Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
File: hWL0qJNlk83sba1-Ls8beb9lwFo.mft (raw, json)
Hash identifier: ezWlSR81GhTlpCDjy1Kr8rIiVhV5L9pffFy2OdXnxig=
Subject key identifier: 8A:9C:B0:BE:15:8A:E9:82:AB:D0:23:24:57:42:30:F4:AB:7D:E2:C1
Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
Certificate issuer: /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Certificate serial: 0199FB45DEEF4BF12B4E9FEB8EABFB995023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
Manifest number: 15C4
Signing time: Sun 19 Oct 2025 07:01:24 +0000
Manifest this update: Sun 19 Oct 2025 07:01:24 +0000
Manifest next update: Mon 20 Oct 2025 07:01:24 +0000
Files and hashes: 1: AuqfHgJMLbox-SCvoHiOWVRxGtM.roa (hash: xeAvQlAlfgpUCdvO+zQfkKF/6NqDyXiaKSOgk2lfPWU=)
2: hWL0qJNlk83sba1-Ls8beb9lwFo.crl (hash: 8kCZQZYbYzDrtM5kiY+VwgLywVdsPejLk1ea5jK2Ul0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:de:ef:4b:f1:2b:4e:9f:eb:8e:ab:fb:99:50:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Validity
Not Before: Oct 19 07:01:24 2025 GMT
Not After : Oct 20 07:01:24 2025 GMT
Subject: CN=8a9cb0be158ae982abd02324574230f4ab7de2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:5c:e9:1e:4f:10:57:ef:14:e6:a5:0f:17:
a7:80:b9:47:e6:2c:f2:d8:3f:a0:5a:10:f8:ca:13:
a0:f1:21:40:0d:3b:80:d9:69:9b:2d:88:c5:37:69:
f0:c7:29:82:de:de:da:05:71:90:a8:60:5a:17:05:
74:6a:61:d1:4f:f0:0f:d8:83:e2:2b:c2:ab:c1:34:
22:ef:88:f5:b7:02:62:7f:12:8b:15:e6:70:29:2b:
12:2c:29:c5:89:8e:7e:3b:b9:8a:3f:6f:79:aa:23:
ff:34:75:99:63:2c:db:42:82:0c:ee:3b:8e:56:4a:
51:c9:96:2e:94:3c:8a:7e:8c:03:99:41:97:cc:bc:
c6:58:db:40:07:49:e7:ff:30:c8:cd:4b:d0:61:b5:
c2:36:ab:48:52:73:38:e3:e7:1d:60:4a:cf:89:52:
f7:23:8e:a0:71:85:67:47:f7:a9:f5:5e:98:b3:78:
23:4e:59:05:cf:70:03:a6:35:16:b9:d0:da:d0:d3:
30:39:56:e2:a8:1c:48:31:0c:37:93:25:31:24:f7:
28:fb:eb:83:1d:ed:26:05:0c:09:46:fc:03:72:84:
79:e2:7a:1f:79:22:99:fa:84:ba:d0:50:d3:37:d7:
ea:84:9c:f9:cf:ba:3f:b4:e4:9f:2c:ff:01:34:9b:
12:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9C:B0:BE:15:8A:E9:82:AB:D0:23:24:57:42:30:F4:AB:7D:E2:C1
X509v3 Authority Key Identifier:
keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:64:77:af:c5:7b:f5:ef:9c:a6:9f:8c:5c:b9:2e:08:e6:d5:
ff:19:7a:1d:85:03:63:42:dc:7b:d0:19:e3:63:84:80:d1:9e:
1d:5d:5d:81:60:2d:c8:ea:5a:71:72:87:3f:af:e5:bc:3a:43:
73:df:05:ca:f3:4c:96:bc:94:cb:82:84:ac:6d:9c:a2:ac:71:
e5:9b:0c:f5:51:35:2c:e7:72:9a:96:a3:b3:11:65:0f:13:66:
d7:ab:93:d8:c9:5e:83:86:d4:b2:a0:96:52:3d:3a:e9:5d:7e:
6e:86:09:fe:7f:43:dd:cc:9e:cd:dd:7a:11:15:e0:4c:48:a5:
82:15:f6:4e:13:e5:41:81:45:59:e7:dc:62:40:72:a7:53:34:
2b:5d:c2:c5:31:3d:b7:88:c4:01:a6:b8:66:4d:f7:4b:8e:55:
a8:59:3a:1e:5e:5b:70:33:4d:1f:68:18:e1:21:cf:de:81:a8:
12:c1:c4:5c:51:45:44:03:4f:93:b6:57:f2:61:d7:9c:60:01:
99:76:a7:b5:06:72:55:ce:74:a5:73:a4:c6:f6:38:b8:c9:fb:
1c:6c:d8:94:a9:74:ac:45:c5:b6:c6:7e:db:9a:86:9e:bd:31:
8e:86:91:86:86:0c:91:a9:b4:01:15:51:79:ac:38:30:fb:4c:
b8:4f:f6:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rd7vS/ErTp/rjqv7mVAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjJmNGE4OTM2NTkzY2RlYzZkYWQ3ZTJlY2YxYjc5YmY2
NWMwNWEwHhcNMjUxMDE5MDcwMTI0WhcNMjUxMDIwMDcwMTI0WjAzMTEwLwYDVQQD
Eyg4YTljYjBiZTE1OGFlOTgyYWJkMDIzMjQ1NzQyMzBmNGFiN2RlMmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQpc6R5PEFfvFOalDxengLlH5izy
2D+gWhD4yhOg8SFADTuA2WmbLYjFN2nwxymC3t7aBXGQqGBaFwV0amHRT/AP2IPi
K8KrwTQi74j1twJifxKLFeZwKSsSLCnFiY5+O7mKP295qiP/NHWZYyzbQoIM7juO
VkpRyZYulDyKfowDmUGXzLzGWNtAB0nn/zDIzUvQYbXCNqtIUnM44+cdYErPiVL3
I46gcYVnR/ep9V6Ys3gjTlkFz3ADpjUWudDa0NMwOVbiqBxIMQw3kyUxJPco++uD
He0mBQwJRvwDcoR54nofeSKZ+oS60FDTN9fqhJz5z7o/tOSfLP8BNJsSgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqcsL4ViumCq9AjJFdCMPSrfeLBMB8GA1UdIwQY
MBaAFIVi9KiTZZPN7G2tfi7PG3m/ZcBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wMWU3MGItOTQ1Yy00ODE3LTgxODkt
N2UxNzk0NjYyOThjLzEvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wMWU3MGItOTQ1Yy00ODE3LTgxODktN2UxNzk0NjYyOThj
LzEvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2R3r8V7
9e+cpp+MXLkuCObV/xl6HYUDY0Lce9AZ42OEgNGeHV1dgWAtyOpacXKHP6/lvDpD
c98FyvNMlryUy4KErG2coqxx5ZsM9VE1LOdympajsxFlDxNm16uT2Mleg4bUsqCW
Uj066V1+boYJ/n9D3cyezd16ERXgTEilghX2ThPlQYFFWefcYkByp1M0K13CxTE9
t4jEAaa4Zk33S45VqFk6Hl5bcDNNH2gY4SHP3oGoEsHEXFFFRANPk7ZX8mHXnGAB
mXantQZyVc50pXOkxvY4uMn7HGzYlKl0rEXFtsZ+25qGnr0xjoaRhoYMkam0ARVR
eaw4MPtMuE/2wg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:27 2025 by rpki-client