Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
File: H5TRopzOJhU7k0-0fC7iFnS7hcs.mft (raw, json)
Hash identifier: b7lS5Z8GUEagZHAJIk1ADr3ZYes1X/RWXlB2HuRK088=
Subject key identifier: 36:5A:8A:4E:D0:11:42:C5:3D:4C:2A:5D:2B:E0:F4:77:AA:46:93:05
Authority key identifier: 1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
Certificate issuer: /CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Certificate serial: 019A7225A2A5E16B3AD90F2A776C0443FD70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
Manifest number: 13CA
Signing time: Tue 11 Nov 2025 09:01:00 +0000
Manifest this update: Tue 11 Nov 2025 09:01:00 +0000
Manifest next update: Wed 12 Nov 2025 09:01:00 +0000
Files and hashes: 1: H5TRopzOJhU7k0-0fC7iFnS7hcs.crl (hash: 4u41LY83W4AygDoRx1beFNy2FqG4UTIBQL/dn6Gmx78=)
2: YYH7gX5PCoeeZlfZBkDnE5fZPGw.roa (hash: UwEIySf0ujQ0bIXU2dedyQ3b/IuoBDp7UIw7LsZq4qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a2:a5:e1:6b:3a:d9:0f:2a:77:6c:04:43:fd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Validity
Not Before: Nov 11 09:01:00 2025 GMT
Not After : Nov 12 09:01:00 2025 GMT
Subject: CN=365a8a4ed01142c53d4c2a5d2be0f477aa469305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:32:57:4e:e9:0f:ca:80:e4:e6:44:90:53:
e2:2f:c7:39:de:a9:46:40:d6:93:5f:c1:fd:c5:94:
85:43:9b:23:10:b8:71:07:52:a2:8f:2d:20:c2:83:
aa:80:f9:de:90:52:0e:ea:02:d6:1b:3f:94:07:1d:
01:bb:15:de:de:69:eb:c6:e2:39:08:b8:45:e3:3d:
b5:ee:0b:b0:4f:f9:34:5e:32:fa:c8:24:2c:11:4c:
14:c2:59:0e:e0:38:78:d4:1a:43:91:78:62:48:c9:
b3:89:50:d6:c9:cd:90:28:bc:5c:27:07:b3:56:8d:
8b:4e:26:99:a7:39:d1:af:01:ac:c3:cf:f3:f5:1c:
45:4d:55:d6:8c:21:36:94:e9:f0:98:91:df:7b:c1:
48:05:6f:27:2b:51:de:5c:79:f8:a8:6d:2c:5a:ba:
29:ac:14:8d:2b:32:26:32:24:f5:e2:6b:91:99:b8:
48:ee:a1:eb:b3:6c:88:31:5d:bf:1c:8a:b4:3c:06:
df:77:69:ed:69:ab:bd:48:81:2c:7b:58:ad:6c:36:
17:07:94:59:74:71:37:e3:0e:40:d4:94:d8:36:88:
e6:9c:70:64:b9:13:34:f1:f1:e5:09:ca:92:9d:fd:
bc:30:96:be:99:bd:7a:96:50:ff:4d:0b:31:c1:24:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5A:8A:4E:D0:11:42:C5:3D:4C:2A:5D:2B:E0:F4:77:AA:46:93:05
X509v3 Authority Key Identifier:
keyid:1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2d:a0:d5:6d:ec:d6:87:77:ad:1a:20:2f:5e:81:4a:3c:21:
db:3f:23:43:ab:2a:fc:f8:4c:b4:98:37:74:05:0a:61:a3:66:
ae:6b:20:ab:33:82:94:52:0a:7a:50:b5:ec:b8:01:52:27:85:
7c:6e:9b:95:f9:1f:ee:54:47:0b:26:4b:09:aa:b8:a9:07:86:
58:24:ad:3f:2d:da:42:59:d4:5f:7c:72:f0:1f:aa:32:e7:5b:
22:56:54:b4:14:94:54:7f:3c:06:35:75:b5:1c:82:ec:7c:e5:
22:40:d7:ac:f8:e4:50:ff:f4:af:76:dc:20:19:05:83:84:5c:
35:0b:0e:18:8f:17:5f:c7:75:9d:1c:ef:57:9b:dc:7b:e8:22:
37:9e:ba:a9:e6:f2:71:12:c6:45:0a:35:8e:da:5d:de:f8:3f:
1d:a1:b4:81:da:11:9c:37:6a:e5:b5:08:94:d2:bc:57:bc:0e:
d9:b5:b5:01:ea:43:16:e6:20:6a:fc:f0:ac:3f:b6:b4:f8:69:
c8:cf:ac:f8:4a:c2:af:35:84:e4:f8:61:30:89:f6:92:99:c9:
8d:23:04:3f:99:b0:eb:c2:38:6d:a1:79:38:2e:be:7c:16:e7:
a1:61:1b:b3:73:31:dc:3c:d5:a4:49:bf:0d:fd:e0:93:35:7e:
d5:41:1b:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJaKl4Ws62Q8qd2wEQ/1wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOTRkMWEyOWNjZTI2MTUzYjkzNGZiNDdjMmVlMjE2NzRi
Yjg1Y2IwHhcNMjUxMTExMDkwMTAwWhcNMjUxMTEyMDkwMTAwWjAzMTEwLwYDVQQD
EygzNjVhOGE0ZWQwMTE0MmM1M2Q0YzJhNWQyYmUwZjQ3N2FhNDY5MzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM4yV07pD8qA5OZEkFPiL8c53qlG
QNaTX8H9xZSFQ5sjELhxB1Kijy0gwoOqgPnekFIO6gLWGz+UBx0BuxXe3mnrxuI5
CLhF4z217guwT/k0XjL6yCQsEUwUwlkO4Dh41BpDkXhiSMmziVDWyc2QKLxcJwez
Vo2LTiaZpznRrwGsw8/z9RxFTVXWjCE2lOnwmJHfe8FIBW8nK1HeXHn4qG0sWrop
rBSNKzImMiT14muRmbhI7qHrs2yIMV2/HIq0PAbfd2ntaau9SIEse1itbDYXB5RZ
dHE34w5A1JTYNojmnHBkuRM08fHlCcqSnf28MJa+mb16llD/TQsxwSQwyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZaik7QEULFPUwqXSvg9HeqRpMFMB8GA1UdIwQY
MBaAFB+U0aKcziYVO5NPtHwu4hZ0u4XLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yY2I2M2YtMTYxMy00NTliLTgxMTUt
NTU0Y2FiYjlhZDA1LzEvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8yY2I2M2YtMTYxMy00NTliLTgxMTUtNTU0Y2FiYjlhZDA1
LzEvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZi2g1W3s
1od3rRogL16BSjwh2z8jQ6sq/PhMtJg3dAUKYaNmrmsgqzOClFIKelC17LgBUieF
fG6blfkf7lRHCyZLCaq4qQeGWCStPy3aQlnUX3xy8B+qMudbIlZUtBSUVH88BjV1
tRyC7HzlIkDXrPjkUP/0r3bcIBkFg4RcNQsOGI8XX8d1nRzvV5vce+giN566qeby
cRLGRQo1jtpd3vg/HaG0gdoRnDdq5bUIlNK8V7wO2bW1AepDFuYgavzwrD+2tPhp
yM+s+ErCrzWE5PhhMIn2kpnJjSMEP5mw68I4baF5OC6+fBbnoWEbs3Mx3DzVpEm/
Df3gkzV+1UEb3g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:28:33 2025 by rpki-client