Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
File: H7XBu67UTItq4_K1ZtAcwljfws4.mft (raw, json)
Hash identifier: T4/KbtYHOCeaf5ewThGgPgLiq7lqD30d9eI2fiUCDa8=
Subject key identifier: 60:2F:65:19:6B:3E:CA:BD:F8:09:C2:89:6F:AC:CE:1A:9F:66:74:9D
Authority key identifier: 1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
Certificate issuer: /CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Certificate serial: 0199FEB48D421A12A7C1AF8AAADC2246A066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
Manifest number: 126A
Signing time: Sun 19 Oct 2025 23:01:09 +0000
Manifest this update: Sun 19 Oct 2025 23:01:09 +0000
Manifest next update: Mon 20 Oct 2025 23:01:09 +0000
Files and hashes: 1: H7XBu67UTItq4_K1ZtAcwljfws4.crl (hash: rc/cvBkISXDR3AVjOiluAqScoBs4Ey9H1D8NUkeuLXM=)
2: MEWWY0epwShfEJbfHo9y4r51GYY.roa (hash: SGRcwmohz12gMReH4Cn9V8oKzsRQ7LvpKURqTZBMtCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:8d:42:1a:12:a7:c1:af:8a:aa:dc:22:46:a0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Validity
Not Before: Oct 19 23:01:09 2025 GMT
Not After : Oct 20 23:01:09 2025 GMT
Subject: CN=602f65196b3ecabdf809c2896facce1a9f66749d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:3a:d1:16:5e:5b:ea:a8:25:db:05:68:f1:
41:da:76:07:cb:f2:50:7f:64:75:c6:2a:5e:80:52:
bb:de:92:da:e7:84:d6:0e:e5:82:6e:1f:4b:17:70:
e1:72:b8:8d:62:81:76:fc:3f:85:de:16:73:72:03:
0e:8a:1c:c6:e9:ca:3e:10:23:70:68:5d:a9:e5:62:
65:e1:fe:e6:10:92:54:ef:34:b2:e4:0e:ae:53:b1:
86:32:bf:6c:02:37:45:a1:22:9d:e6:45:ef:9d:6e:
6b:be:ea:d3:95:6f:2d:9a:c5:7b:f5:ad:fd:01:5d:
bd:97:a0:ae:cf:82:7f:be:71:3c:2a:29:bb:c6:00:
77:19:6c:43:da:ff:c9:f2:b1:b0:58:79:5d:3a:ad:
db:c4:89:f1:32:a0:11:38:a0:ba:97:6a:ea:0e:7a:
3b:d6:76:03:46:ca:82:33:99:77:d8:cd:0a:60:a2:
e3:11:93:4e:2a:57:56:11:f6:c8:b4:51:81:07:26:
1d:90:80:78:27:84:1f:86:b8:af:66:53:91:9a:c7:
46:fe:ae:a7:7e:3d:f1:c1:28:5e:ee:ae:e8:92:76:
96:11:28:29:0c:f1:07:8c:a0:54:32:73:54:8d:19:
42:24:4d:ff:4b:17:0c:c0:38:b7:0d:7b:18:9d:a7:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2F:65:19:6B:3E:CA:BD:F8:09:C2:89:6F:AC:CE:1A:9F:66:74:9D
X509v3 Authority Key Identifier:
keyid:1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a5:d3:e0:e7:c9:c9:73:aa:b4:df:3f:59:9d:05:e6:30:b7:
3b:eb:c6:6e:46:86:6b:8c:0f:90:f2:80:a5:f1:7b:2c:0c:7f:
4a:b9:57:96:53:a6:93:1d:67:a8:4f:6d:42:e6:fe:23:6c:51:
d6:83:8b:3a:1c:32:ce:fc:9c:9d:7c:36:d9:26:e2:57:ff:3c:
d5:8e:27:c4:99:28:ed:80:5d:7a:07:a5:a7:49:34:0e:33:a6:
d3:88:41:5f:c7:3a:40:38:07:e3:d6:f1:d2:1d:b4:3b:68:82:
8c:b8:d4:b1:1d:50:1e:f9:4b:f4:0c:db:92:05:91:b0:00:57:
e2:7d:a2:a7:59:90:55:b6:ed:aa:a7:66:9b:b6:86:8a:c1:bf:
ca:fa:56:3c:58:43:bc:d6:d2:3a:63:60:0b:2d:7c:ed:57:f5:
c9:de:b7:6f:2b:e6:04:00:9c:24:1b:ab:26:99:97:07:8e:b4:
ca:fd:a7:8f:e5:f9:14:ce:1d:68:78:bb:f7:5c:32:42:5f:90:
3b:12:fe:17:77:5d:2a:9c:fa:04:c7:a6:d3:9d:7c:16:f2:fc:
f0:e4:3a:d6:ad:63:2b:41:7a:20:08:05:0b:ef:60:3d:a7:1c:
fe:63:3d:79:df:76:c1:c0:4c:e1:88:d1:ee:7b:ae:01:5a:f5:
74:e0:e2:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tI1CGhKnwa+KqtwiRqBmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYjVjMWJiYWVkNDRjOGI2YWUzZjJiNTY2ZDAxY2MyNThk
ZmMyY2UwHhcNMjUxMDE5MjMwMTA5WhcNMjUxMDIwMjMwMTA5WjAzMTEwLwYDVQQD
Eyg2MDJmNjUxOTZiM2VjYWJkZjgwOWMyODk2ZmFjY2UxYTlmNjY3NDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8Q60RZeW+qoJdsFaPFB2nYHy/JQ
f2R1xipegFK73pLa54TWDuWCbh9LF3DhcriNYoF2/D+F3hZzcgMOihzG6co+ECNw
aF2p5WJl4f7mEJJU7zSy5A6uU7GGMr9sAjdFoSKd5kXvnW5rvurTlW8tmsV79a39
AV29l6Cuz4J/vnE8Kim7xgB3GWxD2v/J8rGwWHldOq3bxInxMqAROKC6l2rqDno7
1nYDRsqCM5l32M0KYKLjEZNOKldWEfbItFGBByYdkIB4J4QfhrivZlORmsdG/q6n
fj3xwShe7q7oknaWESgpDPEHjKBUMnNUjRlCJE3/SxcMwDi3DXsYnafpLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAvZRlrPsq9+AnCiW+szhqfZnSdMB8GA1UdIwQY
MBaAFB+1wbuu1EyLauPytWbQHMJY38LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDdYQnU2N1VUSXRxNF9LMVp0QWN3bGpmd3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zYzRiNTMtZWNhMy00NTk5LTlkOTQt
ZDcxZmM5MGM3YjE2LzEvSDdYQnU2N1VUSXRxNF9LMVp0QWN3bGpmd3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8zYzRiNTMtZWNhMy00NTk5LTlkOTQtZDcxZmM5MGM3YjE2
LzEvSDdYQnU2N1VUSXRxNF9LMVp0QWN3bGpmd3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6XT4OfJ
yXOqtN8/WZ0F5jC3O+vGbkaGa4wPkPKApfF7LAx/SrlXllOmkx1nqE9tQub+I2xR
1oOLOhwyzvycnXw22SbiV/881Y4nxJko7YBdegelp0k0DjOm04hBX8c6QDgH49bx
0h20O2iCjLjUsR1QHvlL9AzbkgWRsABX4n2ip1mQVbbtqqdmm7aGisG/yvpWPFhD
vNbSOmNgCy187Vf1yd63byvmBACcJBurJpmXB460yv2nj+X5FM4daHi791wyQl+Q
OxL+F3ddKpz6BMem0518FvL88OQ61q1jK0F6IAgFC+9gPacc/mM9ed92wcBM4YjR
7nuuAVr1dODiiw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:21 2025 by rpki-client