Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
File: hWSCS22vvTPxCjaW4ArLlIwRKjg.mft (raw, json)
Hash identifier: YAlgn/6I6/eDnGmOjlRVlvomWFCUZIEPRdIRFDwtOZM=
Subject key identifier: BE:84:BF:A1:8A:D7:D1:4E:8C:63:1C:F4:49:9B:D5:FB:DF:D3:05:B8
Authority key identifier: 85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
Certificate issuer: /CN=8564824b6dafbd33f10a3696e00acb948c112a38
Certificate serial: 019A72938D95C1B6372BF1726259C43DF260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
Manifest number: 0553
Signing time: Tue 11 Nov 2025 11:01:03 +0000
Manifest this update: Tue 11 Nov 2025 11:01:03 +0000
Manifest next update: Wed 12 Nov 2025 11:01:03 +0000
Files and hashes: 1: hWSCS22vvTPxCjaW4ArLlIwRKjg.crl (hash: VXbZeNhwp9YXWbetvg+pdH4QUSDMHLpFWkfvE5frtss=)
2: j3mlArIrCrvoTStpcqF9EPTMJII.roa (hash: zagzdTS3IOA1uItKGwOJz9trfPNv/LGCzKt9YV1P5Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:8d:95:c1:b6:37:2b:f1:72:62:59:c4:3d:f2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8564824b6dafbd33f10a3696e00acb948c112a38
Validity
Not Before: Nov 11 11:01:03 2025 GMT
Not After : Nov 12 11:01:03 2025 GMT
Subject: CN=be84bfa18ad7d14e8c631cf4499bd5fbdfd305b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:e7:da:ef:44:cd:c0:49:36:47:eb:9a:79:
29:b0:c3:7b:f9:27:7a:1f:c2:a1:df:7a:1f:8c:95:
78:ba:75:75:d3:40:92:94:0a:8d:19:cb:2d:5a:e7:
e8:da:4a:74:ad:9d:5c:70:79:16:52:8b:88:c4:15:
d0:47:80:03:de:49:d1:3c:88:00:97:92:32:29:2e:
d4:4e:48:45:cb:d9:5c:cc:16:aa:4e:50:e5:b1:2b:
b5:ac:de:24:66:9f:0b:b2:ef:3a:c5:f1:e2:27:21:
16:88:cb:3e:75:39:20:ab:25:03:5a:a1:9a:9b:c6:
e1:ad:af:3a:39:8e:79:02:dd:5a:ca:44:d2:f0:ac:
c1:9c:f8:c7:41:fd:06:e4:ab:df:cc:4f:25:d5:67:
de:18:f5:cf:71:57:e0:82:14:95:25:52:92:b7:8e:
5e:1b:98:ee:ba:11:35:ea:38:f2:ba:c9:0a:5f:c9:
ab:59:b8:02:1a:2a:5e:37:8b:6f:d0:2a:f0:88:7d:
cb:9b:3a:7e:22:eb:dd:3d:86:39:19:14:34:4d:01:
7e:13:ca:9a:1f:75:c7:01:1b:c7:14:3f:20:c2:92:
c6:88:89:e9:c9:40:8e:28:7d:eb:c5:27:b0:7a:be:
2f:82:fa:e9:26:48:4e:02:b8:7b:2d:17:bb:ef:e1:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:84:BF:A1:8A:D7:D1:4E:8C:63:1C:F4:49:9B:D5:FB:DF:D3:05:B8
X509v3 Authority Key Identifier:
keyid:85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:34:c8:b5:f7:d3:39:13:1b:da:7c:54:01:14:24:af:17:2d:
83:a0:58:e4:52:bb:ab:a8:78:ce:3e:ae:6f:f6:94:49:68:28:
23:37:9d:2f:f3:36:fd:16:91:bc:ad:4f:40:fd:4f:38:66:a0:
a0:8f:3e:07:cf:89:3f:2f:e9:8d:df:10:ec:99:86:d6:4b:e7:
9f:d6:40:f3:43:a1:6a:55:a2:5a:c0:d6:17:c3:8b:fc:eb:2b:
ae:04:b6:49:dd:98:8f:bb:ff:ae:f6:43:bb:0b:3e:f3:c8:b2:
16:4c:3d:d7:e7:bd:e7:b7:97:1c:2a:7c:52:a2:92:4e:9d:f8:
07:2b:53:17:87:f3:75:20:bd:57:ca:c7:ab:3c:15:90:c5:44:
bf:7c:62:1e:bd:7a:89:83:de:fc:ae:dd:d8:88:48:5a:5f:0c:
73:26:cf:f7:b6:be:0b:10:44:6e:1a:36:06:cf:fc:43:14:78:
d2:65:c5:c2:5f:44:f4:34:11:bd:35:ce:c0:f8:ec:d7:12:f6:
6d:f4:e2:55:e0:3e:34:c1:77:99:ba:f2:29:b5:33:74:c6:4a:
55:d0:b5:92:87:3d:32:25:c9:d2:3c:3b:cf:dc:c5:42:a1:7d:
e5:56:af:45:65:4f:38:1d:7a:48:2b:93:1e:b8:8c:0e:df:84:
8f:86:27:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk42VwbY3K/FyYlnEPfJgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjQ4MjRiNmRhZmJkMzNmMTBhMzY5NmUwMGFjYjk0OGMx
MTJhMzgwHhcNMjUxMTExMTEwMTAzWhcNMjUxMTEyMTEwMTAzWjAzMTEwLwYDVQQD
EyhiZTg0YmZhMThhZDdkMTRlOGM2MzFjZjQ0OTliZDVmYmRmZDMwNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIbn2u9EzcBJNkfrmnkpsMN7+Sd6
H8Kh33ofjJV4unV100CSlAqNGcstWufo2kp0rZ1ccHkWUouIxBXQR4AD3knRPIgA
l5IyKS7UTkhFy9lczBaqTlDlsSu1rN4kZp8Lsu86xfHiJyEWiMs+dTkgqyUDWqGa
m8bhra86OY55At1aykTS8KzBnPjHQf0G5KvfzE8l1WfeGPXPcVfgghSVJVKSt45e
G5juuhE16jjyuskKX8mrWbgCGipeN4tv0CrwiH3Lmzp+IuvdPYY5GRQ0TQF+E8qa
H3XHARvHFD8gwpLGiInpyUCOKH3rxSewer4vgvrpJkhOArh7LRe77+HdYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6Ev6GK19FOjGMc9Emb1fvf0wW4MB8GA1UdIwQY
MBaAFIVkgkttr70z8Qo2luAKy5SMESo4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdTQ1MyMnZ2VFB4Q2phVzRBckxsSXdSS2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80YzE3YjktMmQ1Yy00NDA1LWFjNWIt
YzYwNTQ0Y2Y0NWI1LzEvaFdTQ1MyMnZ2VFB4Q2phVzRBckxsSXdSS2pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80YzE3YjktMmQ1Yy00NDA1LWFjNWItYzYwNTQ0Y2Y0NWI1
LzEvaFdTQ1MyMnZ2VFB4Q2phVzRBckxsSXdSS2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALzTItffT
ORMb2nxUARQkrxctg6BY5FK7q6h4zj6ub/aUSWgoIzedL/M2/RaRvK1PQP1POGag
oI8+B8+JPy/pjd8Q7JmG1kvnn9ZA80OhalWiWsDWF8OL/OsrrgS2Sd2Yj7v/rvZD
uws+88iyFkw91+e957eXHCp8UqKSTp34BytTF4fzdSC9V8rHqzwVkMVEv3xiHr16
iYPe/K7d2IhIWl8McybP97a+CxBEbho2Bs/8QxR40mXFwl9E9DQRvTXOwPjs1xL2
bfTiVeA+NMF3mbryKbUzdMZKVdC1koc9MiXJ0jw7z9zFQqF95VavRWVPOB16SCuT
HriMDt+Ej4Yndw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:01 2025 by rpki-client