Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
File: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft (raw, json)
Hash identifier: kZl8ivNInRP5Hxdx/XONXDxh1MW5bxq+2aZ1/OlbtqE=
Subject key identifier: D6:E1:09:00:DA:D0:FB:50:CC:9E:AD:4E:F0:8A:39:39:12:F0:A3:D8
Authority key identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
Certificate issuer: /CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Certificate serial: 019A21AD692E0EE5D566CB69FC7B49028925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
Manifest number: 090D
Signing time: Sun 26 Oct 2025 18:00:03 +0000
Manifest this update: Sun 26 Oct 2025 18:00:03 +0000
Manifest next update: Mon 27 Oct 2025 18:00:03 +0000
Files and hashes: 1: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl (hash: 8wDplR7rWBFs3xrAgldRSu3heDMbVDBm7Texmcu+gg0=)
2: oiBFy3pkObmB-SUVyi8mjUeggCE.roa (hash: DrQMitQl5NyHBIDeRzh85R9x2+NpayUje01H5X2GJbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:69:2e:0e:e5:d5:66:cb:69:fc:7b:49:02:89:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Validity
Not Before: Oct 26 18:00:03 2025 GMT
Not After : Oct 27 18:00:03 2025 GMT
Subject: CN=d6e10900dad0fb50cc9ead4ef08a393912f0a3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:8c:d0:89:63:3a:4a:81:50:8c:99:88:0c:
d2:45:df:de:32:2d:81:a8:00:5a:87:64:63:2e:b1:
ee:2b:fc:54:21:8f:f7:68:a5:0a:bc:47:7f:2f:d9:
fd:e0:7e:b1:63:5f:f9:80:15:54:8a:b6:c1:18:8c:
47:f9:3f:2e:1c:4b:48:67:7d:07:a0:54:43:dc:b8:
db:dc:03:5c:5f:71:bc:02:f4:00:3b:d6:8b:38:d3:
e8:72:fa:30:60:4a:13:c9:92:7b:85:4e:8b:cb:1e:
ea:15:fc:c7:2d:14:4f:6f:0f:08:3d:03:58:a1:c5:
65:2e:68:42:3a:86:51:05:9f:d2:6a:d8:ee:8d:cf:
83:55:2d:06:22:50:52:1d:8d:f1:84:6b:59:39:e6:
44:06:e3:65:6b:d6:42:7c:53:e9:16:63:b7:7d:28:
2f:d7:6e:08:a9:d3:09:a5:20:71:a4:2f:f1:c0:96:
8b:28:c3:12:9c:31:dd:d8:12:bc:6e:c7:f9:ee:ac:
4f:11:31:ab:81:86:4b:98:95:55:31:9f:82:61:5a:
d7:f5:b4:71:4c:94:42:32:f9:5d:70:a5:12:13:20:
64:51:64:e2:65:c8:03:19:65:01:0b:9f:a3:64:6a:
43:bd:83:95:8d:8c:73:07:fa:27:cd:8f:3a:a0:64:
e8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E1:09:00:DA:D0:FB:50:CC:9E:AD:4E:F0:8A:39:39:12:F0:A3:D8
X509v3 Authority Key Identifier:
keyid:86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:36:c2:5b:53:e5:b7:dc:5a:d9:8a:f5:c3:bc:87:c7:2b:31:
0c:21:26:d5:e6:11:f6:3c:63:95:53:95:a6:b1:44:72:96:f5:
62:f0:8f:b5:06:28:e7:6e:74:9a:2e:71:d7:0a:6a:b5:68:d1:
b0:5f:3b:26:a6:a2:f7:39:a0:f7:3c:2d:01:5b:81:2c:a7:f1:
64:18:f2:44:14:b2:6d:96:9d:78:e2:e1:79:c1:8b:0c:77:80:
86:09:d8:bc:6e:01:63:b9:0e:47:6b:5b:f0:64:f4:ba:10:f8:
4f:5a:77:92:c7:e1:06:68:71:6f:f2:dc:40:1d:d5:db:61:23:
ec:18:37:4d:a4:8c:e6:fa:98:47:f9:69:63:2e:1c:03:75:b4:
f7:b1:e9:87:9d:5e:86:09:f5:f1:2d:f3:17:7d:2e:40:f0:b3:
05:58:b0:99:4b:9c:3e:c1:36:e4:a7:67:93:7c:36:5c:d0:cc:
81:59:70:69:25:bb:1b:8d:e9:21:86:26:ef:9e:46:e3:55:25:
e0:23:6d:b6:72:57:95:25:2d:a1:a1:d3:7d:d7:9c:26:3f:bd:
b5:d5:d1:34:12:dc:80:13:b1:e4:d3:c8:54:d4:30:17:61:26:
99:7d:21:9b:ea:25:aa:8c:c1:c8:d8:1d:ef:2e:82:cd:66:b3:
da:44:85:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohrWkuDuXVZstp/HtJAoklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZWUxMjY4ZmUwYWFkZjMxN2FiNDRmZDgxNmQxMGZlNTRk
ZGZjMGMwHhcNMjUxMDI2MTgwMDAzWhcNMjUxMDI3MTgwMDAzWjAzMTEwLwYDVQQD
EyhkNmUxMDkwMGRhZDBmYjUwY2M5ZWFkNGVmMDhhMzkzOTEyZjBhM2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS6M0IljOkqBUIyZiAzSRd/eMi2B
qABah2RjLrHuK/xUIY/3aKUKvEd/L9n94H6xY1/5gBVUirbBGIxH+T8uHEtIZ30H
oFRD3Ljb3ANcX3G8AvQAO9aLONPocvowYEoTyZJ7hU6Lyx7qFfzHLRRPbw8IPQNY
ocVlLmhCOoZRBZ/Satjujc+DVS0GIlBSHY3xhGtZOeZEBuNla9ZCfFPpFmO3fSgv
124IqdMJpSBxpC/xwJaLKMMSnDHd2BK8bsf57qxPETGrgYZLmJVVMZ+CYVrX9bRx
TJRCMvldcKUSEyBkUWTiZcgDGWUBC5+jZGpDvYOVjYxzB/onzY86oGToDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbhCQDa0PtQzJ6tTvCKOTkS8KPYMB8GA1UdIwQY
MBaAFIbuEmj+Cq3zF6tE/YFtEP5U3fwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mMzQyNTQtMGU5ZC00ZGM1LWE0MTgt
MWI3MTFhZWMxZmJjLzEvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mMzQyNTQtMGU5ZC00ZGM1LWE0MTgtMWI3MTFhZWMxZmJj
LzEvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzbCW1Pl
t9xa2Yr1w7yHxysxDCEm1eYR9jxjlVOVprFEcpb1YvCPtQYo5250mi5x1wpqtWjR
sF87Jqai9zmg9zwtAVuBLKfxZBjyRBSybZadeOLhecGLDHeAhgnYvG4BY7kOR2tb
8GT0uhD4T1p3ksfhBmhxb/LcQB3V22Ej7Bg3TaSM5vqYR/lpYy4cA3W097Hph51e
hgn18S3zF30uQPCzBViwmUucPsE25Kdnk3w2XNDMgVlwaSW7G43pIYYm755G41Ul
4CNttnJXlSUtoaHTfdecJj+9tdXRNBLcgBOx5NPIVNQwF2EmmX0hm+olqozByNgd
7y6CzWaz2kSFNA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:02:35 2025 by rpki-client