Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
File: HCiwfBV6XcYTySZNr4nnyGDjPmM.mft (raw, json)
Hash identifier: fTesV8gpx+OYp9uabR1oW7jXPyaF/kZd5kFqo07GE/s=
Subject key identifier: 38:79:57:DC:09:97:EB:60:A7:F9:07:82:40:17:95:A9:7D:21:86:0E
Authority key identifier: 1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
Certificate issuer: /CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Certificate serial: 019A71B772CA7206981BFEA3F73AB1DDA815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
Manifest number: 172B
Signing time: Tue 11 Nov 2025 07:00:39 +0000
Manifest this update: Tue 11 Nov 2025 07:00:39 +0000
Manifest next update: Wed 12 Nov 2025 07:00:39 +0000
Files and hashes: 1: HCiwfBV6XcYTySZNr4nnyGDjPmM.crl (hash: ewSqZJZmcra0WrTjBI6bMzTZoNWO7WoXhGgg3KgFh/w=)
2: f0vhGxR72MG9W3aRCoI9VCH2wQA.roa (hash: PDzMyuMmfdbsbyADvkBIQZLummxADm7ztnq8hanW6ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:72:ca:72:06:98:1b:fe:a3:f7:3a:b1:dd:a8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Validity
Not Before: Nov 11 07:00:39 2025 GMT
Not After : Nov 12 07:00:39 2025 GMT
Subject: CN=387957dc0997eb60a7f90782401795a97d21860e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:d1:14:6b:69:10:fe:56:c4:9e:64:38:61:
f3:cd:22:42:ab:c3:bc:5e:51:e8:2f:b6:82:9c:bf:
48:b7:07:6d:a4:f4:ea:6e:e1:ee:8d:6d:8b:21:80:
6a:16:ab:fa:51:5d:57:87:16:d3:13:93:0d:d6:bd:
15:28:e9:ec:91:98:b1:9f:23:91:1d:54:bf:6c:bc:
dd:c9:c7:87:d1:af:4e:e2:4d:e5:cf:0b:92:db:87:
52:e2:ba:c3:63:ed:16:c0:64:ac:b1:da:33:ca:9b:
77:45:a6:ec:a7:3c:25:c7:31:47:cf:f8:90:e3:2f:
be:3b:8b:77:c1:19:93:21:ab:42:b9:07:57:d7:e1:
90:71:1f:47:89:2d:d1:78:7b:cd:61:ea:54:49:56:
19:f2:c9:41:42:d3:1c:1d:e1:de:77:90:39:8c:c7:
08:04:1f:b8:35:b5:a1:36:18:f2:60:81:e6:da:7f:
d3:a9:44:4e:85:a5:2b:df:13:a7:6b:4e:5c:30:2f:
6e:62:2e:68:43:cf:93:44:22:73:c2:af:ca:57:18:
73:33:56:53:53:9f:49:64:e7:65:7c:7f:45:f8:d0:
c2:3f:3d:d8:42:fe:43:a2:dc:ab:ec:ea:db:d5:0b:
cb:60:b8:35:b2:38:c0:dd:7f:c6:4a:ca:19:a2:15:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:79:57:DC:09:97:EB:60:A7:F9:07:82:40:17:95:A9:7D:21:86:0E
X509v3 Authority Key Identifier:
keyid:1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:69:0a:9c:88:9b:4a:1f:08:6b:9c:44:23:47:e1:9b:71:cf:
66:ec:4f:86:19:a2:89:63:34:83:da:7e:f7:ac:6c:30:72:28:
de:e0:09:90:88:e4:b8:c9:34:06:a2:70:2d:4c:93:ee:2b:8f:
43:18:3a:70:a8:9a:2b:e7:0c:01:7a:3a:69:4b:71:be:99:8b:
ae:1b:f7:b7:b5:ad:ce:96:99:61:02:05:55:1f:b3:74:8c:5b:
a0:cf:aa:74:e5:6b:49:2d:69:af:1d:d0:7f:a9:13:22:ee:06:
67:ae:c3:c2:3b:e5:ea:ab:b7:f5:54:5f:bc:63:17:84:1b:e2:
c1:45:9d:e7:bb:07:93:24:fa:27:c3:f1:de:c3:09:c4:ca:57:
c7:6b:f9:dc:cc:33:6b:5e:fb:e4:20:9f:e9:6e:10:17:c5:a1:
c0:60:cb:ad:9c:77:c3:f8:5a:8d:bf:b2:be:d0:a0:4d:42:fc:
fc:ee:2b:fe:fe:68:49:c6:ff:3d:97:84:84:83:c3:e7:39:86:
cb:03:03:a2:96:0c:42:d8:94:97:92:f2:9a:b0:41:a7:9f:f0:
88:5c:d2:94:bc:20:3f:d2:fc:53:31:a8:6e:43:a1:59:45:08:
d4:83:3b:0b:92:75:9a:bb:eb:8b:c1:63:85:50:c0:98:51:be:
92:80:50:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt3LKcgaYG/6j9zqx3agVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjhiMDdjMTU3YTVkYzYxM2M5MjY0ZGFmODllN2M4NjBl
MzNlNjMwHhcNMjUxMTExMDcwMDM5WhcNMjUxMTEyMDcwMDM5WjAzMTEwLwYDVQQD
EygzODc5NTdkYzA5OTdlYjYwYTdmOTA3ODI0MDE3OTVhOTdkMjE4NjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVTRFGtpEP5WxJ5kOGHzzSJCq8O8
XlHoL7aCnL9ItwdtpPTqbuHujW2LIYBqFqv6UV1XhxbTE5MN1r0VKOnskZixnyOR
HVS/bLzdyceH0a9O4k3lzwuS24dS4rrDY+0WwGSssdozypt3RabspzwlxzFHz/iQ
4y++O4t3wRmTIatCuQdX1+GQcR9HiS3ReHvNYepUSVYZ8slBQtMcHeHed5A5jMcI
BB+4NbWhNhjyYIHm2n/TqUROhaUr3xOna05cMC9uYi5oQ8+TRCJzwq/KVxhzM1ZT
U59JZOdlfH9F+NDCPz3YQv5Dotyr7Orb1QvLYLg1sjjA3X/GSsoZohU9gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDh5V9wJl+tgp/kHgkAXlal9IYYOMB8GA1UdIwQY
MBaAFBwosHwVel3GE8kmTa+J58hg4z5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENpd2ZCVjZYY1lUeVNaTnI0bm55R0RqUG1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZTdkZmMtMTI2NC00Yzk0LTliY2Mt
OTYzMzM0ODllODU1LzEvSENpd2ZCVjZYY1lUeVNaTnI0bm55R0RqUG1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mZTdkZmMtMTI2NC00Yzk0LTliY2MtOTYzMzM0ODllODU1
LzEvSENpd2ZCVjZYY1lUeVNaTnI0bm55R0RqUG1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGkKnIib
Sh8Ia5xEI0fhm3HPZuxPhhmiiWM0g9p+96xsMHIo3uAJkIjkuMk0BqJwLUyT7iuP
Qxg6cKiaK+cMAXo6aUtxvpmLrhv3t7WtzpaZYQIFVR+zdIxboM+qdOVrSS1prx3Q
f6kTIu4GZ67Dwjvl6qu39VRfvGMXhBviwUWd57sHkyT6J8Px3sMJxMpXx2v53Mwz
a1775CCf6W4QF8WhwGDLrZx3w/hajb+yvtCgTUL8/O4r/v5oScb/PZeEhIPD5zmG
ywMDopYMQtiUl5LymrBBp5/wiFzSlLwgP9L8UzGobkOhWUUI1IM7C5J1mrvri8Fj
hVDAmFG+koBQeg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:32 2025 by rpki-client