Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
File: r_HNv5fWyiB-XciFq8_2ccwVyRA.mft (raw, json)
Hash identifier: ABu2qW/iwDqlkiTAUZlmSk7fYZ3sk8ZSMauq8PzUmtU=
Subject key identifier: B9:E2:2C:BA:9B:8F:D3:1D:CB:50:C2:DD:C0:35:39:B6:4B:5B:BE:3E
Authority key identifier: AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
Certificate issuer: /CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Certificate serial: 0199FBEBD02F0B2D67FBC20C23F23C68F98B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
Manifest number: 0BD7
Signing time: Sun 19 Oct 2025 10:02:39 +0000
Manifest this update: Sun 19 Oct 2025 10:02:39 +0000
Manifest next update: Mon 20 Oct 2025 10:02:39 +0000
Files and hashes: 1: r_HNv5fWyiB-XciFq8_2ccwVyRA.crl (hash: QLrpkLNFt7JcZAoWKU3M8T4Ph2t6Nm2R4XCdhr8wnr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d0:2f:0b:2d:67:fb:c2:0c:23:f2:3c:68:f9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Validity
Not Before: Oct 19 10:02:39 2025 GMT
Not After : Oct 20 10:02:39 2025 GMT
Subject: CN=b9e22cba9b8fd31dcb50c2ddc03539b64b5bbe3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:5d:ee:47:e2:bf:cc:44:db:4e:d4:a9:87:
02:61:da:ca:27:89:2e:fc:7d:c1:32:ac:19:69:3b:
46:74:94:2c:09:df:a4:27:e6:f5:95:09:59:16:18:
98:2e:a6:aa:5d:2c:62:ce:e5:3a:ad:3b:89:d0:d3:
87:27:97:14:df:87:3b:93:06:f8:34:d7:3c:0d:db:
1c:7d:8f:9e:44:01:9a:4a:2c:88:6a:ba:30:ed:51:
00:bd:94:7b:46:32:71:8b:c7:9f:eb:aa:1e:91:52:
6b:86:7d:a5:5f:16:6b:db:e5:23:4b:3a:aa:8b:22:
95:6a:6f:2e:10:e6:3e:9d:29:fb:83:d5:fb:75:4e:
1a:17:ff:5a:be:8f:ca:4e:6e:06:39:21:20:df:76:
72:3d:a2:07:95:32:19:12:09:d9:bb:f2:a0:02:18:
72:24:53:c6:d3:4d:32:0c:81:3c:c5:c7:4c:26:c7:
9b:85:ef:9b:32:d4:2e:6f:46:5c:7b:36:0a:51:71:
a3:61:33:09:28:7b:dd:d5:4a:c2:18:87:12:66:59:
4c:8b:7b:75:a0:ae:44:bc:88:9e:24:d2:8e:13:0e:
7c:38:d2:72:4c:70:74:34:e2:4b:b6:5b:32:4d:b1:
5a:02:d3:29:b0:f8:6f:a9:7e:6f:db:5b:e4:d8:dc:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E2:2C:BA:9B:8F:D3:1D:CB:50:C2:DD:C0:35:39:B6:4B:5B:BE:3E
X509v3 Authority Key Identifier:
keyid:AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b1:28:f9:80:ae:4f:15:a0:3f:5a:02:67:85:87:e3:71:05:
fe:9d:4a:81:a7:ae:a6:81:be:da:fa:c3:dc:78:21:fb:ce:29:
c9:e7:d8:0d:77:3c:42:48:97:de:10:93:d5:d4:99:d3:94:4c:
9c:8f:2f:39:e1:e9:4b:76:5d:3f:aa:26:89:29:f6:bc:1d:f7:
83:95:3f:84:8a:3c:9e:29:ec:95:cf:08:96:99:15:b2:7f:e5:
de:cc:21:a6:5f:ec:68:74:cb:c1:17:f8:08:81:cb:4a:fd:96:
1e:e3:5f:af:f7:3a:7b:e5:e3:5b:2c:a5:a8:f3:18:55:9b:7d:
17:38:71:88:82:8b:4d:36:b1:0e:e1:1a:e6:d8:a8:ef:b4:f6:
6c:f1:f2:7f:98:42:4c:2b:e1:01:71:36:f7:8a:6a:6f:05:6e:
f1:50:5e:f2:cf:30:2f:82:2c:28:02:08:ff:67:6e:54:0b:e4:
9e:24:53:1f:8e:9f:74:58:91:43:b0:40:bc:07:fa:39:ac:15:
1a:b2:70:c8:4f:45:d4:7a:eb:a8:ee:79:30:12:a0:7b:ea:17:
36:d2:26:c5:61:71:3d:a2:2a:1c:1a:75:2f:aa:5f:1f:90:06:
21:a9:f7:2e:6b:73:e1:92:d0:1c:c3:b8:e7:2e:b0:aa:e4:5d:
12:75:21:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn769AvCy1n+8IMI/I8aPmLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjFjZGJmOTdkNmNhMjA3ZTVkYzg4NWFiY2ZmNjcxY2Mx
NWM5MTAwHhcNMjUxMDE5MTAwMjM5WhcNMjUxMDIwMTAwMjM5WjAzMTEwLwYDVQQD
EyhiOWUyMmNiYTliOGZkMzFkY2I1MGMyZGRjMDM1MzliNjRiNWJiZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhBd7kfiv8xE207UqYcCYdrKJ4ku
/H3BMqwZaTtGdJQsCd+kJ+b1lQlZFhiYLqaqXSxizuU6rTuJ0NOHJ5cU34c7kwb4
NNc8DdscfY+eRAGaSiyIarow7VEAvZR7RjJxi8ef66oekVJrhn2lXxZr2+UjSzqq
iyKVam8uEOY+nSn7g9X7dU4aF/9avo/KTm4GOSEg33ZyPaIHlTIZEgnZu/KgAhhy
JFPG000yDIE8xcdMJsebhe+bMtQub0ZcezYKUXGjYTMJKHvd1UrCGIcSZllMi3t1
oK5EvIieJNKOEw58ONJyTHB0NOJLtlsyTbFaAtMpsPhvqX5v21vk2NxenwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLniLLqbj9Mdy1DC3cA1ObZLW74+MB8GA1UdIwQY
MBaAFK/xzb+X1sogfl3IhavP9nHMFckQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9ITnY1Zld5aUItWGNpRnE4XzJjY3dWeVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82Mjc5ODctMjM1ZC00MTk0LTk2YjEt
YWY4Yzc1YTkzY2QxLzEvcl9ITnY1Zld5aUItWGNpRnE4XzJjY3dWeVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82Mjc5ODctMjM1ZC00MTk0LTk2YjEtYWY4Yzc1YTkzY2Qx
LzEvcl9ITnY1Zld5aUItWGNpRnE4XzJjY3dWeVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7Eo+YCu
TxWgP1oCZ4WH43EF/p1KgaeupoG+2vrD3Hgh+84pyefYDXc8QkiX3hCT1dSZ05RM
nI8vOeHpS3ZdP6omiSn2vB33g5U/hIo8ninslc8IlpkVsn/l3swhpl/saHTLwRf4
CIHLSv2WHuNfr/c6e+XjWyylqPMYVZt9FzhxiIKLTTaxDuEa5tio77T2bPHyf5hC
TCvhAXE294pqbwVu8VBe8s8wL4IsKAII/2duVAvkniRTH46fdFiRQ7BAvAf6OawV
GrJwyE9F1HrrqO55MBKge+oXNtImxWFxPaIqHBp1L6pfH5AGIan3Lmtz4ZLQHMO4
5y6wquRdEnUhhg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:51 2025 by rpki-client