
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
File: HRxS8VUvbqDwZNejt521wc8Wa9A.mft (raw, json)
Hash identifier: /X5JzjojCYPP+qv15rFv06K/Hv9eolLtMtcSKtv1NtI=
Subject key identifier: 7B:7A:2D:E6:A9:C5:F3:90:18:8F:95:DE:B3:62:BA:12:D5:83:27:A5
Authority key identifier: 1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
Certificate issuer: /CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Certificate serial: 0199FB0F1E238588D63501770F25CC8DCEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 06:01:35 +0000
Manifest this update: Sun 19 Oct 2025 06:01:35 +0000
Manifest next update: Mon 20 Oct 2025 06:01:35 +0000
Files and hashes: 1: HRxS8VUvbqDwZNejt521wc8Wa9A.crl (hash: ty3gcNhMte+BvYghD53ka9KKGU1pD9y7s/Oda7ad3N4=)
2: OqLUCxtgxChqlU1u5DSrV7o7hUE.roa (hash: 137N4QJ5LT3R5FaNUW+c79pvczICoEGACd1IGeCfKGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:1e:23:85:88:d6:35:01:77:0f:25:cc:8d:ce:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Validity
Not Before: Oct 19 06:01:35 2025 GMT
Not After : Oct 20 06:01:35 2025 GMT
Subject: CN=7b7a2de6a9c5f390188f95deb362ba12d58327a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:26:66:d3:54:c8:a3:9c:50:b6:b5:b6:db:
7b:5d:59:ac:d8:c3:9d:bd:bf:60:3e:55:54:72:ed:
f3:7a:09:9b:b5:77:f2:f9:0d:23:6e:69:93:49:01:
eb:e0:6f:ae:2a:20:86:51:95:fe:ce:5f:ae:8d:28:
bb:d1:c6:d6:c1:8c:8b:16:60:8c:f5:35:8b:47:4b:
84:5a:18:bd:49:0d:ac:01:97:18:99:82:e8:71:b5:
90:83:f6:70:ec:f0:a2:fb:69:77:6f:81:ea:f7:6a:
61:9e:a1:a3:f1:f9:4f:be:01:d7:b8:70:54:78:e6:
cf:10:a5:92:ef:86:df:1d:e9:cd:2e:70:a5:50:44:
a5:c3:54:a4:eb:a8:3f:90:6e:6f:c9:fb:33:9a:1b:
2a:cd:fe:f1:e5:dd:2d:d2:80:5b:99:e8:f4:75:26:
34:cf:60:fc:5b:67:ef:33:6e:b2:c8:b1:49:64:95:
06:ce:47:ee:49:d9:2d:32:6b:98:f0:c5:3a:52:ed:
92:d1:1a:20:69:ff:1b:31:14:2f:a8:41:05:1a:78:
26:55:51:f2:3a:34:5f:d4:25:0f:5f:86:69:05:af:
26:d4:f2:67:f3:8d:db:7c:87:d6:15:11:ce:de:1f:
2b:bd:34:78:83:5e:27:20:49:77:2e:d1:12:83:59:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7A:2D:E6:A9:C5:F3:90:18:8F:95:DE:B3:62:BA:12:D5:83:27:A5
X509v3 Authority Key Identifier:
keyid:1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:69:37:71:01:b7:1c:9c:71:d5:be:e0:02:3f:da:2e:a8:53:
18:b2:24:db:bd:23:7a:8b:e5:97:e8:79:d6:9a:eb:f9:34:e2:
e5:79:93:d5:4e:c1:de:83:65:83:cb:b1:03:02:c3:13:69:2f:
36:f4:b6:75:bc:92:62:96:d4:2a:4a:fa:dd:d6:b4:ce:e4:4c:
a4:fa:4e:8c:b2:7d:58:48:87:5f:77:14:70:23:c1:5c:6b:33:
32:13:c5:6f:cd:40:20:0d:94:19:69:b7:e7:fe:3e:79:d0:1f:
bc:46:a0:9b:d7:fb:39:7f:0b:46:81:47:1f:1c:c0:d9:cf:63:
dc:c1:4f:bd:30:3a:16:ec:16:18:83:a4:79:ca:37:38:16:3f:
0f:14:f5:1e:d6:2d:e0:92:8c:d2:5c:b4:f2:36:03:1b:20:0a:
89:73:9a:9c:19:39:20:73:68:8d:ee:28:78:41:ee:39:8d:3c:
00:1d:ee:e1:bb:33:86:fd:4e:51:92:7d:7d:a5:05:b1:f7:be:
48:90:2b:f8:8a:88:8c:50:0c:da:d1:04:92:6d:0b:9c:bf:b7:
f2:98:bd:91:1c:a4:94:0b:26:79:db:37:a3:af:49:64:5b:63:
93:8d:9e:cd:e0:bc:fa:b5:59:bb:df:33:d4:8f:5c:df:b1:ba:
64:0c:bd:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Dx4jhYjWNQF3DyXMjc7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMWM1MmYxNTUyZjZlYTBmMDY0ZDdhM2I3OWRiNWMxY2Yx
NjZiZDAwHhcNMjUxMDE5MDYwMTM1WhcNMjUxMDIwMDYwMTM1WjAzMTEwLwYDVQQD
Eyg3YjdhMmRlNmE5YzVmMzkwMTg4Zjk1ZGViMzYyYmExMmQ1ODMyN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuMmZtNUyKOcULa1ttt7XVms2MOd
vb9gPlVUcu3zegmbtXfy+Q0jbmmTSQHr4G+uKiCGUZX+zl+ujSi70cbWwYyLFmCM
9TWLR0uEWhi9SQ2sAZcYmYLocbWQg/Zw7PCi+2l3b4Hq92phnqGj8flPvgHXuHBU
eObPEKWS74bfHenNLnClUESlw1Sk66g/kG5vyfszmhsqzf7x5d0t0oBbmej0dSY0
z2D8W2fvM26yyLFJZJUGzkfuSdktMmuY8MU6Uu2S0Rogaf8bMRQvqEEFGngmVVHy
OjRf1CUPX4ZpBa8m1PJn843bfIfWFRHO3h8rvTR4g14nIEl3LtESg1mQrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHt6LeapxfOQGI+V3rNiuhLVgyelMB8GA1UdIwQY
MBaAFB0cUvFVL26g8GTXo7edtcHPFmvQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJ4UzhWVXZicUR3Wk5lanQ1MjF3YzhXYTlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82NGY1MzktZmVkYS00OWZjLWE5MjIt
MjAxZDVhOWJiOGFhLzEvSFJ4UzhWVXZicUR3Wk5lanQ1MjF3YzhXYTlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82NGY1MzktZmVkYS00OWZjLWE5MjItMjAxZDVhOWJiOGFh
LzEvSFJ4UzhWVXZicUR3Wk5lanQ1MjF3YzhXYTlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWk3cQG3
HJxx1b7gAj/aLqhTGLIk270jeovll+h51prr+TTi5XmT1U7B3oNlg8uxAwLDE2kv
NvS2dbySYpbUKkr63da0zuRMpPpOjLJ9WEiHX3cUcCPBXGszMhPFb81AIA2UGWm3
5/4+edAfvEagm9f7OX8LRoFHHxzA2c9j3MFPvTA6FuwWGIOkeco3OBY/DxT1HtYt
4JKM0ly08jYDGyAKiXOanBk5IHNoje4oeEHuOY08AB3u4bszhv1OUZJ9faUFsfe+
SJAr+IqIjFAM2tEEkm0LnL+38pi9kRyklAsmeds3o69JZFtjk42ezeC8+rVZu98z
1I9c37G6ZAy9NA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:00 2025 by rpki-client