Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
File: hjT51JOsy2gJAPRHofLJ97KzWKw.mft (raw, json)
Hash identifier: bLDLHXkkpZBQVcc2XCo1ptdVP+mVGmsJ+qmR8oj93ww=
Subject key identifier: 5A:68:3B:85:7C:A4:59:D9:B7:E3:45:64:B8:E7:AA:34:0E:CF:1E:70
Authority key identifier: 86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
Certificate issuer: /CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Certificate serial: 019A2855EA27BA5A0269CA3172F61C6A3404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
Manifest number: 16F7
Signing time: Tue 28 Oct 2025 01:01:50 +0000
Manifest this update: Tue 28 Oct 2025 01:01:50 +0000
Manifest next update: Wed 29 Oct 2025 01:01:50 +0000
Files and hashes: 1: hjT51JOsy2gJAPRHofLJ97KzWKw.crl (hash: UVHPGoOIrpWL9NzXcWjVbTVXZectUHoxQyKeTHDKBno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:ea:27:ba:5a:02:69:ca:31:72:f6:1c:6a:34:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Validity
Not Before: Oct 28 01:01:50 2025 GMT
Not After : Oct 29 01:01:50 2025 GMT
Subject: CN=5a683b857ca459d9b7e34564b8e7aa340ecf1e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b9:2f:0e:12:0b:96:08:11:0b:67:a2:1f:03:
f0:72:cb:b8:ae:7b:76:d6:3b:47:c7:de:17:33:a9:
e0:16:51:d7:73:e1:c3:d8:7c:9f:ce:55:f7:64:f9:
11:82:32:d9:e2:dd:cc:b7:36:d1:94:a3:4d:9d:c9:
fc:40:b7:5e:12:43:6d:c3:90:e6:5c:ee:2a:a7:aa:
79:c6:bf:99:22:0c:6c:ea:e4:dd:95:49:e1:90:58:
81:6d:39:c3:81:fd:cf:17:60:a4:f3:93:aa:16:76:
bc:5c:5f:15:7c:36:f1:74:00:71:6c:08:70:6c:b9:
b3:4d:50:fa:2c:44:d2:62:7e:89:f1:b2:54:ac:83:
ab:82:86:56:cb:58:29:2f:ad:8d:27:e7:75:5f:f4:
4c:bc:7b:ee:f0:77:7a:c5:f5:51:fa:26:2c:8b:92:
31:a7:ad:6e:1d:d3:cc:38:93:0e:42:14:6f:0d:33:
c5:f1:ff:c4:78:a6:80:32:08:e1:1a:51:52:c2:38:
ad:2e:fc:98:fd:c9:c9:ab:71:7b:79:fe:75:7c:e5:
ae:06:7d:6c:36:e9:d9:40:32:79:7b:1c:a2:3a:97:
69:5e:fb:24:e8:ed:8c:cd:97:fd:a0:da:39:bb:5d:
6e:8b:fe:fa:18:e6:cf:20:c6:99:17:38:ed:6b:f4:
4c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:68:3B:85:7C:A4:59:D9:B7:E3:45:64:B8:E7:AA:34:0E:CF:1E:70
X509v3 Authority Key Identifier:
keyid:86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9b:76:33:5d:e0:34:15:db:47:a8:e9:b4:4d:5f:33:f8:e2:
54:c5:50:b2:99:0f:64:2c:97:ab:1a:1a:e2:59:64:6e:63:44:
85:7e:72:e2:dd:0c:ff:a8:a0:08:45:0a:7f:69:07:66:c9:83:
d8:28:f7:a6:c6:45:90:00:15:31:7f:a9:0a:2e:77:64:13:9e:
a5:16:3d:6e:a5:87:23:8d:e0:41:0e:60:1e:78:24:4b:9d:e9:
33:1a:33:a2:ae:ff:ca:ec:cf:ed:a6:92:56:38:05:ce:ac:b9:
88:58:89:1d:2a:42:bd:32:60:ba:33:f7:2d:3d:fc:31:50:1e:
ec:41:c0:9e:4f:56:58:c6:74:a5:83:04:c3:dc:a7:16:a8:99:
e7:0b:c1:1e:b2:08:06:ea:43:eb:bd:78:95:ba:00:27:0a:66:
a1:cd:94:88:70:12:0a:52:32:8c:77:2f:c0:51:6e:35:30:e5:
23:44:b1:60:f9:b4:6a:68:6d:1e:3d:2f:d3:5c:03:14:05:cd:
2a:23:59:43:78:0a:0b:47:17:37:35:96:25:eb:38:48:43:7b:
fb:ed:57:51:b8:2a:4b:a7:a8:ab:0c:04:07:11:9a:2b:84:ac:
db:28:dc:5e:99:23:6d:24:08:44:c5:08:77:fd:5a:fb:a8:ce:
54:ba:3e:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZooVeonuloCacoxcvYcajQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MzRmOWQ0OTNhY2NiNjgwOTAwZjQ0N2ExZjJjOWY3YjJi
MzU4YWMwHhcNMjUxMDI4MDEwMTUwWhcNMjUxMDI5MDEwMTUwWjAzMTEwLwYDVQQD
Eyg1YTY4M2I4NTdjYTQ1OWQ5YjdlMzQ1NjRiOGU3YWEzNDBlY2YxZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rkvDhILlggRC2eiHwPwcsu4rnt2
1jtHx94XM6ngFlHXc+HD2HyfzlX3ZPkRgjLZ4t3MtzbRlKNNncn8QLdeEkNtw5Dm
XO4qp6p5xr+ZIgxs6uTdlUnhkFiBbTnDgf3PF2Ck85OqFna8XF8VfDbxdABxbAhw
bLmzTVD6LETSYn6J8bJUrIOrgoZWy1gpL62NJ+d1X/RMvHvu8Hd6xfVR+iYsi5Ix
p61uHdPMOJMOQhRvDTPF8f/EeKaAMgjhGlFSwjitLvyY/cnJq3F7ef51fOWuBn1s
NunZQDJ5exyiOpdpXvsk6O2MzZf9oNo5u11ui/76GObPIMaZFzjta/RMUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpoO4V8pFnZt+NFZLjnqjQOzx5wMB8GA1UdIwQY
MBaAFIY0+dSTrMtoCQD0R6Hyyfeys1isMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGpUNTFKT3N5MmdKQVBSSG9mTEo5N0t6V0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MzAyNTUtYjZlNS00NWZjLWI3NzYt
YjQzMGJkMjFhMjliLzEvaGpUNTFKT3N5MmdKQVBSSG9mTEo5N0t6V0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81MzAyNTUtYjZlNS00NWZjLWI3NzYtYjQzMGJkMjFhMjli
LzEvaGpUNTFKT3N5MmdKQVBSSG9mTEo5N0t6V0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpt2M13g
NBXbR6jptE1fM/jiVMVQspkPZCyXqxoa4llkbmNEhX5y4t0M/6igCEUKf2kHZsmD
2Cj3psZFkAAVMX+pCi53ZBOepRY9bqWHI43gQQ5gHngkS53pMxozoq7/yuzP7aaS
VjgFzqy5iFiJHSpCvTJgujP3LT38MVAe7EHAnk9WWMZ0pYMEw9ynFqiZ5wvBHrII
BupD6714lboAJwpmoc2UiHASClIyjHcvwFFuNTDlI0SxYPm0amhtHj0v01wDFAXN
KiNZQ3gKC0cXNzWWJes4SEN7++1XUbgqS6eoqwwEBxGaK4Ss2yjcXpkjbSQIRMUI
d/1a+6jOVLo+mw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 06:04:55 2025 by rpki-client