Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
File: hpPf7hdoc561l2wkW1rQBbMljsY.mft (raw, json)
Hash identifier: +3vvL+KyIOU+tLbfgyz3s7bz4uIoX4BQvLldpmXBk68=
Subject key identifier: 91:07:57:22:AF:95:C8:21:6B:E9:DD:EE:ED:47:F0:10:58:D4:D3:EF
Authority key identifier: 86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
Certificate issuer: /CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Certificate serial: 0199FC585E6A3E0A5A7FC6D2EB23570706D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:13 +0000
Manifest this update: Sun 19 Oct 2025 12:01:13 +0000
Manifest next update: Mon 20 Oct 2025 12:01:13 +0000
Files and hashes: 1: heJEz4aIV8pCovQNxPGHm98CLzg.roa (hash: oSOD/5s+DowUJTv2duSzog5oYqkTO1A7yRox3C69klU=)
2: hpPf7hdoc561l2wkW1rQBbMljsY.crl (hash: LTrlFT8BG7QZU4NdzSVhqW4gHmVUrs2Dw6xDdQoWjS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:5e:6a:3e:0a:5a:7f:c6:d2:eb:23:57:07:06:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Validity
Not Before: Oct 19 12:01:13 2025 GMT
Not After : Oct 20 12:01:13 2025 GMT
Subject: CN=91075722af95c8216be9ddeeed47f01058d4d3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:f0:80:48:45:1a:76:f8:11:15:44:e0:47:
4e:b9:01:59:bf:52:9e:b4:8e:0b:55:18:30:b0:fd:
da:02:5e:6d:b0:ca:bc:15:98:f8:b2:33:e1:d0:a3:
76:04:9b:ea:12:09:85:06:e7:93:3b:11:d1:46:53:
a4:b9:62:44:0b:12:6c:69:b3:91:e2:9f:df:f7:f9:
b6:b1:6c:09:3f:37:14:0a:71:d4:b4:d5:45:74:b9:
89:4e:1d:27:76:ed:af:32:22:0a:42:08:7a:05:46:
07:61:f3:fc:85:cb:af:0b:88:d4:b1:3e:ed:1a:46:
03:b3:07:d1:35:ad:8b:d0:ef:65:0e:24:99:a2:d2:
66:ef:12:76:1a:e0:a1:68:aa:a0:b8:64:69:9d:b4:
e8:4a:49:9e:df:4c:6b:87:70:0c:01:30:15:81:b3:
93:af:e7:67:e5:ca:58:64:2b:63:13:3e:6a:a9:05:
2e:b6:21:8d:51:ee:9f:e9:f5:61:6e:2d:fa:73:d4:
e9:f4:15:24:ed:b0:88:4f:87:e4:2f:21:10:15:1d:
4f:7f:7b:2b:72:8b:81:dc:d4:72:4f:16:57:31:7e:
b9:34:9e:99:47:e6:7f:11:e0:38:8f:2a:1e:c7:e0:
5c:dd:ff:91:6a:6e:90:94:df:b3:10:b6:5c:a6:ca:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:07:57:22:AF:95:C8:21:6B:E9:DD:EE:ED:47:F0:10:58:D4:D3:EF
X509v3 Authority Key Identifier:
keyid:86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a4:a3:e1:ce:0c:fd:f2:74:9c:d9:e4:84:dc:e5:e9:c9:55:
0d:0e:88:26:89:1a:60:83:a6:f5:b5:57:8b:3a:c4:25:ed:fd:
1c:90:c7:32:6d:df:98:b1:e5:42:d3:90:81:fc:12:27:b7:ac:
ad:04:dd:39:f2:f2:50:7f:43:fd:b2:69:2e:46:5b:46:3a:83:
81:33:15:eb:18:9e:73:7d:c8:27:01:a2:a5:a3:cd:30:61:1e:
67:10:47:34:97:7b:0c:5b:41:19:d3:31:27:85:99:43:d9:8c:
fc:f3:13:cd:95:03:83:ea:97:ab:0d:ee:ca:00:0b:6b:92:98:
f0:c3:e2:8e:23:e0:19:b1:af:45:85:fa:8d:62:b3:bf:81:2d:
57:15:e7:3b:38:d5:5c:ab:66:89:d8:26:5d:84:43:8b:f9:21:
b9:5b:d8:89:eb:28:2d:4f:ca:0e:b8:98:49:26:79:c4:4d:e7:
e0:f4:a7:ee:c9:1a:f2:c9:d4:57:1d:d5:be:46:f2:c1:04:f5:
d2:d9:f7:7d:ed:90:d5:e2:75:4f:f0:0e:eb:7d:83:83:7d:8d:
ad:c6:d3:9b:86:0f:67:21:16:87:1b:88:db:28:1a:90:6d:46:
a5:f2:63:96:03:9a:e7:07:f5:e1:8c:aa:5d:db:62:b7:a7:a0:
7c:cb:9b:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WF5qPgpaf8bS6yNXBwbYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OTNkZmVlMTc2ODczOWViNTk3NmMyNDViNWFkMDA1YjMy
NThlYzYwHhcNMjUxMDE5MTIwMTEzWhcNMjUxMDIwMTIwMTEzWjAzMTEwLwYDVQQD
Eyg5MTA3NTcyMmFmOTVjODIxNmJlOWRkZWVlZDQ3ZjAxMDU4ZDRkM2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWfwgEhFGnb4ERVE4EdOuQFZv1Ke
tI4LVRgwsP3aAl5tsMq8FZj4sjPh0KN2BJvqEgmFBueTOxHRRlOkuWJECxJsabOR
4p/f9/m2sWwJPzcUCnHUtNVFdLmJTh0ndu2vMiIKQgh6BUYHYfP8hcuvC4jUsT7t
GkYDswfRNa2L0O9lDiSZotJm7xJ2GuChaKqguGRpnbToSkme30xrh3AMATAVgbOT
r+dn5cpYZCtjEz5qqQUutiGNUe6f6fVhbi36c9Tp9BUk7bCIT4fkLyEQFR1Pf3sr
couB3NRyTxZXMX65NJ6ZR+Z/EeA4jyoex+Bc3f+Ram6QlN+zELZcpsoXlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEHVyKvlcgha+nd7u1H8BBY1NPvMB8GA1UdIwQY
MBaAFIaT3+4XaHOetZdsJFta0AWzJY7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBQZjdoZG9jNTYxbDJ3a1cxclFCYk1sanNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lYjA2M2YtNGMzYy00OTcxLWFlNTAt
NjY0ODIwNzFiODE5LzEvaHBQZjdoZG9jNTYxbDJ3a1cxclFCYk1sanNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lYjA2M2YtNGMzYy00OTcxLWFlNTAtNjY0ODIwNzFiODE5
LzEvaHBQZjdoZG9jNTYxbDJ3a1cxclFCYk1sanNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6Sj4c4M
/fJ0nNnkhNzl6clVDQ6IJokaYIOm9bVXizrEJe39HJDHMm3fmLHlQtOQgfwSJ7es
rQTdOfLyUH9D/bJpLkZbRjqDgTMV6xiec33IJwGipaPNMGEeZxBHNJd7DFtBGdMx
J4WZQ9mM/PMTzZUDg+qXqw3uygALa5KY8MPijiPgGbGvRYX6jWKzv4EtVxXnOzjV
XKtmidgmXYRDi/khuVvYiesoLU/KDriYSSZ5xE3n4PSn7ska8snUVx3VvkbywQT1
0tn3fe2Q1eJ1T/AO632Dg32NrcbTm4YPZyEWhxuI2ygakG1GpfJjlgOa5wf14Yyq
Xdtit6egfMubJg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:18 2025 by rpki-client