1MjQ0NDVhZWE1YmRlMDU5OGRjNjQ5MzM4ZjQ5ZGJiZWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1euCcBbiqFXOqGHwA2phfERX1xov
fs4nvZx1mezEDoUm2WMl0O70t5ltu4uz97PG39u+gX1CwxQW/7zIZyyCKHJFLYX1
QsGmqj3amrSBr90R20Q8CBUUaZqjVQrliPE8zSdeohp6+iDQVNA95lYFX0AmCIeX
u+YNhnFJxXxz2F3vjQEBGCAIxv8Yt50m9ffV+fGClFlD6WnYdTHgHZM0toWWQUyM
LPSs9xg5CvYx5Z5Hr7fhRbJSRPyNrWPnqJewWcn+bcBkVoaHdznOzBHH7BX75x6c
76vHbT9nqCWRETweuiJu/54Kr5+2yWHQEtRH7AcaIMWBnvF980GuCFaw7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzEIVJERa6lveBZjcZJM49J276uMB8GA1UdIwQY
MBaAFIcOKiB/aXchSpV6jhSNH4taXNCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80MjExNTgtZjBjNi00NjE5LWFmYTUt
OGE5NDY4N2RiYTZmLzEvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi80MjExNTgtZjBjNi00NjE5LWFmYTUtOGE5NDY4N2RiYTZm
LzEvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSbV6zfU
mzS3nwUkc3i4hJLZvTzPT0LvBFye7kGzH6hWaN8YwbcsVLTl+ktuOFwccMxwlsNd
CwPl62ljgJJo5TvEk33YupvvGfBNFgp8Tr7DfiSUQ7MBi9FIbEmlAL4K3LRpzdcg
m4CiimTVbgriAtBmq3cu/tflyYb/1A7xS15ImtbX2KDrTM7jnfHqUTK2wbqP6keg
i4yqOvMl06GTSJV8q27XjAKWQDdp+ZzuCSAMytu2Ij8mdpvYZz0FTG7oRhUYLVf8
NGle4VVPXozIfyLJQk2nP/nXf7BCpK7l2NvzbjctZfIMOo54XGD3Nk9L3uoPryZt
4EvwPeC/Sfopug==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:39:38 2025 by rpki-client