Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
File: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft (raw, json)
Hash identifier: keq+726EuotXtphpxLXOrKfrF69zAPQlnQ9nzQVEvrU=
Subject key identifier: 62:92:84:70:E4:5B:D6:EA:65:67:B3:6B:86:C6:99:6F:47:26:B8:FC
Authority key identifier: 1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
Certificate issuer: /CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Certificate serial: 019A2D0D6A240AF3C3238F0246CD5617C22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 23:00:45 +0000
Manifest this update: Tue 28 Oct 2025 23:00:45 +0000
Manifest next update: Wed 29 Oct 2025 23:00:45 +0000
Files and hashes: 1: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl (hash: btCR5dS28RFHoZNgECqOLgUFRzjtrSlPuXrX2ODW/AA=)
2: oyXaOgxI1N0gL-mT4wAa6DfHmfQ.roa (hash: 8sggfPG1wysa3rNvbgw+mJfeUSqlumTtEBYr1asLE8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:0d:6a:24:0a:f3:c3:23:8f:02:46:cd:56:17:c2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Validity
Not Before: Oct 28 23:00:45 2025 GMT
Not After : Oct 29 23:00:45 2025 GMT
Subject: CN=62928470e45bd6ea6567b36b86c6996f4726b8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:e3:06:5e:f8:49:c0:8d:4e:4f:28:b5:80:
03:b3:ee:3d:63:40:4f:6e:e0:29:e5:7d:dd:9d:cb:
ce:7b:a8:82:47:08:9b:91:0b:d8:14:14:28:b6:97:
6b:cc:80:97:73:a4:2e:cb:a9:b3:fb:a7:17:21:a3:
8a:e3:3e:85:3e:a6:4b:a3:8b:9c:8d:a6:87:bf:a9:
d0:ca:23:2b:61:02:ff:41:4e:4e:47:8e:89:4f:ea:
29:91:3b:db:50:4d:f8:71:1c:91:55:4b:71:42:f1:
92:27:26:cf:04:70:6c:98:88:82:70:8e:23:b5:64:
a0:56:49:2e:3d:75:22:dd:b2:77:61:ea:bc:59:91:
cc:df:47:5a:db:db:7f:81:28:cc:90:6b:31:4d:03:
d9:05:ff:fd:8e:b8:3b:b3:c3:51:53:77:f5:15:ea:
95:44:69:52:17:fe:93:a2:03:62:d0:30:8e:8c:47:
d7:93:1c:33:1a:dd:b8:c7:52:69:52:d1:67:a6:bb:
8a:dc:f5:98:41:43:99:95:6e:3b:b1:94:3b:fc:12:
21:b0:d1:a9:e9:54:95:5b:69:40:dd:a6:70:b0:da:
32:ed:fc:f0:7a:22:43:a0:d9:78:e3:13:c3:b9:84:
12:c5:b2:5e:c5:4c:f8:5a:86:6b:34:18:29:8d:0e:
9b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:92:84:70:E4:5B:D6:EA:65:67:B3:6B:86:C6:99:6F:47:26:B8:FC
X509v3 Authority Key Identifier:
keyid:1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d4:73:b6:90:42:f3:14:46:33:ad:b9:81:8c:c7:38:a3:e9:
64:fb:67:de:36:aa:09:0d:b7:72:1c:ae:a0:91:2f:ae:80:05:
d7:f2:76:31:1d:ef:54:be:07:c8:82:e0:0b:87:28:3e:95:e9:
7d:5b:0c:c1:5e:c2:35:52:3a:09:ba:3e:9e:fd:79:21:28:14:
63:d4:8e:71:45:98:63:35:80:b7:78:5a:b4:37:8a:85:e6:b7:
63:be:9c:b0:d4:5d:ba:47:e8:79:c4:ea:fd:52:d8:4f:38:42:
27:88:cc:d4:63:50:e4:1d:d2:73:d7:6a:aa:2d:c0:fe:6f:20:
03:bf:69:34:31:a2:8e:28:53:ad:94:6c:74:5d:6d:77:88:ba:
7d:8a:a5:36:38:a3:92:d4:48:f2:9f:23:61:8e:96:d2:c0:2f:
83:6f:20:28:da:5d:f0:38:58:14:27:f6:94:d6:74:f8:0a:aa:
b6:8d:0d:42:82:8a:7d:45:67:4e:d4:4e:0a:5a:8c:2f:e9:9b:
c2:d7:ac:50:3d:6c:4e:8c:c2:2b:b5:b1:15:10:39:6e:a2:cc:
01:10:e2:2d:e0:fc:17:d7:1e:80:0e:ec:b4:9b:99:4c:e5:d6:
7c:a7:6d:d3:2c:60:72:c6:79:70:e6:6b:1c:62:9b:01:6d:40:
41:f3:47:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZotDWokCvPDI48CRs1WF8IqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNjg4Zjk4NTdkOWU0NDBjMTA1OGRjODk1OWU0OWY4YjMx
ODNmNjEwHhcNMjUxMDI4MjMwMDQ1WhcNMjUxMDI5MjMwMDQ1WjAzMTEwLwYDVQQD
Eyg2MjkyODQ3MGU0NWJkNmVhNjU2N2IzNmI4NmM2OTk2ZjQ3MjZiOGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP/jBl74ScCNTk8otYADs+49Y0BP
buAp5X3dncvOe6iCRwibkQvYFBQotpdrzICXc6Quy6mz+6cXIaOK4z6FPqZLo4uc
jaaHv6nQyiMrYQL/QU5OR46JT+opkTvbUE34cRyRVUtxQvGSJybPBHBsmIiCcI4j
tWSgVkkuPXUi3bJ3Yeq8WZHM30da29t/gSjMkGsxTQPZBf/9jrg7s8NRU3f1FeqV
RGlSF/6TogNi0DCOjEfXkxwzGt24x1JpUtFnpruK3PWYQUOZlW47sZQ7/BIhsNGp
6VSVW2lA3aZwsNoy7fzweiJDoNl44xPDuYQSxbJexUz4WoZrNBgpjQ6bWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKShHDkW9bqZWeza4bGmW9HJrj8MB8GA1UdIwQY
MBaAFB9oj5hX2eRAwQWNyJWeSfizGD9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNTc3ODAtNTJlOC00Nzc3LThhMjUt
MDIxYzJlMDczNWIxLzEvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wNTc3ODAtNTJlOC00Nzc3LThhMjUtMDIxYzJlMDczNWIx
LzEvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdRztpBC
8xRGM625gYzHOKPpZPtn3jaqCQ23chyuoJEvroAF1/J2MR3vVL4HyILgC4coPpXp
fVsMwV7CNVI6Cbo+nv15ISgUY9SOcUWYYzWAt3hatDeKhea3Y76csNRdukfoecTq
/VLYTzhCJ4jM1GNQ5B3Sc9dqqi3A/m8gA79pNDGijihTrZRsdF1td4i6fYqlNjij
ktRI8p8jYY6W0sAvg28gKNpd8DhYFCf2lNZ0+Aqqto0NQoKKfUVnTtROClqML+mb
wtesUD1sTozCK7WxFRA5bqLMARDiLeD8F9cegA7stJuZTOXWfKdt0yxgcsZ5cOZr
HGKbAW1AQfNHpw==
-----END CERTIFICATE-----
Generated at Wed Oct 29 05:32:20 2025 by rpki-client