Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
File: HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json)
Hash identifier: K5f/K69p5ozQ8ZC5kdR81stOs/0qpiQA9mxbqkNg2rM=
Subject key identifier: 7B:1D:35:16:53:F3:EA:01:91:C0:44:11:AC:5A:07:87:EA:AF:AF:B4
Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
Certificate issuer: /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Certificate serial: 019A258A400BECE303BC336D0328E4D19554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
Manifest number: 0D98
Signing time: Mon 27 Oct 2025 12:00:08 +0000
Manifest this update: Mon 27 Oct 2025 12:00:08 +0000
Manifest next update: Tue 28 Oct 2025 12:00:08 +0000
Files and hashes: 1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: D5exQuIGotrPI4Zqw3zZeM1DKXUWBErnr5kYh3G24BE=)
2: j4nA-5dcYXHEDW8ahrcEwwSSveI.roa (hash: B4JnjqZ19Obadp4A6xUEPeEjzogbr5ee2D1zydPWFcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:40:0b:ec:e3:03:bc:33:6d:03:28:e4:d1:95:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Validity
Not Before: Oct 27 12:00:08 2025 GMT
Not After : Oct 28 12:00:08 2025 GMT
Subject: CN=7b1d351653f3ea0191c04411ac5a0787eaafafb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:41:bd:7d:2b:ef:85:ea:bd:e7:6a:66:70:
e1:94:66:91:7f:79:6c:a6:eb:2c:90:64:71:cd:ba:
81:73:e0:3e:58:b0:84:14:90:63:ce:63:33:be:c5:
76:30:76:25:a9:da:f5:25:95:2c:5e:78:36:da:c9:
50:22:a3:31:bf:a5:83:b8:b5:a4:6d:8b:4b:51:25:
10:f1:64:2d:40:a2:db:f0:2f:e9:89:35:63:46:69:
a9:25:56:32:a8:4e:77:f4:44:14:80:f4:89:18:18:
fd:fd:ba:8c:34:8e:70:e1:14:14:05:4d:2f:ad:63:
93:a1:80:1c:70:90:7f:ae:f2:3a:88:38:f1:56:58:
3d:85:a1:88:71:ad:bb:99:3a:a7:02:e8:24:cd:bd:
23:99:19:e0:6b:ed:45:07:0c:f1:91:16:d8:92:2b:
95:7b:81:3f:40:a8:bf:d0:27:00:3d:f8:03:95:5d:
d2:46:c1:bd:f1:19:05:a2:88:12:99:ff:4a:80:61:
19:e6:0c:a5:93:03:a1:e6:f8:04:66:cb:84:63:98:
ba:39:68:c8:a1:3c:e2:02:22:65:47:83:c3:50:a1:
84:3a:3f:6a:26:6c:b4:27:e1:c1:d2:b5:98:25:8f:
50:e1:f4:6c:74:23:6e:3a:ba:76:af:5d:84:65:88:
ac:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1D:35:16:53:F3:EA:01:91:C0:44:11:AC:5A:07:87:EA:AF:AF:B4
X509v3 Authority Key Identifier:
keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ef:46:8b:12:fe:0e:65:48:a5:a5:74:c6:dc:05:94:a9:80:
1b:29:4a:b8:9a:98:ee:e8:29:3f:aa:c5:d7:6e:c2:b0:54:66:
27:d2:72:7c:e9:f0:6f:c9:30:a1:51:8d:80:6d:94:0e:27:8d:
d6:5f:cf:51:e9:72:8d:13:d5:40:dc:a0:2c:c8:28:52:73:f9:
21:3c:fb:36:05:e5:8a:2b:fa:67:df:ab:c6:00:85:2e:51:ce:
99:7a:ab:8d:8f:50:d5:66:d3:b1:22:5e:04:81:57:a0:bb:9b:
b2:ac:31:b1:c1:fa:18:8f:b3:a7:c0:72:a1:0d:10:e2:3e:b5:
2e:76:98:56:40:2b:d9:60:a0:7a:13:81:e8:35:d8:8d:69:31:
54:52:89:9e:b3:31:b8:df:3f:87:0d:cb:2d:fd:7b:78:4d:32:
46:71:b8:e5:20:18:6e:61:c6:aa:4f:80:1d:4f:54:a2:eb:35:
37:64:6b:e0:9f:08:8d:b9:3c:66:e8:36:ba:19:1d:2d:a7:db:
c7:3a:d6:21:bd:7c:4c:26:e5:14:25:f4:ff:dc:57:20:6c:14:
d4:a6:0c:f6:de:d3:1a:f9:6e:5d:bd:8a:b4:05:84:eb:85:e7:
64:a3:db:e7:00:8e:8a:fe:c7:c7:7e:f1:97:78:ba:1f:6a:73:
8b:50:2a:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolikAL7OMDvDNtAyjk0ZVUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTg5NTUxMjhiY2JjNzY5M2ViMWE5MzdmZjI4YjQwZWIz
NDQ4YTAwHhcNMjUxMDI3MTIwMDA4WhcNMjUxMDI4MTIwMDA4WjAzMTEwLwYDVQQD
Eyg3YjFkMzUxNjUzZjNlYTAxOTFjMDQ0MTFhYzVhMDc4N2VhYWZhZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6VBvX0r74XqvedqZnDhlGaRf3ls
pusskGRxzbqBc+A+WLCEFJBjzmMzvsV2MHYlqdr1JZUsXng22slQIqMxv6WDuLWk
bYtLUSUQ8WQtQKLb8C/piTVjRmmpJVYyqE539EQUgPSJGBj9/bqMNI5w4RQUBU0v
rWOToYAccJB/rvI6iDjxVlg9haGIca27mTqnAugkzb0jmRnga+1FBwzxkRbYkiuV
e4E/QKi/0CcAPfgDlV3SRsG98RkFoogSmf9KgGEZ5gylkwOh5vgEZsuEY5i6OWjI
oTziAiJlR4PDUKGEOj9qJmy0J+HB0rWYJY9Q4fRsdCNuOrp2r12EZYis3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsdNRZT8+oBkcBEEaxaB4fqr6+0MB8GA1UdIwQY
MBaAFByYlVEovLx2k+sak3/yi0DrNEigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83Yzg3MWQtODUzZS00YTJkLWE4ZDQt
YmY4MTNjZjA4MWI3LzEvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83Yzg3MWQtODUzZS00YTJkLWE4ZDQtYmY4MTNjZjA4MWI3
LzEvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhO9GixL+
DmVIpaV0xtwFlKmAGylKuJqY7ugpP6rF127CsFRmJ9JyfOnwb8kwoVGNgG2UDieN
1l/PUelyjRPVQNygLMgoUnP5ITz7NgXliiv6Z9+rxgCFLlHOmXqrjY9Q1WbTsSJe
BIFXoLubsqwxscH6GI+zp8ByoQ0Q4j61LnaYVkAr2WCgehOB6DXYjWkxVFKJnrMx
uN8/hw3LLf17eE0yRnG45SAYbmHGqk+AHU9Uous1N2Rr4J8Ijbk8Zug2uhkdLafb
xzrWIb18TCblFCX0/9xXIGwU1KYM9t7TGvluXb2KtAWE64XnZKPb5wCOiv7Hx37x
l3i6H2pzi1Aq3Q==
-----END CERTIFICATE-----
Generated at Mon Oct 27 22:41:28 2025 by rpki-client