Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier: pAUeM0IiLtp0RtvteDjhW/5A4Qtg7Bchtcc216W2tJw=
Subject key identifier: EE:6F:01:65:38:6C:3E:06:79:A9:7C:35:8F:53:24:84:85:D8:FB:8A
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial: 019A209BA42BE6EA2B4D392E689D009E129E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number: 1418
Signing time: Sun 26 Oct 2025 13:01:02 +0000
Manifest this update: Sun 26 Oct 2025 13:01:02 +0000
Manifest next update: Mon 27 Oct 2025 13:01:02 +0000
Files and hashes: 1: 9zhTOpiuNqKnk778yI8rOgQQ8-A.roa (hash: ABWXF/FnYjdj8H9UnlqrtLWEbBYpls+daSI459eMuZM=)
2: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: KcUmHbVG/sRFii1vSiO2DtYsdiorWTl6s5c3pct2jpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:a4:2b:e6:ea:2b:4d:39:2e:68:9d:00:9e:12:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Validity
Not Before: Oct 26 13:01:02 2025 GMT
Not After : Oct 27 13:01:02 2025 GMT
Subject: CN=ee6f0165386c3e0679a97c358f53248485d8fb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:6c:f4:48:ef:15:6a:e2:85:63:ad:63:f8:
75:03:6e:9f:49:36:36:7b:1d:27:91:97:32:2f:87:
8d:81:28:6d:5b:c4:7c:19:d3:a5:64:c4:75:cc:69:
3f:a3:f4:b8:87:d6:b2:50:92:f4:32:98:5c:ea:c8:
e7:9b:05:41:a1:a0:f2:b1:a2:48:9d:ec:0e:fd:f0:
7f:09:10:6d:a7:58:8b:39:0b:d5:52:a4:8e:32:6c:
b6:bb:61:3f:c0:5c:b7:60:b7:75:09:58:7e:72:0f:
6c:39:7b:79:25:64:9a:1d:2d:65:51:28:00:1d:28:
3d:31:f2:74:79:65:1c:e4:56:48:cd:58:87:27:2a:
7e:25:1a:f2:ac:9b:7a:00:04:5c:22:26:b4:b5:f5:
e7:f4:c3:0c:f4:45:c2:51:ee:1a:b4:73:32:f7:6e:
6a:eb:fa:ef:10:40:12:a5:32:29:e5:00:c1:7a:4f:
01:90:9e:af:5a:63:ee:8b:07:5b:5b:13:59:b1:f4:
f9:7a:e3:27:25:91:2b:09:40:f1:1c:01:6c:7e:5e:
03:e6:70:e3:01:0f:f5:06:fe:85:88:3c:fa:f7:74:
21:65:5e:c2:a8:66:9a:60:7f:19:6c:ea:2c:6f:2f:
2a:1a:6c:5c:4f:03:c5:cd:5d:4b:29:2a:5d:e7:bd:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6F:01:65:38:6C:3E:06:79:A9:7C:35:8F:53:24:84:85:D8:FB:8A
X509v3 Authority Key Identifier:
keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d6:f3:89:5e:3b:53:fe:84:df:a2:96:c2:4f:66:85:d9:02:
71:dd:a2:3c:e8:6c:ac:54:19:e4:aa:a6:c5:4a:c0:90:63:f2:
30:57:8f:29:25:49:b7:ec:38:8e:d8:07:b9:a1:94:44:29:7b:
04:20:be:ef:e0:60:ec:77:ad:49:bc:f9:86:0a:65:11:b0:25:
3e:e9:b8:1e:b9:86:1a:f8:35:6a:f8:e1:58:dd:70:61:14:5e:
49:ca:b9:26:5e:78:03:d8:f2:92:bc:f9:4b:a2:3e:5f:88:22:
05:d8:52:fe:29:58:08:0f:99:da:70:0f:e9:10:65:d3:02:fc:
20:6e:79:44:ab:f9:e7:c6:af:ee:40:e0:02:75:fb:e9:74:f5:
64:9e:e3:9c:03:fa:cd:5d:d4:8a:f4:31:e6:8c:ba:6a:94:07:
82:7d:45:69:33:fe:2c:96:98:0b:bc:7f:86:ea:2c:b4:57:25:
64:a7:18:dd:57:01:9b:09:a3:7f:7f:d1:b2:a4:1b:bd:87:a4:
1c:c0:80:55:15:96:fe:a0:9c:22:e7:37:a7:31:01:bc:12:27:
54:6a:32:9a:26:1f:4d:fe:d6:d9:ab:9a:50:2b:98:11:be:04:
7d:20:0f:ab:47:6b:7c:bd:77:2c:fc:8c:c3:b7:77:25:a1:9c:
dc:e3:4a:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZogm6Qr5uorTTkuaJ0AnhKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMGFjZWVhMTdmNTNkZTcwOGY5YTczYWJjMGM4NzE2NGQy
MDdkMDgwHhcNMjUxMDI2MTMwMTAyWhcNMjUxMDI3MTMwMTAyWjAzMTEwLwYDVQQD
EyhlZTZmMDE2NTM4NmMzZTA2NzlhOTdjMzU4ZjUzMjQ4NDg1ZDhmYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWVs9EjvFWrihWOtY/h1A26fSTY2
ex0nkZcyL4eNgShtW8R8GdOlZMR1zGk/o/S4h9ayUJL0Mphc6sjnmwVBoaDysaJI
newO/fB/CRBtp1iLOQvVUqSOMmy2u2E/wFy3YLd1CVh+cg9sOXt5JWSaHS1lUSgA
HSg9MfJ0eWUc5FZIzViHJyp+JRryrJt6AARcIia0tfXn9MMM9EXCUe4atHMy925q
6/rvEEASpTIp5QDBek8BkJ6vWmPuiwdbWxNZsfT5euMnJZErCUDxHAFsfl4D5nDj
AQ/1Bv6FiDz693QhZV7CqGaaYH8ZbOosby8qGmxcTwPFzV1LKSpd572HhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5vAWU4bD4Geal8NY9TJISF2PuKMB8GA1UdIwQY
MBaAFB0KzuoX9T3nCPmnOrwMhxZNIH0IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFyTzZoZjFQZWNJLWFjNnZBeUhGazBnZlFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYTU2ZjYtMWNmMi00Mzg4LTk2ZmEt
YzZiY2NhNzIxNDcxLzEvSFFyTzZoZjFQZWNJLWFjNnZBeUhGazBnZlFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kYTU2ZjYtMWNmMi00Mzg4LTk2ZmEtYzZiY2NhNzIxNDcx
LzEvSFFyTzZoZjFQZWNJLWFjNnZBeUhGazBnZlFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNbziV47
U/6E36KWwk9mhdkCcd2iPOhsrFQZ5KqmxUrAkGPyMFePKSVJt+w4jtgHuaGURCl7
BCC+7+Bg7HetSbz5hgplEbAlPum4HrmGGvg1avjhWN1wYRReScq5Jl54A9jykrz5
S6I+X4giBdhS/ilYCA+Z2nAP6RBl0wL8IG55RKv558av7kDgAnX76XT1ZJ7jnAP6
zV3UivQx5oy6apQHgn1FaTP+LJaYC7x/huostFclZKcY3VcBmwmjf3/RsqQbvYek
HMCAVRWW/qCcIuc3pzEBvBInVGoymiYfTf7W2auaUCuYEb4EfSAPq0drfL13LPyM
w7d3JaGc3ONKyw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 22:58:37 2025 by rpki-client