Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json)
Hash identifier: XH82Hk7i5PEMRO46FXtrfe6hEP0HCQxNcr0wWHT99sc=
Subject key identifier: 5A:4F:58:BF:BD:DC:57:9F:AB:D3:7D:2E:47:3B:4A:7B:A9:9A:64:92
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 019A7226072A57C18AF92E51F51A0BF75BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
Manifest number: 1699
Signing time: Tue 11 Nov 2025 09:01:25 +0000
Manifest this update: Tue 11 Nov 2025 09:01:25 +0000
Manifest next update: Wed 12 Nov 2025 09:01:25 +0000
Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: 6Otganz5hU8knG8tjxiY4vlKRWOnBpfaOUhXzJgQLxw=)
2: gzmNz0PYWdcLgL6_SHiIcrAToJE.roa (hash: Guzyh0bDeJqFnbpc68wrDXyHWPH3X5psfEh7CAeI44k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:07:2a:57:c1:8a:f9:2e:51:f5:1a:0b:f7:5b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Nov 11 09:01:25 2025 GMT
Not After : Nov 12 09:01:25 2025 GMT
Subject: CN=5a4f58bfbddc579fabd37d2e473b4a7ba99a6492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:d4:42:4b:ce:ce:01:4c:68:a1:73:1e:f9:
93:02:ed:11:b9:cb:a5:0b:d6:e6:11:ec:aa:97:33:
be:ef:9a:aa:47:0c:04:1d:0b:ce:b5:2b:9b:bc:03:
18:92:9e:fb:f1:a1:ed:57:43:5d:bb:7c:8f:3f:a9:
40:0a:4f:06:4d:c3:05:16:18:5c:c3:56:8c:88:a9:
64:a5:d6:0b:de:d4:9b:48:bc:48:e1:7e:6f:8a:82:
92:8a:3e:b3:c5:e1:c4:dd:11:cd:12:bc:ba:e2:dc:
c0:0d:13:fb:50:9f:f4:a8:cc:4e:ef:f8:a0:25:ca:
78:28:48:ed:2f:92:c2:39:ba:98:d5:ff:0e:a7:b9:
2a:99:43:9b:47:88:4b:a5:2e:94:2d:db:ab:18:67:
90:20:53:cf:de:92:fa:53:6e:bf:30:1e:cf:0c:c1:
04:c1:13:3d:a6:d8:43:6f:fb:2e:6b:36:f8:bf:5c:
c0:89:c6:9c:e4:69:34:a6:04:e0:d1:9f:36:01:73:
b9:c9:60:73:81:75:f9:7b:ec:75:cd:c3:6b:cf:e9:
77:14:57:78:51:8f:e3:75:a5:36:f2:6d:bb:a3:9c:
2c:0f:5b:07:ee:37:3e:5d:9b:a0:15:28:df:bc:cb:
d3:d4:ef:00:34:4b:55:eb:76:4c:13:5d:e8:89:07:
06:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4F:58:BF:BD:DC:57:9F:AB:D3:7D:2E:47:3B:4A:7B:A9:9A:64:92
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c3:13:99:a1:02:b2:e9:37:89:8a:ac:35:bb:72:d5:9d:f9:
b0:bc:1f:95:14:46:fa:b2:2e:b7:b4:ac:3f:ef:42:e1:70:e4:
f2:c1:4a:76:a1:54:80:e5:ae:11:e3:de:e8:1c:94:c8:c3:91:
bc:ce:00:1b:54:d9:b1:ed:55:62:99:bb:dc:5a:c8:e3:74:e4:
f6:92:cd:9a:31:2e:00:cf:19:c0:ae:18:92:d2:6c:fb:c7:cb:
44:9f:bb:6e:ee:5c:3e:75:7a:f0:e2:93:53:c0:6b:61:21:87:
b6:22:77:b1:c5:b6:c0:a2:a7:06:67:3a:be:65:98:f2:cf:e8:
e2:a7:b3:62:ea:d9:9a:93:e1:b7:65:ec:96:d1:96:5a:cb:ab:
20:cb:38:e3:5a:11:25:c9:fd:4b:dc:c8:e6:18:3b:ec:4a:b7:
63:3a:6b:84:b1:6a:f2:3b:31:00:b8:d3:e8:1a:da:07:05:f5:
01:d3:5b:fc:68:80:ec:0e:8c:4c:22:e5:40:85:cd:f5:50:57:
cf:74:6c:3a:2e:9b:49:70:7d:72:bc:f8:9f:c0:9b:55:ee:4b:
43:32:61:06:65:70:78:ad:66:77:87:2f:37:1d:51:de:de:0f:
3c:db:db:70:05:b9:f2:f6:2d:ac:fe:41:ed:1b:40:51:a2:ea:
84:0f:61:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJgcqV8GK+S5R9RoL91u8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNDVjYzY5YjRkMWVlMTUxYjUwMjc0NDJmYmJhOTQ0YzI3
NGRmOTcwHhcNMjUxMTExMDkwMTI1WhcNMjUxMTEyMDkwMTI1WjAzMTEwLwYDVQQD
Eyg1YTRmNThiZmJkZGM1NzlmYWJkMzdkMmU0NzNiNGE3YmE5OWE2NDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxTUQkvOzgFMaKFzHvmTAu0Rucul
C9bmEeyqlzO+75qqRwwEHQvOtSubvAMYkp778aHtV0Ndu3yPP6lACk8GTcMFFhhc
w1aMiKlkpdYL3tSbSLxI4X5vioKSij6zxeHE3RHNEry64tzADRP7UJ/0qMxO7/ig
Jcp4KEjtL5LCObqY1f8Op7kqmUObR4hLpS6ULdurGGeQIFPP3pL6U26/MB7PDMEE
wRM9pthDb/suazb4v1zAicac5Gk0pgTg0Z82AXO5yWBzgXX5e+x1zcNrz+l3FFd4
UY/jdaU28m27o5wsD1sH7jc+XZugFSjfvMvT1O8ANEtV63ZME13oiQcGjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpPWL+93Fefq9N9Lkc7SnupmmSSMB8GA1UdIwQY
MBaAFB5FzGm00e4VG1AnRC+7qUTCdN+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGtYTWFiVFI3aFViVUNkRUw3dXBSTUowMzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNDk1MjgtMmFhNC00YTdkLTk4NDUt
YzI0NDNhYTU0N2UyLzEvSGtYTWFiVFI3aFViVUNkRUw3dXBSTUowMzVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNDk1MjgtMmFhNC00YTdkLTk4NDUtYzI0NDNhYTU0N2Uy
LzEvSGtYTWFiVFI3aFViVUNkRUw3dXBSTUowMzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsMTmaEC
suk3iYqsNbty1Z35sLwflRRG+rIut7SsP+9C4XDk8sFKdqFUgOWuEePe6ByUyMOR
vM4AG1TZse1VYpm73FrI43Tk9pLNmjEuAM8ZwK4YktJs+8fLRJ+7bu5cPnV68OKT
U8BrYSGHtiJ3scW2wKKnBmc6vmWY8s/o4qezYurZmpPht2XsltGWWsurIMs441oR
Jcn9S9zI5hg77Eq3YzprhLFq8jsxALjT6BraBwX1AdNb/GiA7A6MTCLlQIXN9VBX
z3RsOi6bSXB9crz4n8CbVe5LQzJhBmVweK1md4cvNx1R3t4PPNvbcAW58vYtrP5B
7RtAUaLqhA9hJg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:19 2025 by rpki-client