Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
File: huGrpgDN5ewxgxmxVZS2irlslWw.mft (raw, json)
Hash identifier: GuFzKRcE3m8HRfcnArMbaB0Kok1+QAxaET/8EjdZGw0=
Subject key identifier: 77:0A:D3:CE:B2:79:96:05:78:4B:41:6E:D4:9A:9B:78:0B:D2:29:E1
Authority key identifier: 86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C
Certificate issuer: /CN=86e1aba600cde5ec318319b15594b68ab96c956c
Certificate serial: 019A7113196FB969E0D2A6842F1986D0A6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
Manifest number: 1021
Signing time: Tue 11 Nov 2025 04:01:08 +0000
Manifest this update: Tue 11 Nov 2025 04:01:08 +0000
Manifest next update: Wed 12 Nov 2025 04:01:08 +0000
Files and hashes: 1: Q7vNAscnF-4OhkgVonOsxeJBDjA.roa (hash: 0ioDa0FuPDgR/Y4yLPplBITqL6YDwLS4b5dcomdJX+s=)
2: huGrpgDN5ewxgxmxVZS2irlslWw.crl (hash: 5NZmbPNubSuWzx3qjk9JWEHTxrcMSoUfJ7W4EoxGC94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:19:6f:b9:69:e0:d2:a6:84:2f:19:86:d0:a6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e1aba600cde5ec318319b15594b68ab96c956c
Validity
Not Before: Nov 11 04:01:08 2025 GMT
Not After : Nov 12 04:01:08 2025 GMT
Subject: CN=770ad3ceb2799605784b416ed49a9b780bd229e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:6e:a7:fb:96:99:42:33:b1:fc:2d:9c:d7:
04:41:a8:ff:68:e5:3d:64:89:a8:39:c1:1e:2a:29:
f8:1c:eb:2f:4d:31:45:71:12:20:f2:77:57:26:a6:
08:5a:47:f9:9c:84:6b:e0:16:e4:70:97:ff:ee:60:
28:60:8f:d5:dd:33:09:2a:42:46:31:28:04:3a:2b:
ea:8d:b1:31:0d:c6:bf:89:b1:6d:f1:ca:dc:09:43:
64:37:9d:28:11:d5:81:be:0c:3c:36:a2:14:21:dd:
4f:49:c3:c6:85:5a:89:18:46:ea:cb:b1:29:1d:09:
fe:45:97:ca:59:63:2c:3f:44:a2:2d:89:c3:9b:6a:
4b:07:ac:a5:f3:7a:73:0b:0d:95:88:ab:a9:7c:34:
47:00:c1:ea:4e:74:4d:c5:cd:19:9b:87:4e:dc:a6:
28:1b:9a:9c:a9:c0:70:b5:57:1f:7b:ca:88:43:30:
07:a6:af:3d:14:a2:67:b5:08:73:a7:c6:8d:87:5c:
a4:df:c8:e4:c8:94:7a:2e:78:25:7d:82:65:4a:3b:
4c:de:39:19:d7:08:c1:72:1d:47:fc:a4:f6:b4:ee:
03:00:95:d2:0f:81:21:c4:c2:53:a4:32:42:db:1d:
be:12:ac:57:00:63:4b:8a:db:f5:4f:44:fc:3e:cf:
7f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0A:D3:CE:B2:79:96:05:78:4B:41:6E:D4:9A:9B:78:0B:D2:29:E1
X509v3 Authority Key Identifier:
keyid:86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5f:46:a1:4f:48:c3:19:98:0a:7c:fc:d6:ba:d7:e5:5e:70:
75:ed:0e:fa:d7:3a:95:9f:2f:b5:07:80:1f:40:1e:f6:0d:dc:
88:5c:30:79:a2:b5:68:14:a9:5d:b6:52:31:aa:3a:be:dd:92:
78:3e:22:31:ba:85:0e:4d:53:06:7b:3a:5f:6b:93:b5:06:a5:
cc:2e:12:80:9a:9f:4d:0b:e1:bc:99:0a:f1:75:15:44:98:90:
74:0c:97:33:e3:54:63:73:4d:f4:df:a7:c6:23:fc:a9:80:9a:
f6:b4:a9:99:2b:75:25:3b:88:54:29:8c:d2:b4:51:c4:f0:8e:
80:19:c5:12:8a:7f:3c:8f:ee:c4:aa:1d:fb:49:7c:ff:54:10:
60:6d:9a:78:b9:ca:43:fe:48:e8:d2:36:f4:7a:d4:78:d8:31:
74:5b:46:79:ae:da:26:ce:87:69:10:2d:9a:2e:77:03:9f:77:
74:b0:33:7f:3d:4c:cb:78:dc:57:9e:a5:15:b6:3c:8f:a7:29:
d1:27:60:6b:30:db:41:85:43:c1:e9:f8:f6:6f:f3:1e:df:75:
dd:53:9b:b9:7b:b2:26:a2:9a:38:de:d5:fc:f3:1a:b5:80:cb:
38:50:08:d6:85:ec:b9:fb:06:e6:dc:3f:9c:d3:64:eb:05:cc:
b4:86:d4:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxExlvuWng0qaELxmG0Kb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZTFhYmE2MDBjZGU1ZWMzMTgzMTliMTU1OTRiNjhhYjk2
Yzk1NmMwHhcNMjUxMTExMDQwMTA4WhcNMjUxMTEyMDQwMTA4WjAzMTEwLwYDVQQD
Eyg3NzBhZDNjZWIyNzk5NjA1Nzg0YjQxNmVkNDlhOWI3ODBiZDIyOWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4lup/uWmUIzsfwtnNcEQaj/aOU9
ZImoOcEeKin4HOsvTTFFcRIg8ndXJqYIWkf5nIRr4BbkcJf/7mAoYI/V3TMJKkJG
MSgEOivqjbExDca/ibFt8crcCUNkN50oEdWBvgw8NqIUId1PScPGhVqJGEbqy7Ep
HQn+RZfKWWMsP0SiLYnDm2pLB6yl83pzCw2ViKupfDRHAMHqTnRNxc0Zm4dO3KYo
G5qcqcBwtVcfe8qIQzAHpq89FKJntQhzp8aNh1yk38jkyJR6LnglfYJlSjtM3jkZ
1wjBch1H/KT2tO4DAJXSD4EhxMJTpDJC2x2+EqxXAGNLitv1T0T8Ps9/xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcK086yeZYFeEtBbtSam3gL0inhMB8GA1UdIwQY
MBaAFIbhq6YAzeXsMYMZsVWUtoq5bJVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHVHcnBnRE41ZXd4Z3hteFZaUzJpcmxzbFd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lNjg0NWQtMWMzYy00OGQ2LWE2YjIt
ZDYwNWM1M2EzNWJlLzEvaHVHcnBnRE41ZXd4Z3hteFZaUzJpcmxzbFd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9lNjg0NWQtMWMzYy00OGQ2LWE2YjItZDYwNWM1M2EzNWJl
LzEvaHVHcnBnRE41ZXd4Z3hteFZaUzJpcmxzbFd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIF9GoU9I
wxmYCnz81rrX5V5wde0O+tc6lZ8vtQeAH0Ae9g3ciFwweaK1aBSpXbZSMao6vt2S
eD4iMbqFDk1TBns6X2uTtQalzC4SgJqfTQvhvJkK8XUVRJiQdAyXM+NUY3NN9N+n
xiP8qYCa9rSpmSt1JTuIVCmM0rRRxPCOgBnFEop/PI/uxKod+0l8/1QQYG2aeLnK
Q/5I6NI29HrUeNgxdFtGea7aJs6HaRAtmi53A593dLAzfz1My3jcV56lFbY8j6cp
0SdgazDbQYVDwen49m/zHt913VObuXuyJqKaON7V/PMatYDLOFAI1oXsufsG5tw/
nNNk6wXMtIbU1Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:59 2025 by rpki-client