
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File: hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier: HDDyV8df36C3+GS4LTzS02Sxtd2NiCHO847vpbzdr4k=
Subject key identifier: 84:CE:3A:52:11:F2:B3:E1:45:59:F6:E2:91:89:25:A0:13:DB:53:EA
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer: /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial: 0199FB7CD8110AA3F8F0E49E11E8145B4EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 08:01:26 +0000
Manifest this update: Sun 19 Oct 2025 08:01:26 +0000
Manifest next update: Mon 20 Oct 2025 08:01:26 +0000
Files and hashes: 1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: MBf0z75xhpsvlNPMihKC3Qib7MGzoFV6EwUbRWliQ5Q=)
2: jg1_qGOypFs-Omg84eci-XkXn6M.roa (hash: Hutcm4lZFs78dltAQDGy1uUI7H+2kpc6tWhDJ8JMDfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d8:11:0a:a3:f8:f0:e4:9e:11:e8:14:5b:4e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Validity
Not Before: Oct 19 08:01:26 2025 GMT
Not After : Oct 20 08:01:26 2025 GMT
Subject: CN=84ce3a5211f2b3e14559f6e2918925a013db53ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e2:bb:44:1a:75:3b:cd:62:6a:49:dd:87:15:
cc:8a:23:18:b4:51:46:42:39:9f:2f:e2:dd:e3:c2:
be:c9:9c:8c:b5:d5:fe:64:aa:54:e6:df:91:d8:44:
c1:16:40:c6:38:36:70:05:d8:6a:f7:a9:91:d9:bb:
59:33:59:46:75:25:bc:87:11:e2:20:6f:58:81:12:
02:12:93:2b:2a:fa:fb:f9:58:55:14:85:34:ac:77:
d2:c5:de:cb:03:5e:2e:be:c5:8f:9c:74:ab:31:cc:
db:42:c1:1f:8b:c8:cd:09:d4:d7:d7:a7:b0:ed:cb:
e4:ed:d6:55:71:ed:5d:3d:12:e9:e6:cf:62:13:74:
9f:32:db:aa:8b:89:dc:5c:0e:37:6d:64:b1:d7:5f:
06:78:3f:46:9a:9c:24:3b:e2:0f:2a:8f:69:be:a6:
b3:6a:63:d8:0a:79:f2:ff:8b:07:af:87:b4:44:f5:
9f:dc:30:83:75:d9:af:d8:32:98:a2:6c:d1:18:4e:
96:8c:06:38:a8:3e:fe:6c:43:c1:97:4f:7a:71:ee:
39:b2:da:0f:23:35:4b:52:0c:e3:55:09:bf:af:4e:
9c:9a:01:f0:67:43:dd:0a:9d:c5:84:d5:02:3e:2d:
3f:68:80:18:e5:dc:17:75:59:df:2e:94:4c:41:4f:
e8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CE:3A:52:11:F2:B3:E1:45:59:F6:E2:91:89:25:A0:13:DB:53:EA
X509v3 Authority Key Identifier:
keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fe:bc:10:56:33:96:f6:1f:d0:43:83:1e:c2:9c:23:00:a3:
b4:2a:46:57:a5:28:e1:09:7f:12:e2:a7:e9:48:08:b5:d2:90:
72:64:a9:05:00:ac:e1:e1:f3:a2:a4:db:1a:8c:51:25:a9:83:
27:ee:81:a8:80:f0:7f:08:10:66:f1:1f:30:b5:4d:8f:2b:51:
4d:d8:05:af:87:81:6f:86:fd:f9:09:58:e1:d6:8e:ba:14:2f:
ba:a5:c4:6d:94:52:f4:bd:c4:7c:b0:ee:cd:e6:89:b2:1c:e9:
3c:51:82:e2:1b:7a:df:ef:12:43:34:4b:c6:21:a4:8f:8a:52:
f5:5b:98:d7:c6:c8:4b:3b:5f:fd:59:30:32:ce:ce:91:4b:05:
b5:0c:a2:6d:60:75:16:ca:be:29:f5:40:12:c0:8c:de:fc:ae:
19:cf:82:01:b3:1e:90:69:47:6c:e2:b7:c0:cc:f8:5e:54:ea:
0d:52:f5:c3:94:98:2e:dd:d2:74:2c:12:10:38:d4:74:38:7b:
4b:03:a9:5d:a9:41:5f:9d:30:17:da:6b:71:9f:ee:6a:62:74:
3a:c8:a4:3b:84:02:94:b6:23:e1:29:39:66:95:64:bf:da:0e:
d1:f8:5c:4e:a4:a5:f1:cf:38:17:76:a3:18:5a:70:90:ba:b0:
fc:01:86:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fNgRCqP48OSeEegUW07zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NDZhZjE4ZjcwNzhhYWMwMGMyZmNkMmNhNjdmOTMyODAy
MTdlMTUwHhcNMjUxMDE5MDgwMTI2WhcNMjUxMDIwMDgwMTI2WjAzMTEwLwYDVQQD
Eyg4NGNlM2E1MjExZjJiM2UxNDU1OWY2ZTI5MTg5MjVhMDEzZGI1M2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OK7RBp1O81iakndhxXMiiMYtFFG
QjmfL+Ld48K+yZyMtdX+ZKpU5t+R2ETBFkDGODZwBdhq96mR2btZM1lGdSW8hxHi
IG9YgRICEpMrKvr7+VhVFIU0rHfSxd7LA14uvsWPnHSrMczbQsEfi8jNCdTX16ew
7cvk7dZVce1dPRLp5s9iE3SfMtuqi4ncXA43bWSx118GeD9GmpwkO+IPKo9pvqaz
amPYCnny/4sHr4e0RPWf3DCDddmv2DKYomzRGE6WjAY4qD7+bEPBl096ce45stoP
IzVLUgzjVQm/r06cmgHwZ0PdCp3FhNUCPi0/aIAY5dwXdVnfLpRMQU/oWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITOOlIR8rPhRVn24pGJJaAT21PqMB8GA1UdIwQY
MBaAFIVGrxj3B4qsAML80spn+TKAIX4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYTY4ODgtYjlhZC00YjgxLWI5MzUt
NmJlYWVlNWI1OGEzLzEvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYTY4ODgtYjlhZC00YjgxLWI5MzUtNmJlYWVlNWI1OGEz
LzEvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADf68EFYz
lvYf0EODHsKcIwCjtCpGV6Uo4Ql/EuKn6UgItdKQcmSpBQCs4eHzoqTbGoxRJamD
J+6BqIDwfwgQZvEfMLVNjytRTdgFr4eBb4b9+QlY4daOuhQvuqXEbZRS9L3EfLDu
zeaJshzpPFGC4ht63+8SQzRLxiGkj4pS9VuY18bISztf/VkwMs7OkUsFtQyibWB1
Fsq+KfVAEsCM3vyuGc+CAbMekGlHbOK3wMz4XlTqDVL1w5SYLt3SdCwSEDjUdDh7
SwOpXalBX50wF9prcZ/uamJ0OsikO4QClLYj4Sk5ZpVkv9oO0fhcTqSl8c84F3aj
GFpwkLqw/AGGig==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:22 2025 by rpki-client