Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
File: HjaTxfrT8hak_3rIbO6yOwBDg10.mft (raw, json)
Hash identifier: 7gN/Guupzqn/BL22Cu0kIMPD9pU1ONZRaZHGVGqcwM8=
Subject key identifier: 07:D0:0A:5C:FB:02:3C:59:70:15:E3:1B:85:4E:B0:95:47:EF:7E:39
Authority key identifier: 1E:36:93:C5:FA:D3:F2:16:A4:FF:7A:C8:6C:EE:B2:3B:00:43:83:5D
Certificate issuer: /CN=1e3693c5fad3f216a4ff7ac86ceeb23b0043835d
Certificate serial: 019A73010FADAC40FBEC91EC1FA3954BEB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
Manifest number: 0BEB
Signing time: Tue 11 Nov 2025 13:00:40 +0000
Manifest this update: Tue 11 Nov 2025 13:00:40 +0000
Manifest next update: Wed 12 Nov 2025 13:00:40 +0000
Files and hashes: 1: HjaTxfrT8hak_3rIbO6yOwBDg10.crl (hash: mEvf2+dbV8lGOvfFkVA1kjsPZ3oqzEn4lp5rO0ab38E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:0f:ad:ac:40:fb:ec:91:ec:1f:a3:95:4b:eb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e3693c5fad3f216a4ff7ac86ceeb23b0043835d
Validity
Not Before: Nov 11 13:00:40 2025 GMT
Not After : Nov 12 13:00:40 2025 GMT
Subject: CN=07d00a5cfb023c597015e31b854eb09547ef7e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:ab:cd:39:f0:3f:e2:d9:95:5f:ca:58:e2:
72:5a:25:54:ac:35:9b:2d:df:43:e7:a2:ca:57:55:
59:e4:09:c3:06:1e:94:ab:fd:b4:d5:6f:0c:e1:1d:
37:19:2b:26:6a:5e:07:a8:68:01:45:07:ed:0b:b4:
84:f6:fb:65:3d:2c:92:ef:bf:c3:34:20:09:04:92:
bd:07:e8:e6:62:4d:36:6d:da:01:de:46:0f:f9:94:
d0:53:d4:e8:21:d2:ea:6e:4e:fa:eb:08:f1:ec:09:
0e:21:32:74:0d:11:7a:63:bc:03:81:52:51:96:ca:
4c:b3:be:71:2b:e4:77:b9:f7:ae:3b:8f:03:0c:93:
ff:cf:9c:8e:1e:f8:9c:dd:f7:67:1e:16:3b:35:dc:
44:b8:14:4e:cc:27:06:ed:1a:59:73:bf:c6:62:10:
3a:bf:f5:eb:e6:8c:b9:96:f8:2e:44:6d:55:f2:b1:
ee:e1:bd:01:b7:5e:a7:b1:a6:92:5e:fb:f8:98:1f:
95:2f:e3:ca:b6:57:97:17:fc:34:fe:e7:18:51:60:
04:e6:42:6e:4c:3a:c1:4f:4d:13:50:50:6a:5d:3d:
84:03:7c:75:cb:56:9d:e6:9a:8b:88:ad:d9:29:7d:
47:d3:d8:de:eb:37:b1:8d:49:d2:a6:c8:56:93:8e:
44:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D0:0A:5C:FB:02:3C:59:70:15:E3:1B:85:4E:B0:95:47:EF:7E:39
X509v3 Authority Key Identifier:
keyid:1E:36:93:C5:FA:D3:F2:16:A4:FF:7A:C8:6C:EE:B2:3B:00:43:83:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7b:04:2d:a1:bb:cb:18:c4:3d:48:55:68:2b:89:98:13:9d:
e9:a1:31:f4:93:d6:48:fc:60:b9:fa:fd:28:c7:cf:f2:b7:89:
3b:0f:d2:3c:b4:4f:a7:db:bf:7c:05:6b:99:fe:4c:9e:1c:80:
3c:71:58:f1:79:66:a4:76:5c:fc:51:05:8c:01:4d:17:d9:05:
f1:a6:d1:7a:b4:3f:0b:fb:3b:eb:b8:f5:7b:b1:e5:ec:45:13:
5b:dd:ce:cd:28:49:0d:a8:6e:eb:87:e6:6b:a7:69:1d:d7:73:
3c:02:08:4f:75:2f:4e:96:1d:8a:e6:cc:74:2b:ba:0c:d5:be:
45:20:9c:36:cf:9e:3a:42:a1:01:85:77:36:dc:6d:e3:07:f6:
16:6c:d3:79:4d:a5:45:ff:6f:fb:d3:c4:37:bb:64:b3:c4:b9:
23:df:80:03:ab:b7:dc:15:0b:f4:42:59:1c:7c:62:af:cb:2e:
73:47:1c:d7:89:c2:23:a3:49:e5:d1:d5:05:bc:8b:5a:db:a1:
94:3e:69:e3:14:a8:6a:ba:3b:83:ca:a7:51:76:76:e4:d5:ad:
f9:b5:c7:5a:5c:cc:b2:1b:c1:6a:b4:52:9d:4e:e5:93:90:6e:
a6:d5:65:6a:61:44:28:9a:83:5e:9c:8f:c0:69:68:86:0c:d6:
ab:4b:70:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAQ+trED77JHsH6OVS+udMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMzY5M2M1ZmFkM2YyMTZhNGZmN2FjODZjZWViMjNiMDA0
MzgzNWQwHhcNMjUxMTExMTMwMDQwWhcNMjUxMTEyMTMwMDQwWjAzMTEwLwYDVQQD
EygwN2QwMGE1Y2ZiMDIzYzU5NzAxNWUzMWI4NTRlYjA5NTQ3ZWY3ZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3mrzTnwP+LZlV/KWOJyWiVUrDWb
Ld9D56LKV1VZ5AnDBh6Uq/201W8M4R03GSsmal4HqGgBRQftC7SE9vtlPSyS77/D
NCAJBJK9B+jmYk02bdoB3kYP+ZTQU9ToIdLqbk766wjx7AkOITJ0DRF6Y7wDgVJR
lspMs75xK+R3ufeuO48DDJP/z5yOHvic3fdnHhY7NdxEuBROzCcG7RpZc7/GYhA6
v/Xr5oy5lvguRG1V8rHu4b0Bt16nsaaSXvv4mB+VL+PKtleXF/w0/ucYUWAE5kJu
TDrBT00TUFBqXT2EA3x1y1ad5pqLiK3ZKX1H09je6zexjUnSpshWk45EBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfQClz7AjxZcBXjG4VOsJVH7345MB8GA1UdIwQY
MBaAFB42k8X60/IWpP96yGzusjsAQ4NdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGphVHhmclQ4aGFrXzNySWJPNnlPd0JEZzEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85YTFkMmQtYzYyNi00ZjgwLWE5ZDQt
NDIxMTUxOGQ5OGE0LzEvSGphVHhmclQ4aGFrXzNySWJPNnlPd0JEZzEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85YTFkMmQtYzYyNi00ZjgwLWE5ZDQtNDIxMTUxOGQ5OGE0
LzEvSGphVHhmclQ4aGFrXzNySWJPNnlPd0JEZzEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3sELaG7
yxjEPUhVaCuJmBOd6aEx9JPWSPxgufr9KMfP8reJOw/SPLRPp9u/fAVrmf5MnhyA
PHFY8XlmpHZc/FEFjAFNF9kF8abRerQ/C/s767j1e7Hl7EUTW93OzShJDahu64fm
a6dpHddzPAIIT3UvTpYdiubMdCu6DNW+RSCcNs+eOkKhAYV3Ntxt4wf2FmzTeU2l
Rf9v+9PEN7tks8S5I9+AA6u33BUL9EJZHHxir8suc0cc14nCI6NJ5dHVBbyLWtuh
lD5p4xSoaro7g8qnUXZ25NWt+bXHWlzMshvBarRSnU7lk5BuptVlamFEKJqDXpyP
wGlohgzWq0twpg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:10 2025 by rpki-client