Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
File: hUwNsAZYRNlZTf6N2O_XftHkk_g.mft (raw, json)
Hash identifier: JlJMBOWFvtlMUkl8WVLYeOHGilqkrdTF8jK2hACOW5k=
Subject key identifier: F7:AB:51:EB:C9:BF:F1:47:84:0B:53:03:C1:97:A0:17:D2:0E:DA:8A
Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
Certificate issuer: /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Certificate serial: 0199C7213C27DD0B6510E6E0D86A9A6AF34C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
Manifest number: 16C8
Signing time: Thu 09 Oct 2025 04:01:08 +0000
Manifest this update: Thu 09 Oct 2025 04:01:08 +0000
Manifest next update: Fri 10 Oct 2025 04:01:08 +0000
Files and hashes: 1: hUwNsAZYRNlZTf6N2O_XftHkk_g.crl (hash: dZuNsWlChSAaGWgligXbhbl3qSb6z/Z1DI2ewjR13cw=)
2: iM7SCQycar1nudDnDJd9cpfWE14.roa (hash: 7fSKbbU/ayenSU9Vz0FeCegebZtfdQUaQXiUz4lT3zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:21:3c:27:dd:0b:65:10:e6:e0:d8:6a:9a:6a:f3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Validity
Not Before: Oct 9 04:01:08 2025 GMT
Not After : Oct 10 04:01:08 2025 GMT
Subject: CN=f7ab51ebc9bff147840b5303c197a017d20eda8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:ad:c5:31:c8:f3:be:af:eb:b1:a7:14:88:
60:0b:32:19:7d:0c:b5:0d:6f:43:2f:d1:7d:b0:ee:
93:27:b7:d1:a4:85:23:e7:66:0f:e7:cd:59:78:02:
ed:9e:db:60:68:0d:c4:19:11:32:d8:cc:a9:23:89:
06:c9:55:80:48:90:f0:fe:70:a7:d7:dc:1d:68:68:
a7:ef:0b:3d:4f:f7:42:e1:9f:b4:52:8d:6f:d7:c0:
0a:bf:e0:c9:c7:3c:46:60:5b:0f:3e:48:87:89:01:
9e:e5:4a:0e:10:41:a3:36:c7:61:88:ba:82:a5:17:
7e:55:d4:c6:1f:85:f0:d9:47:d4:ee:61:7c:b3:0c:
86:e9:f0:7d:40:18:f1:6d:e2:b8:e5:43:46:f9:b3:
05:a1:7e:1e:83:98:e7:66:ba:d7:a7:da:54:64:f7:
0a:8b:1a:2c:f5:74:f0:fa:2a:5f:99:65:18:b6:96:
39:10:70:d4:a5:81:f0:dd:6f:18:75:bd:4c:bb:04:
8b:fd:4e:60:8b:60:0a:49:94:fa:f4:f6:0b:99:b7:
7a:e9:03:0d:80:75:d3:e4:54:19:87:09:0b:29:51:
d6:13:a1:35:cb:87:b0:62:dd:a9:4f:57:a7:92:72:
03:31:37:f5:95:5c:73:f5:78:cf:8f:b7:ea:bd:62:
d5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AB:51:EB:C9:BF:F1:47:84:0B:53:03:C1:97:A0:17:D2:0E:DA:8A
X509v3 Authority Key Identifier:
keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cd:f2:68:4e:6b:d8:15:82:28:8f:c8:1a:2b:41:91:00:83:
48:2e:b9:ab:65:ab:e6:e4:f3:97:ba:22:df:82:4d:02:89:55:
05:a3:8a:c2:b3:3f:01:d1:2a:f1:83:78:a7:e4:46:90:00:79:
ae:8b:0b:ee:8b:21:36:17:45:39:1a:71:d0:4f:69:1f:8b:1b:
f0:d6:8f:96:c6:61:c7:87:5b:74:06:cb:9f:00:34:6b:c9:4c:
3b:f7:4d:fe:b6:70:c0:d5:dd:69:a4:7a:a5:70:56:97:2b:06:
8f:f6:6f:5c:ab:19:3f:73:86:21:3b:2d:f8:cd:03:35:bd:3e:
b5:5e:70:33:3d:3a:36:51:44:c9:53:24:41:b2:43:a7:1b:28:
f3:87:89:76:fa:4c:50:d1:4b:4d:75:95:e7:2f:92:96:4e:77:
bb:29:66:c9:d2:11:9c:4d:92:4c:52:81:45:22:8f:4b:ff:6b:
cb:05:a6:3a:93:37:9b:4f:77:8a:a5:7f:97:a7:34:e6:05:07:
3c:e0:8b:0f:58:af:bf:bb:4e:a0:cd:7e:41:22:6d:bd:48:64:
f8:f3:81:ce:33:d8:d3:13:7b:04:3f:43:7f:41:b5:25:b0:05:
c6:3a:73:a8:a4:92:2f:24:9a:2e:90:71:0e:81:d2:11:fb:13:
82:e1:31:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnHITwn3QtlEObg2GqaavNMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGMwZGIwMDY1ODQ0ZDk1OTRkZmU4ZGQ4ZWZkNzdlZDFl
NDkzZjgwHhcNMjUxMDA5MDQwMTA4WhcNMjUxMDEwMDQwMTA4WjAzMTEwLwYDVQQD
EyhmN2FiNTFlYmM5YmZmMTQ3ODQwYjUzMDNjMTk3YTAxN2QyMGVkYThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/itxTHI876v67GnFIhgCzIZfQy1
DW9DL9F9sO6TJ7fRpIUj52YP581ZeALtnttgaA3EGREy2MypI4kGyVWASJDw/nCn
19wdaGin7ws9T/dC4Z+0Uo1v18AKv+DJxzxGYFsPPkiHiQGe5UoOEEGjNsdhiLqC
pRd+VdTGH4Xw2UfU7mF8swyG6fB9QBjxbeK45UNG+bMFoX4eg5jnZrrXp9pUZPcK
ixos9XTw+ipfmWUYtpY5EHDUpYHw3W8Ydb1MuwSL/U5gi2AKSZT69PYLmbd66QMN
gHXT5FQZhwkLKVHWE6E1y4ewYt2pT1enknIDMTf1lVxz9XjPj7fqvWLVTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPerUevJv/FHhAtTA8GXoBfSDtqKMB8GA1UdIwQY
MBaAFIVMDbAGWETZWU3+jdjv137R5JP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYzY3ZGItYzdhMS00OGE2LWFiOTQt
NjBiOTM1OTViYWM5LzEvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lYzY3ZGItYzdhMS00OGE2LWFiOTQtNjBiOTM1OTViYWM5
LzEvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc83yaE5r
2BWCKI/IGitBkQCDSC65q2Wr5uTzl7oi34JNAolVBaOKwrM/AdEq8YN4p+RGkAB5
rosL7oshNhdFORpx0E9pH4sb8NaPlsZhx4dbdAbLnwA0a8lMO/dN/rZwwNXdaaR6
pXBWlysGj/ZvXKsZP3OGITst+M0DNb0+tV5wMz06NlFEyVMkQbJDpxso84eJdvpM
UNFLTXWV5y+Slk53uylmydIRnE2STFKBRSKPS/9rywWmOpM3m093iqV/l6c05gUH
POCLD1ivv7tOoM1+QSJtvUhk+POBzjPY0xN7BD9Df0G1JbAFxjpzqKSSLySaLpBx
DoHSEfsTguExPA==
-----END CERTIFICATE-----
Generated at Thu Oct 9 08:34:35 2025 by rpki-client