Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
File: HFGW3tW6XWhucJXG1cY4xrj4uto.mft (raw, json)
Hash identifier: 2WIZvIbw/JUvGi3L7dtLF4mZ4UqngUOmZKuOEWV6Clc=
Subject key identifier: B2:31:EE:A4:5A:0A:61:C4:3C:72:AE:FF:B0:28:03:AE:79:EB:43:41
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: 0199FFC895EB4B2E0A580C016B14C8F5B901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
Manifest number: 1029
Signing time: Mon 20 Oct 2025 04:02:39 +0000
Manifest this update: Mon 20 Oct 2025 04:02:39 +0000
Manifest next update: Tue 21 Oct 2025 04:02:39 +0000
Files and hashes: 1: HFGW3tW6XWhucJXG1cY4xrj4uto.crl (hash: BW/Qu1L5Xxa0j7yjpfWhYXI0TYvux4Dw0VOoEEp/r5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:95:eb:4b:2e:0a:58:0c:01:6b:14:c8:f5:b9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: Oct 20 04:02:39 2025 GMT
Not After : Oct 21 04:02:39 2025 GMT
Subject: CN=b231eea45a0a61c43c72aeffb02803ae79eb4341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e5:ec:a6:4d:8a:52:30:88:4b:66:8a:58:c5:
b2:1d:a1:7b:40:60:73:45:ae:68:0f:9c:f3:e6:fb:
a6:24:ab:a7:3f:bf:08:0e:b1:e7:90:a8:ee:73:4e:
16:8f:32:29:19:3b:27:1e:84:de:85:2c:67:4a:63:
c7:76:a2:f9:47:99:bc:84:bb:b8:7b:e8:2d:3a:74:
09:ad:0e:e7:30:1a:d8:fd:13:b6:86:5a:d5:e4:61:
c4:be:c0:71:ed:81:70:a2:f2:f6:21:96:05:71:19:
b6:f9:dd:12:06:2e:f1:19:0c:92:1b:7b:1b:0c:76:
22:ef:99:27:7f:f6:89:27:2f:58:22:fe:66:2f:3e:
de:a9:05:ba:c2:ef:de:30:8d:f6:ed:91:43:6f:e0:
b9:6d:80:1e:cb:1f:05:cc:ef:a5:f3:c8:18:1a:6e:
1d:fe:f5:f7:c9:a8:f8:e8:50:70:9d:0d:c7:1e:00:
f4:68:3f:df:4c:6f:52:74:fa:67:5d:f1:ce:ed:e3:
b0:b2:c5:80:a2:1e:8f:72:58:17:45:ed:d4:92:55:
67:4c:e1:53:04:a2:aa:e3:ee:9e:e0:c6:36:6b:6c:
b6:2b:c3:41:63:f2:76:bc:82:bb:0b:82:5e:16:3c:
82:1f:81:9a:c7:f2:c2:23:c2:63:a9:89:90:e2:fe:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:31:EE:A4:5A:0A:61:C4:3C:72:AE:FF:B0:28:03:AE:79:EB:43:41
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a5:5d:72:86:6c:fe:3f:d2:35:25:e3:86:9d:f4:55:98:ed:
0d:3b:2f:b2:8f:93:95:25:f5:af:c5:36:24:d0:c1:16:59:b2:
5d:de:98:ff:aa:5a:cc:5b:8b:37:e8:ae:8a:01:22:f4:f2:03:
f4:fc:56:67:5d:19:24:9c:80:d5:87:7f:e6:e7:f4:97:fe:01:
d7:fc:ca:e3:87:85:5b:4c:66:b5:d9:7d:fe:9a:c8:3d:f3:24:
d3:0f:63:76:25:74:10:f3:d7:e4:c5:b0:e4:5a:dd:43:67:20:
8c:c1:11:69:db:36:00:73:49:23:ad:32:e5:30:4e:d8:d7:c9:
56:1e:fd:4c:01:2d:66:e8:8f:f8:27:5c:72:f4:b7:b1:35:08:
1c:7c:b4:1c:c5:93:3a:05:c7:19:ea:ce:4c:ac:06:34:32:5c:
28:c9:a3:4d:7c:0c:82:ea:4d:e0:21:03:db:e3:b0:9f:4c:4c:
e5:bb:69:68:7e:35:06:4d:85:63:6b:2d:55:d7:ee:ed:fb:5b:
f5:c0:97:56:e8:a3:b2:67:bc:cb:26:20:5e:7a:c7:93:aa:03:
d6:0d:e3:b0:58:18:d8:9c:52:b0:e5:46:ee:2e:b9:04:8d:aa:
ab:84:4a:53:77:d7:d9:29:4a:37:5a:b3:03:54:95:2e:06:d5:
92:b1:dc:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yJXrSy4KWAwBaxTI9bkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNTE5NmRlZDViYTVkNjg2ZTcwOTVjNmQ1YzYzOGM2Yjhm
OGJhZGEwHhcNMjUxMDIwMDQwMjM5WhcNMjUxMDIxMDQwMjM5WjAzMTEwLwYDVQQD
EyhiMjMxZWVhNDVhMGE2MWM0M2M3MmFlZmZiMDI4MDNhZTc5ZWI0MzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+Xspk2KUjCIS2aKWMWyHaF7QGBz
Ra5oD5zz5vumJKunP78IDrHnkKjuc04WjzIpGTsnHoTehSxnSmPHdqL5R5m8hLu4
e+gtOnQJrQ7nMBrY/RO2hlrV5GHEvsBx7YFwovL2IZYFcRm2+d0SBi7xGQySG3sb
DHYi75knf/aJJy9YIv5mLz7eqQW6wu/eMI327ZFDb+C5bYAeyx8FzO+l88gYGm4d
/vX3yaj46FBwnQ3HHgD0aD/fTG9SdPpnXfHO7eOwssWAoh6PclgXRe3UklVnTOFT
BKKq4+6e4MY2a2y2K8NBY/J2vIK7C4JeFjyCH4Gax/LCI8JjqYmQ4v6uEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIx7qRaCmHEPHKu/7AoA65560NBMB8GA1UdIwQY
MBaAFBxRlt7Vul1obnCVxtXGOMa4+LraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEZHVzN0VzZYV2h1Y0pYRzFjWTR4cmo0dXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNTlmYTMtMzE2ZS00ZjVlLThiNjEt
MjBiZjI3NWZkMGU3LzEvSEZHVzN0VzZYV2h1Y0pYRzFjWTR4cmo0dXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xNTlmYTMtMzE2ZS00ZjVlLThiNjEtMjBiZjI3NWZkMGU3
LzEvSEZHVzN0VzZYV2h1Y0pYRzFjWTR4cmo0dXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKVdcoZs
/j/SNSXjhp30VZjtDTsvso+TlSX1r8U2JNDBFlmyXd6Y/6pazFuLN+iuigEi9PID
9PxWZ10ZJJyA1Yd/5uf0l/4B1/zK44eFW0xmtdl9/prIPfMk0w9jdiV0EPPX5MWw
5FrdQ2cgjMERads2AHNJI60y5TBO2NfJVh79TAEtZuiP+CdccvS3sTUIHHy0HMWT
OgXHGerOTKwGNDJcKMmjTXwMgupN4CED2+Own0xM5btpaH41Bk2FY2stVdfu7ftb
9cCXVuijsme8yyYgXnrHk6oD1g3jsFgY2JxSsOVG7i65BI2qq4RKU3fX2SlKN1qz
A1SVLgbVkrHcgg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:44 2025 by rpki-client