Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
File: hZtbaj2CvQDtMcbOs66nrVke5Tc.mft (raw, json)
Hash identifier: jZBUfYmGE/gNcR/1/HwUPEFuEXH0G3Effq0k6q7Yoyc=
Subject key identifier: C9:73:AA:66:8D:E8:9C:A5:4E:5A:83:3D:89:75:82:91:12:B4:F1:8C
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Certificate issuer: /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial: 019A7225EDA99A4D69031A8F49EF3B7977D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
Manifest number: 07C8
Signing time: Tue 11 Nov 2025 09:01:19 +0000
Manifest this update: Tue 11 Nov 2025 09:01:19 +0000
Manifest next update: Wed 12 Nov 2025 09:01:19 +0000
Files and hashes: 1: hZtbaj2CvQDtMcbOs66nrVke5Tc.crl (hash: zOSWe97VrzjjASGMBYVTrYpnvy7XJanbool4xLeB4lI=)
2: iDoekYbnPiOIxLiqr48QVJjIZ7I.roa (hash: BFGeDsq9cIJPFhHXYs9ml2z2YYV20g/bd7ZbGgfmSrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ed:a9:9a:4d:69:03:1a:8f:49:ef:3b:79:77:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Validity
Not Before: Nov 11 09:01:19 2025 GMT
Not After : Nov 12 09:01:19 2025 GMT
Subject: CN=c973aa668de89ca54e5a833d8975829112b4f18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a3:87:72:3a:89:ea:54:9b:64:7e:d9:86:a3:
e4:f6:41:3b:1d:25:00:7b:e5:31:04:a7:cb:b9:82:
c4:4f:91:c1:5a:36:33:5d:16:c5:98:05:90:69:53:
7e:d9:6f:8c:9f:81:b4:03:a4:13:de:c2:bc:57:53:
01:85:d7:24:e9:94:cf:0d:da:7a:77:05:92:2a:aa:
7d:20:de:a0:a2:30:62:ce:68:07:b2:65:fb:06:e5:
6e:b5:3e:f5:f1:41:fe:bb:36:9b:fe:3b:3d:b9:f5:
62:66:4f:4f:48:28:2e:47:8b:44:ca:82:d7:36:87:
53:d7:1d:6e:41:8d:a1:79:07:b4:74:16:25:6e:7b:
f5:9c:0b:18:c7:e5:bc:be:80:f7:5b:65:8f:6e:35:
18:e7:8b:22:83:82:f2:c3:d7:6c:7e:0a:13:33:98:
0d:08:3c:54:06:c1:d5:76:99:a2:fe:fa:9d:f0:67:
d0:39:aa:52:23:a2:4e:34:e5:e4:48:6b:11:30:65:
ef:15:be:90:0e:f5:f5:aa:52:fa:a6:9e:80:cb:54:
ed:3d:04:10:d5:b6:98:f7:a0:ec:09:b6:b0:8c:e1:
f6:2f:5a:26:11:ea:87:9b:a3:2c:bd:a1:91:c1:55:
2a:6b:80:eb:3a:05:d2:91:c0:08:f7:9d:c8:7d:a3:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:73:AA:66:8D:E8:9C:A5:4E:5A:83:3D:89:75:82:91:12:B4:F1:8C
X509v3 Authority Key Identifier:
keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:17:66:de:80:47:1e:23:32:11:8d:ca:9d:e7:67:c9:67:40:
7a:5a:3b:7b:93:a3:4b:b5:0e:dd:81:03:93:bd:a1:18:78:2a:
29:7c:6b:ce:55:1e:b9:c4:34:b0:e7:5f:50:db:ed:e9:06:c4:
ad:5d:bf:a8:51:77:f9:65:45:8a:c2:aa:1e:b9:05:50:a7:5e:
11:0c:8f:1d:32:14:01:dd:2a:67:9b:87:a9:4d:68:23:f5:c6:
8d:59:14:ae:6f:35:67:51:75:f0:56:bf:85:c4:c0:86:b4:7a:
74:24:43:da:ec:1e:8e:a1:b2:71:57:d7:80:ce:d8:b1:63:2c:
af:05:39:52:86:ef:cb:0e:01:f2:88:34:0a:32:7c:56:6e:de:
e3:94:ca:06:42:22:4a:e4:54:f5:b9:b0:6d:ba:30:9a:aa:ce:
97:bc:59:a9:a3:d0:74:82:7e:cc:b3:6a:50:21:ad:3a:ab:f3:
82:7a:bc:56:06:74:f7:ea:4e:6f:d1:1f:2b:e5:97:42:88:82:
e5:3c:f2:fb:93:23:6f:97:8b:da:33:e6:ee:99:85:b8:4a:95:
ca:db:6e:b8:6e:b2:e3:fc:6d:29:4d:64:52:e0:ee:5a:12:52:
5e:77:15:f0:18:d0:2c:cb:9d:cc:fd:f7:44:a3:8b:de:11:7f:
c9:ef:88:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJe2pmk1pAxqPSe87eXfVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OWI1YjZhM2Q4MmJkMDBlZDMxYzZjZWIzYWVhN2FkNTkx
ZWU1MzcwHhcNMjUxMTExMDkwMTE5WhcNMjUxMTEyMDkwMTE5WjAzMTEwLwYDVQQD
EyhjOTczYWE2NjhkZTg5Y2E1NGU1YTgzM2Q4OTc1ODI5MTEyYjRmMThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56OHcjqJ6lSbZH7ZhqPk9kE7HSUA
e+UxBKfLuYLET5HBWjYzXRbFmAWQaVN+2W+Mn4G0A6QT3sK8V1MBhdck6ZTPDdp6
dwWSKqp9IN6gojBizmgHsmX7BuVutT718UH+uzab/js9ufViZk9PSCguR4tEyoLX
NodT1x1uQY2heQe0dBYlbnv1nAsYx+W8voD3W2WPbjUY54sig4Lyw9dsfgoTM5gN
CDxUBsHVdpmi/vqd8GfQOapSI6JONOXkSGsRMGXvFb6QDvX1qlL6pp6Ay1TtPQQQ
1baY96DsCbawjOH2L1omEeqHm6MsvaGRwVUqa4DrOgXSkcAI953IfaOo1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlzqmaN6JylTlqDPYl1gpEStPGMMB8GA1UdIwQY
MBaAFIWbW2o9gr0A7THGzrOup61ZHuU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84ZWRiODItY2UyYi00NGUxLTkyY2Qt
MmZjOWU2YjZmYzk2LzEvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84ZWRiODItY2UyYi00NGUxLTkyY2QtMmZjOWU2YjZmYzk2
LzEvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxdm3oBH
HiMyEY3KnednyWdAelo7e5OjS7UO3YEDk72hGHgqKXxrzlUeucQ0sOdfUNvt6QbE
rV2/qFF3+WVFisKqHrkFUKdeEQyPHTIUAd0qZ5uHqU1oI/XGjVkUrm81Z1F18Fa/
hcTAhrR6dCRD2uwejqGycVfXgM7YsWMsrwU5Uobvyw4B8og0CjJ8Vm7e45TKBkIi
SuRU9bmwbbowmqrOl7xZqaPQdIJ+zLNqUCGtOqvzgnq8VgZ09+pOb9EfK+WXQoiC
5Tzy+5Mjb5eL2jPm7pmFuEqVyttuuG6y4/xtKU1kUuDuWhJSXncV8BjQLMudzP33
RKOL3hF/ye+IpA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:41 2025 by rpki-client