Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
File: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft (raw, json)
Hash identifier: nxxK1B7C2dq0NTj5o4CuhQo9bq6gSaG1FFwnf1KUIlc=
Subject key identifier: 14:FB:D4:70:A9:1B:0B:95:1E:09:AC:59:BF:5C:36:9D:8C:DB:30:6F
Authority key identifier: 1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
Certificate issuer: /CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Certificate serial: 019A71130E35E0A108BDCAE913F614F3E7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
Manifest number: 0C23
Signing time: Tue 11 Nov 2025 04:01:05 +0000
Manifest this update: Tue 11 Nov 2025 04:01:05 +0000
Manifest next update: Wed 12 Nov 2025 04:01:05 +0000
Files and hashes: 1: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl (hash: BpNN8wisNMQH+grXRhBTRb4eyJ4WSUtECQ4+xstXj6Q=)
2: ntEteGeDZu85wNJOAqgjTrUSx54.roa (hash: Q0TMKcR9tSI7oBt+FGXWaqYBj7j3GPsfDK87Fv5h+YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:0e:35:e0:a1:08:bd:ca:e9:13:f6:14:f3:e7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Validity
Not Before: Nov 11 04:01:05 2025 GMT
Not After : Nov 12 04:01:05 2025 GMT
Subject: CN=14fbd470a91b0b951e09ac59bf5c369d8cdb306f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:03:51:4b:aa:02:dd:5a:c8:41:c7:59:c4:
49:76:f9:cb:68:a6:5a:8d:a5:6b:2a:5d:1c:06:9e:
08:b1:bb:d0:97:97:eb:e5:4b:76:5c:21:61:b8:0c:
68:3f:68:13:33:57:a4:a3:21:d1:ee:ff:b1:f9:39:
9a:cf:61:d9:c9:bb:8c:e7:e5:53:97:74:2f:74:34:
a4:86:38:0e:6e:08:0d:46:0f:4c:ab:ca:8d:18:b7:
52:1a:e3:f7:53:e7:6c:c3:f3:fe:46:c2:a4:9e:e4:
b6:9a:f8:ba:c0:18:61:70:63:a7:35:fd:9a:25:a4:
8c:d5:77:48:b8:89:a4:e7:44:de:4d:cb:8a:53:c5:
22:b4:b7:34:d2:0d:76:20:85:52:a4:d2:67:6d:3a:
c5:fd:15:21:12:09:b7:20:40:72:2c:4b:3c:67:de:
f0:dd:ef:31:f1:db:34:82:78:c5:f2:83:f9:c7:f5:
c9:13:9f:15:46:3a:b8:46:56:6f:0f:ab:43:15:57:
47:f8:2e:d6:ae:6e:8d:bb:14:8b:8e:11:01:20:05:
65:0d:51:28:55:7f:bc:86:e5:8c:56:7e:61:e1:22:
a3:db:80:f2:57:a7:78:79:66:ac:a0:09:cf:fa:ab:
b1:d7:39:da:3b:98:6c:df:c8:46:30:f7:b7:27:c4:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FB:D4:70:A9:1B:0B:95:1E:09:AC:59:BF:5C:36:9D:8C:DB:30:6F
X509v3 Authority Key Identifier:
keyid:1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:76:a8:cf:be:03:a8:aa:af:19:22:4c:a4:1f:b5:6d:aa:53:
22:f7:1c:8d:ba:bd:1b:fc:51:52:26:b8:39:eb:cf:29:73:c8:
7a:4e:67:a4:b3:21:d9:03:87:39:78:b9:c4:a7:fe:22:c1:70:
fc:d4:9c:c4:12:8f:c2:64:06:1b:f5:01:61:c5:b3:03:73:de:
03:d5:70:85:c2:e0:5d:86:4f:93:fc:f9:44:9a:5e:1d:d4:48:
44:28:87:b9:f1:17:7f:6a:59:a2:92:12:8d:83:d3:d7:26:d2:
28:03:13:ef:b0:73:01:d8:aa:e5:8b:ed:85:ab:c2:59:a6:24:
e4:07:7e:57:84:6a:56:42:64:88:b8:84:20:e8:c2:c7:d7:14:
18:3b:f9:12:d5:ba:7d:cf:77:5e:d6:93:44:af:e9:46:72:85:
e8:70:99:ab:93:e5:b1:2c:f4:85:40:a3:0b:35:25:29:a7:27:
0a:25:cc:05:5d:2b:3e:3b:df:c0:9c:5c:38:fb:ed:4a:0e:fd:
2d:4c:5a:48:f1:76:cd:b1:dc:5a:55:bc:ea:b1:06:a2:09:41:
33:b3:7a:07:a3:ac:92:b9:46:db:cc:19:21:37:6e:4f:3d:11:
88:a8:03:9e:4f:31:93:c1:75:d4:77:be:96:84:57:ff:46:45:
b8:6b:34:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEw414KEIvcrpE/YU8+erMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOTAwNGVhMDUzOGM3M2MyM2EzZDFkZmRjMTIxZjBlNjAw
YWNkZjUwHhcNMjUxMTExMDQwMTA1WhcNMjUxMTEyMDQwMTA1WjAzMTEwLwYDVQQD
EygxNGZiZDQ3MGE5MWIwYjk1MWUwOWFjNTliZjVjMzY5ZDhjZGIzMDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMoDUUuqAt1ayEHHWcRJdvnLaKZa
jaVrKl0cBp4IsbvQl5fr5Ut2XCFhuAxoP2gTM1ekoyHR7v+x+Tmaz2HZybuM5+VT
l3QvdDSkhjgObggNRg9Mq8qNGLdSGuP3U+dsw/P+RsKknuS2mvi6wBhhcGOnNf2a
JaSM1XdIuImk50TeTcuKU8UitLc00g12IIVSpNJnbTrF/RUhEgm3IEByLEs8Z97w
3e8x8ds0gnjF8oP5x/XJE58VRjq4RlZvD6tDFVdH+C7Wrm6NuxSLjhEBIAVlDVEo
VX+8huWMVn5h4SKj24DyV6d4eWasoAnP+qux1znaO5hs38hGMPe3J8TaBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBT71HCpGwuVHgmsWb9cNp2M2zBvMB8GA1UdIwQY
MBaAFB+QBOoFOMc8I6PR39wSHw5gCs31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVBRTZnVTR4endqbzlIZjNCSWZEbUFLemZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yM2Q3YjctNWFlNi00NjMxLWIxNDIt
NDk2YWJlZTdjZTc5LzEvSDVBRTZnVTR4endqbzlIZjNCSWZEbUFLemZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yM2Q3YjctNWFlNi00NjMxLWIxNDItNDk2YWJlZTdjZTc5
LzEvSDVBRTZnVTR4endqbzlIZjNCSWZEbUFLemZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHaoz74D
qKqvGSJMpB+1bapTIvccjbq9G/xRUia4OevPKXPIek5npLMh2QOHOXi5xKf+IsFw
/NScxBKPwmQGG/UBYcWzA3PeA9VwhcLgXYZPk/z5RJpeHdRIRCiHufEXf2pZopIS
jYPT1ybSKAMT77BzAdiq5YvthavCWaYk5Ad+V4RqVkJkiLiEIOjCx9cUGDv5EtW6
fc93XtaTRK/pRnKF6HCZq5PlsSz0hUCjCzUlKacnCiXMBV0rPjvfwJxcOPvtSg79
LUxaSPF2zbHcWlW86rEGoglBM7N6B6OskrlG28wZITduTz0RiKgDnk8xk8F11He+
loRX/0ZFuGs0xw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:38 2025 by rpki-client