Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
File: hEcK8NideFuhi6YX3Anj9yxZlvM.mft (raw, json)
Hash identifier: pt94hZkcim1y4xp1fHdtyZePTmgA6NTF7xPcHaY3XZs=
Subject key identifier: 6E:18:BB:9A:9A:61:1E:C2:A4:BF:C5:9E:CA:AE:ED:7A:8F:2E:E8:34
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 019A4F61F3260C407EB892D5E66AD2C4BB60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
Manifest number: 0899
Signing time: Tue 04 Nov 2025 15:00:10 +0000
Manifest this update: Tue 04 Nov 2025 15:00:10 +0000
Manifest next update: Wed 05 Nov 2025 15:00:10 +0000
Files and hashes: 1: 9ZZlEoJ6DOwFDIJbfzBhtXucSCo.roa (hash: e3MsAliQl7R+w6WCs9Je3nF/3YOrMW2JU+QDq2FQ+FM=)
2: JqCwXNSsIA5GmOAqVij5xtyCNdo.roa (hash: QdmrseC1ST0f5saIZ/JDQWioFap1TFhdMiZ17k2Nqbw=)
3: YlDIKaB8euIzba12ToMGnySBz84.roa (hash: nKVG1dS4buniUqJ1W1EJzLaCnNU2lOtAtXAxwmlxhDY=)
4: Yz1nqnWdktBLCf-4upLjmxtc2c4.roa (hash: J/e8pwliu2ZJzstQArsqHThwEBlwW9xmmljRrojzK28=)
5: cPyQ54eHZNRhOo_g5NkIJCYJuFs.roa (hash: c5YmCvHhLyzqtoi7Yd/RgqKsKk6lvDCNHO1nQEKzWWw=)
6: hEcK8NideFuhi6YX3Anj9yxZlvM.crl (hash: N8+BDZztZuKwg9tN/frZ41zLuws2OebQzfKjSKCuAg0=)
7: l6j2aX0QSLWVCzZDpMtGz8W4wjo.roa (hash: AigJG7f6f5V64toLqhPhGUD+Okr3C21xM3JcJXAk2jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:f3:26:0c:40:7e:b8:92:d5:e6:6a:d2:c4:bb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Nov 4 15:00:10 2025 GMT
Not After : Nov 5 15:00:10 2025 GMT
Subject: CN=6e18bb9a9a611ec2a4bfc59ecaaeed7a8f2ee834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:a1:b1:d0:60:99:42:65:7e:42:bb:df:d3:
82:a8:f7:b2:d1:a8:56:49:9a:e2:bf:8e:b6:0e:c8:
c8:dc:b9:46:ea:81:10:8f:28:42:16:f7:87:26:dc:
c5:2d:db:74:0d:cf:aa:c6:af:fb:44:02:d3:48:fc:
ed:42:08:51:b4:d6:e1:f3:14:fb:7d:f6:21:06:f7:
04:3d:1c:81:f5:af:a5:37:2b:c8:3c:0e:e2:e8:6a:
d4:4b:ea:f0:b7:2a:7c:52:40:8e:38:e2:5d:2f:79:
5b:63:e8:98:40:7f:35:8c:20:e8:fd:27:c3:8f:47:
ff:4c:fb:df:64:fe:df:31:f2:6a:53:f8:5c:e5:ad:
a6:90:93:7d:4d:d2:24:12:ab:5b:b4:3f:e5:ab:29:
85:9f:1d:de:ed:61:2c:25:8a:f6:35:e6:77:6b:8d:
bf:0d:0b:04:55:19:4e:1b:5e:f9:bc:46:86:9e:e4:
28:0f:4d:ee:4f:4a:3d:f6:23:19:cb:a5:5a:cc:4d:
39:11:22:ba:1b:6d:d1:82:1e:13:52:09:76:07:47:
20:63:0e:55:4f:3a:69:b9:e3:33:8e:cc:1e:b0:94:
22:c2:eb:17:d6:b0:fd:7a:d9:78:c9:c0:78:0a:3d:
d9:a8:74:7e:32:1e:7c:9d:d8:ac:e2:2a:9c:2a:6c:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:18:BB:9A:9A:61:1E:C2:A4:BF:C5:9E:CA:AE:ED:7A:8F:2E:E8:34
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a3:96:ab:13:8c:74:d3:dc:16:5e:31:fe:cc:54:ba:b3:de:
08:7d:55:c1:b4:90:cb:88:4a:05:35:aa:e8:fe:42:7b:18:2c:
4b:f8:44:ba:07:e8:2e:ca:74:7e:80:9b:5c:73:0b:30:76:c7:
a7:4a:be:67:ee:4f:1c:d9:f8:9b:e5:16:7c:d2:ba:ee:67:e9:
7e:50:c2:7a:22:2b:3e:af:18:5f:f3:b3:81:94:42:15:58:2c:
a1:bd:b5:15:73:9d:b2:61:0f:39:f7:c8:0c:62:1b:66:f9:97:
82:b4:2b:55:1e:1d:76:e2:40:f7:b7:10:cb:21:29:79:2d:34:
a6:7f:97:87:fb:0b:46:19:1d:5f:a4:f0:a1:79:1e:f2:06:88:
b7:ff:f8:d8:ce:02:27:4e:6d:9c:a1:30:0c:cf:30:f7:4c:40:
d4:6c:ee:0f:31:23:1b:fc:6e:f4:dc:22:76:36:b8:1f:a2:c2:
00:7b:a7:7d:4c:53:a7:f5:de:c0:a3:52:2c:60:b1:dc:8f:94:
95:ad:b8:44:ed:7e:d6:4d:3f:91:ed:4e:7a:bf:54:56:2a:74:
ce:06:d8:2c:fd:a1:4a:d3:78:f8:2b:98:71:87:af:de:49:2f:
a1:9d:0b:20:b9:bc:1e:0e:6b:44:b5:6d:01:8f:35:b6:89:fc:
8a:b1:f5:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYfMmDEB+uJLV5mrSxLtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDcwYWYwZDg5ZDc4NWJhMThiYTYxN2RjMDllM2Y3MmM1
OTk2ZjMwHhcNMjUxMTA0MTUwMDEwWhcNMjUxMTA1MTUwMDEwWjAzMTEwLwYDVQQD
Eyg2ZTE4YmI5YTlhNjExZWMyYTRiZmM1OWVjYWFlZWQ3YThmMmVlODM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMqhsdBgmUJlfkK739OCqPey0ahW
SZriv462DsjI3LlG6oEQjyhCFveHJtzFLdt0Dc+qxq/7RALTSPztQghRtNbh8xT7
ffYhBvcEPRyB9a+lNyvIPA7i6GrUS+rwtyp8UkCOOOJdL3lbY+iYQH81jCDo/SfD
j0f/TPvfZP7fMfJqU/hc5a2mkJN9TdIkEqtbtD/lqymFnx3e7WEsJYr2NeZ3a42/
DQsEVRlOG175vEaGnuQoD03uT0o99iMZy6VazE05ESK6G23Rgh4TUgl2B0cgYw5V
TzppueMzjswesJQiwusX1rD9etl4ycB4Cj3ZqHR+Mh58ndis4iqcKmxheQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4Yu5qaYR7CpL/Fnsqu7XqPLug0MB8GA1UdIwQY
MBaAFIRHCvDYnXhboYumF9wJ4/csWZbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82NjBmMWQtNTc1My00NTE2LTgwMDIt
ZTc2ZTNlMjkzZTAyLzEvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82NjBmMWQtNTc1My00NTE2LTgwMDItZTc2ZTNlMjkzZTAy
LzEvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaOWqxOM
dNPcFl4x/sxUurPeCH1VwbSQy4hKBTWq6P5CexgsS/hEugfoLsp0foCbXHMLMHbH
p0q+Z+5PHNn4m+UWfNK67mfpflDCeiIrPq8YX/OzgZRCFVgsob21FXOdsmEPOffI
DGIbZvmXgrQrVR4dduJA97cQyyEpeS00pn+Xh/sLRhkdX6TwoXke8gaIt//42M4C
J05tnKEwDM8w90xA1GzuDzEjG/xu9Nwidja4H6LCAHunfUxTp/XewKNSLGCx3I+U
la24RO1+1k0/ke1Oer9UVip0zgbYLP2hStN4+CuYcYev3kkvoZ0LILm8Hg5rRLVt
AY81ton8irH1dg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:01 2025 by rpki-client