Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File: Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier: +DBct9H7+/g3ei+BK89qzdWuJgNKNKBdNAgMHErNEmo=
Subject key identifier: 03:0D:55:37:DB:44:D4:45:44:6F:11:4B:A0:0A:68:BA:F9:36:B2:08
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 019A27AFEA239D0CBA375FEC2A819E526C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number: 16FE
Signing time: Mon 27 Oct 2025 22:00:31 +0000
Manifest this update: Mon 27 Oct 2025 22:00:31 +0000
Manifest next update: Tue 28 Oct 2025 22:00:31 +0000
Files and hashes: 1: 76g-Yh9Ferd3lB3kSC_pOEFVc_w.roa (hash: mtYP23ZyiF5FjXJ0wDyag4TWISBNCmqIokoqkgwM24I=)
2: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: qbO0a+MbWYaH4DtQ7iM82KZaHDxLCj2jDPjsb9Zvbww=)
3: clnaMm-gMiwsEYseD9VB3Kwt084.roa (hash: NpN0ynwsyxvDm6R0XnAuzGI9A3Dr8XC3OEWiSMbZf5Y=)
4: fCPoYoYgmnVqeGk9iQ9Y_u8Krrk.roa (hash: 5NqXcLS1fcDGaL4JuIaR1NwgZWlNxtw/gKtP6OVjQO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:af:ea:23:9d:0c:ba:37:5f:ec:2a:81:9e:52:6c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Oct 27 22:00:31 2025 GMT
Not After : Oct 28 22:00:31 2025 GMT
Subject: CN=030d5537db44d445446f114ba00a68baf936b208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:61:43:8d:bd:f2:dd:3f:28:ca:be:65:20:
9c:b8:ac:c1:52:b6:b2:bd:a1:b0:2f:48:d0:8d:83:
94:ee:f0:c8:0b:df:1e:17:bc:11:06:d0:f1:34:96:
59:83:b6:a2:f0:40:5d:13:30:9f:c9:f5:1d:b0:6d:
bb:f4:01:f0:41:d6:e9:04:a3:c0:aa:e5:a7:c4:fa:
f9:2f:01:6b:d2:4e:6e:2e:db:a1:4b:0a:df:0a:a7:
af:1e:d9:50:47:14:ef:45:0f:a1:1f:34:41:c0:2b:
8f:35:9c:02:61:90:79:db:62:cf:9b:41:76:70:97:
23:10:27:ec:2a:64:55:d2:51:47:78:3c:01:51:bb:
3b:c8:05:c2:20:91:bd:04:d4:c9:42:64:5b:1f:b3:
77:36:04:01:77:cb:8f:62:02:9e:ec:e9:00:3d:e7:
ba:ea:b0:61:98:bb:9e:77:e6:4f:df:3b:33:de:cb:
30:b8:95:0a:85:8e:e8:3e:de:ea:82:61:18:ad:86:
f3:9c:8f:e2:aa:04:30:f5:0f:01:94:0c:bb:e3:e7:
fb:6f:fe:2e:f8:d9:8e:43:e8:03:8b:9f:c0:27:36:
bb:56:0e:62:c0:f7:38:68:0b:c3:7d:47:fd:bd:f4:
90:b1:d1:a4:78:08:aa:0e:b7:bf:3e:05:31:ea:56:
13:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0D:55:37:DB:44:D4:45:44:6F:11:4B:A0:0A:68:BA:F9:36:B2:08
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:20:a9:1b:60:10:44:05:1b:55:6a:8b:9d:d5:04:b0:5b:95:
a2:84:74:63:90:9c:86:66:55:99:c7:5b:2a:1a:51:a9:52:52:
85:a2:8e:ce:29:2d:49:b9:83:d8:5c:72:5d:65:ed:97:c5:91:
b6:47:7c:68:52:94:97:d9:d1:b7:be:21:da:da:ee:1e:4b:10:
95:d3:46:e1:97:5c:6a:21:55:d4:16:5f:96:9a:a3:9f:02:03:
6d:12:a7:9c:9e:1c:c9:46:fb:9f:f3:77:9d:31:ee:b8:4f:c5:
dc:f8:4c:49:55:a2:48:52:16:04:b9:24:09:a7:91:ce:4b:f9:
0a:fd:fb:c9:70:80:38:ce:50:35:ed:c2:05:54:4b:01:f2:f3:
6f:cc:70:3e:e5:09:ca:b9:97:af:77:14:6c:9f:d7:27:22:4a:
fe:5b:f7:4b:90:52:15:f9:ed:3c:8b:79:65:98:a5:79:ca:15:
e0:16:d2:7b:42:12:ac:27:23:38:ba:64:ac:18:3d:8e:19:05:
8c:46:73:d9:3f:7e:d1:19:43:d0:95:e2:ca:49:e5:18:fb:e0:
2a:1d:ea:52:89:35:5e:8c:57:33:d7:95:c3:77:bb:d2:8d:6e:
45:1d:54:91:80:7d:83:ef:26:95:44:91:87:02:8e:4e:dc:04:
75:2c:ea:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZonr+ojnQy6N1/sKoGeUmxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYTk3Y2FlN2RlNmIyOWU1NmYwMjU5YWY1M2M5NTkyNjAz
NGE1MDIwHhcNMjUxMDI3MjIwMDMxWhcNMjUxMDI4MjIwMDMxWjAzMTEwLwYDVQQD
EygwMzBkNTUzN2RiNDRkNDQ1NDQ2ZjExNGJhMDBhNjhiYWY5MzZiMjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZphQ4298t0/KMq+ZSCcuKzBUray
vaGwL0jQjYOU7vDIC98eF7wRBtDxNJZZg7ai8EBdEzCfyfUdsG279AHwQdbpBKPA
quWnxPr5LwFr0k5uLtuhSwrfCqevHtlQRxTvRQ+hHzRBwCuPNZwCYZB522LPm0F2
cJcjECfsKmRV0lFHeDwBUbs7yAXCIJG9BNTJQmRbH7N3NgQBd8uPYgKe7OkAPee6
6rBhmLued+ZP3zsz3sswuJUKhY7oPt7qgmEYrYbznI/iqgQw9Q8BlAy74+f7b/4u
+NmOQ+gDi5/AJza7Vg5iwPc4aAvDfUf9vfSQsdGkeAiqDre/PgUx6lYTPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMNVTfbRNRFRG8RS6AKaLr5NrIIMB8GA1UdIwQY
MBaAFB2pfK595rKeVvAlmvU8lZJgNKUCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84NWI2NzMtZjFhZC00M2UyLWJmZTct
MGNkNzIzNmIyOWI2LzEvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84NWI2NzMtZjFhZC00M2UyLWJmZTctMGNkNzIzNmIyOWI2
LzEvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyCpG2AQ
RAUbVWqLndUEsFuVooR0Y5CchmZVmcdbKhpRqVJShaKOziktSbmD2FxyXWXtl8WR
tkd8aFKUl9nRt74h2truHksQldNG4ZdcaiFV1BZflpqjnwIDbRKnnJ4cyUb7n/N3
nTHuuE/F3PhMSVWiSFIWBLkkCaeRzkv5Cv37yXCAOM5QNe3CBVRLAfLzb8xwPuUJ
yrmXr3cUbJ/XJyJK/lv3S5BSFfntPIt5ZZilecoV4BbSe0ISrCcjOLpkrBg9jhkF
jEZz2T9+0RlD0JXiyknlGPvgKh3qUok1XoxXM9eVw3e70o1uRR1UkYB9g+8mlUSR
hwKOTtwEdSzqUw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:40:36 2025 by rpki-client