Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
File: hESS25y7Cg62v2nCXIaWH0kYPJs.mft (raw, json)
Hash identifier: 9rIDrEOssHVCPL/S3xbwhVXbh5VLzAtGCMAcpqQNxRI=
Subject key identifier: 1A:3F:DB:70:87:24:6C:9F:57:9B:98:D4:43:23:39:2E:DC:CD:23:D0
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 0199FB7CB7AFBF34589D9D61F05AEFE81981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
Manifest number: 0763
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: HYrkvDrpfrVGKAcaIbn8RvGgwng.roa (hash: kLdog1pfyl1ivWrdhRaD9T/MX0DUf8jLwgmi9P1eRT8=)
2: TYiDdMg7jFYESVHenYkZA0H7wJM.roa (hash: nVrivhjrdRI0cWTmcIVa/wHRsP8sZBjo+02UhnnNCZw=)
3: bAtdqWOn7XIMZb40RJnvw-dOPu0.roa (hash: ajLP5I+MW9lN2Pm4hOADp3bTpGVbkghpKs5apJzZVDw=)
4: hESS25y7Cg62v2nCXIaWH0kYPJs.crl (hash: 5PRsm/rKfAY6Dazy6S6Yc8wq89CrbLc9t4RYO9VHWIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b7:af:bf:34:58:9d:9d:61:f0:5a:ef:e8:19:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=1a3fdb7087246c9f579b98d44323392edccd23d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:ab:77:b9:d2:dc:81:6d:ae:48:9c:01:5e:
fa:a1:75:75:b3:d5:5e:3f:5c:0d:e9:8f:c0:9f:f1:
6b:d5:79:7e:ee:dd:eb:c1:6a:3d:3a:b8:61:82:45:
c9:d0:65:04:3f:ee:1f:1a:d2:0a:da:12:86:b7:2f:
ed:81:c6:94:7d:62:11:16:15:a2:52:b6:4e:c8:83:
79:f1:79:d6:42:40:4e:ef:32:f0:08:da:c2:1a:ae:
54:46:d7:0f:dd:28:e8:08:5f:4d:da:c4:90:0b:65:
24:39:d3:fe:9d:35:a2:a1:99:a0:e6:14:03:52:d8:
70:6f:ab:d0:51:3a:63:6e:c0:26:ba:53:a2:86:b9:
7b:09:40:6f:35:5e:8e:81:c4:fe:f2:ec:49:fc:ed:
f0:c6:71:a3:92:e9:eb:e7:c0:17:8a:80:5f:db:64:
5a:72:da:2d:b6:7b:7c:36:b9:d5:f2:d4:b3:6f:4b:
1d:e3:25:8d:15:56:5d:87:6b:f7:61:59:14:ce:0c:
e2:7c:e7:4d:f6:37:13:56:b1:2f:fa:d7:ff:c7:a9:
0d:6f:0e:de:0a:61:ff:84:4d:d4:5f:13:b8:4f:01:
cb:31:ba:bf:6d:bd:9a:75:a0:70:1e:93:49:b4:dc:
11:a4:67:7a:2d:fc:75:a0:d0:43:2b:96:64:1a:56:
1f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3F:DB:70:87:24:6C:9F:57:9B:98:D4:43:23:39:2E:DC:CD:23:D0
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:53:f2:99:1c:7d:e0:35:ab:83:16:40:99:83:86:d8:fb:74:
0d:b2:2d:b0:3d:b7:ca:78:e1:f8:26:91:5b:44:9e:7b:a2:91:
9d:b4:61:b0:3b:99:46:a2:45:a7:c2:68:90:d8:e3:56:d3:92:
87:3a:92:ad:86:b0:23:49:9e:65:8b:1d:4a:a1:9c:47:71:73:
41:78:ce:9d:34:ab:89:a3:ab:89:c8:16:ff:54:21:bf:d9:9e:
8d:d6:d0:c3:6e:dc:76:10:7e:68:af:37:9c:1b:f7:47:3a:99:
bf:97:db:78:9f:f3:bc:a6:60:68:a9:1d:e1:01:c9:8d:2d:2c:
a7:a3:80:1a:fd:e3:1b:9e:6a:22:74:0f:3f:dd:7a:e1:38:dc:
c5:d5:a5:f5:0a:df:4b:22:e3:fa:d8:9c:1b:1a:dc:42:17:e3:
0d:84:17:6b:73:a3:c3:79:c7:67:97:50:93:e8:55:88:d2:dd:
5e:36:df:e6:af:3a:62:d6:dc:01:c4:0d:5c:73:8a:ea:5c:5e:
16:d4:9f:7d:e6:fe:8e:1c:17:e1:51:7d:ff:e4:24:b3:97:65:
07:f1:d1:5d:01:59:9c:a0:0d:24:c5:45:b7:b5:1a:f4:af:e5:
09:d1:1d:69:3a:14:05:bd:80:03:f4:30:92:9b:16:bf:e6:54:
8c:b5:64:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fLevvzRYnZ1h8Frv6BmBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDQ5MmRiOWNiYjBhMGViNmJmNjljMjVjODY5NjFmNDkx
ODNjOWIwHhcNMjUxMDE5MDgwMTE4WhcNMjUxMDIwMDgwMTE4WjAzMTEwLwYDVQQD
EygxYTNmZGI3MDg3MjQ2YzlmNTc5Yjk4ZDQ0MzIzMzkyZWRjY2QyM2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNWrd7nS3IFtrkicAV76oXV1s9Ve
P1wN6Y/An/Fr1Xl+7t3rwWo9OrhhgkXJ0GUEP+4fGtIK2hKGty/tgcaUfWIRFhWi
UrZOyIN58XnWQkBO7zLwCNrCGq5URtcP3SjoCF9N2sSQC2UkOdP+nTWioZmg5hQD
Uthwb6vQUTpjbsAmulOihrl7CUBvNV6OgcT+8uxJ/O3wxnGjkunr58AXioBf22Ra
ctottnt8NrnV8tSzb0sd4yWNFVZdh2v3YVkUzgzifOdN9jcTVrEv+tf/x6kNbw7e
CmH/hE3UXxO4TwHLMbq/bb2adaBwHpNJtNwRpGd6Lfx1oNBDK5ZkGlYfYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBo/23CHJGyfV5uY1EMjOS7czSPQMB8GA1UdIwQY
MBaAFIREktucuwoOtr9pwlyGlh9JGDybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVTUzI1eTdDZzYydjJuQ1hJYVdIMGtZUEpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zM2E4ODgtNGNmMy00YThjLTkyOTct
YTFlMGRiMWExN2RmLzEvaEVTUzI1eTdDZzYydjJuQ1hJYVdIMGtZUEpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8zM2E4ODgtNGNmMy00YThjLTkyOTctYTFlMGRiMWExN2Rm
LzEvaEVTUzI1eTdDZzYydjJuQ1hJYVdIMGtZUEpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlPymRx9
4DWrgxZAmYOG2Pt0DbItsD23ynjh+CaRW0See6KRnbRhsDuZRqJFp8JokNjjVtOS
hzqSrYawI0meZYsdSqGcR3FzQXjOnTSriaOricgW/1Qhv9mejdbQw27cdhB+aK83
nBv3RzqZv5fbeJ/zvKZgaKkd4QHJjS0sp6OAGv3jG55qInQPP9164TjcxdWl9Qrf
SyLj+ticGxrcQhfjDYQXa3Ojw3nHZ5dQk+hViNLdXjbf5q86YtbcAcQNXHOK6lxe
FtSffeb+jhwX4VF9/+Qks5dlB/HRXQFZnKANJMVFt7Ua9K/lCdEdaToUBb2AA/Qw
kpsWv+ZUjLVkjg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 16:15:51 2025 by rpki-client