Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
File: hCIIK4U0vXrmP6gAimhbZfTNJZM.mft (raw, json)
Hash identifier: 71t574GAWgkQURQic0d7mi47pS5EzHLu0J/swmfLIwo=
Subject key identifier: A6:88:F4:39:C3:1D:B7:6D:CC:06:FF:A4:44:AA:9E:56:1E:93:8F:66
Authority key identifier: 84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
Certificate issuer: /CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Certificate serial: 019A72935DAB023194499788005E46B2925E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
Manifest number: 052B
Signing time: Tue 11 Nov 2025 11:00:51 +0000
Manifest this update: Tue 11 Nov 2025 11:00:51 +0000
Manifest next update: Wed 12 Nov 2025 11:00:51 +0000
Files and hashes: 1: hCIIK4U0vXrmP6gAimhbZfTNJZM.crl (hash: 6CQcioWSOokq9devWmAlcNigczl6pepQSJy96Oa2d9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5d:ab:02:31:94:49:97:88:00:5e:46:b2:92:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Validity
Not Before: Nov 11 11:00:51 2025 GMT
Not After : Nov 12 11:00:51 2025 GMT
Subject: CN=a688f439c31db76dcc06ffa444aa9e561e938f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:5b:4a:6d:4a:b1:31:d2:83:94:e5:92:5a:
a6:52:bc:79:d2:c6:68:fe:fb:b0:90:55:f8:7e:ee:
3b:e5:73:af:23:1d:70:11:9c:01:22:6a:e9:20:bd:
37:dd:91:da:f6:27:fe:2f:1f:2c:05:55:23:67:00:
07:eb:4d:54:74:3a:1a:87:2a:a8:ec:e6:a7:d2:1f:
de:9e:e7:9a:1c:76:1f:24:44:66:de:4b:e0:48:a5:
75:ff:a7:4a:30:63:c2:53:71:56:39:10:50:5b:36:
d6:5f:77:b6:85:d3:1b:1b:8c:3a:78:cb:35:ef:a7:
ce:b7:1d:7b:54:68:99:c4:32:c6:9e:47:5e:e4:b6:
f5:ad:51:5d:ff:df:97:4b:43:63:d7:bc:37:e2:7b:
bd:a7:10:3d:9e:a6:ce:44:92:ed:38:39:d2:ae:ba:
17:b1:ce:d2:35:58:1c:00:32:7d:88:02:2c:0b:ab:
2e:ca:be:09:6d:a4:df:fc:d0:79:22:57:9f:76:38:
df:f3:f1:ae:53:db:2e:08:eb:e5:73:7f:b2:12:05:
b2:8d:fa:f7:d3:ff:92:7d:a5:d6:ef:36:41:2e:13:
01:64:d7:8a:eb:9d:65:f1:45:ba:76:3b:7a:60:fe:
15:79:a4:10:4c:86:79:66:5a:54:00:43:91:0a:80:
87:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:88:F4:39:C3:1D:B7:6D:CC:06:FF:A4:44:AA:9E:56:1E:93:8F:66
X509v3 Authority Key Identifier:
keyid:84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:4b:6d:db:1e:08:c2:30:47:72:d2:31:50:f1:73:f6:66:8c:
a4:d0:4d:87:b4:ff:2b:a3:43:52:f6:53:71:79:36:92:b3:47:
f8:d6:a6:0b:55:4e:8e:e1:a1:75:8a:1c:a3:07:13:c2:9b:3f:
ee:0c:f8:dc:ec:06:8b:3d:03:a0:f6:3d:b7:54:de:66:f5:95:
5a:22:ac:b3:de:4b:67:0f:5e:3a:84:34:d1:12:e7:1e:89:6c:
d8:d3:e8:64:0d:02:d3:68:55:7b:06:6b:41:87:03:ae:4f:df:
61:d8:c7:44:30:f1:1d:d6:ab:60:1c:52:a6:94:d1:09:f3:75:
43:1e:3e:6e:47:6c:7c:d7:f8:f2:d5:29:d8:fb:cc:0f:03:06:
2c:ae:07:b5:17:19:59:f9:f7:d8:11:fa:12:77:19:d1:3b:f0:
a7:89:52:07:fd:7e:24:4e:f4:d1:7d:28:2c:d3:68:1d:85:b5:
66:f1:22:21:46:9c:9c:f7:33:cb:1b:98:25:ab:d4:42:25:70:
52:a5:c8:01:1f:df:2b:ec:90:86:12:52:65:89:33:e4:49:1b:
a5:4a:97:ff:ee:47:15:8a:2f:f3:4a:54:c0:7f:ad:e4:5a:85:
62:cd:a6:ab:08:bd:a9:cc:9a:62:d6:78:fd:c9:8a:d2:a0:b9:
c6:80:6b:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk12rAjGUSZeIAF5GspJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MjIwODJiODUzNGJkN2FlNjNmYTgwMDhhNjg1YjY1ZjRj
ZDI1OTMwHhcNMjUxMTExMTEwMDUxWhcNMjUxMTEyMTEwMDUxWjAzMTEwLwYDVQQD
EyhhNjg4ZjQzOWMzMWRiNzZkY2MwNmZmYTQ0NGFhOWU1NjFlOTM4ZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBxbSm1KsTHSg5TlklqmUrx50sZo
/vuwkFX4fu475XOvIx1wEZwBImrpIL033ZHa9if+Lx8sBVUjZwAH601UdDoahyqo
7Oan0h/enueaHHYfJERm3kvgSKV1/6dKMGPCU3FWORBQWzbWX3e2hdMbG4w6eMs1
76fOtx17VGiZxDLGnkde5Lb1rVFd/9+XS0Nj17w34nu9pxA9nqbORJLtODnSrroX
sc7SNVgcADJ9iAIsC6suyr4JbaTf/NB5Ilefdjjf8/GuU9suCOvlc3+yEgWyjfr3
0/+SfaXW7zZBLhMBZNeK651l8UW6djt6YP4VeaQQTIZ5ZlpUAEORCoCHGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaI9DnDHbdtzAb/pESqnlYek49mMB8GA1UdIwQY
MBaAFIQiCCuFNL165j+oAIpoW2X0zSWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaENJSUs0VTB2WHJtUDZnQWltaGJaZlROSlpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wOTRkYjMtZTM4OS00NDYxLWI1MGUt
NTgxNjlmYmVjZGZhLzEvaENJSUs0VTB2WHJtUDZnQWltaGJaZlROSlpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wOTRkYjMtZTM4OS00NDYxLWI1MGUtNTgxNjlmYmVjZGZh
LzEvaENJSUs0VTB2WHJtUDZnQWltaGJaZlROSlpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv0tt2x4I
wjBHctIxUPFz9maMpNBNh7T/K6NDUvZTcXk2krNH+NamC1VOjuGhdYocowcTwps/
7gz43OwGiz0DoPY9t1TeZvWVWiKss95LZw9eOoQ00RLnHols2NPoZA0C02hVewZr
QYcDrk/fYdjHRDDxHdarYBxSppTRCfN1Qx4+bkdsfNf48tUp2PvMDwMGLK4HtRcZ
Wfn32BH6EncZ0Tvwp4lSB/1+JE700X0oLNNoHYW1ZvEiIUacnPczyxuYJavUQiVw
UqXIAR/fK+yQhhJSZYkz5EkbpUqX/+5HFYov80pUwH+t5FqFYs2mqwi9qcyaYtZ4
/cmK0qC5xoBrsg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:42 2025 by rpki-client