Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
File: hVLmDnmh3nUzQ9eBW4cMloDArn8.mft (raw, json)
Hash identifier: 2Xt2dNHgqhqqDvqpVCgWsu9rFfuYMVW7zdylO3mO6Qo=
Subject key identifier: 66:99:99:50:A4:01:AA:65:36:BD:C6:84:6C:8B:DC:72:AC:1F:1F:AF
Authority key identifier: 85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F
Certificate issuer: /CN=8552e60e79a1de753343d7815b870c9680c0ae7f
Certificate serial: 019A71B95C16E1BDC5473303D888F128580D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
Manifest number: 0CF0
Signing time: Tue 11 Nov 2025 07:02:44 +0000
Manifest this update: Tue 11 Nov 2025 07:02:44 +0000
Manifest next update: Wed 12 Nov 2025 07:02:44 +0000
Files and hashes: 1: hVLmDnmh3nUzQ9eBW4cMloDArn8.crl (hash: B3xVmO+Pk6M/4qwHYH6DSepNTb/dXBDUv+U8gpAPewY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:5c:16:e1:bd:c5:47:33:03:d8:88:f1:28:58:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8552e60e79a1de753343d7815b870c9680c0ae7f
Validity
Not Before: Nov 11 07:02:44 2025 GMT
Not After : Nov 12 07:02:44 2025 GMT
Subject: CN=66999950a401aa6536bdc6846c8bdc72ac1f1faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:47:4b:6c:e2:26:93:e5:6c:fc:18:22:a6:
48:5d:46:ab:9b:bf:6d:d0:45:2c:67:84:ce:64:a8:
7c:67:26:9d:78:ba:c5:cc:f9:8e:bd:aa:c6:21:f6:
ab:1e:6e:3b:9a:3c:6e:6c:b4:a1:d8:ae:a2:a4:58:
10:52:0a:4e:30:a7:8d:0a:27:42:f4:55:d9:6d:24:
35:05:63:95:f8:48:4f:df:ba:f5:6d:a1:24:50:6b:
bd:f0:8e:f8:44:de:10:8f:3c:a7:de:c7:76:3b:f7:
cb:c0:ab:0d:5a:13:b9:2c:b2:d6:d8:88:c5:34:a7:
b2:0d:f8:f5:09:66:47:54:04:32:27:43:c1:00:bf:
67:67:98:a5:99:21:c2:20:3f:0e:3e:f6:4a:d4:5c:
f1:cf:e8:68:9f:d5:a0:1b:85:a8:d5:b3:e5:44:54:
4d:73:41:c6:06:9b:41:bf:e5:72:08:20:f3:22:18:
f7:7e:1e:92:22:ee:06:06:35:b8:f1:29:1c:93:92:
04:2c:4a:45:4a:0a:00:2f:21:c2:43:55:4b:db:68:
8f:8c:99:1e:35:ea:48:8d:25:9b:5a:2d:87:d5:c7:
a6:cd:d4:dd:04:2d:be:01:d5:b1:2c:55:5a:9b:84:
cd:e4:17:9d:97:fe:0a:a5:c3:0e:da:8b:e8:d7:de:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:99:99:50:A4:01:AA:65:36:BD:C6:84:6C:8B:DC:72:AC:1F:1F:AF
X509v3 Authority Key Identifier:
keyid:85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:60:a0:03:ae:c2:99:b7:22:41:3a:68:5b:69:dc:9e:e7:87:
e3:93:0e:8b:2c:4e:3f:8b:cf:4f:36:54:5b:1d:a0:bd:3e:5b:
7f:0f:f1:5f:28:44:2b:96:a1:2b:d8:0e:86:bf:15:4e:c2:59:
78:97:1d:f4:8e:0b:91:58:98:f9:e9:84:da:b8:11:0d:5e:42:
5d:1f:f9:6a:b2:4f:22:51:ac:2b:2e:ba:5e:28:b9:67:51:b3:
0e:b1:60:55:29:5a:80:72:9c:82:dd:75:07:7b:a0:d8:3c:95:
1c:d8:4f:43:3e:38:ee:7c:79:d7:d4:9c:b0:bb:11:47:74:a7:
27:79:4f:23:55:4c:2f:1c:32:30:a8:f3:a7:96:6c:ac:34:4c:
e1:cf:48:dc:54:df:53:b9:e2:13:3b:ac:0a:52:aa:5b:ea:15:
c5:27:b4:65:7e:fb:bd:7d:fb:81:03:a0:f5:da:b6:b6:92:a6:
5b:eb:8f:f9:8c:ac:d2:11:af:8b:34:79:5e:ff:90:07:c9:72:
e7:fe:22:8a:13:ef:cb:65:63:b1:c6:48:cc:22:06:9b:6d:5f:
37:43:af:6f:f9:c4:4d:8b:bd:1e:87:a1:d1:a4:ba:80:16:1b:
fb:98:9a:a8:6c:e9:b0:7c:e2:54:ce:bc:60:65:74:b6:ef:8e:
95:99:d7:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuVwW4b3FRzMD2IjxKFgNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NTJlNjBlNzlhMWRlNzUzMzQzZDc4MTViODcwYzk2ODBj
MGFlN2YwHhcNMjUxMTExMDcwMjQ0WhcNMjUxMTEyMDcwMjQ0WjAzMTEwLwYDVQQD
Eyg2Njk5OTk1MGE0MDFhYTY1MzZiZGM2ODQ2YzhiZGM3MmFjMWYxZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxlHS2ziJpPlbPwYIqZIXUarm79t
0EUsZ4TOZKh8ZyadeLrFzPmOvarGIfarHm47mjxubLSh2K6ipFgQUgpOMKeNCidC
9FXZbSQ1BWOV+EhP37r1baEkUGu98I74RN4Qjzyn3sd2O/fLwKsNWhO5LLLW2IjF
NKeyDfj1CWZHVAQyJ0PBAL9nZ5ilmSHCID8OPvZK1Fzxz+hon9WgG4Wo1bPlRFRN
c0HGBptBv+VyCCDzIhj3fh6SIu4GBjW48Skck5IELEpFSgoALyHCQ1VL22iPjJke
NepIjSWbWi2H1cemzdTdBC2+AdWxLFVam4TN5Bedl/4KpcMO2ovo19488wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaZmVCkAaplNr3GhGyL3HKsHx+vMB8GA1UdIwQY
MBaAFIVS5g55od51M0PXgVuHDJaAwK5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZMbURubWgzblV6UTllQlc0Y01sb0RBcm44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zNzI0ZDMtMjEyZi00OGJmLWEyYzEt
OWZmYTYwZGI4ZjcxLzEvaFZMbURubWgzblV6UTllQlc0Y01sb0RBcm44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8zNzI0ZDMtMjEyZi00OGJmLWEyYzEtOWZmYTYwZGI4Zjcx
LzEvaFZMbURubWgzblV6UTllQlc0Y01sb0RBcm44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmCgA67C
mbciQTpoW2ncnueH45MOiyxOP4vPTzZUWx2gvT5bfw/xXyhEK5ahK9gOhr8VTsJZ
eJcd9I4LkViY+emE2rgRDV5CXR/5arJPIlGsKy66Xii5Z1GzDrFgVSlagHKcgt11
B3ug2DyVHNhPQz447nx519ScsLsRR3SnJ3lPI1VMLxwyMKjzp5ZsrDRM4c9I3FTf
U7niEzusClKqW+oVxSe0ZX77vX37gQOg9dq2tpKmW+uP+Yys0hGvizR5Xv+QB8ly
5/4iihPvy2VjscZIzCIGm21fN0Ovb/nETYu9Hoeh0aS6gBYb+5iaqGzpsHziVM68
YGV0tu+OlZnX1g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:42 2025 by rpki-client