Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
File: HNPDCTm5BqRRWhxlwIg2gptqMok.mft (raw, json)
Hash identifier: uPixq22qBSc9CL4UGVOHVb/VP8A4V8hfXDuF4r1W3XI=
Subject key identifier: 77:F6:61:CB:7E:85:1D:E1:8B:93:AB:FD:86:6D:FA:C6:0D:B3:3F:F5
Authority key identifier: 1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89
Certificate issuer: /CN=1cd3c30939b906a4515a1c65c08836829b6a3289
Certificate serial: 0199FFFE6844B9AA7E5E8DD01487A5EA075F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 05:01:26 +0000
Manifest this update: Mon 20 Oct 2025 05:01:26 +0000
Manifest next update: Tue 21 Oct 2025 05:01:26 +0000
Files and hashes: 1: HNPDCTm5BqRRWhxlwIg2gptqMok.crl (hash: u5T5crPgCt6HUss3SpudYX8c5qYPEwKX/mFBTm2I0t0=)
2: zraU6JUbMiPLRortKHmXEnAo1OE.roa (hash: HMXC6yKtO8g8Ym91NRBLoqlps2ZqE/0U22YJBVZue4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:68:44:b9:aa:7e:5e:8d:d0:14:87:a5:ea:07:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd3c30939b906a4515a1c65c08836829b6a3289
Validity
Not Before: Oct 20 05:01:26 2025 GMT
Not After : Oct 21 05:01:26 2025 GMT
Subject: CN=77f661cb7e851de18b93abfd866dfac60db33ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f9:c6:85:20:68:df:6f:76:21:72:aa:ab:de:
1e:4d:6e:6d:b5:a9:fa:e3:6c:c9:2a:fe:b8:4e:0b:
13:04:e2:9b:38:bc:91:b0:d0:e3:c1:41:33:cb:93:
27:85:31:19:65:df:79:11:a8:ce:ef:e0:dd:3e:8d:
3d:a3:a4:dc:a0:f5:f9:9d:33:c9:fd:eb:6b:ed:e6:
43:7b:12:11:53:a9:42:4e:7e:60:16:48:35:a2:b9:
63:8a:22:ba:2b:08:96:a7:db:d2:01:b1:e1:6e:37:
3c:61:6e:3d:a3:ee:fd:16:23:ce:82:ba:94:18:82:
f8:67:fd:98:28:18:06:f5:d2:a4:0d:82:50:0f:c3:
10:83:86:66:e1:cf:2c:c0:57:2f:32:46:65:32:4b:
36:e5:c1:38:35:b7:cb:2c:0b:9c:f1:a1:31:b5:9a:
3a:c6:22:18:64:30:87:ed:9f:2a:28:36:e2:7a:c5:
44:2c:e8:15:f9:98:81:00:8d:ff:01:38:79:f9:2a:
67:02:12:c1:7a:ff:8e:41:aa:c2:d7:54:f2:a8:ee:
ff:57:fe:ba:4d:1f:07:b1:f3:f0:d9:d4:94:c5:5c:
82:d0:b5:31:75:c6:62:1c:7f:8a:fd:f7:8c:79:1f:
aa:e2:82:c0:85:11:91:5c:ae:5f:91:28:a1:dc:ab:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F6:61:CB:7E:85:1D:E1:8B:93:AB:FD:86:6D:FA:C6:0D:B3:3F:F5
X509v3 Authority Key Identifier:
keyid:1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:91:fb:f5:7c:ac:0e:af:76:0b:e8:fe:ef:8a:e3:d2:a3:93:
a9:15:4d:6c:b4:3a:1b:5e:9a:cf:68:3f:d1:49:02:77:c3:74:
21:02:00:93:05:91:44:1c:00:5b:f2:38:84:69:be:bf:75:c4:
2d:17:c9:60:74:97:64:98:5a:e4:f8:b4:2f:fa:21:e8:81:8b:
46:ab:aa:7b:06:70:53:47:2f:07:ad:51:ae:df:7c:c7:65:38:
79:64:4d:00:e1:bc:df:5c:1c:60:3d:53:f1:53:e7:c8:73:22:
43:94:e3:11:e6:7b:30:ee:ef:bb:90:ed:9f:4c:1a:87:55:9b:
d0:96:9d:1d:68:ae:8c:c8:0c:7e:61:30:8b:d5:49:eb:80:ae:
36:da:4c:86:10:ca:35:52:19:2b:c1:a1:a8:a1:f8:89:b7:e3:
a4:ba:be:e3:f7:f3:1c:73:72:24:9d:2b:0e:2c:55:90:3e:6c:
7c:01:79:c9:d1:0d:e3:4b:49:bd:b4:d8:71:85:f5:84:b5:23:
13:96:aa:02:15:a8:1d:ed:1d:b4:f4:e6:9c:b4:2f:82:87:8e:
45:d1:ac:2b:4c:f8:54:26:9c:03:db:5a:f6:3b:15:f9:37:72:
65:e4:b9:11:17:2c:31:be:c9:14:7c:2d:5a:0a:04:8c:dc:8a:
e4:d6:1a:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//mhEuap+Xo3QFIel6gdfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZDNjMzA5MzliOTA2YTQ1MTVhMWM2NWMwODgzNjgyOWI2
YTMyODkwHhcNMjUxMDIwMDUwMTI2WhcNMjUxMDIxMDUwMTI2WjAzMTEwLwYDVQQD
Eyg3N2Y2NjFjYjdlODUxZGUxOGI5M2FiZmQ4NjZkZmFjNjBkYjMzZmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvnGhSBo3292IXKqq94eTW5ttan6
42zJKv64TgsTBOKbOLyRsNDjwUEzy5MnhTEZZd95EajO7+DdPo09o6TcoPX5nTPJ
/etr7eZDexIRU6lCTn5gFkg1orljiiK6KwiWp9vSAbHhbjc8YW49o+79FiPOgrqU
GIL4Z/2YKBgG9dKkDYJQD8MQg4Zm4c8swFcvMkZlMks25cE4NbfLLAuc8aExtZo6
xiIYZDCH7Z8qKDbiesVELOgV+ZiBAI3/ATh5+SpnAhLBev+OQarC11TyqO7/V/66
TR8HsfPw2dSUxVyC0LUxdcZiHH+K/feMeR+q4oLAhRGRXK5fkSih3KsbLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHf2Yct+hR3hi5Or/YZt+sYNsz/1MB8GA1UdIwQY
MBaAFBzTwwk5uQakUVocZcCINoKbajKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YzU3NjgtZTgwYS00MTEwLWE0NmQt
MGZmODZlZjk1ZTBmLzEvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85YzU3NjgtZTgwYS00MTEwLWE0NmQtMGZmODZlZjk1ZTBm
LzEvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5H79Xys
Dq92C+j+74rj0qOTqRVNbLQ6G16az2g/0UkCd8N0IQIAkwWRRBwAW/I4hGm+v3XE
LRfJYHSXZJha5Pi0L/oh6IGLRquqewZwU0cvB61Rrt98x2U4eWRNAOG831wcYD1T
8VPnyHMiQ5TjEeZ7MO7vu5Dtn0wah1Wb0JadHWiujMgMfmEwi9VJ64CuNtpMhhDK
NVIZK8GhqKH4ibfjpLq+4/fzHHNyJJ0rDixVkD5sfAF5ydEN40tJvbTYcYX1hLUj
E5aqAhWoHe0dtPTmnLQvgoeORdGsK0z4VCacA9ta9jsV+TdyZeS5ERcsMb7JFHwt
WgoEjNyK5NYaTA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:15 2025 by rpki-client