Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json)
Hash identifier: ycXDGqsaY3ZhbheC4RsjyjEKdcNqloQhl0SA0/FFk2o=
Subject key identifier: B0:65:88:53:6B:9B:0B:ED:C9:FE:09:07:A9:C8:63:DA:2E:D0:BA:0B
Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2
Certificate serial: 019A13F23675EC3881317632E2D4A681F6A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
Manifest number: 068C
Signing time: Fri 24 Oct 2025 02:00:32 +0000
Manifest this update: Fri 24 Oct 2025 02:00:32 +0000
Manifest next update: Sat 25 Oct 2025 02:00:32 +0000
Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: +vcFwHaXzZO24HVVbeXEoie3uQQ1DddGIR5TrQaI5+c=)
2: neQhSGrd27w6Xn2chZDgwEsCrLI.roa (hash: 1tkSubS/cwYJgj12QwQ+XvFzRT5l/tNW9QOj+Oo5EeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:f2:36:75:ec:38:81:31:76:32:e2:d4:a6:81:f6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2
Validity
Not Before: Oct 24 02:00:32 2025 GMT
Not After : Oct 25 02:00:32 2025 GMT
Subject: CN=b06588536b9b0bedc9fe0907a9c863da2ed0ba0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:34:13:9d:e2:4e:e6:2e:58:18:12:48:9c:
e2:fa:29:60:67:97:f3:9a:63:27:cd:3b:93:66:10:
72:0e:c1:f9:89:75:ae:2a:ee:d4:49:3e:09:00:43:
65:c6:a9:fb:61:e6:8c:eb:f9:3a:47:18:d6:70:57:
6f:f2:74:25:62:f7:54:f6:02:78:41:66:ac:3f:c5:
42:da:eb:01:5e:a7:1a:08:10:7a:74:c6:86:05:0e:
f5:f8:a6:80:b7:3a:9e:37:92:41:02:12:d7:4c:01:
7f:7b:41:6f:c3:28:ee:fa:b9:20:db:dc:b8:1e:17:
49:07:a0:a8:4d:be:30:30:e6:50:d9:96:08:62:31:
ac:83:da:75:21:cc:fc:17:a2:51:0c:e8:c1:4f:2c:
d6:92:61:7f:b0:73:4b:8d:f2:4e:4a:a6:23:6d:84:
f7:75:01:92:81:c1:e8:30:85:bf:59:d7:17:41:73:
0b:29:28:f6:34:a3:58:a4:24:3c:9b:b2:00:7e:c2:
d9:fd:31:67:f7:0a:c4:ce:bd:af:7f:05:89:e0:59:
25:79:23:f4:20:86:0e:53:7d:93:40:3e:c8:df:81:
13:30:03:4c:26:13:0c:6e:fc:61:7d:19:d6:78:fb:
56:de:21:a6:03:04:2d:3a:d3:40:40:14:b8:8b:2e:
48:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:65:88:53:6B:9B:0B:ED:C9:FE:09:07:A9:C8:63:DA:2E:D0:BA:0B
X509v3 Authority Key Identifier:
keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:95:c6:0b:21:cf:1b:2f:0a:b4:1a:57:31:ef:e3:9b:46:7f:
df:b6:58:69:3e:68:75:5b:d3:de:85:7c:c5:13:93:14:8b:e2:
0f:36:1a:57:df:f1:c2:6d:44:63:cc:f5:ab:24:0e:f7:2a:6e:
4c:02:a3:e5:18:fd:ec:20:f0:cf:b1:ba:66:be:2d:d6:37:b5:
19:9c:d0:3c:b6:45:22:a5:a0:eb:b1:e7:f7:74:1f:56:f3:7c:
cd:1e:da:7f:69:5c:56:9d:a5:b6:10:4c:87:6f:3c:1f:30:9e:
9e:95:bf:c3:5b:a9:16:f5:84:e5:ef:9d:d5:e3:ba:1e:28:4a:
74:52:9d:51:b5:ab:31:36:35:44:d9:f4:4a:b4:d7:08:ce:28:
80:46:e9:4a:b0:e0:e2:a6:38:14:c3:13:3d:ee:fd:4e:fd:aa:
61:6d:e1:90:64:a7:3c:dc:31:55:57:67:75:3d:88:ca:a0:1c:
da:43:cd:7f:6d:97:63:8a:0a:2a:03:32:fd:a1:ea:e8:19:ec:
bc:66:c2:6e:17:8a:3d:3a:e3:62:c2:99:a8:20:c3:87:1c:91:
34:21:57:1c:70:44:05:08:0e:eb:ad:f3:86:85:a2:51:6a:65:
c3:77:f2:e3:95:04:26:88:9f:53:ef:a1:47:6f:17:e1:f8:b3:
03:18:06:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoT8jZ17DiBMXYy4tSmgfahMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NWY0MTJhZGIxOGQ0MmZhZGQwYTg1ODczNzE4ZGFkYTkz
MWQxYzIwHhcNMjUxMDI0MDIwMDMyWhcNMjUxMDI1MDIwMDMyWjAzMTEwLwYDVQQD
EyhiMDY1ODg1MzZiOWIwYmVkYzlmZTA5MDdhOWM4NjNkYTJlZDBiYTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd80E53iTuYuWBgSSJzi+ilgZ5fz
mmMnzTuTZhByDsH5iXWuKu7UST4JAENlxqn7YeaM6/k6RxjWcFdv8nQlYvdU9gJ4
QWasP8VC2usBXqcaCBB6dMaGBQ71+KaAtzqeN5JBAhLXTAF/e0Fvwyju+rkg29y4
HhdJB6CoTb4wMOZQ2ZYIYjGsg9p1Icz8F6JRDOjBTyzWkmF/sHNLjfJOSqYjbYT3
dQGSgcHoMIW/WdcXQXMLKSj2NKNYpCQ8m7IAfsLZ/TFn9wrEzr2vfwWJ4FkleSP0
IIYOU32TQD7I34ETMANMJhMMbvxhfRnWePtW3iGmAwQtOtNAQBS4iy5ICwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBliFNrmwvtyf4JB6nIY9ou0LoLMB8GA1UdIwQY
MBaAFIdfQSrbGNQvrdCoWHNxja2pMdHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iODQxY2MtZDY2My00NjMzLTljNDkt
MTQ3ZTM4NmMwMTUwLzEvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iODQxY2MtZDY2My00NjMzLTljNDktMTQ3ZTM4NmMwMTUw
LzEvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZXGCyHP
Gy8KtBpXMe/jm0Z/37ZYaT5odVvT3oV8xROTFIviDzYaV9/xwm1EY8z1qyQO9ypu
TAKj5Rj97CDwz7G6Zr4t1je1GZzQPLZFIqWg67Hn93QfVvN8zR7af2lcVp2lthBM
h288HzCenpW/w1upFvWE5e+d1eO6HihKdFKdUbWrMTY1RNn0SrTXCM4ogEbpSrDg
4qY4FMMTPe79Tv2qYW3hkGSnPNwxVVdndT2IyqAc2kPNf22XY4oKKgMy/aHq6Bns
vGbCbheKPTrjYsKZqCDDhxyRNCFXHHBEBQgO663zhoWiUWplw3fy45UEJoifU++h
R28X4fizAxgGTA==
-----END CERTIFICATE-----
Generated at Fri Oct 24 09:54:15 2025 by rpki-client