Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: pm09L++a7QzrhTTQq1YwrWuf1DBt5ETNWWTl3WFo6do=
Subject key identifier: 01:66:3A:16:24:84:2D:41:32:09:EE:EA:EC:D3:E7:FC:A5:3B:D8:3F
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 019A50071B046A8EB178C3BA569DB4538618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 0DFF
Signing time: Tue 04 Nov 2025 18:00:34 +0000
Manifest this update: Tue 04 Nov 2025 18:00:34 +0000
Manifest next update: Wed 05 Nov 2025 18:00:34 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: /7f9clodKyYUGWtj6tOYRF+nkZN2zEOekn599WyZzkU=)
2: NVrrhbZmq4fJCBokU32i6BZfN2w.roa (hash: wsW18ZwbqgPM3aB7Kh9k48/63qX+j0nBz3Q3dGVomcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:1b:04:6a:8e:b1:78:c3:ba:56:9d:b4:53:86:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Nov 4 18:00:34 2025 GMT
Not After : Nov 5 18:00:34 2025 GMT
Subject: CN=01663a1624842d413209eeeaecd3e7fca53bd83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:6c:dc:7c:31:38:83:57:8c:dc:e6:6a:16:
47:75:2c:4d:20:60:cd:88:58:b0:00:5a:74:29:88:
ed:0b:25:de:2d:dc:8e:e9:86:6b:30:a9:f4:23:af:
d6:2a:98:f3:c8:9b:2e:13:b7:ee:ca:bd:e1:7e:1c:
64:3b:96:a0:02:7a:86:2f:a5:98:9a:4d:33:83:f1:
78:b9:c3:8f:ed:24:3b:01:81:e3:75:e4:55:c2:01:
6e:c2:09:a9:31:b7:e4:f3:ea:85:56:b9:2e:3f:1c:
a2:5a:b1:d0:fe:af:3e:29:89:ed:c5:47:48:47:36:
24:0a:ce:f4:0b:c3:f6:4a:81:b3:77:89:e1:12:88:
b8:ba:e6:a3:e0:12:5d:22:0d:70:a0:03:fa:af:9b:
7c:e3:a2:52:a7:c1:d4:b7:dc:ed:3f:cc:5b:29:58:
ba:00:b2:42:d9:74:ca:67:10:7f:9a:86:7a:46:97:
4a:66:12:9b:52:29:d8:15:1e:be:c8:e2:35:a0:ed:
cd:a3:8e:56:90:8d:93:a9:81:d1:cb:b4:da:70:39:
a7:47:dc:a4:5f:09:0d:0d:e3:8a:46:93:cc:e3:84:
ce:57:6a:16:a9:8f:34:a2:d2:bd:1f:a0:ae:1b:2a:
f7:a4:4a:18:f2:99:f1:a4:36:aa:0a:fb:ff:26:7c:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:66:3A:16:24:84:2D:41:32:09:EE:EA:EC:D3:E7:FC:A5:3B:D8:3F
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:dd:05:85:92:a8:92:a7:02:07:3b:74:16:5d:61:1b:fd:e0:
a4:52:27:ab:46:04:7b:44:9e:3b:cc:48:ef:51:00:2d:75:18:
1e:8d:fc:eb:f4:90:8a:56:cd:ef:b9:53:7d:59:03:0f:59:fa:
1a:1e:ec:2c:5d:78:b3:5f:30:eb:b6:7c:2f:e5:11:c8:c9:bb:
2e:14:1b:e5:c0:ea:01:af:c2:88:45:a9:2a:a4:9f:1c:62:7b:
9a:cd:61:6d:bc:85:ce:3c:80:63:90:bd:50:19:c1:ee:25:fa:
29:8c:55:9f:31:b6:98:5c:5f:74:4e:72:af:29:da:6b:fa:cb:
bb:c6:b7:1a:a8:93:bd:0e:f9:20:7a:f6:71:40:e7:b4:12:10:
e7:96:72:88:b7:d4:70:ce:d4:af:b0:bd:3d:42:01:3c:76:bc:
a9:ed:f1:34:65:6d:83:98:aa:ef:4a:f5:02:ba:12:85:4e:ff:
b3:99:8d:e3:03:a6:06:eb:c0:0e:c5:71:3e:8c:3a:d4:f0:38:
e4:94:9a:a9:01:2a:9d:77:41:d9:5a:d6:31:9b:02:37:f8:30:
27:33:b2:8a:78:5a:fc:73:05:57:e7:1f:3f:39:8a:3d:9a:86:
a3:4e:f3:46:73:63:8b:49:e9:b3:a9:9f:e2:cf:c9:72:26:12:
41:d7:d5:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBxsEao6xeMO6Vp20U4YYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDU2Y2M1YjdjZTNjMjA3OWY3ODZmZWMxZGZiY2IyNTI0
Mzk5NDEwHhcNMjUxMTA0MTgwMDM0WhcNMjUxMTA1MTgwMDM0WjAzMTEwLwYDVQQD
EygwMTY2M2ExNjI0ODQyZDQxMzIwOWVlZWFlY2QzZTdmY2E1M2JkODNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobps3HwxOINXjNzmahZHdSxNIGDN
iFiwAFp0KYjtCyXeLdyO6YZrMKn0I6/WKpjzyJsuE7fuyr3hfhxkO5agAnqGL6WY
mk0zg/F4ucOP7SQ7AYHjdeRVwgFuwgmpMbfk8+qFVrkuPxyiWrHQ/q8+KYntxUdI
RzYkCs70C8P2SoGzd4nhEoi4uuaj4BJdIg1woAP6r5t846JSp8HUt9ztP8xbKVi6
ALJC2XTKZxB/moZ6RpdKZhKbUinYFR6+yOI1oO3No45WkI2TqYHRy7TacDmnR9yk
XwkNDeOKRpPM44TOV2oWqY80otK9H6CuGyr3pEoY8pnxpDaqCvv/JnxE6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFmOhYkhC1BMgnu6uzT5/ylO9g/MB8GA1UdIwQY
MBaAFB9FbMW3zjwgefeG/sHfvLJSQ5lBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzIt
YmQ3ZDM0NTFhYTY2LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzItYmQ3ZDM0NTFhYTY2
LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlt0FhZKo
kqcCBzt0Fl1hG/3gpFInq0YEe0SeO8xI71EALXUYHo386/SQilbN77lTfVkDD1n6
Gh7sLF14s18w67Z8L+URyMm7LhQb5cDqAa/CiEWpKqSfHGJ7ms1hbbyFzjyAY5C9
UBnB7iX6KYxVnzG2mFxfdE5yrynaa/rLu8a3GqiTvQ75IHr2cUDntBIQ55ZyiLfU
cM7Ur7C9PUIBPHa8qe3xNGVtg5iq70r1AroShU7/s5mN4wOmBuvADsVxPow61PA4
5JSaqQEqnXdB2VrWMZsCN/gwJzOyinha/HMFV+cfPzmKPZqGo07zRnNji0nps6mf
4s/JciYSQdfVIg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:17:27 2025 by rpki-client