Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft
File: hTq7t9e8xKXFbpEu76wbC7BFUCE.mft (raw, json)
Hash identifier: +yNRgIR8brYwnPMSFMoR29KEp4lJcMdizvxDlyDvw8o=
Subject key identifier: CB:E3:90:CC:82:B6:6C:DE:6F:9F:63:10:EC:BD:AD:96:63:A9:91:42
Authority key identifier: 85:3A:BB:B7:D7:BC:C4:A5:C5:6E:91:2E:EF:AC:1B:0B:B0:45:50:21
Certificate issuer: /CN=853abbb7d7bcc4a5c56e912eefac1b0bb0455021
Certificate serial: 0199FEEC188445EABD0F9AB72A9110C27D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTq7t9e8xKXFbpEu76wbC7BFUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft
Manifest number: 062F
Signing time: Mon 20 Oct 2025 00:01:49 +0000
Manifest this update: Mon 20 Oct 2025 00:01:49 +0000
Manifest next update: Tue 21 Oct 2025 00:01:49 +0000
Files and hashes: 1: hTq7t9e8xKXFbpEu76wbC7BFUCE.crl (hash: bBhuBZX78yc8KRtkyhmySLtz9JKBreuf/Jc8mSXtTKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTq7t9e8xKXFbpEu76wbC7BFUCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:18:84:45:ea:bd:0f:9a:b7:2a:91:10:c2:7d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853abbb7d7bcc4a5c56e912eefac1b0bb0455021
Validity
Not Before: Oct 20 00:01:49 2025 GMT
Not After : Oct 21 00:01:49 2025 GMT
Subject: CN=cbe390cc82b66cde6f9f6310ecbdad9663a99142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:71:5e:0d:c1:12:76:0c:e1:73:11:b3:5f:
35:49:d0:17:22:c2:42:c5:07:4e:98:bd:ce:16:5d:
6a:d8:76:a8:db:c0:0e:60:3e:9f:74:5e:1b:54:c9:
bc:42:12:f2:89:4d:cc:eb:36:dc:2a:b6:a3:73:aa:
91:7d:49:11:a5:a8:88:51:58:06:77:b9:1e:13:08:
f1:f7:c0:ba:a1:73:bc:4d:56:f5:13:74:4e:8f:a1:
9a:fa:44:c1:28:63:b5:d9:35:7e:3e:f7:ba:01:6e:
a0:dc:f2:77:dd:bb:1f:6f:50:8c:d4:9c:1e:9b:77:
a1:0e:8e:49:8f:13:6b:0c:9d:28:e1:f0:17:98:1d:
0e:4d:72:f8:93:00:9c:f1:b6:57:31:05:f3:22:cd:
e3:31:5e:2a:23:6a:5e:60:89:61:b1:30:99:fc:8e:
4a:85:11:af:76:77:1c:e2:93:ca:1a:4e:42:c1:c1:
67:57:a7:36:e3:5a:e0:b2:e6:f1:af:99:e2:1e:42:
67:3d:a8:d8:2a:78:4a:b3:6b:5f:82:94:d8:48:88:
0b:8e:43:46:95:6d:a0:71:4b:ff:30:66:52:a3:d0:
f0:ba:6f:53:68:ad:1d:92:ee:20:86:29:40:56:4e:
af:32:12:c0:2e:d6:48:12:9d:57:0a:28:b6:3f:a2:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E3:90:CC:82:B6:6C:DE:6F:9F:63:10:EC:BD:AD:96:63:A9:91:42
X509v3 Authority Key Identifier:
keyid:85:3A:BB:B7:D7:BC:C4:A5:C5:6E:91:2E:EF:AC:1B:0B:B0:45:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTq7t9e8xKXFbpEu76wbC7BFUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7a:97:02:50:53:e3:12:63:ba:4b:10:04:35:ce:51:14:50:
ca:4b:80:7d:be:d2:26:f5:69:4d:85:a2:5e:21:80:9f:49:3a:
cf:78:49:af:ab:64:82:75:54:2e:3e:5c:bd:ba:64:41:46:c1:
d3:7c:36:2a:93:a2:af:d4:c3:6a:a6:c5:74:45:6c:ba:85:14:
38:0f:2b:c0:f2:9f:a3:65:65:71:35:9b:ff:47:60:5c:7c:9d:
1e:73:a8:e0:65:0c:24:98:60:be:7f:53:d2:b2:b0:f3:ac:35:
95:43:09:d1:16:84:6f:ee:a6:aa:e8:09:40:4d:59:66:65:53:
c1:f5:94:e0:78:f6:d6:f6:1b:02:af:1c:c9:d2:ed:c7:e0:af:
4e:eb:d1:5b:10:08:b9:80:fc:08:39:a1:04:13:3f:1b:35:c5:
e6:ab:a8:60:8b:e2:96:9b:1a:b1:8c:f3:8b:43:6b:47:fc:08:
b6:3b:66:0b:01:97:4e:a4:9b:5a:af:9f:be:41:eb:d3:ed:6e:
1e:a3:6f:db:ea:4e:c3:77:5a:13:55:ca:4e:22:03:9b:df:81:
48:4c:dd:56:83:68:f1:0f:9c:98:28:bd:1d:fc:90:c2:82:44:
32:35:35:4e:40:69:8a:1e:73:a4:2b:17:9f:1d:9a:b1:29:e4:
48:76:b5:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+7BiEReq9D5q3KpEQwn2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1M2FiYmI3ZDdiY2M0YTVjNTZlOTEyZWVmYWMxYjBiYjA0
NTUwMjEwHhcNMjUxMDIwMDAwMTQ5WhcNMjUxMDIxMDAwMTQ5WjAzMTEwLwYDVQQD
EyhjYmUzOTBjYzgyYjY2Y2RlNmY5ZjYzMTBlY2JkYWQ5NjYzYTk5MTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ1xXg3BEnYM4XMRs181SdAXIsJC
xQdOmL3OFl1q2Hao28AOYD6fdF4bVMm8QhLyiU3M6zbcKrajc6qRfUkRpaiIUVgG
d7keEwjx98C6oXO8TVb1E3ROj6Ga+kTBKGO12TV+Pve6AW6g3PJ33bsfb1CM1Jwe
m3ehDo5JjxNrDJ0o4fAXmB0OTXL4kwCc8bZXMQXzIs3jMV4qI2peYIlhsTCZ/I5K
hRGvdncc4pPKGk5CwcFnV6c241rgsubxr5niHkJnPajYKnhKs2tfgpTYSIgLjkNG
lW2gcUv/MGZSo9Dwum9TaK0dku4ghilAVk6vMhLALtZIEp1XCii2P6LaYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvjkMyCtmzeb59jEOy9rZZjqZFCMB8GA1UdIwQY
MBaAFIU6u7fXvMSlxW6RLu+sGwuwRVAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRxN3Q5ZTh4S1hGYnBFdTc2d2JDN0JGVUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80MjM4YWUtYTcyZi00NzFjLWE5YTkt
NTgyM2Y4NzAxNDFiLzEvaFRxN3Q5ZTh4S1hGYnBFdTc2d2JDN0JGVUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS80MjM4YWUtYTcyZi00NzFjLWE5YTktNTgyM2Y4NzAxNDFi
LzEvaFRxN3Q5ZTh4S1hGYnBFdTc2d2JDN0JGVUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHqXAlBT
4xJjuksQBDXOURRQykuAfb7SJvVpTYWiXiGAn0k6z3hJr6tkgnVULj5cvbpkQUbB
03w2KpOir9TDaqbFdEVsuoUUOA8rwPKfo2VlcTWb/0dgXHydHnOo4GUMJJhgvn9T
0rKw86w1lUMJ0RaEb+6mqugJQE1ZZmVTwfWU4Hj21vYbAq8cydLtx+CvTuvRWxAI
uYD8CDmhBBM/GzXF5quoYIvilpsasYzzi0NrR/wItjtmCwGXTqSbWq+fvkHr0+1u
HqNv2+pOw3daE1XKTiIDm9+BSEzdVoNo8Q+cmCi9HfyQwoJEMjU1TkBpih5zpCsX
nx2asSnkSHa1yw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:16 2025 by rpki-client