Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
File: HqsBKTydvRqdatyGGCtSDNF2wAc.mft (raw, json)
Hash identifier: ZF2hLwuuaqTo40BRIAqtcGmEGOkMLwRij9mMfEIKVd8=
Subject key identifier: BA:15:0F:BD:1D:6F:6F:ED:9F:12:39:7E:68:1D:AD:12:19:DD:EC:7A
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial: 019A4EF460399DB9847DBB1C4B1919AE7A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
Manifest number: 14BF
Signing time: Tue 04 Nov 2025 13:00:29 +0000
Manifest this update: Tue 04 Nov 2025 13:00:29 +0000
Manifest next update: Wed 05 Nov 2025 13:00:29 +0000
Files and hashes: 1: HqsBKTydvRqdatyGGCtSDNF2wAc.crl (hash: 8I9f7RQXRG07Ov6acIuWWCevD7j0yn4gkVrNdchqihA=)
2: ub3jhWL8KmU55QyzLWlOgggBar8.roa (hash: uMoRi+7KkYToPIHx+yE4FpiPieRkes7ACBQfGkW0VCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:60:39:9d:b9:84:7d:bb:1c:4b:19:19:ae:7a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Validity
Not Before: Nov 4 13:00:29 2025 GMT
Not After : Nov 5 13:00:29 2025 GMT
Subject: CN=ba150fbd1d6f6fed9f12397e681dad1219ddec7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:95:ed:d0:c1:a0:73:af:5b:41:ea:90:b5:
59:6e:ba:2a:74:45:a9:ba:ee:f3:95:e6:08:72:5f:
ac:1c:97:9d:df:d3:86:5d:b1:fb:db:38:f2:89:0e:
57:3a:78:58:e7:91:21:24:d9:bf:49:db:df:e4:69:
66:f7:31:e1:83:4a:20:ed:75:26:93:4a:2d:d6:80:
fd:82:e1:73:62:7c:bb:bd:f6:3b:9f:30:b7:1c:9b:
68:6a:92:1b:50:d8:57:8d:08:1c:cb:29:e7:bd:16:
11:4e:b8:7d:63:43:38:18:35:76:92:e4:4a:6c:cd:
a2:10:25:97:a8:8b:b8:de:bf:c0:2d:c9:6a:d6:3a:
b7:cb:25:ac:0a:e7:07:f3:b7:57:e2:e8:79:c4:f0:
4e:39:b2:de:39:b0:46:91:96:6c:ec:af:71:d2:5c:
f2:2f:07:e4:9f:6d:01:6f:8a:e4:a9:d2:22:92:cf:
97:5c:83:db:d2:f7:90:d8:49:c6:3a:f9:91:d0:d2:
7e:51:ea:7f:f4:c0:19:97:94:27:2c:1e:55:37:d9:
83:31:9c:05:f9:ae:99:21:69:c2:04:6e:6e:91:92:
8e:5a:3d:e4:46:1c:fd:89:51:7d:64:a4:d5:5e:d7:
8e:18:97:29:e1:f9:44:72:34:4a:84:d7:f8:23:75:
f0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:15:0F:BD:1D:6F:6F:ED:9F:12:39:7E:68:1D:AD:12:19:DD:EC:7A
X509v3 Authority Key Identifier:
keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f7:22:3c:c5:59:4c:a0:d6:aa:18:fa:3d:8f:d8:c9:3f:aa:
d6:a8:70:c2:2e:a8:4d:dd:64:0b:0c:28:07:27:68:84:02:09:
4b:57:aa:a1:6f:11:a5:55:4e:ff:37:eb:36:06:e8:41:d6:7a:
f0:66:58:c8:19:2c:dc:4c:28:1c:ce:91:54:98:74:eb:73:56:
5f:b5:4e:ad:ec:67:3a:f8:11:61:54:c8:dd:b7:8b:75:26:95:
8c:c1:d6:95:ee:c9:4d:d3:2f:03:90:95:4e:5e:f2:3b:89:84:
11:b0:00:1c:14:26:7b:bf:49:ce:5e:f0:7f:5b:81:ce:f2:07:
1a:e6:5d:f5:c7:95:b0:62:3b:89:4f:c0:61:94:18:14:b4:3b:
16:14:c5:bb:53:7f:c7:95:70:5f:65:ed:69:aa:71:af:87:9d:
1d:80:33:cf:47:a4:ff:1c:ab:ec:86:55:7d:d0:4a:00:ef:09:
28:49:cd:7f:6e:d2:6d:f0:2e:47:a6:55:ad:a8:69:18:6b:85:
e8:8d:c9:0b:8d:a2:7a:c8:71:4f:74:69:25:39:88:40:c3:0f:
b4:23:7a:37:af:cf:45:32:a0:b8:a2:65:bb:0b:37:25:67:cf:
73:e6:c9:df:70:de:ea:33:20:b0:d8:7d:7c:34:aa:19:6a:58:
ae:cd:cd:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9GA5nbmEfbscSxkZrnp4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWIwMTI5M2M5ZGJkMWE5ZDZhZGM4NjE4MmI1MjBjZDE3
NmMwMDcwHhcNMjUxMTA0MTMwMDI5WhcNMjUxMTA1MTMwMDI5WjAzMTEwLwYDVQQD
EyhiYTE1MGZiZDFkNmY2ZmVkOWYxMjM5N2U2ODFkYWQxMjE5ZGRlYzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2uV7dDBoHOvW0HqkLVZbroqdEWp
uu7zleYIcl+sHJed39OGXbH72zjyiQ5XOnhY55EhJNm/Sdvf5Glm9zHhg0og7XUm
k0ot1oD9guFzYny7vfY7nzC3HJtoapIbUNhXjQgcyynnvRYRTrh9Y0M4GDV2kuRK
bM2iECWXqIu43r/ALclq1jq3yyWsCucH87dX4uh5xPBOObLeObBGkZZs7K9x0lzy
Lwfkn20Bb4rkqdIiks+XXIPb0veQ2EnGOvmR0NJ+Uep/9MAZl5QnLB5VN9mDMZwF
+a6ZIWnCBG5ukZKOWj3kRhz9iVF9ZKTVXteOGJcp4flEcjRKhNf4I3XwvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoVD70db2/tnxI5fmgdrRIZ3ex6MB8GA1UdIwQY
MBaAFB6rASk8nb0anWrchhgrUgzRdsAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjct
ZTAzYWM1ODlhMDNmLzEvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjctZTAzYWM1ODlhMDNm
LzEvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfciPMVZ
TKDWqhj6PY/YyT+q1qhwwi6oTd1kCwwoBydohAIJS1eqoW8RpVVO/zfrNgboQdZ6
8GZYyBks3EwoHM6RVJh063NWX7VOrexnOvgRYVTI3beLdSaVjMHWle7JTdMvA5CV
Tl7yO4mEEbAAHBQme79Jzl7wf1uBzvIHGuZd9ceVsGI7iU/AYZQYFLQ7FhTFu1N/
x5VwX2Xtaapxr4edHYAzz0ek/xyr7IZVfdBKAO8JKEnNf27SbfAuR6ZVrahpGGuF
6I3JC42ieshxT3RpJTmIQMMPtCN6N6/PRTKguKJluws3JWfPc+bJ33De6jMgsNh9
fDSqGWpYrs3NgQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:17 2025 by rpki-client