Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
File: HWhumKzyo3vyrsaYB-aWQGCXnLg.mft (raw, json)
Hash identifier: sr8vH3HSY9Qmf9xgAplhF69p40AzR+q0gEXzr9afHHY=
Subject key identifier: C2:57:DA:18:9D:FB:BA:98:B2:D5:B7:9B:5F:F7:3B:D2:FC:A2:C5:9C
Authority key identifier: 1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
Certificate issuer: /CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Certificate serial: 019A7225BDC2884F5BEF811E980CE79C9CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:07 +0000
Manifest this update: Tue 11 Nov 2025 09:01:07 +0000
Manifest next update: Wed 12 Nov 2025 09:01:07 +0000
Files and hashes: 1: HWhumKzyo3vyrsaYB-aWQGCXnLg.crl (hash: y7+WzJFUehU2Ouho6k+jHytfo//aq5YN1rg2swFRAEY=)
2: OxE4-aNNSEdqL0e1drWJ-u6-FW8.roa (hash: 61L/5UKRIctS8qkUbe6UFwwrHK0nH/grmD/batM7eQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:bd:c2:88:4f:5b:ef:81:1e:98:0c:e7:9c:9c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Validity
Not Before: Nov 11 09:01:07 2025 GMT
Not After : Nov 12 09:01:07 2025 GMT
Subject: CN=c257da189dfbba98b2d5b79b5ff73bd2fca2c59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:e0:c6:75:79:c7:9f:20:ae:ca:1d:ad:4f:
f4:0d:01:28:bc:95:2a:fd:03:04:c1:cc:49:24:47:
1b:f6:f2:c3:73:3c:36:e2:c5:c2:af:23:c8:22:ac:
b9:ba:78:2b:4d:72:0f:55:43:2f:1b:74:d9:d5:4d:
0d:d1:78:b6:59:90:2d:cc:d8:13:01:c5:86:17:11:
4c:13:8b:7f:2b:fd:64:0e:bb:ec:d2:07:13:6d:7e:
db:78:6a:a8:c3:a2:47:1a:6a:68:ae:6a:00:a1:67:
90:60:d1:64:d3:97:93:7d:c5:53:a9:cd:9a:d7:71:
43:af:53:c6:be:ff:02:3e:43:84:b5:09:fd:1b:4f:
d6:b5:50:af:36:1f:3d:92:e8:21:b7:15:5e:ae:e9:
5b:ec:d2:55:3c:bf:4a:94:09:b0:2a:28:24:0b:f1:
b1:39:85:30:91:df:57:d3:da:62:c8:e0:7c:e1:4e:
b7:94:60:74:bc:0e:64:28:ff:75:9a:d2:7c:0b:4c:
4f:f1:cb:94:b8:3d:db:94:98:85:de:a0:53:89:8a:
f7:fa:16:80:75:b9:54:a7:8b:b6:3e:67:ed:73:9b:
a8:49:fa:4c:2a:3e:36:72:d3:de:de:60:68:a9:b3:
42:5f:cb:26:64:62:f7:db:e0:7c:4e:cd:7e:c6:73:
11:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:57:DA:18:9D:FB:BA:98:B2:D5:B7:9B:5F:F7:3B:D2:FC:A2:C5:9C
X509v3 Authority Key Identifier:
keyid:1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f4:34:6f:72:bc:ff:00:51:23:5b:a4:26:0b:0f:57:f1:ae:
ec:0e:b4:31:44:78:13:62:b5:f8:e2:2c:28:69:8c:f2:2b:52:
2c:55:ec:55:ce:e7:b4:3e:f5:cd:b3:ad:28:67:77:65:29:64:
88:21:c0:65:37:3b:0b:e3:2c:70:39:15:2c:0a:6d:98:12:8f:
c0:eb:42:3e:e9:13:4e:5a:9b:ff:90:56:38:be:c5:55:db:7b:
4c:b0:10:e6:ce:49:93:71:10:bc:53:74:23:7b:19:8f:cb:a7:
fd:27:ca:82:9d:2f:e7:e0:a3:5a:18:64:d2:ed:3c:d8:f7:9c:
52:d5:5e:99:86:8b:8a:0e:a5:aa:e2:25:30:7b:ac:56:f3:da:
ce:82:79:8e:72:78:ed:ba:6e:10:55:17:a5:65:26:04:0e:94:
93:6c:7d:34:a9:72:f0:13:b8:99:6b:96:15:9b:4a:0e:4a:7d:
b8:b3:e6:7b:7e:9e:3d:8f:32:1c:4a:3e:52:54:11:ca:eb:5f:
0d:04:d4:63:f1:ef:c4:2d:45:44:33:30:cd:8d:9d:40:1c:61:
a2:18:8e:e7:ea:c3:96:23:f0:8b:00:43:ab:b0:bf:f7:1e:53:
df:69:9d:8a:f9:0d:28:3f:3c:32:eb:9a:b9:e2:ef:c5:a8:e9:
0a:44:4e:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJb3CiE9b74EemAznnJzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNjg2ZTk4YWNmMmEzN2JmMmFlYzY5ODA3ZTY5NjQwNjA5
NzljYjgwHhcNMjUxMTExMDkwMTA3WhcNMjUxMTEyMDkwMTA3WjAzMTEwLwYDVQQD
EyhjMjU3ZGExODlkZmJiYTk4YjJkNWI3OWI1ZmY3M2JkMmZjYTJjNTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8vgxnV5x58grsodrU/0DQEovJUq
/QMEwcxJJEcb9vLDczw24sXCryPIIqy5ungrTXIPVUMvG3TZ1U0N0Xi2WZAtzNgT
AcWGFxFME4t/K/1kDrvs0gcTbX7beGqow6JHGmpormoAoWeQYNFk05eTfcVTqc2a
13FDr1PGvv8CPkOEtQn9G0/WtVCvNh89kughtxVerulb7NJVPL9KlAmwKigkC/Gx
OYUwkd9X09piyOB84U63lGB0vA5kKP91mtJ8C0xP8cuUuD3blJiF3qBTiYr3+haA
dblUp4u2Pmftc5uoSfpMKj42ctPe3mBoqbNCX8smZGL32+B8Ts1+xnMRRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJX2hid+7qYstW3m1/3O9L8osWcMB8GA1UdIwQY
MBaAFB1obpis8qN78q7GmAfmlkBgl5y4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hODc3YzgtZTdjYi00NTQwLWJkNDMt
NWFjZGJmNDc0NTQ4LzEvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9hODc3YzgtZTdjYi00NTQwLWJkNDMtNWFjZGJmNDc0NTQ4
LzEvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvQ0b3K8
/wBRI1ukJgsPV/Gu7A60MUR4E2K1+OIsKGmM8itSLFXsVc7ntD71zbOtKGd3ZSlk
iCHAZTc7C+MscDkVLAptmBKPwOtCPukTTlqb/5BWOL7FVdt7TLAQ5s5Jk3EQvFN0
I3sZj8un/SfKgp0v5+CjWhhk0u082PecUtVemYaLig6lquIlMHusVvPazoJ5jnJ4
7bpuEFUXpWUmBA6Uk2x9NKly8BO4mWuWFZtKDkp9uLPme36ePY8yHEo+UlQRyutf
DQTUY/HvxC1FRDMwzY2dQBxhohiO5+rDliPwiwBDq7C/9x5T32mdivkNKD88Muua
ueLvxajpCkRO8g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:52 2025 by rpki-client