Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier: 8z7s15gGokh1BXmATgc785gd5OQibZSIAibvPCuGHvI=
Subject key identifier: A0:33:6E:91:44:DE:76:BF:73:70:B3:52:BE:35:75:D5:E6:5F:AD:20
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial: 019A72938557851C277F204144DDC4F25A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number: 0F35
Signing time: Tue 11 Nov 2025 11:01:01 +0000
Manifest this update: Tue 11 Nov 2025 11:01:01 +0000
Manifest next update: Wed 12 Nov 2025 11:01:01 +0000
Files and hashes: 1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: qE61roYPWlrnmRNOkPgIRxURSZ7Ase/n1HKKhqhUlu4=)
2: UGBpl3oHNIS2Cd9_Sczzu0VBiiE.roa (hash: wSoOj4MFImWuZ5Z3plItyJ7lOAnvxzo7omn+Vgq6Vio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:85:57:85:1c:27:7f:20:41:44:dd:c4:f2:5a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Validity
Not Before: Nov 11 11:01:01 2025 GMT
Not After : Nov 12 11:01:01 2025 GMT
Subject: CN=a0336e9144de76bf7370b352be3575d5e65fad20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:38:ea:02:4d:c3:f6:76:49:f7:33:83:2a:
f7:92:05:63:45:1d:ea:b0:62:77:7d:12:a2:8f:30:
a0:24:45:04:a1:07:5e:7a:5e:9b:3b:97:c5:7c:da:
4d:81:4a:01:67:59:e5:4a:d7:4a:46:ca:51:d0:38:
03:22:50:52:42:9d:71:ff:a4:dd:ac:f8:4f:5d:d0:
dd:31:c6:bb:45:44:f2:da:cd:f3:9e:4b:b3:16:b7:
3f:57:a3:c8:ee:32:04:ea:83:18:f0:92:97:f9:45:
49:07:60:0d:68:ea:86:72:0f:81:b8:de:ea:b4:ab:
fc:60:de:ab:6b:7d:52:a1:83:24:50:44:19:4d:63:
9f:23:80:51:18:42:f1:3b:69:3d:4f:a8:9a:de:f6:
c7:a7:a6:29:b0:32:70:a3:63:e9:51:8d:39:0e:8b:
37:95:4d:2a:e3:dc:99:13:96:c6:d0:e1:20:eb:06:
35:49:e5:72:8c:0b:51:37:f7:11:5f:11:e3:86:38:
29:ad:16:01:fd:d2:b0:6a:4b:b6:59:9f:f7:eb:17:
81:1c:69:e7:dd:b8:69:eb:7d:55:e3:2c:00:47:73:
b4:38:21:4b:89:dc:1e:a6:c6:72:e3:b5:f3:e5:68:
0b:7b:20:28:20:73:20:bd:59:34:91:21:fa:40:90:
14:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:33:6E:91:44:DE:76:BF:73:70:B3:52:BE:35:75:D5:E6:5F:AD:20
X509v3 Authority Key Identifier:
keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3e:33:7e:b3:af:4c:94:2a:1a:60:d2:30:ea:61:47:0f:d8:
46:b1:3f:e2:62:07:7e:71:a7:f7:08:78:cb:7f:ce:cf:f9:5f:
7c:5f:32:5c:10:17:32:94:68:61:da:21:01:0f:74:f7:17:5e:
07:88:6b:9f:01:82:12:69:80:03:7c:0d:f6:3d:bb:13:94:19:
17:0a:85:61:9f:f2:16:07:98:64:5e:d4:38:d3:e1:56:cf:15:
5a:0c:be:44:2f:da:d4:b7:a0:95:52:fa:95:61:59:b0:4b:0a:
42:49:cf:f6:65:3e:6a:6e:db:1e:ad:a3:06:ed:e2:0b:fc:98:
45:a3:0f:c7:13:f7:45:b7:85:6b:fd:e6:1e:4f:71:0a:9d:fb:
bf:24:8a:34:0f:54:24:ae:f2:01:12:6a:e2:00:11:d8:89:5c:
3d:59:9f:51:13:5a:cf:6f:a1:01:29:d5:2b:1c:e5:01:10:ce:
a3:6d:95:b5:aa:78:f7:0e:83:c9:c2:e1:2a:9c:78:4c:f1:26:
8f:be:4a:bd:dd:52:72:32:8f:fa:e0:3e:e4:4d:7c:22:58:13:
c2:91:90:16:a5:c7:24:bb:01:05:85:b3:62:41:2d:3e:17:59:
8f:c2:32:cf:85:50:18:8d:01:2f:7f:80:1b:e1:2a:9f:ac:d5:
76:ac:f8:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk4VXhRwnfyBBRN3E8lpXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzhiMTgzNmRlY2FiNGZmNWJkZmE1ZTM3N2EzZGY4N2Yx
OGZjMGYwHhcNMjUxMTExMTEwMTAxWhcNMjUxMTEyMTEwMTAxWjAzMTEwLwYDVQQD
EyhhMDMzNmU5MTQ0ZGU3NmJmNzM3MGIzNTJiZTM1NzVkNWU2NWZhZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3046gJNw/Z2Sfczgyr3kgVjRR3q
sGJ3fRKijzCgJEUEoQdeel6bO5fFfNpNgUoBZ1nlStdKRspR0DgDIlBSQp1x/6Td
rPhPXdDdMca7RUTy2s3znkuzFrc/V6PI7jIE6oMY8JKX+UVJB2ANaOqGcg+BuN7q
tKv8YN6ra31SoYMkUEQZTWOfI4BRGELxO2k9T6ia3vbHp6YpsDJwo2PpUY05Dos3
lU0q49yZE5bG0OEg6wY1SeVyjAtRN/cRXxHjhjgprRYB/dKwaku2WZ/36xeBHGnn
3bhp631V4ywAR3O0OCFLidwepsZy47Xz5WgLeyAoIHMgvVk0kSH6QJAUpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAzbpFE3na/c3CzUr41ddXmX60gMB8GA1UdIwQY
MBaAFBx4sYNt7KtP9b36Xjd6Pfh/GPwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jNjE1MmQtMWM5MC00MGNjLWEyMDYt
ZWMzY2IzNmQxMDI2LzEvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jNjE1MmQtMWM5MC00MGNjLWEyMDYtZWMzY2IzNmQxMDI2
LzEvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbT4zfrOv
TJQqGmDSMOphRw/YRrE/4mIHfnGn9wh4y3/Oz/lffF8yXBAXMpRoYdohAQ909xde
B4hrnwGCEmmAA3wN9j27E5QZFwqFYZ/yFgeYZF7UONPhVs8VWgy+RC/a1LeglVL6
lWFZsEsKQknP9mU+am7bHq2jBu3iC/yYRaMPxxP3RbeFa/3mHk9xCp37vySKNA9U
JK7yARJq4gAR2IlcPVmfURNaz2+hASnVKxzlARDOo22Vtap49w6DycLhKpx4TPEm
j75Kvd1ScjKP+uA+5E18IlgTwpGQFqXHJLsBBYWzYkEtPhdZj8Iyz4VQGI0BL3+A
G+Eqn6zVdqz4VA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:43 2025 by rpki-client