Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
File: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft (raw, json)
Hash identifier: McowZbAJv1uuJXEF0/Aod8w/azmbkXIv2s2kC7xXj14=
Subject key identifier: 79:6B:6A:D2:00:4F:27:D7:57:42:EB:C2:7B:3D:FB:2E:99:B8:B7:74
Authority key identifier: FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35
Certificate issuer: /CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
Certificate serial: 019A72262E585B655952D86429AECB9A696C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:36 +0000
Manifest this update: Tue 11 Nov 2025 09:01:36 +0000
Manifest next update: Wed 12 Nov 2025 09:01:36 +0000
Files and hashes: 1: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl (hash: s25BY3bqgp0UIyCCwo3l8aYFqUHgej/zLxT8MTFtZ2U=)
2: gj7G_bFbDmDYpYp6GKUqBVaPkf0.roa (hash: 636LllEYf1p/aMnvVspv63btZ6guwyZEmYUh7DiMd9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2e:58:5b:65:59:52:d8:64:29:ae:cb:9a:69:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
Validity
Not Before: Nov 11 09:01:36 2025 GMT
Not After : Nov 12 09:01:36 2025 GMT
Subject: CN=796b6ad2004f27d75742ebc27b3dfb2e99b8b774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b1:38:ab:32:98:a1:ad:bf:a7:4b:6a:a8:dd:
12:73:ce:7f:df:d1:b7:3f:aa:d5:03:25:08:6e:b5:
74:44:71:b9:ee:f8:5f:df:bd:35:72:b8:8e:37:7f:
48:cb:0c:de:a7:ed:1d:5e:63:4c:e4:80:83:0f:d1:
01:6f:f7:b6:50:cf:74:e8:d5:90:55:79:03:56:cc:
70:8f:11:78:a2:50:ef:69:1d:8e:a8:d9:8a:a1:53:
60:86:e0:6d:00:bd:be:ce:36:47:ee:de:c6:06:b7:
09:fb:18:68:fb:8b:d4:44:25:50:56:46:13:dd:17:
3b:8d:fd:3e:62:2d:48:7f:d2:f7:af:d6:9f:4e:e3:
32:8d:e2:16:31:8c:2d:8c:16:66:1e:0e:e4:9e:28:
86:61:6b:cb:bb:1d:0e:f5:b0:21:e9:d3:42:62:d7:
31:be:f1:e3:1d:0f:17:b4:d0:6f:1e:b6:fa:ef:5d:
64:6a:f2:00:ab:f8:65:cf:2e:94:85:0a:1a:f8:e4:
11:bd:03:4f:44:cf:21:cb:1b:c5:38:89:da:d3:8c:
c2:77:96:ff:6a:9f:b5:62:e5:21:e8:12:5f:dc:15:
96:88:34:31:6b:af:fc:82:6e:a3:74:0a:6f:c4:21:
b8:da:2b:89:03:1e:ef:5a:6b:84:b0:4f:06:2d:d4:
d7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6B:6A:D2:00:4F:27:D7:57:42:EB:C2:7B:3D:FB:2E:99:B8:B7:74
X509v3 Authority Key Identifier:
keyid:FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3a:fb:6f:10:68:71:66:35:0a:a9:ac:4e:89:b1:17:01:55:
f7:51:b3:a1:72:fd:cd:3e:99:c0:ac:d6:18:98:fc:56:9f:d0:
b5:19:19:87:b1:15:4b:7f:b6:d4:7e:5b:a0:38:37:52:b0:e0:
a0:45:57:1d:e7:e2:d1:f7:2a:e1:b4:2d:82:7d:34:82:43:cd:
d4:55:3b:3c:b3:13:52:f6:95:93:ea:e3:4f:18:d5:ee:b9:de:
85:3c:20:2a:97:e4:f2:d3:76:b3:75:23:43:22:89:2d:fa:0a:
57:0a:89:0b:1e:f5:d9:d0:43:cd:ef:20:27:bd:13:b8:00:04:
ef:22:b4:fa:ac:0c:58:da:07:28:c4:14:5b:60:69:03:16:6d:
53:cc:ed:fc:e8:5f:47:8f:88:81:b3:3e:0c:d4:c1:54:1b:66:
2c:60:38:c0:35:d9:27:85:ad:9b:b5:65:49:89:37:8d:55:39:
81:68:27:39:c8:38:7f:5c:55:8a:df:44:fa:7a:5f:af:e7:85:
55:f7:81:e2:20:2e:f2:ce:58:42:da:2c:f6:d0:94:ee:09:b6:
58:b5:a2:1e:88:36:19:2e:1c:c0:3f:5b:6d:6b:f5:c6:3d:a4:
86:5b:41:12:6a:c3:1e:b2:08:3b:3a:39:d2:e7:e6:20:6e:d7:
8d:1a:9d:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJi5YW2VZUthkKa7LmmlsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjN2NmYWIyNGYxNWNkMjYyMTc2YWYwZDFjY2Q4ODEyN2Ri
ZjYzMzUwHhcNMjUxMTExMDkwMTM2WhcNMjUxMTEyMDkwMTM2WjAzMTEwLwYDVQQD
Eyg3OTZiNmFkMjAwNGYyN2Q3NTc0MmViYzI3YjNkZmIyZTk5YjhiNzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bE4qzKYoa2/p0tqqN0Sc85/39G3
P6rVAyUIbrV0RHG57vhf3701criON39Iywzep+0dXmNM5ICDD9EBb/e2UM906NWQ
VXkDVsxwjxF4olDvaR2OqNmKoVNghuBtAL2+zjZH7t7GBrcJ+xho+4vURCVQVkYT
3Rc7jf0+Yi1If9L3r9afTuMyjeIWMYwtjBZmHg7kniiGYWvLux0O9bAh6dNCYtcx
vvHjHQ8XtNBvHrb6711kavIAq/hlzy6UhQoa+OQRvQNPRM8hyxvFOIna04zCd5b/
ap+1YuUh6BJf3BWWiDQxa6/8gm6jdApvxCG42iuJAx7vWmuEsE8GLdTX0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlratIATyfXV0Lrwns9+y6ZuLd0MB8GA1UdIwQY
MBaAFPx8+rJPFc0mIXavDRzNiBJ9v2M1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hZjJhZGItZmY2OS00YjA0LWE4MDYt
NDZkZDEyMDVkY2ZmLzEvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9hZjJhZGItZmY2OS00YjA0LWE4MDYtNDZkZDEyMDVkY2Zm
LzEvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTr7bxBo
cWY1CqmsTomxFwFV91GzoXL9zT6ZwKzWGJj8Vp/QtRkZh7EVS3+21H5boDg3UrDg
oEVXHefi0fcq4bQtgn00gkPN1FU7PLMTUvaVk+rjTxjV7rnehTwgKpfk8tN2s3Uj
QyKJLfoKVwqJCx712dBDze8gJ70TuAAE7yK0+qwMWNoHKMQUW2BpAxZtU8zt/Ohf
R4+IgbM+DNTBVBtmLGA4wDXZJ4Wtm7VlSYk3jVU5gWgnOcg4f1xVit9E+npfr+eF
VfeB4iAu8s5YQtos9tCU7gm2WLWiHog2GS4cwD9bbWv1xj2khltBEmrDHrIIOzo5
0ufmIG7XjRqdOQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:17 2025 by rpki-client