Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
File: Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json)
Hash identifier: jrW+d1R3DnbLaPMIEW5i7cqYehsiaROCa5OBqQXB+4g=
Subject key identifier: C3:66:AF:40:2B:7A:CF:81:6F:F6:83:D1:F9:7B:77:D9:A7:A7:07:21
Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Certificate serial: 019A0F70BD45810E0FC5DA9A52C0F0223B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
Manifest number: 092A
Signing time: Thu 23 Oct 2025 05:00:37 +0000
Manifest this update: Thu 23 Oct 2025 05:00:37 +0000
Manifest next update: Fri 24 Oct 2025 05:00:37 +0000
Files and hashes: 1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: eIvQSkVoFjeDrwllwCAKnqe68iAAtEF8m6qP2HDwY7E=)
2: tNV0WLevvOhvE4Dz0Ty7ZfGL67s.roa (hash: gW+2wImKwe5IWbdJKawQnrwYg8cWQ3fvjIqklFDzDgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:70:bd:45:81:0e:0f:c5:da:9a:52:c0:f0:22:3b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Validity
Not Before: Oct 23 05:00:37 2025 GMT
Not After : Oct 24 05:00:37 2025 GMT
Subject: CN=c366af402b7acf816ff683d1f97b77d9a7a70721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:da:98:6e:2f:da:57:68:a3:6c:09:1e:aa:
58:be:8a:ad:23:4d:ca:a1:7c:79:da:de:cf:9a:d9:
f6:f9:2e:d5:ac:25:22:11:29:b3:40:a0:b0:60:68:
3b:8a:30:92:83:03:0a:c3:03:62:87:1d:6f:9a:8f:
80:e6:28:d0:e8:eb:9e:9b:99:7f:77:7f:ad:9d:65:
96:eb:09:94:fb:98:09:5b:56:26:6e:4b:bf:72:fa:
7f:54:0a:4d:36:4a:2d:50:e2:ec:d6:4c:3c:ad:75:
75:3e:72:a5:31:95:8f:c9:87:16:19:1f:7d:41:ee:
5d:a9:55:f1:f6:40:80:b7:c7:47:78:3c:9b:4e:ab:
09:0e:a3:63:03:a6:56:bb:8a:5a:ce:5f:6b:69:52:
34:d6:75:b6:5a:42:64:31:93:5a:dc:4a:9c:1d:41:
7c:04:b0:99:76:01:20:98:e5:4a:7c:c6:ec:9c:07:
08:95:6b:7f:9b:c0:e7:3d:31:ec:fa:ab:27:a7:f9:
46:6e:9d:16:6b:18:47:70:f2:46:9f:85:47:3c:53:
d9:2a:27:5c:73:ab:a4:01:7c:78:23:5d:cb:3d:30:
a5:97:f7:75:bc:6c:24:dd:65:6d:dd:65:6a:dd:58:
41:9c:8c:a6:e0:54:0a:78:4f:e8:1a:78:bc:67:62:
82:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:66:AF:40:2B:7A:CF:81:6F:F6:83:D1:F9:7B:77:D9:A7:A7:07:21
X509v3 Authority Key Identifier:
keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d8:64:0f:c2:a5:d1:20:75:d3:d7:65:f5:ec:d8:73:ec:e1:
66:f8:20:00:c3:b3:90:49:a6:14:54:aa:94:a3:80:0b:b6:0d:
dd:f8:aa:a5:67:25:23:bf:02:d2:51:b5:8f:a6:24:4d:c9:6d:
7a:cc:cb:78:5f:d0:3b:88:6f:0b:e3:0d:dc:3d:02:17:4b:ff:
40:a7:5b:a2:8f:60:d3:99:30:51:ca:bb:b7:e9:7e:4e:6b:33:
8f:b3:09:77:c1:81:da:c8:3b:6f:9f:3a:ea:53:38:bd:c8:51:
24:ab:08:e8:a2:73:37:52:ba:1a:39:c5:09:73:88:d7:2d:80:
ed:07:4a:79:29:23:09:a4:79:0f:e5:21:6c:08:e4:f1:3b:43:
05:07:5f:57:dd:b9:a7:f8:c3:a1:46:99:eb:d9:05:b2:b6:d6:
3b:ba:a1:dc:74:68:0a:9b:4a:b3:55:f0:82:3b:d1:3c:22:a0:
1e:23:37:69:28:fc:43:40:fe:e2:d3:52:b9:07:09:d8:cb:2e:
f0:02:d9:e5:97:dc:b1:ad:04:ec:a3:19:d9:e4:14:dd:08:32:
3e:54:27:6e:b6:94:33:87:15:07:ac:00:48:88:71:3c:ef:f3:
3e:14:d0:9a:5b:4a:7e:97:5b:0d:2b:d4:3b:8d:6b:f1:48:fd:
01:c8:b8:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoPcL1FgQ4PxdqaUsDwIjuNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmM2UzYmY1NjBkYTBiMTI2MThiMDI3YWFjYTYxZmFjNzhk
NWZmNWMwHhcNMjUxMDIzMDUwMDM3WhcNMjUxMDI0MDUwMDM3WjAzMTEwLwYDVQQD
EyhjMzY2YWY0MDJiN2FjZjgxNmZmNjgzZDFmOTdiNzdkOWE3YTcwNzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst7amG4v2ldoo2wJHqpYvoqtI03K
oXx52t7Pmtn2+S7VrCUiESmzQKCwYGg7ijCSgwMKwwNihx1vmo+A5ijQ6Ouem5l/
d3+tnWWW6wmU+5gJW1Ymbku/cvp/VApNNkotUOLs1kw8rXV1PnKlMZWPyYcWGR99
Qe5dqVXx9kCAt8dHeDybTqsJDqNjA6ZWu4pazl9raVI01nW2WkJkMZNa3EqcHUF8
BLCZdgEgmOVKfMbsnAcIlWt/m8DnPTHs+qsnp/lGbp0WaxhHcPJGn4VHPFPZKidc
c6ukAXx4I13LPTCll/d1vGwk3WVt3WVq3VhBnIym4FQKeE/oGni8Z2KC9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNmr0Ares+Bb/aD0fl7d9mnpwchMB8GA1UdIwQY
MBaAFB8+O/Vg2gsSYYsCeqymH6x41f9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2Et
ZWE1NzMxNjg0OTE3LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2EtZWE1NzMxNjg0OTE3
LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNhkD8Kl
0SB109dl9ezYc+zhZvggAMOzkEmmFFSqlKOAC7YN3fiqpWclI78C0lG1j6YkTclt
eszLeF/QO4hvC+MN3D0CF0v/QKdboo9g05kwUcq7t+l+Tmszj7MJd8GB2sg7b586
6lM4vchRJKsI6KJzN1K6GjnFCXOI1y2A7QdKeSkjCaR5D+UhbAjk8TtDBQdfV925
p/jDoUaZ69kFsrbWO7qh3HRoCptKs1XwgjvRPCKgHiM3aSj8Q0D+4tNSuQcJ2Msu
8ALZ5Zfcsa0E7KMZ2eQU3QgyPlQnbraUM4cVB6wASIhxPO/zPhTQmltKfpdbDSvU
O41r8Uj9Aci4ag==
-----END CERTIFICATE-----
Generated at Thu Oct 23 07:22:32 2025 by rpki-client