Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
File: HI4XQR4BAMkUsEDVFMKOHX02mR4.mft (raw, json)
Hash identifier: 9nPCTKlBALDQShrT+nKQzKLWHpgmS7tyTqylVXafINE=
Subject key identifier: DF:D9:4E:96:25:63:BE:1A:9E:E2:99:B2:98:06:1F:6B:B2:38:B6:26
Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Certificate serial: 019A0034F3BC87213EE17AB7BE208A5BB4FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
Manifest number: 13F5
Signing time: Mon 20 Oct 2025 06:01:01 +0000
Manifest this update: Mon 20 Oct 2025 06:01:01 +0000
Manifest next update: Tue 21 Oct 2025 06:01:01 +0000
Files and hashes: 1: HI4XQR4BAMkUsEDVFMKOHX02mR4.crl (hash: mVMDA2rGOju5IDKirn0IPdtzRYPLJcYLIkPpjm0AJHI=)
2: OIkkjQwZ_e6aDM2pqG-Fj1w8mes.roa (hash: kiBoCvjRCAtFXqkYo08aOVgrjaQ8F+gLoLWUXi6kvM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:34:f3:bc:87:21:3e:e1:7a:b7:be:20:8a:5b:b4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Validity
Not Before: Oct 20 06:01:01 2025 GMT
Not After : Oct 21 06:01:01 2025 GMT
Subject: CN=dfd94e962563be1a9ee299b298061f6bb238b626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8f:56:99:48:37:cc:d6:7f:d7:82:39:a2:c7:
b6:43:f4:dd:44:99:52:d4:a9:fc:70:c4:36:5c:f4:
67:ae:10:2d:07:4d:dc:d3:e9:e2:5c:75:50:df:69:
48:d1:98:46:b4:7a:fa:eb:0d:2e:ea:5e:a5:a3:12:
e5:8f:ca:08:b7:64:05:d0:77:71:18:9b:21:63:99:
d7:f4:23:f7:bd:45:f3:94:81:09:95:46:dc:5a:09:
c7:9e:c2:78:29:77:23:78:8d:b3:05:4b:37:bd:46:
b7:ee:37:87:bd:59:c5:78:f1:6d:05:6b:d6:25:aa:
bb:89:d5:e3:4c:77:ba:59:8a:da:32:a0:f4:1f:e5:
5b:8f:3f:88:4a:46:86:7d:60:02:4b:53:2f:af:b5:
64:56:5d:e5:91:35:a9:bc:15:3b:8e:a1:d9:f7:cf:
19:1e:71:19:a3:d8:e1:67:fa:32:92:46:76:91:17:
0e:7d:38:f6:0e:7c:87:6f:f4:0e:8c:1e:7d:fb:31:
24:2c:5f:1b:1a:c9:f2:73:f7:fa:14:8d:91:c8:b2:
98:c4:67:ed:34:d9:4d:c5:a1:6e:cb:fe:e7:ab:d5:
70:2f:a1:ef:da:d5:99:06:e3:35:b0:e9:b6:8a:74:
70:fc:01:8f:eb:55:38:52:44:e0:11:a4:95:dd:8b:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D9:4E:96:25:63:BE:1A:9E:E2:99:B2:98:06:1F:6B:B2:38:B6:26
X509v3 Authority Key Identifier:
keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:50:6d:85:91:ec:5c:84:07:ed:d5:27:f9:13:ef:3f:8e:fc:
66:96:a8:7e:67:99:1b:70:d5:6c:58:44:32:7d:84:2c:2b:23:
ab:18:4a:fc:e0:fb:5b:79:b4:ea:96:a3:4e:02:90:0d:3e:62:
87:26:8f:a7:80:ad:01:ab:93:31:55:a7:16:cc:c8:2a:c1:4b:
52:fe:cc:fc:3f:77:5b:07:4f:ff:75:ed:57:3b:57:1e:a8:18:
43:da:fc:6e:b0:c0:27:1d:03:d0:14:ea:d4:36:2e:9c:b7:c8:
b3:67:40:ab:17:86:74:01:0f:21:6e:ec:78:6c:69:ad:17:b4:
22:bb:a2:87:c9:4f:e5:fc:1e:1e:92:6e:e0:b2:46:72:94:70:
28:e5:12:e4:fe:71:8f:f7:52:14:4d:98:50:0e:71:6a:ef:d3:
6f:d8:c2:5c:6d:e0:58:4e:ca:c0:32:8d:e5:15:ad:56:f1:e6:
80:5c:69:55:1c:4b:17:6a:ee:77:ec:e6:0a:43:3a:e4:26:b6:
23:52:31:27:c9:7a:f6:65:91:f0:90:19:a4:63:b1:af:ab:43:
c6:44:a2:15:28:da:f5:84:12:e4:8f:74:32:5a:64:80:73:a1:
6d:92:ed:b0:0b:af:88:10:28:3c:ff:06:ef:28:1f:4d:8c:21:
b5:c1:7f:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANPO8hyE+4Xq3viCKW7T/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOGUxNzQxMWUwMTAwYzkxNGIwNDBkNTE0YzI4ZTFkN2Qz
Njk5MWUwHhcNMjUxMDIwMDYwMTAxWhcNMjUxMDIxMDYwMTAxWjAzMTEwLwYDVQQD
EyhkZmQ5NGU5NjI1NjNiZTFhOWVlMjk5YjI5ODA2MWY2YmIyMzhiNjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I9WmUg3zNZ/14I5ose2Q/TdRJlS
1Kn8cMQ2XPRnrhAtB03c0+niXHVQ32lI0ZhGtHr66w0u6l6loxLlj8oIt2QF0Hdx
GJshY5nX9CP3vUXzlIEJlUbcWgnHnsJ4KXcjeI2zBUs3vUa37jeHvVnFePFtBWvW
Jaq7idXjTHe6WYraMqD0H+Vbjz+ISkaGfWACS1Mvr7VkVl3lkTWpvBU7jqHZ988Z
HnEZo9jhZ/oykkZ2kRcOfTj2DnyHb/QOjB59+zEkLF8bGsnyc/f6FI2RyLKYxGft
NNlNxaFuy/7nq9VwL6Hv2tWZBuM1sOm2inRw/AGP61U4UkTgEaSV3YtdiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/ZTpYlY74anuKZspgGH2uyOLYmMB8GA1UdIwQY
MBaAFByOF0EeAQDJFLBA1RTCjh19NpkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1Mjgt
NmI0OWEzODkzYzc5LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1MjgtNmI0OWEzODkzYzc5
LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4FBthZHs
XIQH7dUn+RPvP478ZpaofmeZG3DVbFhEMn2ELCsjqxhK/OD7W3m06pajTgKQDT5i
hyaPp4CtAauTMVWnFszIKsFLUv7M/D93WwdP/3XtVztXHqgYQ9r8brDAJx0D0BTq
1DYunLfIs2dAqxeGdAEPIW7seGxprRe0Iruih8lP5fweHpJu4LJGcpRwKOUS5P5x
j/dSFE2YUA5xau/Tb9jCXG3gWE7KwDKN5RWtVvHmgFxpVRxLF2rud+zmCkM65Ca2
I1IxJ8l69mWR8JAZpGOxr6tDxkSiFSja9YQS5I90MlpkgHOhbZLtsAuviBAoPP8G
7ygfTYwhtcF/1g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:45 2025 by rpki-client