Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File: HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier: OjdNOOsMwgsPKytMmVAzR7hqDqEQSQ+eXWPlhrC8U98=
Subject key identifier: 3C:CC:AF:1E:6F:AA:BD:D8:A2:39:04:B3:CE:BA:4E:2C:2E:F1:3A:D5
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 019A70A541E49DC070E7C8BAA5AB4AAE7873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number: 16CE
Signing time: Tue 11 Nov 2025 02:01:09 +0000
Manifest this update: Tue 11 Nov 2025 02:01:09 +0000
Manifest next update: Wed 12 Nov 2025 02:01:09 +0000
Files and hashes: 1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: 7uUVDUroaAR3c+mmFSM5LptnBziPsjlmFML6Jydt7YE=)
2: PqAYbce5ZFtorWDJm1IoXprDpjE.roa (hash: tbDVPuUEiQGmvMdLsr4Uj3a9EoVRDD7cfOnaPg9V/Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:41:e4:9d:c0:70:e7:c8:ba:a5:ab:4a:ae:78:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: Nov 11 02:01:09 2025 GMT
Not After : Nov 12 02:01:09 2025 GMT
Subject: CN=3cccaf1e6faabdd8a23904b3ceba4e2c2ef13ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a6:ea:b9:91:1b:41:67:73:0f:97:c3:55:b2:
4b:7a:6e:d8:84:44:21:91:a9:5a:dd:00:52:ce:30:
3d:58:81:21:37:01:87:42:b9:4f:41:7c:42:2a:5f:
ac:65:29:75:42:13:b7:02:b0:d9:b6:b4:22:ec:c2:
ec:bd:c0:c5:d9:6c:9f:26:19:5b:c2:92:de:bb:a3:
8b:2b:a4:85:7a:5f:18:35:af:c4:f5:b6:2f:21:5f:
f4:2a:89:10:74:70:b6:f9:22:78:53:21:c8:aa:1c:
ee:83:8d:41:dd:d2:4b:cb:08:8e:4e:87:15:76:f8:
de:d0:72:91:e6:8f:c3:46:c2:76:79:ef:ea:96:c7:
56:73:94:a2:5a:d3:1c:8d:25:89:44:b4:96:9e:49:
30:60:ab:53:ae:e4:7f:e3:4f:be:f3:38:01:4c:54:
b7:d5:4e:42:18:47:83:96:e6:17:60:0f:40:3b:d0:
e6:be:28:c4:04:5a:da:09:b4:15:39:63:72:53:8b:
3e:73:ca:de:d3:4d:5c:4d:36:ee:79:85:ff:71:48:
48:b7:dc:b5:93:6b:e1:5f:0a:56:23:87:da:5b:bc:
d5:f1:1f:99:7f:6e:ab:fd:04:3d:20:d3:ee:aa:bf:
de:86:ec:71:51:fe:36:89:8b:3e:a7:d3:81:18:94:
eb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CC:AF:1E:6F:AA:BD:D8:A2:39:04:B3:CE:BA:4E:2C:2E:F1:3A:D5
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5d:98:b1:70:42:e4:e0:19:b1:50:a8:29:49:d6:b7:9a:51:
ce:c4:d2:59:6c:93:25:ad:ce:c5:b5:8a:4a:63:49:a4:89:99:
c1:2b:c4:aa:2a:89:4e:10:14:c6:b3:4b:a6:d7:9a:f7:5d:f3:
7e:f3:ed:83:f8:1a:fc:df:43:fb:c1:ce:57:2a:6c:e4:6e:34:
ed:3d:e7:ba:48:38:da:3d:9a:b1:c0:73:09:a5:9c:00:70:2f:
6a:5a:0b:b7:36:c1:4b:79:0b:b2:c4:fe:fa:d3:bf:51:14:59:
8e:b2:2b:b3:48:97:90:08:21:ac:59:69:3f:09:7f:51:a8:c2:
c9:fb:5b:e2:62:94:ac:5e:28:61:1e:c9:bc:86:2b:ed:58:c6:
a5:65:ac:da:86:19:3a:e6:d5:5a:bb:05:79:fe:de:35:47:8e:
ee:04:7c:7d:b1:00:a9:ba:0e:74:71:99:85:92:1f:a2:7a:2e:
03:d1:27:e8:f3:5d:6f:aa:07:75:12:42:a7:95:ab:f5:94:67:
ee:19:9e:c5:68:34:3e:7d:6f:af:de:eb:f9:44:38:e7:6b:ca:
78:7a:17:8e:db:10:28:34:77:a8:15:8a:43:53:00:ef:5d:2b:
0d:d3:02:b6:9a:8e:97:39:c7:74:4e:c4:7e:90:b3:7c:74:93:
51:86:17:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpUHkncBw58i6patKrnhzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNGU5NTkyMDBhZWE4ZmI5MjkxNThiNzNlOGMwZTY5YTg4
ZGM1ZTkwHhcNMjUxMTExMDIwMTA5WhcNMjUxMTEyMDIwMTA5WjAzMTEwLwYDVQQD
EygzY2NjYWYxZTZmYWFiZGQ4YTIzOTA0YjNjZWJhNGUyYzJlZjEzYWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKbquZEbQWdzD5fDVbJLem7YhEQh
kala3QBSzjA9WIEhNwGHQrlPQXxCKl+sZSl1QhO3ArDZtrQi7MLsvcDF2WyfJhlb
wpLeu6OLK6SFel8YNa/E9bYvIV/0KokQdHC2+SJ4UyHIqhzug41B3dJLywiOTocV
dvje0HKR5o/DRsJ2ee/qlsdWc5SiWtMcjSWJRLSWnkkwYKtTruR/40++8zgBTFS3
1U5CGEeDluYXYA9AO9DmvijEBFraCbQVOWNyU4s+c8re001cTTbueYX/cUhIt9y1
k2vhXwpWI4faW7zV8R+Zf26r/QQ9INPuqr/ehuxxUf42iYs+p9OBGJTrUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzMrx5vqr3YojkEs866Tiwu8TrVMB8GA1UdIwQY
MBaAFB1OlZIArqj7kpFYtz6MDmmojcXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wNGQzNjQtNTYwZi00YjM2LThmMmEt
MmI1MzZjZjdiODI1LzEvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wNGQzNjQtNTYwZi00YjM2LThmMmEtMmI1MzZjZjdiODI1
LzEvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY12YsXBC
5OAZsVCoKUnWt5pRzsTSWWyTJa3OxbWKSmNJpImZwSvEqiqJThAUxrNLptea913z
fvPtg/ga/N9D+8HOVyps5G407T3nukg42j2ascBzCaWcAHAvaloLtzbBS3kLssT+
+tO/URRZjrIrs0iXkAghrFlpPwl/UajCyftb4mKUrF4oYR7JvIYr7VjGpWWs2oYZ
OubVWrsFef7eNUeO7gR8fbEAqboOdHGZhZIfonouA9En6PNdb6oHdRJCp5Wr9ZRn
7hmexWg0Pn1vr97r+UQ452vKeHoXjtsQKDR3qBWKQ1MA710rDdMCtpqOlznHdE7E
fpCzfHSTUYYX2Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:29 2025 by rpki-client