Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
File: H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft (raw, json)
Hash identifier: pvSxKYJ9eOAUbRVhtG+MRFXuxIjLBNNp48g6CrrNMbg=
Subject key identifier: 9F:46:A9:4F:F1:F1:3F:DD:82:AF:D0:C1:7A:BB:11:6A:AC:83:2F:2E
Authority key identifier: 1F:DD:87:AB:11:54:FE:D5:F9:BD:2B:8B:55:1A:15:2B:12:75:C0:01
Certificate issuer: /CN=1fdd87ab1154fed5f9bd2b8b551a152b1275c001
Certificate serial: 0199FE46BF373273473BCDE098A7EEEC57EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
Manifest number: DE
Signing time: Sun 19 Oct 2025 21:01:13 +0000
Manifest this update: Sun 19 Oct 2025 21:01:13 +0000
Manifest next update: Mon 20 Oct 2025 21:01:13 +0000
Files and hashes: 1: H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl (hash: XRcoqTvng50D5COLd7oE4wVpTX5/GsOYICKFS/IbK2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:bf:37:32:73:47:3b:cd:e0:98:a7:ee:ec:57:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fdd87ab1154fed5f9bd2b8b551a152b1275c001
Validity
Not Before: Oct 19 21:01:13 2025 GMT
Not After : Oct 20 21:01:13 2025 GMT
Subject: CN=9f46a94ff1f13fdd82afd0c17abb116aac832f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:20:82:3a:fe:6c:57:01:4a:bf:b3:7e:7b:
62:61:c0:67:12:62:61:45:be:85:55:a8:4b:d7:c6:
d6:de:4b:4d:17:e2:a1:a6:47:ca:8f:2c:2c:12:dd:
94:9c:79:48:02:6a:ae:93:66:7a:58:a6:bc:27:cc:
33:d9:35:f9:31:71:71:4c:ec:53:4d:b0:b0:06:b0:
cf:ad:51:3c:15:15:e0:be:26:0a:2f:ed:4f:1c:fd:
e8:70:e5:a7:19:ba:64:2e:ab:f7:8d:c0:74:31:1d:
01:53:3d:ec:6d:df:ca:e4:9f:08:dd:8e:c9:46:56:
e6:d6:3f:a0:ef:be:be:e8:a7:6e:45:31:b2:85:e4:
d6:7b:6f:00:73:ea:d6:36:48:37:32:55:b8:24:f4:
15:36:f9:63:15:a8:72:2b:65:5a:73:40:b7:d0:d8:
af:d2:2f:e4:26:6b:c9:5a:8d:96:de:5f:6f:41:d6:
b1:74:28:9d:b0:1c:f9:7a:8b:b5:d7:cf:48:31:dc:
ae:98:e4:e3:02:27:51:31:13:6b:22:ee:ce:86:d3:
19:11:31:d9:b6:b0:d3:86:21:cb:e1:2b:3f:e3:8a:
81:f6:44:94:3b:01:5a:05:87:c4:fb:a3:56:cf:b7:
51:cd:c4:f5:b1:2b:88:17:0d:39:a8:aa:a3:e5:30:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:46:A9:4F:F1:F1:3F:DD:82:AF:D0:C1:7A:BB:11:6A:AC:83:2F:2E
X509v3 Authority Key Identifier:
keyid:1F:DD:87:AB:11:54:FE:D5:F9:BD:2B:8B:55:1A:15:2B:12:75:C0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:00:0a:84:44:11:77:22:6c:17:84:d1:d6:ab:7d:86:ed:21:
ec:76:25:56:c6:78:bf:a8:78:a8:fa:af:ba:bc:a8:61:88:e0:
54:01:2d:7d:d1:ba:83:12:6a:d8:e6:b0:60:75:33:61:de:0c:
14:a8:1b:8f:9b:99:51:ca:25:98:87:7d:a2:38:44:90:21:db:
92:a0:3c:bb:37:7c:6d:33:85:28:d8:3c:96:e7:c4:e8:13:df:
a3:c0:95:5a:04:1a:c3:cc:4a:37:61:19:8a:43:b8:8c:9e:86:
30:54:63:b4:b2:e6:f5:bb:e0:fd:7d:3d:4c:c4:67:99:58:c3:
04:5f:61:f9:f0:12:f6:ed:d4:00:c3:bc:1e:77:61:9a:7e:65:
e3:fc:c2:44:b2:a6:12:f1:cf:dc:1e:00:7f:be:96:97:fb:bf:
df:be:1d:2a:af:f0:ab:f2:08:82:86:16:f7:4a:8a:8f:61:0c:
83:63:3d:f9:f5:f3:1a:cc:ef:88:3c:aa:3b:31:68:b3:db:be:
7b:93:5a:c8:29:87:00:96:43:af:22:9c:30:9f:dc:c7:ff:d0:
fa:f7:85:0f:1e:8d:44:17:8f:3b:3f:ae:3f:16:22:ef:15:7e:
9a:46:07:28:16:c7:19:a8:99:fb:7a:54:70:9f:1e:e5:bd:2f:
55:3a:12:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+Rr83MnNHO83gmKfu7FfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZGQ4N2FiMTE1NGZlZDVmOWJkMmI4YjU1MWExNTJiMTI3
NWMwMDEwHhcNMjUxMDE5MjEwMTEzWhcNMjUxMDIwMjEwMTEzWjAzMTEwLwYDVQQD
Eyg5ZjQ2YTk0ZmYxZjEzZmRkODJhZmQwYzE3YWJiMTE2YWFjODMyZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYsggjr+bFcBSr+zfntiYcBnEmJh
Rb6FVahL18bW3ktNF+KhpkfKjywsEt2UnHlIAmquk2Z6WKa8J8wz2TX5MXFxTOxT
TbCwBrDPrVE8FRXgviYKL+1PHP3ocOWnGbpkLqv3jcB0MR0BUz3sbd/K5J8I3Y7J
Rlbm1j+g776+6KduRTGyheTWe28Ac+rWNkg3MlW4JPQVNvljFahyK2Vac0C30Niv
0i/kJmvJWo2W3l9vQdaxdCidsBz5eou1189IMdyumOTjAidRMRNrIu7OhtMZETHZ
trDThiHL4Ss/44qB9kSUOwFaBYfE+6NWz7dRzcT1sSuIFw05qKqj5TBEkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9GqU/x8T/dgq/QwXq7EWqsgy8uMB8GA1UdIwQY
MBaAFB/dh6sRVP7V+b0ri1UaFSsSdcABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDkySHF4RlVfdFg1dlN1TFZSb1ZLeEoxd0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85NjZiYTQtZTY4My00YjA0LTlmNDUt
YjQxN2FjOWJiZmEzLzEvSDkySHF4RlVfdFg1dlN1TFZSb1ZLeEoxd0FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85NjZiYTQtZTY4My00YjA0LTlmNDUtYjQxN2FjOWJiZmEz
LzEvSDkySHF4RlVfdFg1dlN1TFZSb1ZLeEoxd0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwAKhEQR
dyJsF4TR1qt9hu0h7HYlVsZ4v6h4qPqvuryoYYjgVAEtfdG6gxJq2OawYHUzYd4M
FKgbj5uZUcolmId9ojhEkCHbkqA8uzd8bTOFKNg8lufE6BPfo8CVWgQaw8xKN2EZ
ikO4jJ6GMFRjtLLm9bvg/X09TMRnmVjDBF9h+fAS9u3UAMO8Hndhmn5l4/zCRLKm
EvHP3B4Af76Wl/u/374dKq/wq/IIgoYW90qKj2EMg2M9+fXzGszviDyqOzFos9u+
e5NayCmHAJZDryKcMJ/cx//Q+veFDx6NRBePOz+uPxYi7xV+mkYHKBbHGaiZ+3pU
cJ8e5b0vVToSgQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:08 2025 by rpki-client