Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
File: hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft (raw, json)
Hash identifier: AIUzZ3aQFx/SZqntbDMhZzAMYoDGPkVFCllnZ215n2E=
Subject key identifier: 80:9C:72:41:18:F7:79:ED:9F:8B:C4:1A:DB:1D:FA:E2:3E:58:4E:70
Authority key identifier: 85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB
Certificate issuer: /CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
Certificate serial: 019A251C90722C14824BEB3795B86613430D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
Manifest number: 075E
Signing time: Mon 27 Oct 2025 10:00:20 +0000
Manifest this update: Mon 27 Oct 2025 10:00:20 +0000
Manifest next update: Tue 28 Oct 2025 10:00:20 +0000
Files and hashes: 1: gBy9cD3j_tP--kqjiHxj-BEz2w8.roa (hash: GWls9v+X93Qb6tijazZ0OBt3/3oq/+caZQ2/zTy7cZA=)
2: hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl (hash: EzvPJGb0pHLl/6nLDpuOvhzRGu0rW15sdGvRGonQ520=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:90:72:2c:14:82:4b:eb:37:95:b8:66:13:43:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
Validity
Not Before: Oct 27 10:00:20 2025 GMT
Not After : Oct 28 10:00:20 2025 GMT
Subject: CN=809c724118f779ed9f8bc41adb1dfae23e584e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0f:e3:aa:58:ff:c1:d0:e0:11:e4:16:fd:24:
bf:d1:ca:42:a6:78:04:72:87:2b:83:a7:1e:54:ab:
0a:4c:e5:7e:d7:36:62:57:7f:66:b2:45:a2:15:51:
87:92:e9:e6:70:b0:33:99:50:b5:a0:f6:ef:b2:a1:
74:46:66:43:7d:62:c4:53:f0:de:c0:ef:91:ba:f1:
53:53:fc:a6:45:04:a8:c1:65:c7:c0:6c:1b:0d:44:
11:f9:f3:76:59:8f:e4:58:7f:7c:e5:04:07:4e:0c:
09:17:7b:df:d2:71:83:d6:ba:39:f1:8f:94:19:c2:
54:30:2f:5b:5c:0b:48:7b:f0:7b:e1:81:61:ea:8f:
03:ce:41:3c:d4:1d:34:05:07:e8:50:d3:e1:07:35:
32:2f:e0:c7:df:a4:8d:90:08:b2:15:53:10:de:10:
d7:bc:63:77:76:47:7f:49:16:78:b8:d0:b6:52:28:
d3:db:11:8d:9f:c2:c4:bb:bc:b1:4f:d4:17:25:0c:
8b:ed:d0:45:0b:73:22:d8:fe:ee:05:ac:da:1a:a5:
75:12:b9:ff:0c:03:2f:c6:cd:87:45:e2:8d:5f:9f:
24:46:2b:ea:11:29:09:1a:7a:c6:47:62:dd:05:5b:
c6:13:03:84:a5:f1:24:ab:3d:63:cd:15:d3:59:e3:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9C:72:41:18:F7:79:ED:9F:8B:C4:1A:DB:1D:FA:E2:3E:58:4E:70
X509v3 Authority Key Identifier:
keyid:85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9b:19:f8:df:13:15:02:55:25:29:8e:a8:f9:13:ef:91:bf:
09:3c:3b:ab:74:ef:19:6a:f9:fb:f0:6c:ed:a3:4a:08:9e:e6:
8c:d8:05:81:07:79:8d:09:22:e1:3c:39:75:c2:8d:c6:1c:58:
fa:f3:65:4d:df:42:82:c2:b0:d8:72:6f:63:2c:c8:57:6a:00:
b5:02:ba:57:33:12:a6:9f:91:b7:43:46:a8:ac:04:df:06:5c:
d5:20:fb:c8:50:d7:f2:b8:a9:2b:59:81:00:b6:a1:07:22:9d:
6a:54:37:8f:38:39:e6:e0:05:ac:7d:5b:2e:9b:a1:e6:da:a3:
6b:b1:80:c6:f4:97:8e:06:39:ef:14:bd:08:f9:0e:ff:e7:41:
eb:22:bc:62:1e:f2:b1:e7:08:ed:0b:c6:25:6b:54:cf:77:24:
46:83:11:22:16:a9:44:8e:de:11:45:2b:0c:8c:1c:a0:d4:1d:
af:b9:e6:1c:5f:02:db:83:65:30:a9:19:80:b2:31:3b:71:8a:
9a:db:2d:04:dd:d0:a3:7c:ef:49:e3:69:8e:14:b6:ab:5b:4f:
36:5b:9e:b1:08:e1:fd:49:74:75:40:b8:2e:cd:3e:46:86:92:
82:48:ee:0b:1c:ec:eb:ca:55:75:47:98:93:c7:88:4e:f3:c7:
34:0f:b2:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolHJByLBSCS+s3lbhmE0MNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NWRkOTNmMmM3ZTZmNTIyZjJiMjg5NGIwMzU5ZjY2Nzli
YzhkZmIwHhcNMjUxMDI3MTAwMDIwWhcNMjUxMDI4MTAwMDIwWjAzMTEwLwYDVQQD
Eyg4MDljNzI0MTE4Zjc3OWVkOWY4YmM0MWFkYjFkZmFlMjNlNTg0ZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ/jqlj/wdDgEeQW/SS/0cpCpngE
cocrg6ceVKsKTOV+1zZiV39mskWiFVGHkunmcLAzmVC1oPbvsqF0RmZDfWLEU/De
wO+RuvFTU/ymRQSowWXHwGwbDUQR+fN2WY/kWH985QQHTgwJF3vf0nGD1ro58Y+U
GcJUMC9bXAtIe/B74YFh6o8DzkE81B00BQfoUNPhBzUyL+DH36SNkAiyFVMQ3hDX
vGN3dkd/SRZ4uNC2UijT2xGNn8LEu7yxT9QXJQyL7dBFC3Mi2P7uBazaGqV1Ern/
DAMvxs2HReKNX58kRivqESkJGnrGR2LdBVvGEwOEpfEkqz1jzRXTWeOJXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICcckEY93ntn4vEGtsd+uI+WE5wMB8GA1UdIwQY
MBaAFIVd2T8sfm9SLysolLA1n2Z5vI37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFYzWlB5eC1iMUl2S3lpVXNEV2Zabm04amZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84ZWRjYTAtMjcwNi00ZWM3LTk0ZWIt
MmIyMDg5NGFkZWMwLzEvaFYzWlB5eC1iMUl2S3lpVXNEV2Zabm04amZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My84ZWRjYTAtMjcwNi00ZWM3LTk0ZWItMmIyMDg5NGFkZWMw
LzEvaFYzWlB5eC1iMUl2S3lpVXNEV2Zabm04amZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpsZ+N8T
FQJVJSmOqPkT75G/CTw7q3TvGWr5+/Bs7aNKCJ7mjNgFgQd5jQki4Tw5dcKNxhxY
+vNlTd9CgsKw2HJvYyzIV2oAtQK6VzMSpp+Rt0NGqKwE3wZc1SD7yFDX8ripK1mB
ALahByKdalQ3jzg55uAFrH1bLpuh5tqja7GAxvSXjgY57xS9CPkO/+dB6yK8Yh7y
secI7QvGJWtUz3ckRoMRIhapRI7eEUUrDIwcoNQdr7nmHF8C24NlMKkZgLIxO3GK
mtstBN3Qo3zvSeNpjhS2q1tPNluesQjh/Ul0dUC4Ls0+RoaSgkjuCxzs68pVdUeY
k8eITvPHNA+ypg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:50:43 2025 by rpki-client