Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
File: H5TRNU5yMGqff5Ufk_UujROkCr8.mft (raw, json)
Hash identifier: T2NOkgoVlK8BL7xQ+p+MA5g8Jp/SNS3H7wIPlNmZ++0=
Subject key identifier: 6F:B8:3F:EE:0A:7A:C9:4D:BA:48:14:B7:F6:FA:5B:29:7C:9B:7C:0B
Authority key identifier: 1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
Certificate issuer: /CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Certificate serial: 019A70A56ECF42B6E2399026C71CA54E4685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
Manifest number: 0F53
Signing time: Tue 11 Nov 2025 02:01:21 +0000
Manifest this update: Tue 11 Nov 2025 02:01:21 +0000
Manifest next update: Wed 12 Nov 2025 02:01:21 +0000
Files and hashes: 1: H5TRNU5yMGqff5Ufk_UujROkCr8.crl (hash: TwUYPVrWYmPalRYiccewRoZuPcldWyXl7+dol4qs1dg=)
2: LKhlG3TMTYsgOdNspAeUKjE3FDY.roa (hash: ktutiAHlvXrlvrW8ZLJWK+gJEGiryttMuOJwRo+ROtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:6e:cf:42:b6:e2:39:90:26:c7:1c:a5:4e:46:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Validity
Not Before: Nov 11 02:01:21 2025 GMT
Not After : Nov 12 02:01:21 2025 GMT
Subject: CN=6fb83fee0a7ac94dba4814b7f6fa5b297c9b7c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3b:02:a0:0d:1a:ec:de:fe:c8:d7:c8:16:cb:
fc:b3:64:f4:4a:ab:7d:79:ca:8f:ee:d7:e0:d1:f4:
9e:8b:d4:c0:16:df:77:5e:36:df:28:a4:b6:38:5c:
5d:20:64:2d:b3:f0:66:26:5b:a6:c8:dc:ef:d6:ee:
44:e8:9d:67:f7:c5:a1:f2:56:17:a3:0e:a7:34:e7:
08:30:9f:93:7e:60:35:a2:c7:74:90:a6:6f:af:de:
bd:d9:b0:16:af:99:e0:86:63:5c:1d:59:78:b9:91:
03:18:5f:25:0a:d3:ba:50:5f:56:8d:9e:d6:f0:70:
10:8f:1d:67:b2:8a:d7:51:dd:9d:bb:19:7e:0b:ab:
54:36:1b:e6:bc:d7:c7:3c:8e:d3:3d:56:ed:ee:d1:
87:aa:64:78:c2:e4:69:23:29:15:db:8b:9e:3c:e5:
90:f8:bd:b3:b8:5b:50:b7:d9:76:03:39:5f:c0:30:
6a:05:82:1c:45:a5:2a:9b:ae:b3:d8:23:dc:aa:71:
24:eb:d3:66:76:29:b5:f8:2b:d9:5a:fb:07:1f:5d:
e5:88:fe:14:42:f2:6c:b7:d2:ba:1a:0f:a1:48:f6:
fa:ae:50:1c:94:4b:e6:78:80:50:86:b5:56:db:1a:
e9:b8:8a:2d:8c:47:7a:c5:6a:88:d8:e5:ec:e2:a2:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B8:3F:EE:0A:7A:C9:4D:BA:48:14:B7:F6:FA:5B:29:7C:9B:7C:0B
X509v3 Authority Key Identifier:
keyid:1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9d:0b:aa:a8:67:3e:8c:d6:ba:7d:65:65:2d:d4:d1:2e:e5:
15:df:e7:e2:e6:66:1d:59:1e:1f:a0:72:fa:a3:55:2c:5f:9d:
3e:c0:d8:34:89:fe:8c:65:d4:d4:16:40:ca:c3:58:4c:25:96:
6b:93:bb:e2:1b:9e:e6:ed:c2:fc:d7:e8:ae:93:3a:29:84:ed:
46:91:97:8f:36:57:62:ce:8c:78:9f:50:36:0d:0b:b9:95:a6:
0b:f8:d5:43:f7:0d:01:01:14:0a:17:8b:8b:b5:a8:b9:c1:d6:
39:cf:d2:f9:f3:67:40:c0:67:45:c5:d7:37:0d:15:5a:d0:7b:
db:b5:48:3a:e4:33:46:3f:d7:5d:db:6e:02:32:ea:d4:66:53:
5f:a7:e7:d2:a5:04:d1:0e:7d:04:a9:6c:13:37:7f:d0:55:bd:
d5:5c:23:5f:75:0e:02:a3:5f:81:b7:02:f4:43:a1:cf:cf:09:
fe:d8:25:6b:0e:d9:8b:0d:fb:f2:16:01:ae:90:64:a3:3d:9a:
c2:3c:42:53:d0:88:a3:e7:38:d3:f5:fe:0e:ed:c2:f3:f5:5e:
12:78:c9:48:41:71:4f:42:de:ab:2c:6c:4e:51:3b:1a:ab:f4:
c2:75:14:33:ea:84:af:e0:9f:4b:4c:ca:ad:12:ab:7e:0b:98:
1b:5d:5a:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpW7PQrbiOZAmxxylTkaFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOTRkMTM1NGU3MjMwNmE5ZjdmOTUxZjkzZjUyZThkMTNh
NDBhYmYwHhcNMjUxMTExMDIwMTIxWhcNMjUxMTEyMDIwMTIxWjAzMTEwLwYDVQQD
Eyg2ZmI4M2ZlZTBhN2FjOTRkYmE0ODE0YjdmNmZhNWIyOTdjOWI3YzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjsCoA0a7N7+yNfIFsv8s2T0Sqt9
ecqP7tfg0fSei9TAFt93XjbfKKS2OFxdIGQts/BmJlumyNzv1u5E6J1n98Wh8lYX
ow6nNOcIMJ+TfmA1osd0kKZvr9692bAWr5nghmNcHVl4uZEDGF8lCtO6UF9WjZ7W
8HAQjx1nsorXUd2duxl+C6tUNhvmvNfHPI7TPVbt7tGHqmR4wuRpIykV24uePOWQ
+L2zuFtQt9l2AzlfwDBqBYIcRaUqm66z2CPcqnEk69Nmdim1+CvZWvsHH13liP4U
QvJst9K6Gg+hSPb6rlAclEvmeIBQhrVW2xrpuIotjEd6xWqI2OXs4qJ+WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+4P+4KeslNukgUt/b6Wyl8m3wLMB8GA1UdIwQY
MBaAFB+U0TVOcjBqn3+VH5P1Lo0TpAq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kZjk2YTUtMzE1Ny00ODgzLTgwODMt
MjEyZjg5M2ZjODM1LzEvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kZjk2YTUtMzE1Ny00ODgzLTgwODMtMjEyZjg5M2ZjODM1
LzEvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJ0Lqqhn
PozWun1lZS3U0S7lFd/n4uZmHVkeH6By+qNVLF+dPsDYNIn+jGXU1BZAysNYTCWW
a5O74hue5u3C/NforpM6KYTtRpGXjzZXYs6MeJ9QNg0LuZWmC/jVQ/cNAQEUCheL
i7WoucHWOc/S+fNnQMBnRcXXNw0VWtB727VIOuQzRj/XXdtuAjLq1GZTX6fn0qUE
0Q59BKlsEzd/0FW91VwjX3UOAqNfgbcC9EOhz88J/tglaw7Ziw378hYBrpBkoz2a
wjxCU9CIo+c40/X+Du3C8/VeEnjJSEFxT0LeqyxsTlE7Gqv0wnUUM+qEr+CfS0zK
rRKrfguYG11amw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:15 2025 by rpki-client