Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
File: HCtQ2u86DL23KyPKPbvvwVc1g_k.mft (raw, json)
Hash identifier: Fggxo8g3uFey9gOAo/ZXV2TA9cFCL6sVoOrwVGN79zY=
Subject key identifier: BD:01:33:26:23:00:31:E6:13:B7:BF:9B:63:3C:4D:85:13:9A:8C:DE
Authority key identifier: 1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
Certificate issuer: /CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Certificate serial: 0199FD348CDA45D6495FD8854E5E01725ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
Manifest number: 0C08
Signing time: Sun 19 Oct 2025 16:01:43 +0000
Manifest this update: Sun 19 Oct 2025 16:01:43 +0000
Manifest next update: Mon 20 Oct 2025 16:01:43 +0000
Files and hashes: 1: HCtQ2u86DL23KyPKPbvvwVc1g_k.crl (hash: HJlsgzxSUi2AXkNFOwhtGu0nprV9bb24UYF2cmWzmB0=)
2: ZGoOUwMopHkREW85RzSsR457AEU.roa (hash: ll6YKs1Lb4wcNMvOVUUEMK6peyuIPU/LPfVQcksc3+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8c:da:45:d6:49:5f:d8:85:4e:5e:01:72:5e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Validity
Not Before: Oct 19 16:01:43 2025 GMT
Not After : Oct 20 16:01:43 2025 GMT
Subject: CN=bd013326230031e613b7bf9b633c4d85139a8cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:b2:ab:55:50:fa:88:00:f5:72:2c:8c:06:
7f:df:3a:c0:0d:e7:4c:2e:a2:52:d6:2b:d6:f1:c1:
44:45:88:31:23:6c:d4:80:1b:db:6c:72:37:09:69:
68:d8:b7:b6:6a:27:f8:fa:7d:80:10:15:5b:f9:49:
52:d7:52:c2:0d:04:75:55:d6:07:af:8a:76:18:fd:
59:b2:b2:3f:ed:d7:ca:85:d9:01:a6:0d:cd:d3:82:
dc:ac:de:62:33:05:3a:8f:c7:5f:d8:51:08:ec:e0:
fa:dd:0f:ac:dc:1e:be:ac:32:48:bc:9b:2b:46:81:
d4:5e:7f:59:76:5a:b0:81:bd:27:53:26:70:4d:a7:
1a:3f:f8:77:db:f8:eb:e6:2b:73:e4:a5:9f:c1:cd:
04:70:0f:73:e0:9f:08:8a:9a:d4:8a:50:5a:fd:ac:
f2:36:a3:d4:f1:14:a6:c7:f6:1b:d0:08:12:95:28:
c6:10:4b:31:d9:5d:86:a6:8d:cc:7e:69:9c:ee:af:
61:9c:77:31:c9:b4:2e:2f:99:f4:c8:21:a6:3b:21:
b1:cb:ec:ad:40:cd:0f:02:4f:ff:cc:bd:1e:ab:2e:
dd:fc:fe:69:68:ae:87:67:bc:48:f5:53:54:e5:6c:
b1:10:9b:2a:27:29:7e:3d:bd:a2:b8:1b:af:2b:5d:
a4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:01:33:26:23:00:31:E6:13:B7:BF:9B:63:3C:4D:85:13:9A:8C:DE
X509v3 Authority Key Identifier:
keyid:1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:32:4a:6e:36:c9:58:b7:6f:6e:82:af:b3:0f:f2:ac:23:b6:
ac:93:f1:a4:6d:97:70:fe:7f:c6:18:e0:3e:3b:a8:e0:b5:98:
38:d9:a9:a5:60:83:17:cd:80:e4:0a:90:62:51:6b:ca:12:1f:
59:8e:53:6f:01:1a:29:f8:6b:ea:46:5e:b3:a8:f1:11:b9:87:
17:fe:75:8f:78:67:89:e1:e8:06:b5:76:d5:f6:74:72:b3:71:
5a:c3:f7:52:18:8e:7f:8b:ee:d9:d3:7a:e5:b5:c5:07:0d:0b:
17:e1:15:b6:69:68:47:22:ac:4a:ce:d5:95:99:60:be:d4:6a:
a4:0d:4d:76:cf:7b:b9:ca:29:ad:c9:d2:5d:17:8d:65:13:40:
b9:e3:c1:b4:ff:10:e4:05:54:cc:ee:d0:ce:3b:8d:31:ef:d4:
0d:77:d7:32:e1:5a:1e:cf:2a:45:35:f3:6b:ba:55:7a:52:27:
6a:6f:7c:75:ff:97:1c:06:a3:76:8b:f7:5a:6f:78:7d:90:72:
73:c4:c0:e5:48:52:f5:88:3a:c0:c7:b2:97:5e:20:5f:9c:53:
4a:b4:4f:eb:41:5c:6b:46:5e:14:e5:32:83:e5:f8:35:85:7a:
67:df:e4:0d:a7:f4:b6:26:13:2a:ab:85:85:a6:86:7a:9f:0c:
21:90:af:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NIzaRdZJX9iFTl4Bcl7RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmI1MGRhZWYzYTBjYmRiNzJiMjNjYTNkYmJlZmMxNTcz
NTgzZjkwHhcNMjUxMDE5MTYwMTQzWhcNMjUxMDIwMTYwMTQzWjAzMTEwLwYDVQQD
EyhiZDAxMzMyNjIzMDAzMWU2MTNiN2JmOWI2MzNjNGQ4NTEzOWE4Y2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtWyq1VQ+ogA9XIsjAZ/3zrADedM
LqJS1ivW8cFERYgxI2zUgBvbbHI3CWlo2Le2aif4+n2AEBVb+UlS11LCDQR1VdYH
r4p2GP1ZsrI/7dfKhdkBpg3N04LcrN5iMwU6j8df2FEI7OD63Q+s3B6+rDJIvJsr
RoHUXn9Zdlqwgb0nUyZwTacaP/h32/jr5itz5KWfwc0EcA9z4J8IiprUilBa/azy
NqPU8RSmx/Yb0AgSlSjGEEsx2V2Gpo3Mfmmc7q9hnHcxybQuL5n0yCGmOyGxy+yt
QM0PAk//zL0eqy7d/P5paK6HZ7xI9VNU5WyxEJsqJyl+Pb2iuBuvK12k0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0BMyYjADHmE7e/m2M8TYUTmozeMB8GA1UdIwQY
MBaAFBwrUNrvOgy9tysjyj2778FXNYP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82ZjJiMzctMGQxNy00NWFiLTgyODIt
YWI0MjYzZWQ0MGRlLzEvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82ZjJiMzctMGQxNy00NWFiLTgyODItYWI0MjYzZWQ0MGRl
LzEvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTJKbjbJ
WLdvboKvsw/yrCO2rJPxpG2XcP5/xhjgPjuo4LWYONmppWCDF82A5AqQYlFryhIf
WY5TbwEaKfhr6kZes6jxEbmHF/51j3hnieHoBrV21fZ0crNxWsP3UhiOf4vu2dN6
5bXFBw0LF+EVtmloRyKsSs7VlZlgvtRqpA1Nds97ucoprcnSXReNZRNAuePBtP8Q
5AVUzO7QzjuNMe/UDXfXMuFaHs8qRTXza7pVelInam98df+XHAajdov3Wm94fZBy
c8TA5UhS9Yg6wMeyl14gX5xTSrRP60Fca0ZeFOUyg+X4NYV6Z9/kDaf0tiYTKquF
haaGep8MIZCvvw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:54 2025 by rpki-client