Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
File: HpqS2vCMILRpG5Jc8DLlSR_grMA.mft (raw, json)
Hash identifier: amdYVj94Y+e3NXzardAiQLSrOvwJ+sv1AI4zOZNjYXA=
Subject key identifier: BD:E6:9C:2A:24:0B:25:4B:20:7D:B5:82:18:35:E2:08:10:4C:D7:F9
Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
Certificate issuer: /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Certificate serial: 019A725CC7F7CDE8AFB937326A02F7FDFD1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
Manifest number: 12ED
Signing time: Tue 11 Nov 2025 10:01:14 +0000
Manifest this update: Tue 11 Nov 2025 10:01:14 +0000
Manifest next update: Wed 12 Nov 2025 10:01:14 +0000
Files and hashes: 1: ACKW9RfobgNxFmGLo0q9xAh_d6k.roa (hash: sd4MSbt7R4RMvGdT2hp/M6b7EN9LmdrjGUMed4jtMaw=)
2: HpqS2vCMILRpG5Jc8DLlSR_grMA.crl (hash: +DxDS+7KfpyALDZtcbLxKV7FfDITdIZY1zfYsvO7/4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c7:f7:cd:e8:af:b9:37:32:6a:02:f7:fd:fd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Validity
Not Before: Nov 11 10:01:14 2025 GMT
Not After : Nov 12 10:01:14 2025 GMT
Subject: CN=bde69c2a240b254b207db5821835e208104cd7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:c6:f8:9c:5c:98:d9:9e:51:43:dc:f9:8f:
24:f4:03:5c:4e:0f:c1:69:66:71:f1:0d:71:17:e7:
a8:56:94:d1:75:2f:1f:e9:b2:73:ae:5f:15:76:71:
a9:f8:76:52:56:df:3d:3b:5f:e8:11:c8:63:e0:53:
bf:30:6f:e8:8a:77:2e:8b:b7:2b:56:d0:74:45:b9:
6f:fc:3d:aa:63:78:d3:23:88:b6:59:26:54:54:93:
a9:5b:e6:f3:e0:09:c1:cc:cc:de:c8:69:d6:86:ad:
41:58:d7:07:03:44:63:13:29:a4:07:4c:1b:81:80:
10:36:ef:f9:23:37:a2:1b:9b:1b:ad:8d:0f:c1:43:
fb:22:57:00:c6:cf:c3:02:57:d2:69:7d:50:3f:ae:
de:d9:44:ad:26:ef:c3:62:75:14:e2:6e:be:00:53:
15:f6:fe:bc:09:33:de:e6:4c:21:01:90:d0:4f:59:
f1:1d:91:bd:49:8b:29:6e:cd:2e:58:ef:aa:1e:c3:
d3:91:c9:79:55:a5:fe:88:69:a1:52:0e:c2:2d:ac:
c3:66:d4:fa:34:6e:6d:68:a0:21:6b:1b:ea:d7:26:
c0:fd:61:f7:7b:20:07:2e:ea:18:7b:29:9d:11:fd:
bd:07:fa:c0:57:37:d2:61:43:98:38:df:df:89:52:
94:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E6:9C:2A:24:0B:25:4B:20:7D:B5:82:18:35:E2:08:10:4C:D7:F9
X509v3 Authority Key Identifier:
keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:34:62:92:ac:0e:5d:86:04:e8:f5:a1:f7:9c:93:e4:db:bf:
ae:37:ba:17:39:f5:d3:df:a2:b4:f9:96:66:90:26:24:48:91:
97:95:26:dd:d9:02:1b:55:9d:57:81:b4:a7:46:b3:37:39:09:
ed:38:4b:0d:ff:f6:89:8c:0a:2e:7e:5e:52:93:b7:5c:a4:f7:
ae:54:2a:c8:ea:e1:b8:41:14:5f:dc:11:47:66:af:9b:95:32:
c9:a3:2a:d4:10:f7:b9:5e:95:4d:b9:70:b8:80:68:cc:13:51:
c1:4f:e0:ca:11:38:70:3b:71:90:cb:5d:4e:90:6b:cc:56:95:
75:59:ca:e6:4e:a5:38:ae:89:aa:ee:53:68:10:c4:f0:ec:42:
0e:84:cf:dc:a8:74:f5:b9:78:70:d4:b7:85:eb:f9:28:1f:31:
94:ae:71:4a:17:5f:61:5e:53:97:76:ec:14:ac:b5:e2:58:bd:
b5:10:43:8b:00:02:fb:b4:fb:a7:22:61:bb:2c:5a:59:98:8b:
b4:d6:e0:4d:1c:ec:3b:cc:b2:b1:0a:ae:76:20:2c:c5:16:32:
15:40:d6:a5:d0:e6:92:28:f6:0b:3c:7a:cf:1d:e8:9b:15:c4:
3d:49:9e:87:ea:ed:d8:3b:b6:53:55:3c:7b:46:cb:68:51:e2:
e4:d7:5f:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXMf3zeivuTcyagL3/f0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWE5MmRhZjA4YzIwYjQ2OTFiOTI1Y2YwMzJlNTQ5MWZl
MGFjYzAwHhcNMjUxMTExMTAwMTE0WhcNMjUxMTEyMTAwMTE0WjAzMTEwLwYDVQQD
EyhiZGU2OWMyYTI0MGIyNTRiMjA3ZGI1ODIxODM1ZTIwODEwNGNkN2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4jG+JxcmNmeUUPc+Y8k9ANcTg/B
aWZx8Q1xF+eoVpTRdS8f6bJzrl8VdnGp+HZSVt89O1/oEchj4FO/MG/oincui7cr
VtB0Rblv/D2qY3jTI4i2WSZUVJOpW+bz4AnBzMzeyGnWhq1BWNcHA0RjEymkB0wb
gYAQNu/5IzeiG5sbrY0PwUP7IlcAxs/DAlfSaX1QP67e2UStJu/DYnUU4m6+AFMV
9v68CTPe5kwhAZDQT1nxHZG9SYspbs0uWO+qHsPTkcl5VaX+iGmhUg7CLazDZtT6
NG5taKAhaxvq1ybA/WH3eyAHLuoYeymdEf29B/rAVzfSYUOYON/fiVKU1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3mnCokCyVLIH21ghg14ggQTNf5MB8GA1UdIwQY
MBaAFB6aktrwjCC0aRuSXPAy5Ukf4KzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMTQxMTUtOGNmOC00MGM4LTg3Yzgt
Y2U4MmViZTExYWM4LzEvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jMTQxMTUtOGNmOC00MGM4LTg3YzgtY2U4MmViZTExYWM4
LzEvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTRikqwO
XYYE6PWh95yT5Nu/rje6Fzn109+itPmWZpAmJEiRl5Um3dkCG1WdV4G0p0azNzkJ
7ThLDf/2iYwKLn5eUpO3XKT3rlQqyOrhuEEUX9wRR2avm5UyyaMq1BD3uV6VTblw
uIBozBNRwU/gyhE4cDtxkMtdTpBrzFaVdVnK5k6lOK6Jqu5TaBDE8OxCDoTP3Kh0
9bl4cNS3hev5KB8xlK5xShdfYV5Tl3bsFKy14li9tRBDiwAC+7T7pyJhuyxaWZiL
tNbgTRzsO8yysQqudiAsxRYyFUDWpdDmkij2Czx6zx3omxXEPUmeh+rt2Du2U1U8
e0bLaFHi5NdfqA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:36 2025 by rpki-client