Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
File: HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft (raw, json)
Hash identifier: K7ixtCNE9rrVI4GFpOxoe9rBv69wrlg59h10ke3Nupg=
Subject key identifier: F1:83:57:08:A8:ED:F1:42:6B:54:FD:D0:A3:26:2D:15:EB:AA:85:F8
Authority key identifier: 1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
Certificate issuer: /CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Certificate serial: 0199161A5D10BDEE3F310A7B12D767EAE372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
Manifest number: 0521
Signing time: Thu 04 Sep 2025 19:00:50 +0000
Manifest this update: Thu 04 Sep 2025 19:00:50 +0000
Manifest next update: Fri 05 Sep 2025 19:00:50 +0000
Files and hashes: 1: 6KBWfvurH0ryN0klNLmOfIfXS50.roa (hash: bQYxwK8PunB8us4iL4+kd3a48QuBW1TD23kpBG66hec=)
2: HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl (hash: sGzY1Qp37Gpxzidvz5HBRapVM3iV3SnB2rPX9Zp6jNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1a:5d:10:bd:ee:3f:31:0a:7b:12:d7:67:ea:e3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Validity
Not Before: Sep 4 19:00:50 2025 GMT
Not After : Sep 5 19:00:50 2025 GMT
Subject: CN=f1835708a8edf1426b54fdd0a3262d15ebaa85f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:f2:bd:68:8e:e6:3a:02:20:67:3a:2b:3f:
b9:5f:62:b7:4f:69:fe:ea:28:ec:06:14:88:4b:5d:
7e:ce:e6:7b:09:af:6e:93:95:61:0e:9d:b4:6e:32:
53:89:38:39:57:70:01:65:fd:17:75:c2:2b:6d:ae:
86:91:7f:58:a9:3f:b2:5f:f4:e8:d6:91:15:2b:a4:
85:3e:9e:28:42:99:4f:ee:90:ff:ee:f9:cb:f7:0d:
b5:20:83:f9:7e:f2:bc:b8:2b:ad:6c:3d:bc:e6:26:
94:77:7d:1c:48:3d:c9:98:6e:18:bf:cb:35:30:01:
38:aa:27:42:54:73:ff:51:de:e8:46:79:10:6f:07:
5a:b6:18:c1:5a:2c:da:98:64:e1:6b:cf:dc:cb:ee:
de:fc:7c:76:65:de:2c:c2:ab:c6:fe:33:9a:2f:c2:
8b:41:55:ef:7b:d5:49:d8:77:f7:d4:c4:27:a4:da:
62:04:86:e9:85:70:71:bc:6f:fc:18:ad:16:2d:cd:
b2:51:01:15:a8:92:12:97:fc:c2:d2:d4:89:35:ce:
a8:b5:34:63:50:80:0d:93:b1:be:b6:c2:af:30:e9:
34:b0:2d:c4:67:bc:f2:3f:a2:f1:00:3d:96:d7:f8:
00:73:60:8b:a7:65:1c:3a:2c:cc:bb:44:b1:fa:44:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:83:57:08:A8:ED:F1:42:6B:54:FD:D0:A3:26:2D:15:EB:AA:85:F8
X509v3 Authority Key Identifier:
keyid:1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:50:a1:3f:43:1b:93:5b:76:51:72:e4:e7:80:20:56:58:fd:
6f:02:55:65:4f:fe:82:64:3f:47:e6:2f:80:6d:88:26:da:67:
1b:fb:68:26:5c:d7:b6:39:f1:f4:68:f5:5e:83:be:c6:06:f7:
64:49:ef:ec:50:a1:41:5a:4a:fb:3c:72:d0:18:7d:50:f8:20:
45:7a:b6:08:80:97:18:9d:d6:65:79:05:5b:e8:cd:c9:56:20:
bc:ea:da:e6:8f:e5:30:55:b1:7b:75:c2:73:c6:8c:be:6c:a4:
12:82:61:f5:59:34:a3:e9:da:8b:f9:9f:0a:70:7e:4c:fc:76:
f3:f7:31:39:34:96:86:da:a0:03:52:f4:98:5f:af:79:de:30:
85:24:21:40:c2:ba:ad:2b:e5:eb:61:74:96:cc:3c:9c:bf:7d:
75:cf:68:04:09:0b:0b:68:1b:22:6a:fd:74:bf:4b:24:e2:63:
e9:6b:ae:ea:28:b2:31:de:dc:93:74:ea:6e:46:be:cc:2c:d7:
c9:9f:8b:55:e1:5d:08:85:d1:6c:04:30:ef:2d:aa:00:a7:50:
2c:eb:d4:a4:d1:77:ab:42:5e:6e:04:4e:58:61:41:38:ab:26:
f4:3a:40:54:12:ee:e0:d6:96:9f:24:c3:5a:36:76:fc:99:43:
2c:f4:2f:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkWGl0Qve4/MQp7Etdn6uNyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTI0NzhiMWNhNGNiYTAzMDk5MWJkOGNiNDRkOWYyNGY1
OWMwYjgwHhcNMjUwOTA0MTkwMDUwWhcNMjUwOTA1MTkwMDUwWjAzMTEwLwYDVQQD
EyhmMTgzNTcwOGE4ZWRmMTQyNmI1NGZkZDBhMzI2MmQxNWViYWE4NWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDHyvWiO5joCIGc6Kz+5X2K3T2n+
6ijsBhSIS11+zuZ7Ca9uk5VhDp20bjJTiTg5V3ABZf0XdcIrba6GkX9YqT+yX/To
1pEVK6SFPp4oQplP7pD/7vnL9w21IIP5fvK8uCutbD285iaUd30cSD3JmG4Yv8s1
MAE4qidCVHP/Ud7oRnkQbwdathjBWizamGTha8/cy+7e/Hx2Zd4swqvG/jOaL8KL
QVXve9VJ2Hf31MQnpNpiBIbphXBxvG/8GK0WLc2yUQEVqJISl/zC0tSJNc6otTRj
UIANk7G+tsKvMOk0sC3EZ7zyP6LxAD2W1/gAc2CLp2UcOizMu0Sx+kQyjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGDVwio7fFCa1T90KMmLRXrqoX4MB8GA1UdIwQY
MBaAFB8SR4scpMugMJkb2MtE2fJPWcC4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mNjIzYjYtYTE5OC00MDVjLTgzMjYt
MDlmMTUyNGE1MjQ2LzEvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mNjIzYjYtYTE5OC00MDVjLTgzMjYtMDlmMTUyNGE1MjQ2
LzEvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvVChP0Mb
k1t2UXLk54AgVlj9bwJVZU/+gmQ/R+YvgG2IJtpnG/toJlzXtjnx9Gj1XoO+xgb3
ZEnv7FChQVpK+zxy0Bh9UPggRXq2CICXGJ3WZXkFW+jNyVYgvOra5o/lMFWxe3XC
c8aMvmykEoJh9Vk0o+nai/mfCnB+TPx28/cxOTSWhtqgA1L0mF+ved4whSQhQMK6
rSvl62F0lsw8nL99dc9oBAkLC2gbImr9dL9LJOJj6Wuu6iiyMd7ck3Tqbka+zCzX
yZ+LVeFdCIXRbAQw7y2qAKdQLOvUpNF3q0JebgROWGFBOKsm9DpAVBLu4NaWnyTD
WjZ2/JlDLPQv4g==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:21 2025 by rpki-client