Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
File: H6EtaHxiehgvgdTMyz8yIBhh9nc.mft (raw, json)
Hash identifier: e9N0TTr2+9BoLREy8cjQ+yyhRSVuc0bqob0/64rIB7A=
Subject key identifier: C4:38:0C:82:F3:A2:41:79:AE:C3:C4:F0:E8:42:C2:02:70:E3:69:2A
Authority key identifier: 1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
Certificate issuer: /CN=1fa12d687c627a182f81d4cccb3f32201861f677
Certificate serial: 019A714A1906C60765A4A36E62654E9CA62E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
Manifest number: 1726
Signing time: Tue 11 Nov 2025 05:01:12 +0000
Manifest this update: Tue 11 Nov 2025 05:01:12 +0000
Manifest next update: Wed 12 Nov 2025 05:01:12 +0000
Files and hashes: 1: H6EtaHxiehgvgdTMyz8yIBhh9nc.crl (hash: U16j0iZ5QtWEqm/9Xz81m2n2NzyWYmOCY7RRUdOXM+M=)
2: TYWepdwzCmiIVwEz7K8yZe03CRw.roa (hash: Gskq7xmpmSlLRwYuMMpLlLQSUWpIBfZkyQHS0PN6dOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:19:06:c6:07:65:a4:a3:6e:62:65:4e:9c:a6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa12d687c627a182f81d4cccb3f32201861f677
Validity
Not Before: Nov 11 05:01:12 2025 GMT
Not After : Nov 12 05:01:12 2025 GMT
Subject: CN=c4380c82f3a24179aec3c4f0e842c20270e3692a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:1e:ee:4f:b2:27:f1:63:93:b6:27:b3:e2:
83:b1:ef:cc:3b:23:d7:f6:7d:44:9e:ef:2f:b6:35:
57:d3:b1:47:5f:85:22:6d:e6:da:ce:55:36:bb:f9:
9e:4b:10:c6:fd:76:f6:3e:ef:1e:e0:15:ef:e6:97:
8a:75:13:fe:12:92:b0:3b:05:d9:8a:cb:3f:7a:18:
05:2e:30:4d:13:55:31:40:cd:de:72:79:22:bc:49:
be:df:39:30:86:83:8d:e4:70:12:a8:eb:a8:f1:dd:
7f:e3:80:24:c4:10:60:cf:40:2b:cb:04:8a:4e:1f:
92:f3:4f:50:b1:4f:e3:1b:06:2e:93:84:78:70:72:
85:50:c3:77:95:fb:05:cb:da:cc:da:10:35:34:ea:
58:4a:c9:e0:05:d8:67:11:a4:89:72:32:9b:f0:32:
d5:3d:4c:cd:33:24:64:99:3d:ee:76:5b:f1:61:3e:
95:b8:85:10:37:f9:2b:a7:a4:e4:af:9b:c3:55:f3:
75:c7:93:64:10:df:f5:da:ce:8d:f4:23:9d:35:98:
2d:b9:e0:38:ea:82:cc:02:36:53:2a:06:bc:b6:79:
5e:3b:58:91:be:48:52:9d:9e:b0:ea:ee:e7:5a:7e:
fa:31:6d:9d:63:12:16:67:06:f7:09:42:fb:16:58:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:38:0C:82:F3:A2:41:79:AE:C3:C4:F0:E8:42:C2:02:70:E3:69:2A
X509v3 Authority Key Identifier:
keyid:1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:73:31:ba:0b:38:05:62:ea:70:dc:74:65:dd:69:94:00:b8:
ca:fb:d4:09:65:87:23:6d:49:a4:5e:46:99:3d:72:02:a8:e3:
cc:f7:c7:e6:6b:7b:9c:f9:1d:03:09:0a:65:db:77:19:cd:b9:
62:6d:31:a7:e5:5e:64:32:9d:74:e4:e6:63:5a:60:1a:b8:51:
c2:12:2a:7f:27:31:45:f6:c7:b4:33:e2:6a:3e:56:5a:84:eb:
e9:13:a2:36:c2:20:eb:4a:0b:3e:14:08:a2:20:f2:67:2f:83:
ac:9b:38:a7:9a:2a:cf:75:16:49:1b:79:02:6d:70:14:fe:fb:
e9:15:e4:41:f9:a7:0a:41:7a:9c:43:22:fc:5e:f9:33:4c:4a:
2f:5e:a1:03:38:dc:23:23:62:4d:7c:be:d9:6c:17:55:30:6d:
1b:03:27:f2:48:69:0e:d4:f4:13:a9:4a:31:40:39:4b:53:94:
27:aa:e1:e9:60:35:f1:d1:e6:b7:6a:3c:08:9f:e6:99:61:80:
e9:12:80:73:5b:ff:c4:ed:60:2f:e1:44:e3:26:46:01:35:e4:
0a:11:99:19:b1:3e:34:db:14:bb:db:41:ed:6f:16:bb:f5:0a:
5f:04:31:c7:1d:a3:53:8c:eb:f9:df:e3:a6:be:bf:96:e9:40:
a8:c0:67:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxShkGxgdlpKNuYmVOnKYuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYTEyZDY4N2M2MjdhMTgyZjgxZDRjY2NiM2YzMjIwMTg2
MWY2NzcwHhcNMjUxMTExMDUwMTEyWhcNMjUxMTEyMDUwMTEyWjAzMTEwLwYDVQQD
EyhjNDM4MGM4MmYzYTI0MTc5YWVjM2M0ZjBlODQyYzIwMjcwZTM2OTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7se7k+yJ/Fjk7Yns+KDse/MOyPX
9n1Enu8vtjVX07FHX4UibebazlU2u/meSxDG/Xb2Pu8e4BXv5peKdRP+EpKwOwXZ
iss/ehgFLjBNE1UxQM3ecnkivEm+3zkwhoON5HASqOuo8d1/44AkxBBgz0ArywSK
Th+S809QsU/jGwYuk4R4cHKFUMN3lfsFy9rM2hA1NOpYSsngBdhnEaSJcjKb8DLV
PUzNMyRkmT3udlvxYT6VuIUQN/krp6Tkr5vDVfN1x5NkEN/12s6N9COdNZgtueA4
6oLMAjZTKga8tnleO1iRvkhSnZ6w6u7nWn76MW2dYxIWZwb3CUL7FlhzYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQ4DILzokF5rsPE8OhCwgJw42kqMB8GA1UdIwQY
MBaAFB+hLWh8YnoYL4HUzMs/MiAYYfZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDZFdGFIeGllaGd2Z2RUTXl6OHlJQmhoOW5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80YzI5ZDAtNThlYS00OGU4LWJhYzct
ODljY2MyZDQ1NjNiLzEvSDZFdGFIeGllaGd2Z2RUTXl6OHlJQmhoOW5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC80YzI5ZDAtNThlYS00OGU4LWJhYzctODljY2MyZDQ1NjNi
LzEvSDZFdGFIeGllaGd2Z2RUTXl6OHlJQmhoOW5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHMxugs4
BWLqcNx0Zd1plAC4yvvUCWWHI21JpF5GmT1yAqjjzPfH5mt7nPkdAwkKZdt3Gc25
Ym0xp+VeZDKddOTmY1pgGrhRwhIqfycxRfbHtDPiaj5WWoTr6ROiNsIg60oLPhQI
oiDyZy+DrJs4p5oqz3UWSRt5Am1wFP776RXkQfmnCkF6nEMi/F75M0xKL16hAzjc
IyNiTXy+2WwXVTBtGwMn8khpDtT0E6lKMUA5S1OUJ6rh6WA18dHmt2o8CJ/mmWGA
6RKAc1v/xO1gL+FE4yZGATXkChGZGbE+NNsUu9tB7W8Wu/UKXwQxxx2jU4zr+d/j
pr6/lulAqMBnww==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:40 2025 by rpki-client