Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier: EFhyuAy5ozQ5/2tZ6GLzB33OmkcmOL2ANBfZHAJk0OY=
Subject key identifier: D3:71:15:B6:F1:05:02:68:AD:4E:80:2B:EF:28:73:83:C5:19:28:AE
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial: 019A44708B280ABA573B3BE81E80F6A78BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number: 1709
Signing time: Sun 02 Nov 2025 12:00:17 +0000
Manifest this update: Sun 02 Nov 2025 12:00:17 +0000
Manifest next update: Mon 03 Nov 2025 12:00:17 +0000
Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: aYTCw38gD1YbBIT5JRwG0cxNziPzJZN0DegQuEnK2RQ=)
2: NLCwkRuxMAVqIE4s2Awhm1yzmmc.roa (hash: 7DV7f34yFMiHA1iSUlpq7Rg0BJ76/rrx0KnPa1dhIeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:44:70:8b:28:0a:ba:57:3b:3b:e8:1e:80:f6:a7:8b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Validity
Not Before: Nov 2 12:00:17 2025 GMT
Not After : Nov 3 12:00:17 2025 GMT
Subject: CN=d37115b6f1050268ad4e802bef287383c51928ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:29:5e:57:b8:8c:83:25:83:fe:df:0c:ae:
d7:e9:d0:f2:24:df:b3:99:01:bb:a0:58:88:6d:37:
9b:32:55:fe:8b:9e:a7:81:23:8a:cc:83:04:47:29:
1b:ae:7c:79:12:93:1f:9f:51:95:03:bc:9a:f9:c0:
8e:09:9a:69:51:13:22:db:f8:f2:27:ca:f7:dd:7e:
dd:68:57:a5:ea:c4:d6:55:b7:65:dc:c1:7a:d1:9d:
5d:bc:2b:f8:58:29:f4:ee:59:cb:d7:25:72:f4:d0:
35:b6:38:43:47:4c:d4:0a:d4:36:5f:af:a4:26:4b:
01:c9:ec:36:c1:42:2b:17:96:85:e5:6d:50:2e:f1:
1b:1c:6f:5c:0a:cc:6e:33:cd:b8:d1:32:1a:09:af:
c2:d5:62:c8:2a:d5:09:c7:b2:8f:dc:b1:a3:bd:2d:
53:87:11:be:f2:a9:c3:fa:6f:33:74:22:9a:a7:ce:
c8:4c:50:25:72:46:28:88:49:78:59:11:04:ef:47:
3e:3f:84:37:b0:e9:d9:fb:ef:05:8b:96:67:df:16:
49:30:29:fe:f8:c5:92:58:67:50:39:ae:3c:57:4f:
71:46:19:b5:02:91:a8:f2:85:ae:ec:46:c5:20:64:
3f:a4:67:96:36:c7:5a:4c:4e:d9:c0:a0:e7:51:1c:
53:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:71:15:B6:F1:05:02:68:AD:4E:80:2B:EF:28:73:83:C5:19:28:AE
X509v3 Authority Key Identifier:
keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:37:33:49:cc:c9:ab:eb:e3:ae:4a:79:a7:cf:d6:5c:28:e4:
7f:dc:48:4d:6b:6e:cc:15:5a:96:ac:0a:9c:b0:60:db:48:1f:
e2:2a:ca:c6:59:a4:5c:24:cb:ef:3c:cd:d8:9b:f2:e2:aa:38:
f6:ed:c0:f4:6a:99:8f:57:e0:71:47:ac:08:8e:94:63:17:39:
eb:ee:de:bf:56:62:c4:6b:4b:7b:9f:ba:b2:43:e0:62:c4:e3:
81:52:53:d7:b6:d3:b4:3c:7a:8b:85:89:a3:05:f6:5f:4d:74:
de:d7:af:0c:30:1e:7e:96:a3:8e:01:1d:b6:78:62:40:ca:b0:
f8:9e:a5:21:42:ca:da:75:ef:18:6e:b7:e9:21:4c:ba:e5:5e:
96:7c:91:e6:48:cf:d5:b6:ae:ad:a0:1b:20:33:f5:2e:fa:32:
c2:04:d0:1f:1f:2b:fd:c0:09:8c:00:07:44:ba:20:78:70:a3:
b5:aa:6a:79:be:2e:ee:7e:27:14:c4:fd:3f:ca:02:ac:7a:2c:
01:a3:dd:21:23:98:dc:28:64:c3:8a:5c:08:44:7c:36:d8:d2:
e1:b8:8b:37:80:16:e1:29:f2:7b:4e:8f:bf:b6:42:51:d6:3a:
b5:46:35:db:c6:79:11:67:c4:b0:ae:79:36:b9:dd:9e:c9:70:
7c:6e:8d:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpEcIsoCrpXOzvoHoD2p4u0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMGUyMTZlNTc5MWUxYjAxZGEyMWJjYWYzMzAwNDFhZDcy
YTdlNmMwHhcNMjUxMTAyMTIwMDE3WhcNMjUxMTAzMTIwMDE3WjAzMTEwLwYDVQQD
EyhkMzcxMTViNmYxMDUwMjY4YWQ0ZTgwMmJlZjI4NzM4M2M1MTkyOGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NcpXle4jIMlg/7fDK7X6dDyJN+z
mQG7oFiIbTebMlX+i56ngSOKzIMERykbrnx5EpMfn1GVA7ya+cCOCZppURMi2/jy
J8r33X7daFel6sTWVbdl3MF60Z1dvCv4WCn07lnL1yVy9NA1tjhDR0zUCtQ2X6+k
JksByew2wUIrF5aF5W1QLvEbHG9cCsxuM8240TIaCa/C1WLIKtUJx7KP3LGjvS1T
hxG+8qnD+m8zdCKap87ITFAlckYoiEl4WREE70c+P4Q3sOnZ++8Fi5Zn3xZJMCn+
+MWSWGdQOa48V09xRhm1ApGo8oWu7EbFIGQ/pGeWNsdaTE7ZwKDnURxTNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNxFbbxBQJorU6AK+8oc4PFGSiuMB8GA1UdIwQY
MBaAFBwOIW5XkeGwHaIbyvMwBBrXKn5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEt
MmMwZmM2YmUxZTU3LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEtMmMwZmM2YmUxZTU3
LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtzczSczJ
q+vjrkp5p8/WXCjkf9xITWtuzBValqwKnLBg20gf4irKxlmkXCTL7zzN2Jvy4qo4
9u3A9GqZj1fgcUesCI6UYxc56+7ev1ZixGtLe5+6skPgYsTjgVJT17bTtDx6i4WJ
owX2X0103tevDDAefpajjgEdtnhiQMqw+J6lIULK2nXvGG636SFMuuVelnyR5kjP
1bauraAbIDP1LvoywgTQHx8r/cAJjAAHRLogeHCjtapqeb4u7n4nFMT9P8oCrHos
AaPdISOY3Chkw4pcCER8NtjS4biLN4AW4Snye06Pv7ZCUdY6tUY128Z5EWfEsK55
NrndnslwfG6Nxg==
-----END CERTIFICATE-----
Generated at Sun Nov 2 14:14:52 2025 by rpki-client