Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: k98ZIpMi2k5dU2AM6fET8XXYJbb1B3JEkhsjbZJvqM0=
Subject key identifier: 18:89:C3:06:FC:8E:14:04:F0:D5:4D:21:51:08:65:69:7C:DD:E3:5C
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 019A706E9128A31830DAE238BE25CDCDD2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 01:01:25 +0000
Manifest this update: Tue 11 Nov 2025 01:01:25 +0000
Manifest next update: Wed 12 Nov 2025 01:01:25 +0000
Files and hashes: 1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: F7Ml9hFBYMR8zTNy2ifudzj7y94/HyJoK7M8Hgdkc4E=)
2: cZTdH7vf_vUsZSA9Bkrj9O3ow_4.roa (hash: nta1g/RvN2MBRkggXlvKzqyMNronRUI3y0vVkrzhbVE=)
3: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (hash: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:91:28:a3:18:30:da:e2:38:be:25:cd:cd:d2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Nov 11 01:01:25 2025 GMT
Not After : Nov 12 01:01:25 2025 GMT
Subject: CN=1889c306fc8e1404f0d54d21510865697cdde35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:72:c2:85:7d:c5:c6:5b:99:ab:35:bc:03:62:
be:02:85:ed:15:7a:f2:c4:85:32:32:95:b1:5e:3d:
24:58:01:a8:6e:4b:62:1d:68:cb:b3:a2:26:3c:3f:
13:c4:5e:27:36:9e:ff:10:a8:39:60:c7:c9:be:a6:
c8:ac:30:0d:74:ad:a0:2b:29:09:22:bd:06:54:e2:
97:f0:0f:76:de:b5:c6:b7:d1:e0:d8:41:1c:40:b9:
3b:5f:2c:b8:a2:e8:e2:75:37:67:3c:a9:5f:93:fd:
5a:2f:b5:87:e8:22:7b:ad:e4:c8:3b:ae:3a:3a:cf:
a0:ab:82:85:9a:8d:9e:01:da:bf:35:1e:80:dc:8f:
60:66:fc:c9:b5:57:f6:f9:bb:72:23:e2:1e:43:1c:
4d:df:37:3c:79:b4:a4:29:dd:72:d0:b1:04:4f:c3:
50:cf:35:45:36:b0:cf:a6:4a:9b:d3:cb:37:3c:bc:
f1:a5:f7:f6:7f:8c:5d:08:8d:5c:d5:66:b5:fa:f6:
2a:66:0a:80:bd:5d:ed:d7:a8:c2:ca:7f:e9:1c:f6:
10:d8:35:fb:a2:1b:88:fa:61:cc:70:b7:a3:a4:e4:
2d:bd:95:f0:30:c0:b4:10:fa:13:70:98:30:25:02:
0b:b2:00:25:f0:1b:97:aa:13:0d:a1:17:2f:e8:23:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:89:C3:06:FC:8E:14:04:F0:D5:4D:21:51:08:65:69:7C:DD:E3:5C
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:01:9b:fb:d6:5d:e2:f1:b0:ef:6a:f2:0e:3f:ac:1f:49:75:
f0:1e:59:87:c1:b9:ba:25:a5:3a:2d:8a:3c:de:b8:06:ae:50:
63:a5:07:15:fa:d7:59:f0:7a:66:05:9f:dc:e4:45:7a:74:1f:
27:f0:2a:f8:e5:bb:8e:95:66:ff:98:bb:83:84:e6:b3:8c:0f:
45:ee:fb:89:e4:83:25:f0:88:4a:fa:34:cf:b0:60:e2:66:fe:
e3:d6:4d:98:1f:76:67:a2:e1:38:89:5b:6e:63:7f:d8:52:ee:
2e:cd:07:a1:23:e5:e7:66:0f:6c:be:69:6f:ce:94:04:95:05:
77:c2:31:59:5b:66:88:06:ea:8d:33:5b:45:25:61:e8:38:23:
cf:9a:93:f5:b2:19:03:e1:dd:b8:08:05:4e:18:04:fa:17:1f:
d9:69:bb:69:1e:1a:9c:5e:68:a9:08:4e:4e:d6:b2:11:20:7f:
a6:38:00:1f:1a:14:21:fd:16:be:35:3b:4a:a0:a8:bd:1d:14:
70:b2:6e:71:82:80:eb:35:c8:a2:a0:bc:aa:c1:ba:8b:0f:c2:
0d:da:de:d8:ab:22:9c:67:24:aa:08:a6:59:10:ad:34:09:5b:
1b:18:f5:76:fc:47:d9:c0:71:4e:93:51:bd:ad:f4:5d:a2:25:
92:f0:a1:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbpEooxgw2uI4viXNzdLIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZjkzMTJjZWE1YWE3NDM4YjRkOTBjMDgzNmM4MmYwNTBh
MmEwMGEwHhcNMjUxMTExMDEwMTI1WhcNMjUxMTEyMDEwMTI1WjAzMTEwLwYDVQQD
EygxODg5YzMwNmZjOGUxNDA0ZjBkNTRkMjE1MTA4NjU2OTdjZGRlMzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHLChX3FxluZqzW8A2K+AoXtFXry
xIUyMpWxXj0kWAGobktiHWjLs6ImPD8TxF4nNp7/EKg5YMfJvqbIrDANdK2gKykJ
Ir0GVOKX8A923rXGt9Hg2EEcQLk7Xyy4oujidTdnPKlfk/1aL7WH6CJ7reTIO646
Os+gq4KFmo2eAdq/NR6A3I9gZvzJtVf2+btyI+IeQxxN3zc8ebSkKd1y0LEET8NQ
zzVFNrDPpkqb08s3PLzxpff2f4xdCI1c1Wa1+vYqZgqAvV3t16jCyn/pHPYQ2DX7
ohuI+mHMcLejpOQtvZXwMMC0EPoTcJgwJQILsgAl8BuXqhMNoRcv6CO/PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiJwwb8jhQE8NVNIVEIZWl83eNcMB8GA1UdIwQY
MBaAFB75MSzqWqdDi02QwINsgvBQoqAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lODQ0ZTgtZDJmMC00NTE0LWI0MDUt
MGI4MDFiZjgwZDUzLzEvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9lODQ0ZTgtZDJmMC00NTE0LWI0MDUtMGI4MDFiZjgwZDUz
LzEvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAGb+9Zd
4vGw72ryDj+sH0l18B5Zh8G5uiWlOi2KPN64Bq5QY6UHFfrXWfB6ZgWf3ORFenQf
J/Aq+OW7jpVm/5i7g4Tms4wPRe77ieSDJfCISvo0z7Bg4mb+49ZNmB92Z6LhOIlb
bmN/2FLuLs0HoSPl52YPbL5pb86UBJUFd8IxWVtmiAbqjTNbRSVh6Dgjz5qT9bIZ
A+HduAgFThgE+hcf2Wm7aR4anF5oqQhOTtayESB/pjgAHxoUIf0WvjU7SqCovR0U
cLJucYKA6zXIoqC8qsG6iw/CDdre2KsinGckqgimWRCtNAlbGxj1dvxH2cBxTpNR
va30XaIlkvCh/w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:14 2025 by rpki-client