Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
File: HNq3BST9UTE7hPXY9GNio9jICBQ.mft (raw, json)
Hash identifier: SsOAmImkZBWMAZfUWOXZz0EW2EUgepCx/GQEIqx9rwQ=
Subject key identifier: 06:34:D8:C3:90:60:B1:7C:DC:12:19:EB:A9:8E:A4:D6:C5:BD:0A:59
Authority key identifier: 1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
Certificate issuer: /CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Certificate serial: 0199FCC62A14F64BE1CF1B8EAADB916D107E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:09 +0000
Manifest this update: Sun 19 Oct 2025 14:01:09 +0000
Manifest next update: Mon 20 Oct 2025 14:01:09 +0000
Files and hashes: 1: 8H6vwz49R0kM-gbNtDLGiXSOgWE.roa (hash: 7d11KfsVtGX7lu3CgRTWP0J/PhStNQboteNSMa34UZE=)
2: HNq3BST9UTE7hPXY9GNio9jICBQ.crl (hash: V59AzlT7r3/aRHcPoIIT0rI/bYW4Nl4tHR48vvU3hRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2a:14:f6:4b:e1:cf:1b:8e:aa:db:91:6d:10:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Validity
Not Before: Oct 19 14:01:09 2025 GMT
Not After : Oct 20 14:01:09 2025 GMT
Subject: CN=0634d8c39060b17cdc1219eba98ea4d6c5bd0a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9f:c1:8b:76:af:44:82:12:b8:ff:d9:3a:a5:
22:09:18:63:cd:4f:54:c6:24:37:a7:1b:e8:df:b1:
a0:77:c9:43:d5:47:88:61:cf:17:67:9f:84:a2:10:
32:5a:f1:e1:d8:cf:cc:2d:d5:47:61:9b:19:ca:9b:
ea:3e:ca:e2:d2:40:f7:76:c2:f6:1c:c3:bb:70:8e:
64:c7:c9:ec:a6:c7:09:1d:80:0e:54:a2:98:21:00:
72:1b:43:d5:65:81:fe:36:c0:78:97:ea:c9:42:44:
07:80:f6:84:4d:bd:7a:83:8a:17:7c:62:ca:1d:50:
30:5e:32:df:fc:9e:34:5c:29:6b:53:61:ce:9b:43:
65:5a:02:1b:3c:79:7a:e7:cf:72:c7:38:08:50:f5:
a9:b0:9a:24:03:e8:9b:d1:26:53:c0:6c:41:64:8f:
19:ba:1d:3a:0c:de:34:e9:7b:a1:9b:52:2a:e3:4e:
7f:f7:78:5c:86:5b:9c:87:0d:ec:42:07:d2:52:12:
9f:95:8d:54:1a:e6:d3:6a:64:69:c0:9b:aa:d3:59:
34:61:ec:8f:73:0c:40:c3:f7:4c:b5:8d:04:79:56:
ff:29:4b:18:a4:9b:d2:ed:a6:82:84:46:00:9b:ae:
e2:79:7b:f2:f1:c1:53:ba:89:96:f9:81:b4:9a:71:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:34:D8:C3:90:60:B1:7C:DC:12:19:EB:A9:8E:A4:D6:C5:BD:0A:59
X509v3 Authority Key Identifier:
keyid:1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e1:51:31:11:19:7e:26:0f:86:cb:a2:b0:bb:78:42:08:27:
cc:19:9e:2d:a0:85:8e:03:c9:e7:a2:84:76:53:f6:ea:3f:0c:
37:99:2e:c1:6d:d1:20:25:05:d7:0a:f1:4a:c0:8d:37:13:68:
2a:98:00:c8:2a:c6:d7:54:d7:ae:34:24:dd:eb:08:3c:f6:bc:
7c:d4:42:ec:da:68:20:7d:8d:3e:7e:46:b5:4b:34:0c:cf:4a:
96:26:3d:ed:55:4f:4c:90:91:ff:b9:de:6a:23:a7:de:bc:7b:
46:36:5e:3a:d2:b0:09:0b:f2:be:d5:ab:cf:c7:d0:cb:d0:a7:
93:8d:2b:1e:0a:65:83:ad:41:42:e2:5e:6c:e2:ba:3d:d2:8f:
83:67:a0:46:7a:38:b9:df:da:58:e2:52:11:54:33:58:c9:f5:
84:5d:dd:2b:41:9b:91:ef:ec:f2:47:24:2f:d6:17:b0:5f:1a:
dd:8c:59:9e:f2:82:b3:69:14:be:85:06:d4:b2:85:69:78:86:
29:7c:94:05:f2:3e:f3:70:a9:c1:15:a8:63:0e:a1:84:06:50:
d5:b4:e7:9d:14:d6:6a:bc:88:72:17:e4:d9:f3:67:29:9f:5d:
19:93:7d:bf:b7:42:1b:f7:f8:e3:18:30:8b:4f:ec:28:58:ea:
f0:43:4c:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xioU9kvhzxuOqtuRbRB+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZGFiNzA1MjRmZDUxMzEzYjg0ZjVkOGY0NjM2MmEzZDhj
ODA4MTQwHhcNMjUxMDE5MTQwMTA5WhcNMjUxMDIwMTQwMTA5WjAzMTEwLwYDVQQD
EygwNjM0ZDhjMzkwNjBiMTdjZGMxMjE5ZWJhOThlYTRkNmM1YmQwYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4p/Bi3avRIISuP/ZOqUiCRhjzU9U
xiQ3pxvo37Ggd8lD1UeIYc8XZ5+EohAyWvHh2M/MLdVHYZsZypvqPsri0kD3dsL2
HMO7cI5kx8nspscJHYAOVKKYIQByG0PVZYH+NsB4l+rJQkQHgPaETb16g4oXfGLK
HVAwXjLf/J40XClrU2HOm0NlWgIbPHl6589yxzgIUPWpsJokA+ib0SZTwGxBZI8Z
uh06DN406Xuhm1Iq405/93hchluchw3sQgfSUhKflY1UGubTamRpwJuq01k0YeyP
cwxAw/dMtY0EeVb/KUsYpJvS7aaChEYAm67ieXvy8cFTuomW+YG0mnE3LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAY02MOQYLF83BIZ66mOpNbFvQpZMB8GA1UdIwQY
MBaAFBzatwUk/VExO4T12PRjYqPYyAgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE5xM0JTVDlVVEU3aFBYWTlHTmlvOWpJQ0JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xOTAxN2EtNGZjYy00ZmFkLWE1NzIt
OTlmNjkzZTQ1MDYxLzEvSE5xM0JTVDlVVEU3aFBYWTlHTmlvOWpJQ0JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8xOTAxN2EtNGZjYy00ZmFkLWE1NzItOTlmNjkzZTQ1MDYx
LzEvSE5xM0JTVDlVVEU3aFBYWTlHTmlvOWpJQ0JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuFRMREZ
fiYPhsuisLt4QggnzBmeLaCFjgPJ56KEdlP26j8MN5kuwW3RICUF1wrxSsCNNxNo
KpgAyCrG11TXrjQk3esIPPa8fNRC7NpoIH2NPn5GtUs0DM9KliY97VVPTJCR/7ne
aiOn3rx7RjZeOtKwCQvyvtWrz8fQy9Cnk40rHgplg61BQuJebOK6PdKPg2egRno4
ud/aWOJSEVQzWMn1hF3dK0Gbke/s8kckL9YXsF8a3YxZnvKCs2kUvoUG1LKFaXiG
KXyUBfI+83CpwRWoYw6hhAZQ1bTnnRTWaryIchfk2fNnKZ9dGZN9v7dCG/f44xgw
i0/sKFjq8ENMRw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:03 2025 by rpki-client