Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
File: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft (raw, json)
Hash identifier: aE2BNl+b+zyFMSsLIhDZS38n7QooIxRQgp9vnmXTx38=
Subject key identifier: 6D:21:AD:E9:0F:0B:87:33:1C:B7:D2:43:CC:C8:BC:71:C6:91:E0:36
Authority key identifier: 84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E
Certificate issuer: /CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e
Certificate serial: 019A71137C3192CC07DAE87787181095A05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
Manifest number: 0250
Signing time: Tue 11 Nov 2025 04:01:33 +0000
Manifest this update: Tue 11 Nov 2025 04:01:33 +0000
Manifest next update: Wed 12 Nov 2025 04:01:33 +0000
Files and hashes: 1: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl (hash: y2+/rn933Ht9xX6cmWaWk/z+7UvcRYVvZ/IqNo9nKjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:7c:31:92:cc:07:da:e8:77:87:18:10:95:a0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e
Validity
Not Before: Nov 11 04:01:33 2025 GMT
Not After : Nov 12 04:01:33 2025 GMT
Subject: CN=6d21ade90f0b87331cb7d243ccc8bc71c691e036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:fc:2f:87:da:cd:55:8e:1f:be:20:87:92:
3d:2e:f0:72:1a:db:f4:65:9a:2a:47:8b:0a:9d:c3:
50:22:7d:26:1f:ef:88:13:19:59:20:ee:8c:c6:fd:
cc:08:fd:7e:a6:3a:8f:c2:5d:b3:35:7d:b6:a3:fc:
df:28:30:4a:5b:a0:57:52:3d:45:f5:32:81:79:a5:
2e:03:1e:e5:a6:eb:59:12:0d:9e:de:93:92:81:0c:
6a:2a:fc:84:3d:69:ea:76:3b:5e:b5:b5:da:ed:c7:
d9:b1:0b:ad:05:cb:5c:e2:a2:c8:1f:44:ea:13:c9:
15:fa:6a:f2:66:2e:cc:f9:3c:fd:f4:15:81:8c:ae:
ee:4d:ad:41:e8:cd:45:b5:6f:49:70:96:03:61:9d:
27:86:68:47:e6:e3:73:55:a9:89:d6:f3:ba:9f:ee:
9c:7f:45:5f:3d:ef:d9:1b:1b:fc:87:b9:75:fa:2a:
6e:52:be:ab:71:eb:bd:b6:5f:73:51:d0:eb:76:24:
d1:65:7b:e9:e8:b6:b3:a0:db:28:33:1c:f6:78:2e:
29:87:62:e4:00:6a:31:40:4a:42:ff:23:7f:4c:a1:
06:43:4c:ac:7d:31:bb:3d:6e:79:db:0a:d0:eb:a0:
f1:7b:cd:e8:82:ec:44:35:10:b7:dd:ce:76:e7:2d:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:21:AD:E9:0F:0B:87:33:1C:B7:D2:43:CC:C8:BC:71:C6:91:E0:36
X509v3 Authority Key Identifier:
keyid:84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:13:21:2b:aa:c3:17:21:4d:a3:67:44:6f:2c:3a:83:7d:2a:
5d:f2:c4:6e:4b:11:62:9a:5b:41:f3:43:fc:f4:c4:6c:94:c9:
81:5d:48:47:e8:9a:0b:bd:2e:50:aa:c0:d9:a2:24:a6:44:96:
51:2d:6d:7b:a0:86:00:13:58:33:77:c3:43:c5:42:58:83:e1:
1f:36:b6:cd:0e:ab:66:cc:2f:77:5e:14:fa:eb:7e:ed:e2:ef:
76:c6:cf:28:cd:ae:a0:2b:87:08:f2:b7:3e:5f:d8:0e:84:a3:
b5:d0:2d:27:a2:28:92:47:ce:16:c6:b2:da:0c:1a:b9:ee:a2:
25:30:5d:9d:00:6c:bd:d9:ec:d1:3d:67:c6:15:d1:76:e6:a0:
ba:2f:e8:46:b2:ce:cc:4e:5f:0e:a8:55:ed:3c:3e:5b:5f:35:
e4:97:cc:64:ab:cc:b0:d1:93:6a:53:a8:17:c6:9f:0e:c3:33:
d2:8d:b4:b8:54:6c:80:05:b6:59:e0:2e:14:0a:d9:88:9b:b2:
48:4b:0c:cb:88:05:c6:c6:d6:05:a3:54:b1:e4:d3:76:33:87:
09:66:91:71:bc:d4:b1:fe:24:80:be:a1:07:ea:ac:c9:2c:b1:
30:76:68:c7:74:97:b2:61:46:28:4c:04:32:1a:6d:10:56:1b:
1f:05:f6:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE3wxkswH2uh3hxgQlaBcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OTliNjZhMjY5OTZlYmQ1Y2FiMGMyZWMzYjY3YzAyNWJm
MTA5NGUwHhcNMjUxMTExMDQwMTMzWhcNMjUxMTEyMDQwMTMzWjAzMTEwLwYDVQQD
Eyg2ZDIxYWRlOTBmMGI4NzMzMWNiN2QyNDNjY2M4YmM3MWM2OTFlMDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfr8L4fazVWOH74gh5I9LvByGtv0
ZZoqR4sKncNQIn0mH++IExlZIO6Mxv3MCP1+pjqPwl2zNX22o/zfKDBKW6BXUj1F
9TKBeaUuAx7lputZEg2e3pOSgQxqKvyEPWnqdjtetbXa7cfZsQutBctc4qLIH0Tq
E8kV+mryZi7M+Tz99BWBjK7uTa1B6M1FtW9JcJYDYZ0nhmhH5uNzVamJ1vO6n+6c
f0VfPe/ZGxv8h7l1+ipuUr6rceu9tl9zUdDrdiTRZXvp6LazoNsoMxz2eC4ph2Lk
AGoxQEpC/yN/TKEGQ0ysfTG7PW552wrQ66Dxe83oguxENRC33c525y2v9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0hrekPC4czHLfSQ8zIvHHGkeA2MB8GA1UdIwQY
MBaAFISZtmommW69XKsMLsO2fAJb8QlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEptMmFpYVpicjFjcXd3dXc3WjhBbHZ4Q1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wMWJkYWUtODZjNS00YzE1LWE5OTgt
NWM5ZjliYjJkYjExLzEvaEptMmFpYVpicjFjcXd3dXc3WjhBbHZ4Q1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wMWJkYWUtODZjNS00YzE1LWE5OTgtNWM5ZjliYjJkYjEx
LzEvaEptMmFpYVpicjFjcXd3dXc3WjhBbHZ4Q1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBMhK6rD
FyFNo2dEbyw6g30qXfLEbksRYppbQfND/PTEbJTJgV1IR+iaC70uUKrA2aIkpkSW
US1te6CGABNYM3fDQ8VCWIPhHza2zQ6rZswvd14U+ut+7eLvdsbPKM2uoCuHCPK3
Pl/YDoSjtdAtJ6IokkfOFsay2gwaue6iJTBdnQBsvdns0T1nxhXRduagui/oRrLO
zE5fDqhV7Tw+W1815JfMZKvMsNGTalOoF8afDsMz0o20uFRsgAW2WeAuFArZiJuy
SEsMy4gFxsbWBaNUseTTdjOHCWaRcbzUsf4kgL6hB+qsySyxMHZox3SXsmFGKEwE
MhptEFYbHwX2wA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:29 2025 by rpki-client