Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: BsGyZeFHj1cGgL4D8uMvBWSY81pzJPOENPR9Qf8z+vA=
Subject key identifier: DC:A7:E3:C6:7E:E0:E6:08:99:7C:43:71:A3:6B:41:98:1A:BD:79:A5
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 019A2C9F51E35B303A830D84F39A28E29633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 21:00:29 +0000
Manifest this update: Tue 28 Oct 2025 21:00:29 +0000
Manifest next update: Wed 29 Oct 2025 21:00:29 +0000
Files and hashes: 1: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: nXw4uoLMjOPPTYk0XCnLnimWcfBseeWcU02pWUUClYg=)
2: zx0be_pkiDVp3Bp6Y2p73CdjnRQ.roa (hash: NeFjM/BvfaVvBPbeh43NItXZIzj0r2G0lwwaiN3R4Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:9f:51:e3:5b:30:3a:83:0d:84:f3:9a:28:e2:96:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: Oct 28 21:00:29 2025 GMT
Not After : Oct 29 21:00:29 2025 GMT
Subject: CN=dca7e3c67ee0e608997c4371a36b41981abd79a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c0:5b:9e:f7:cf:32:93:e7:7a:3c:c3:72:e2:
33:19:d7:80:d0:7f:ae:74:3b:16:87:4e:a8:09:ed:
30:7f:a4:c6:61:90:44:c8:9c:d8:d5:bc:38:76:e0:
53:22:ba:fb:c5:83:ce:01:86:ed:b6:4f:d5:f9:1c:
e4:80:56:a7:24:0b:a9:f6:21:3e:08:90:d3:35:0c:
99:49:ba:b1:51:d7:80:2d:f8:b0:73:d6:2a:40:bb:
1a:cb:ca:d7:d1:6e:08:e4:74:2d:02:20:60:bf:c9:
dd:8e:f8:84:34:46:8a:0b:ff:7d:7e:ee:a8:3c:6b:
5c:3b:e3:27:03:61:d8:21:80:9f:89:70:e5:48:a0:
89:05:f7:85:cb:7a:1c:1a:a0:0b:2b:a9:ea:33:9e:
bd:58:1d:8e:e1:a1:0d:9e:32:e1:4a:14:4d:b5:ce:
2d:a4:62:fc:9a:c6:d3:8c:cd:c6:a6:47:6d:f2:6b:
b9:16:16:57:65:49:f5:3f:45:08:af:33:68:53:e6:
b6:d2:8f:54:fa:4f:81:9a:47:c3:84:a0:cc:51:80:
dc:a0:94:7e:87:55:21:55:4f:7b:e4:64:0c:90:fa:
82:54:a5:a9:59:b7:40:93:dc:bb:ce:f7:67:9c:91:
36:74:76:1f:f0:1a:07:b0:51:e0:f4:c7:b9:61:f6:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A7:E3:C6:7E:E0:E6:08:99:7C:43:71:A3:6B:41:98:1A:BD:79:A5
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b0:bc:39:ef:e2:6d:39:0b:43:99:89:a4:92:45:6e:5e:4e:
84:ac:d2:80:c9:15:4c:32:6c:1f:b8:47:93:c9:6b:38:45:8c:
0d:73:ce:c3:ec:5c:ba:9b:23:3e:37:36:cc:cb:99:9b:cf:65:
31:7c:db:a9:7d:9d:06:a6:53:f1:4f:0c:8c:fe:3d:21:8f:a5:
60:da:4b:d3:0a:b2:04:70:57:2e:1f:62:db:f1:88:94:ad:5e:
6f:fd:7e:f1:7a:30:4a:b6:cf:c9:34:d9:f7:73:01:ce:7c:8a:
88:5c:8a:b5:35:5f:60:ff:dc:95:c7:c3:bf:19:86:95:0b:e9:
a9:2c:cf:0c:08:bc:a4:c8:58:82:a2:d7:c9:70:92:ef:f4:55:
4a:15:2e:92:93:48:6a:0e:1d:21:e5:71:2c:61:84:fe:75:1d:
6c:ab:32:96:c7:ce:1d:fa:5b:00:e5:9b:1e:48:3a:16:d1:96:
62:eb:2b:3c:be:f8:e6:62:0e:c1:78:62:31:49:24:ac:96:00:
a5:1d:93:a7:32:11:a8:5a:30:77:c1:6b:59:42:c9:12:55:fb:
01:ca:cd:c9:f1:b9:b4:4b:5b:62:8e:3d:0b:ad:4b:6e:16:30:
c3:ca:6b:25:75:37:ca:76:6d:c3:37:c7:5b:b2:80:d0:74:ab:
b1:05:26:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZosn1HjWzA6gw2E85oo4pYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMWUzNTQzNjJjYjkyMjRjMDE2ZGFjOTQ0ZTNkOWQ0OTkw
OWIxN2YwHhcNMjUxMDI4MjEwMDI5WhcNMjUxMDI5MjEwMDI5WjAzMTEwLwYDVQQD
EyhkY2E3ZTNjNjdlZTBlNjA4OTk3YzQzNzFhMzZiNDE5ODFhYmQ3OWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58BbnvfPMpPnejzDcuIzGdeA0H+u
dDsWh06oCe0wf6TGYZBEyJzY1bw4duBTIrr7xYPOAYbttk/V+RzkgFanJAup9iE+
CJDTNQyZSbqxUdeALfiwc9YqQLsay8rX0W4I5HQtAiBgv8ndjviENEaKC/99fu6o
PGtcO+MnA2HYIYCfiXDlSKCJBfeFy3ocGqALK6nqM569WB2O4aENnjLhShRNtc4t
pGL8msbTjM3Gpkdt8mu5FhZXZUn1P0UIrzNoU+a20o9U+k+BmkfDhKDMUYDcoJR+
h1UhVU975GQMkPqCVKWpWbdAk9y7zvdnnJE2dHYf8BoHsFHg9Me5YfY2QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyn48Z+4OYImXxDcaNrQZgavXmlMB8GA1UdIwQY
MBaAFB0eNUNiy5IkwBbayUTj2dSZCbF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yODJiMTktNjhiOS00ZWYzLWFkMzkt
NmVjOGM4MWZkYzNmLzEvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8yODJiMTktNjhiOS00ZWYzLWFkMzktNmVjOGM4MWZkYzNm
LzEvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7C8Oe/i
bTkLQ5mJpJJFbl5OhKzSgMkVTDJsH7hHk8lrOEWMDXPOw+xcupsjPjc2zMuZm89l
MXzbqX2dBqZT8U8MjP49IY+lYNpL0wqyBHBXLh9i2/GIlK1eb/1+8XowSrbPyTTZ
93MBznyKiFyKtTVfYP/clcfDvxmGlQvpqSzPDAi8pMhYgqLXyXCS7/RVShUukpNI
ag4dIeVxLGGE/nUdbKsylsfOHfpbAOWbHkg6FtGWYusrPL745mIOwXhiMUkkrJYA
pR2TpzIRqFowd8FrWULJElX7AcrNyfG5tEtbYo49C61LbhYww8prJXU3ynZtwzfH
W7KA0HSrsQUmUw==
-----END CERTIFICATE-----
Generated at Wed Oct 29 01:25:50 2025 by rpki-client