Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
File: HnTfStSP8hGgY1s38DeXeBnNQnY.mft (raw, json)
Hash identifier: QYgrP3DsIhaQXa+vE0Gb4H0eUZzOMHQhZLPNuBoD3GM=
Subject key identifier: 5E:45:52:C1:DE:E4:6E:37:F5:20:5C:DF:50:C3:96:E4:01:14:EE:CB
Authority key identifier: 1E:74:DF:4A:D4:8F:F2:11:A0:63:5B:37:F0:37:97:78:19:CD:42:76
Certificate issuer: /CN=1e74df4ad48ff211a0635b37f037977819cd4276
Certificate serial: 019A72CA87740FCB2152D0448C3678E8CCC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
Manifest number: 5A
Signing time: Tue 11 Nov 2025 12:01:06 +0000
Manifest this update: Tue 11 Nov 2025 12:01:06 +0000
Manifest next update: Wed 12 Nov 2025 12:01:06 +0000
Files and hashes: 1: 59VNL7dQbZFmm2AJXFZqzAtkfl8.roa (hash: p9FKGUjQIc96y5oPMqPml+M+S9V4gJIpDfcIYz2/WEw=)
2: HnTfStSP8hGgY1s38DeXeBnNQnY.crl (hash: 3bj1dGSibGVwheNi7/t3YEEC1srZzYvR/RPZ0djiAVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:87:74:0f:cb:21:52:d0:44:8c:36:78:e8:cc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e74df4ad48ff211a0635b37f037977819cd4276
Validity
Not Before: Nov 11 12:01:06 2025 GMT
Not After : Nov 12 12:01:06 2025 GMT
Subject: CN=5e4552c1dee46e37f5205cdf50c396e40114eecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:42:3e:ea:39:5b:df:2f:33:6e:a1:3b:64:
b7:6c:73:00:bd:21:21:ed:c2:43:1d:ea:02:32:5e:
3c:c5:5f:d7:65:ee:99:f3:e7:cf:fe:f4:2f:4c:a4:
a0:38:67:6e:b0:84:fa:1c:90:c8:6b:f9:35:9c:31:
91:86:bc:3e:63:e1:27:0a:99:89:74:84:e0:92:fb:
22:90:a2:af:e6:36:86:6f:30:56:f0:41:5c:21:92:
00:25:05:66:9a:e6:4c:a1:ee:d9:ce:95:3d:ff:14:
d6:45:4f:c9:61:f0:31:2c:a9:8b:d7:fa:f3:df:f4:
da:10:7e:08:a7:8c:9c:61:42:5f:c2:4b:5e:8f:04:
c1:c9:63:d8:38:e1:da:56:ca:5b:b5:bf:ae:81:77:
46:9c:22:f7:7a:4c:1a:39:dc:e9:cc:4e:ab:52:4c:
c2:8b:10:ad:30:88:12:cb:f5:b7:e6:e3:3a:00:05:
ef:27:44:4a:1a:15:55:9a:1a:25:55:29:8a:e6:e8:
23:b1:18:4a:c8:80:24:82:96:70:18:1a:0f:c5:ae:
8c:eb:a1:9b:37:79:4c:9d:f4:09:46:23:2a:be:b2:
2d:15:6e:2a:bd:8d:57:52:16:5e:68:d1:e6:5e:b6:
70:55:14:e3:ec:77:17:90:1f:85:6b:fa:81:8a:aa:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:45:52:C1:DE:E4:6E:37:F5:20:5C:DF:50:C3:96:E4:01:14:EE:CB
X509v3 Authority Key Identifier:
keyid:1E:74:DF:4A:D4:8F:F2:11:A0:63:5B:37:F0:37:97:78:19:CD:42:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:20:24:49:3f:8a:8c:34:2c:11:d1:f7:69:4f:92:29:2e:80:
c9:61:3e:28:09:f5:e4:50:87:1e:6c:99:04:52:3f:34:fb:89:
77:6e:26:c3:b7:7c:75:01:67:35:ff:9f:de:8f:56:5d:f2:c1:
14:1a:f7:d4:5d:01:1e:c8:50:99:d8:df:f4:40:bd:9f:89:cc:
6d:a3:c6:85:a7:eb:70:01:ae:a1:20:96:06:2f:99:fd:15:3c:
e2:bf:eb:31:7a:34:39:f7:48:07:51:16:00:99:d9:38:fe:82:
54:c3:2e:c5:9f:3c:f1:89:07:46:3f:87:94:bc:37:15:18:8c:
41:fe:b1:bb:fe:a2:2e:6b:ea:e5:cb:7a:1a:06:af:93:f9:26:
2f:fb:1c:07:16:ee:cb:16:ca:ff:55:a6:b9:9e:3b:85:b0:6c:
77:58:c2:16:0b:a3:e6:9e:df:61:b2:ac:83:66:42:5c:4f:67:
be:38:d0:82:df:8c:72:1a:d7:ec:29:9a:f0:ae:8c:63:50:48:
a9:3e:12:79:99:f5:7f:f9:dc:23:19:a8:73:e2:76:c6:5a:ef:
45:33:d2:bf:36:27:38:b0:32:14:8a:c5:f1:9e:bc:b2:62:0d:
97:87:c0:6a:40:cd:ca:27:e7:75:0e:45:68:80:9e:eb:00:ab:
bf:62:e7:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyod0D8shUtBEjDZ46MzFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNzRkZjRhZDQ4ZmYyMTFhMDYzNWIzN2YwMzc5Nzc4MTlj
ZDQyNzYwHhcNMjUxMTExMTIwMTA2WhcNMjUxMTEyMTIwMTA2WjAzMTEwLwYDVQQD
Eyg1ZTQ1NTJjMWRlZTQ2ZTM3ZjUyMDVjZGY1MGMzOTZlNDAxMTRlZWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMxCPuo5W98vM26hO2S3bHMAvSEh
7cJDHeoCMl48xV/XZe6Z8+fP/vQvTKSgOGdusIT6HJDIa/k1nDGRhrw+Y+EnCpmJ
dITgkvsikKKv5jaGbzBW8EFcIZIAJQVmmuZMoe7ZzpU9/xTWRU/JYfAxLKmL1/rz
3/TaEH4Ip4ycYUJfwktejwTByWPYOOHaVspbtb+ugXdGnCL3ekwaOdzpzE6rUkzC
ixCtMIgSy/W35uM6AAXvJ0RKGhVVmholVSmK5ugjsRhKyIAkgpZwGBoPxa6M66Gb
N3lMnfQJRiMqvrItFW4qvY1XUhZeaNHmXrZwVRTj7HcXkB+Fa/qBiqpoPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5FUsHe5G439SBc31DDluQBFO7LMB8GA1UdIwQY
MBaAFB5030rUj/IRoGNbN/A3l3gZzUJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG5UZlN0U1A4aEdnWTFzMzhEZVhlQm5OUW5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8wMTBlOTUtNDliNy00ZWRkLThkMGQt
Mzk1ZDRlZWM4MzFlLzEvSG5UZlN0U1A4aEdnWTFzMzhEZVhlQm5OUW5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8wMTBlOTUtNDliNy00ZWRkLThkMGQtMzk1ZDRlZWM4MzFl
LzEvSG5UZlN0U1A4aEdnWTFzMzhEZVhlQm5OUW5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCAkST+K
jDQsEdH3aU+SKS6AyWE+KAn15FCHHmyZBFI/NPuJd24mw7d8dQFnNf+f3o9WXfLB
FBr31F0BHshQmdjf9EC9n4nMbaPGhafrcAGuoSCWBi+Z/RU84r/rMXo0OfdIB1EW
AJnZOP6CVMMuxZ888YkHRj+HlLw3FRiMQf6xu/6iLmvq5ct6Ggavk/kmL/scBxbu
yxbK/1WmuZ47hbBsd1jCFguj5p7fYbKsg2ZCXE9nvjjQgt+MchrX7Cma8K6MY1BI
qT4SeZn1f/ncIxmoc+J2xlrvRTPSvzYnOLAyFIrF8Z68smINl4fAakDNyifndQ5F
aICe6wCrv2LnCg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:34 2025 by rpki-client