Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/db69b3-781e-4cb9-9edf-6dd6a9c55f57/1/hRRRk1wYRkb4aHgjivsKDVqwut4.mft
File: hRRRk1wYRkb4aHgjivsKDVqwut4.mft (raw, json)
Hash identifier: 7tGFic78ZLFa/Q2+QLS1MYNx0trCkDnUviPiErUimHI=
Subject key identifier: F0:AB:DC:42:4B:BE:D7:4E:DA:6E:C2:46:2F:B6:78:A7:8F:76:21:65
Authority key identifier: 85:14:51:93:5C:18:46:46:F8:68:78:23:8A:FB:0A:0D:5A:B0:BA:DE
Certificate issuer: /CN=851451935c184646f86878238afb0a0d5ab0bade
Certificate serial: 019A71B7827DA7D74499F0EB9AFEF1BCB9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRRRk1wYRkb4aHgjivsKDVqwut4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/db69b3-781e-4cb9-9edf-6dd6a9c55f57/1/hRRRk1wYRkb4aHgjivsKDVqwut4.mft
Manifest number: CE
Signing time: Tue 11 Nov 2025 07:00:42 +0000
Manifest this update: Tue 11 Nov 2025 07:00:42 +0000
Manifest next update: Wed 12 Nov 2025 07:00:42 +0000
Files and hashes: 1: hRRRk1wYRkb4aHgjivsKDVqwut4.crl (hash: SSzts7ZKIiNrZ9XVHG+/PcUobZ4awki+HHCbf/k+4Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/db69b3-781e-4cb9-9edf-6dd6a9c55f57/1/hRRRk1wYRkb4aHgjivsKDVqwut4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/db69b3-781e-4cb9-9edf-6dd6a9c55f57/1/hRRRk1wYRkb4aHgjivsKDVqwut4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRRRk1wYRkb4aHgjivsKDVqwut4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:82:7d:a7:d7:44:99:f0:eb:9a:fe:f1:bc:b9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851451935c184646f86878238afb0a0d5ab0bade
Validity
Not Before: Nov 11 07:00:42 2025 GMT
Not After : Nov 12 07:00:42 2025 GMT
Subject: CN=f0abdc424bbed74eda6ec2462fb678a78f762165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:62:12:f4:f2:49:11:a3:7f:5a:1d:2a:96:
3b:18:25:93:3e:1e:53:2e:95:f3:27:42:7e:98:4b:
79:ee:24:37:74:4d:14:87:83:67:24:14:c6:f0:3b:
fa:b2:1b:36:78:1d:56:2d:b6:f3:16:f7:65:dc:43:
d8:49:dc:c6:22:22:2c:c1:c7:d1:18:dd:2f:d4:2b:
f9:84:d7:ea:47:ca:37:0a:02:e6:d3:bb:34:39:d5:
24:f0:a2:04:fc:cf:8e:f5:1e:14:84:ab:59:92:c4:
48:5e:06:3e:b3:9f:a7:d3:86:5a:6c:ee:0c:73:91:
38:ab:96:8d:01:a3:ad:f1:d5:20:50:11:f8:b6:3b:
d2:06:84:2a:9b:d0:b9:51:8a:f8:c5:ba:b0:3f:63:
23:12:e7:e9:59:58:b2:c3:11:b9:18:5d:a4:c8:6a:
66:5a:b2:d3:0e:5f:ef:09:be:a4:a2:94:b0:79:36:
c2:d6:5d:9c:60:a5:17:dd:43:f6:3a:80:b7:1c:76:
74:a7:8d:92:9f:4a:b2:2a:d3:c9:d0:5f:dc:d4:2e:
b6:0e:02:33:66:57:8b:d8:1b:f3:bb:b1:24:16:b7:
4f:72:7e:1c:b5:2f:da:ef:64:a6:b7:dd:1a:10:d8:
3a:f6:51:78:1b:15:c6:10:bf:62:df:d2:82:8a:4c:
e5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AB:DC:42:4B:BE:D7:4E:DA:6E:C2:46:2F:B6:78:A7:8F:76:21:65
X509v3 Authority Key Identifier:
keyid:85:14:51:93:5C:18:46:46:F8:68:78:23:8A:FB:0A:0D:5A:B0:BA:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRRRk1wYRkb4aHgjivsKDVqwut4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/db69b3-781e-4cb9-9edf-6dd6a9c55f57/1/hRRRk1wYRkb4aHgjivsKDVqwut4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/db69b3-781e-4cb9-9edf-6dd6a9c55f57/1/hRRRk1wYRkb4aHgjivsKDVqwut4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1f:e7:37:93:c6:b4:29:c0:59:45:06:c7:81:b4:c6:d7:4c:
4c:8e:01:e8:55:a2:26:f1:0d:42:c5:b2:47:7d:6c:9f:8d:24:
6b:f8:cb:ea:50:12:14:d7:f9:05:a0:f3:46:fb:39:7c:95:3d:
fe:00:e9:62:a3:bd:c5:1c:3b:7f:a0:0a:fe:d4:7a:5b:44:12:
e1:e2:58:e5:fe:77:fc:86:b1:e0:43:60:89:c4:8c:6b:2f:c6:
bb:5a:e2:c0:00:aa:6f:a5:8e:1c:3c:2c:30:53:d5:ae:cd:c2:
4f:a9:e2:fe:6a:ae:8d:69:f3:3c:27:d9:c9:68:32:7a:f4:5d:
78:23:5e:70:6d:2a:3b:21:50:ec:ba:c4:50:36:84:88:0b:df:
71:b0:14:32:6d:9b:37:d5:e6:04:9a:8d:95:f1:03:b5:a2:f3:
07:79:8d:e7:38:50:fd:a3:61:cc:41:2e:07:f1:fc:83:ab:c7:
59:1d:15:2d:73:f8:ad:5c:44:92:6d:05:5d:ec:90:5f:72:26:
79:3a:13:6d:92:ac:de:28:7e:d4:79:7c:6d:b0:ad:ab:74:5e:
9a:d2:c4:51:27:b5:c2:45:37:ce:df:a1:58:c1:41:aa:97:e0:
1f:30:fe:38:42:1c:2e:dc:4a:65:31:ae:0f:06:73:25:ab:01:
fd:76:0d:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt4J9p9dEmfDrmv7xvLnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MTQ1MTkzNWMxODQ2NDZmODY4NzgyMzhhZmIwYTBkNWFi
MGJhZGUwHhcNMjUxMTExMDcwMDQyWhcNMjUxMTEyMDcwMDQyWjAzMTEwLwYDVQQD
EyhmMGFiZGM0MjRiYmVkNzRlZGE2ZWMyNDYyZmI2NzhhNzhmNzYyMTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAViEvTySRGjf1odKpY7GCWTPh5T
LpXzJ0J+mEt57iQ3dE0Uh4NnJBTG8Dv6shs2eB1WLbbzFvdl3EPYSdzGIiIswcfR
GN0v1Cv5hNfqR8o3CgLm07s0OdUk8KIE/M+O9R4UhKtZksRIXgY+s5+n04ZabO4M
c5E4q5aNAaOt8dUgUBH4tjvSBoQqm9C5UYr4xbqwP2MjEufpWViywxG5GF2kyGpm
WrLTDl/vCb6kopSweTbC1l2cYKUX3UP2OoC3HHZ0p42Sn0qyKtPJ0F/c1C62DgIz
ZleL2Bvzu7EkFrdPcn4ctS/a72Smt90aENg69lF4GxXGEL9i39KCikzlPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCr3EJLvtdO2m7CRi+2eKePdiFlMB8GA1UdIwQY
MBaAFIUUUZNcGEZG+Gh4I4r7Cg1asLreMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFJSUmsxd1lSa2I0YUhnaml2c0tEVnF3dXQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9kYjY5YjMtNzgxZS00Y2I5LTllZGYt
NmRkNmE5YzU1ZjU3LzEvaFJSUmsxd1lSa2I0YUhnaml2c0tEVnF3dXQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9kYjY5YjMtNzgxZS00Y2I5LTllZGYtNmRkNmE5YzU1ZjU3
LzEvaFJSUmsxd1lSa2I0YUhnaml2c0tEVnF3dXQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFx/nN5PG
tCnAWUUGx4G0xtdMTI4B6FWiJvENQsWyR31sn40ka/jL6lASFNf5BaDzRvs5fJU9
/gDpYqO9xRw7f6AK/tR6W0QS4eJY5f53/Iax4ENgicSMay/Gu1riwACqb6WOHDws
MFPVrs3CT6ni/mqujWnzPCfZyWgyevRdeCNecG0qOyFQ7LrEUDaEiAvfcbAUMm2b
N9XmBJqNlfEDtaLzB3mN5zhQ/aNhzEEuB/H8g6vHWR0VLXP4rVxEkm0FXeyQX3Im
eToTbZKs3ih+1Hl8bbCtq3RemtLEUSe1wkU3zt+hWMFBqpfgHzD+OEIcLtxKZTGu
DwZzJasB/XYNzA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:42 2025 by rpki-client