Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
File: HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft (raw, json)
Hash identifier: cOPMtm8aWTB+lTY7jiV9Rkg4Ch3/PETNLYJ8uP0wraE=
Subject key identifier: 99:98:18:D7:E3:02:E4:6E:7E:1F:BA:80:BD:99:C2:DB:3A:94:4E:39
Authority key identifier: 1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
Certificate issuer: /CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Certificate serial: 0199FBEBB3BF90238EA4143611C3AB2061F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
Manifest number: 0598
Signing time: Sun 19 Oct 2025 10:02:32 +0000
Manifest this update: Sun 19 Oct 2025 10:02:32 +0000
Manifest next update: Mon 20 Oct 2025 10:02:32 +0000
Files and hashes: 1: 6KBWfvurH0ryN0klNLmOfIfXS50.roa (hash: bQYxwK8PunB8us4iL4+kd3a48QuBW1TD23kpBG66hec=)
2: HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl (hash: aPg4ystwcgUYahnodJR1tSyj6tx0gzthz+Tet2ep9b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b3:bf:90:23:8e:a4:14:36:11:c3:ab:20:61:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Validity
Not Before: Oct 19 10:02:32 2025 GMT
Not After : Oct 20 10:02:32 2025 GMT
Subject: CN=999818d7e302e46e7e1fba80bd99c2db3a944e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:65:e0:ec:c4:3a:28:7f:35:fc:ae:07:f2:
5d:8f:78:a8:25:70:24:39:e4:53:57:89:4b:37:a1:
79:28:54:e4:a9:ae:e8:8a:b0:c7:81:94:05:db:aa:
3c:a8:66:ec:56:62:4b:4b:4f:6c:3c:81:78:fc:73:
71:f9:be:a8:25:b5:a2:59:82:79:c3:36:2b:ca:dc:
a6:4a:e2:5d:0a:b7:a1:0e:20:8f:00:cc:80:c6:12:
92:2c:ee:aa:c5:f7:12:a6:30:eb:2e:a8:39:52:dc:
cb:db:a4:82:bd:88:f8:56:71:37:38:16:bd:cd:2e:
24:9a:c0:e5:28:be:a8:a1:76:cd:8e:dd:99:ee:e6:
83:8a:85:58:2e:7f:50:2e:0a:df:18:d0:bc:fa:53:
a2:92:ac:aa:d5:4b:eb:9e:bc:a4:76:5a:61:16:80:
c9:6f:91:d5:6f:90:50:d0:2c:82:66:65:26:6c:f0:
c7:25:f4:a4:34:73:08:82:1a:33:c5:4d:0a:e6:94:
b4:89:a6:90:36:8b:5c:ca:c6:48:b5:dc:d9:31:4a:
6a:aa:2b:71:a2:13:b0:e2:e5:67:ea:78:e8:74:c8:
f3:4d:78:94:6a:b4:71:95:f7:ed:f3:12:1b:ba:1d:
d0:2c:9a:7b:e7:aa:e2:35:c0:04:9f:8f:ac:59:80:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:98:18:D7:E3:02:E4:6E:7E:1F:BA:80:BD:99:C2:DB:3A:94:4E:39
X509v3 Authority Key Identifier:
keyid:1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:67:43:85:6a:c6:d2:4a:76:1b:83:42:5c:53:72:7d:68:8d:
c2:ab:6b:d1:d3:18:7b:4d:8b:25:54:4b:2d:69:df:ce:b4:2f:
af:ed:18:2c:d6:0d:a5:b1:5b:ac:15:8f:81:fb:1d:4b:92:cd:
1c:18:81:c0:df:34:60:81:73:82:e9:a3:a1:de:92:88:bc:50:
a5:12:b6:56:f9:ad:5a:20:8b:fe:9f:c9:e8:a7:38:dc:e5:7f:
8f:1b:ab:21:fe:87:78:c0:da:34:f4:16:d9:78:ef:e2:52:77:
4f:ce:de:b6:5b:37:84:fd:ea:bc:63:6a:b8:d4:65:a1:23:6e:
f8:17:c3:48:2d:1b:33:b8:24:12:1c:80:ec:b4:4c:0a:de:6e:
bc:78:a3:11:e4:d6:4f:de:9e:7d:f8:28:ac:55:cf:db:45:fe:
47:66:5d:a4:f3:fa:d5:b3:05:e2:2f:9d:66:04:6c:df:83:1a:
56:c2:95:dd:a9:9d:06:b0:e7:41:6f:42:a3:cf:24:97:d2:d7:
a1:d6:b3:31:d7:6a:c6:07:03:da:80:5a:94:15:34:70:06:50:
6b:59:1d:dd:7a:85:3a:ec:a5:74:e1:b0:6a:f9:f0:a2:d5:bb:
c9:c5:f5:51:02:a5:9c:ad:93:aa:79:f7:72:a2:53:ab:e7:48:
58:75:67:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn767O/kCOOpBQ2EcOrIGHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTI0NzhiMWNhNGNiYTAzMDk5MWJkOGNiNDRkOWYyNGY1
OWMwYjgwHhcNMjUxMDE5MTAwMjMyWhcNMjUxMDIwMTAwMjMyWjAzMTEwLwYDVQQD
Eyg5OTk4MThkN2UzMDJlNDZlN2UxZmJhODBiZDk5YzJkYjNhOTQ0ZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs65l4OzEOih/NfyuB/Jdj3ioJXAk
OeRTV4lLN6F5KFTkqa7oirDHgZQF26o8qGbsVmJLS09sPIF4/HNx+b6oJbWiWYJ5
wzYrytymSuJdCrehDiCPAMyAxhKSLO6qxfcSpjDrLqg5UtzL26SCvYj4VnE3OBa9
zS4kmsDlKL6ooXbNjt2Z7uaDioVYLn9QLgrfGNC8+lOikqyq1UvrnrykdlphFoDJ
b5HVb5BQ0CyCZmUmbPDHJfSkNHMIghozxU0K5pS0iaaQNotcysZItdzZMUpqqitx
ohOw4uVn6njodMjzTXiUarRxlfft8xIbuh3QLJp756riNcAEn4+sWYAaMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmYGNfjAuRufh+6gL2Zwts6lE45MB8GA1UdIwQY
MBaAFB8SR4scpMugMJkb2MtE2fJPWcC4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mNjIzYjYtYTE5OC00MDVjLTgzMjYt
MDlmMTUyNGE1MjQ2LzEvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mNjIzYjYtYTE5OC00MDVjLTgzMjYtMDlmMTUyNGE1MjQ2
LzEvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmdDhWrG
0kp2G4NCXFNyfWiNwqtr0dMYe02LJVRLLWnfzrQvr+0YLNYNpbFbrBWPgfsdS5LN
HBiBwN80YIFzgumjod6SiLxQpRK2VvmtWiCL/p/J6Kc43OV/jxurIf6HeMDaNPQW
2Xjv4lJ3T87etls3hP3qvGNquNRloSNu+BfDSC0bM7gkEhyA7LRMCt5uvHijEeTW
T96effgorFXP20X+R2ZdpPP61bMF4i+dZgRs34MaVsKV3amdBrDnQW9Co88kl9LX
odazMddqxgcD2oBalBU0cAZQa1kd3XqFOuyldOGwavnwotW7ycX1UQKlnK2Tqnn3
cqJTq+dIWHVnZA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:02 2025 by rpki-client