Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
File: HuXdRp9xw40T9Xxil5YiTMAg3BU.mft (raw, json)
Hash identifier: tkQ59hfS6yMxyEs3PxBFkklC32nEbUUgGnlCISPUYhk=
Subject key identifier: AA:A2:CF:8C:EC:34:76:A1:2A:0E:FA:CB:63:52:C9:06:24:90:52:95
Authority key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
Certificate issuer: /CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Certificate serial: 0199228CD84CEE4CC67905AD8F3449BE108B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
Manifest number: 0A11
Signing time: Sun 07 Sep 2025 05:01:19 +0000
Manifest this update: Sun 07 Sep 2025 05:01:19 +0000
Manifest next update: Mon 08 Sep 2025 05:01:19 +0000
Files and hashes: 1: HuXdRp9xw40T9Xxil5YiTMAg3BU.crl (hash: HS6XL98di9LD37Paqxea0iEw3oIqNB3lPyFizKMgK6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:d8:4c:ee:4c:c6:79:05:ad:8f:34:49:be:10:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Validity
Not Before: Sep 7 05:01:19 2025 GMT
Not After : Sep 8 05:01:19 2025 GMT
Subject: CN=aaa2cf8cec3476a12a0efacb6352c90624905295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:00:57:9b:36:ac:7f:1a:55:6f:7c:54:6a:
f8:75:1d:d3:6d:e3:ba:b6:86:84:71:72:be:44:45:
38:4c:e1:ed:27:73:31:04:6f:b4:24:4f:b6:16:16:
fa:f9:57:d9:30:0e:9f:cd:a7:23:24:33:ec:82:34:
af:46:17:67:fc:7f:04:16:5c:bb:74:c1:f9:10:eb:
df:c5:3e:d9:81:d2:a7:a3:e0:4d:9e:9c:96:52:ab:
e4:83:5a:3c:2b:86:ba:ef:c2:e1:66:72:15:bb:84:
d4:5f:3a:fb:5c:a7:e8:e8:a7:60:68:7c:a6:0e:dc:
38:09:ba:fb:7a:df:da:05:8f:6a:e7:4a:25:44:ce:
85:2a:1c:1d:78:eb:ef:fb:9e:50:b0:1b:99:24:0a:
4b:d9:a9:7e:cb:5a:fb:4d:33:5d:f9:ec:b8:c3:44:
38:61:65:06:65:12:e3:0c:d5:b9:2b:f5:80:03:57:
ca:08:b4:89:52:b2:85:73:da:d8:7b:7c:da:f2:6b:
67:27:78:09:2f:56:93:c2:a7:c4:ea:1b:01:a8:11:
c7:85:61:dd:7e:15:85:9b:28:3f:74:63:3b:e7:d7:
0e:f0:64:2c:91:ca:2f:2b:54:30:e9:51:36:f6:79:
bb:39:6e:a6:9a:7a:d0:18:31:9f:95:e5:4a:de:fd:
5b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A2:CF:8C:EC:34:76:A1:2A:0E:FA:CB:63:52:C9:06:24:90:52:95
X509v3 Authority Key Identifier:
keyid:1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:fc:05:27:1c:da:ec:bf:f8:13:02:d7:2b:93:74:ee:49:3f:
1d:27:00:01:df:e1:d9:1f:4b:51:da:5f:93:9f:32:67:ec:ac:
86:af:7a:6b:71:eb:76:b2:a9:f3:1b:f2:6f:7d:06:41:1c:68:
c7:83:a8:0f:2c:73:bf:01:76:25:dd:50:88:f3:2d:e9:d6:e6:
eb:1d:95:dd:93:fd:90:59:5d:58:dc:31:f2:2b:c8:37:c4:16:
9b:7b:5e:ea:8c:33:a2:69:66:c7:d5:cd:0d:de:2c:20:56:f8:
5f:92:44:18:1f:0a:92:2c:7b:d1:55:d8:ab:6f:ab:9b:3e:60:
6e:7d:90:15:d9:03:74:65:5a:b2:4f:b3:da:86:f7:5e:e1:80:
31:bc:68:45:96:e2:5c:c2:e7:74:2e:af:20:17:ad:7d:de:67:
a3:53:25:e2:fd:ef:42:74:ef:31:ab:41:3f:fc:ed:29:3f:83:
bc:49:bf:ec:07:0b:55:f7:93:0b:f5:74:13:f3:8f:fa:bc:1c:
f6:77:30:86:68:fd:10:c9:6e:01:ea:4d:6a:64:47:47:ee:2c:
70:a1:ba:a6:f8:25:e6:47:2d:9a:f2:b1:49:85:ae:28:79:b4:
5b:1d:86:e5:fc:76:99:17:0a:95:5a:0b:19:71:48:de:bc:63:
1f:55:d6:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijNhM7kzGeQWtjzRJvhCLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZTVkZDQ2OWY3MWMzOGQxM2Y1N2M2Mjk3OTYyMjRjYzAy
MGRjMTUwHhcNMjUwOTA3MDUwMTE5WhcNMjUwOTA4MDUwMTE5WjAzMTEwLwYDVQQD
EyhhYWEyY2Y4Y2VjMzQ3NmExMmEwZWZhY2I2MzUyYzkwNjI0OTA1Mjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDoAV5s2rH8aVW98VGr4dR3TbeO6
toaEcXK+REU4TOHtJ3MxBG+0JE+2Fhb6+VfZMA6fzacjJDPsgjSvRhdn/H8EFly7
dMH5EOvfxT7ZgdKno+BNnpyWUqvkg1o8K4a678LhZnIVu4TUXzr7XKfo6KdgaHym
Dtw4Cbr7et/aBY9q50olRM6FKhwdeOvv+55QsBuZJApL2al+y1r7TTNd+ey4w0Q4
YWUGZRLjDNW5K/WAA1fKCLSJUrKFc9rYe3za8mtnJ3gJL1aTwqfE6hsBqBHHhWHd
fhWFmyg/dGM759cO8GQskcovK1Qw6VE29nm7OW6mmnrQGDGfleVK3v1bmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqiz4zsNHahKg76y2NSyQYkkFKVMB8GA1UdIwQY
MBaAFB7l3UafccONE/V8YpeWIkzAINwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNmU4OTgtNjEyYy00ODVmLWIwMjct
ZjQyMjQzMDZiYTM1LzEvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yNmU4OTgtNjEyYy00ODVmLWIwMjctZjQyMjQzMDZiYTM1
LzEvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfwFJxza
7L/4EwLXK5N07kk/HScAAd/h2R9LUdpfk58yZ+yshq96a3HrdrKp8xvyb30GQRxo
x4OoDyxzvwF2Jd1QiPMt6dbm6x2V3ZP9kFldWNwx8ivIN8QWm3te6owzomlmx9XN
Dd4sIFb4X5JEGB8Kkix70VXYq2+rmz5gbn2QFdkDdGVask+z2ob3XuGAMbxoRZbi
XMLndC6vIBetfd5no1Ml4v3vQnTvMatBP/ztKT+DvEm/7AcLVfeTC/V0E/OP+rwc
9ncwhmj9EMluAepNamRHR+4scKG6pvgl5kctmvKxSYWuKHm0Wx2G5fx2mRcKlVoL
GXFI3rxjH1XWNA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:49 2025 by rpki-client