Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
File: HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json)
Hash identifier: 7HitHAtX9wh3IHGnwuN3f0lszVmBH825FehKCkVk1BQ=
Subject key identifier: 33:EF:E7:77:B3:E7:71:40:49:EB:2D:49:0A:9A:27:12:7A:4A:D2:81
Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
Certificate issuer: /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Certificate serial: 019A518776E269B7589C22A0B9F5A8172E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
Manifest number: 01C4
Signing time: Wed 05 Nov 2025 01:00:23 +0000
Manifest this update: Wed 05 Nov 2025 01:00:23 +0000
Manifest next update: Thu 06 Nov 2025 01:00:23 +0000
Files and hashes: 1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: mxczwHSFn2lZ3iqGmwYfTofC7FyJ58YtKoWWQnoXjN0=)
2: NOVPbDKVr5wjUcGbKvJrJzmVhnw.roa (hash: wYz2fmfXZeLSC/FkxxCfmscRdqW9p4YQgw0dEkDtFvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:76:e2:69:b7:58:9c:22:a0:b9:f5:a8:17:2e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Validity
Not Before: Nov 5 01:00:23 2025 GMT
Not After : Nov 6 01:00:23 2025 GMT
Subject: CN=33efe777b3e7714049eb2d490a9a27127a4ad281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3e:c0:e2:0e:03:29:4a:ac:e8:50:e9:28:fe:
7e:be:29:da:2f:d6:61:ec:41:6b:8e:f6:2a:cb:e4:
3c:50:56:1b:b8:0e:5e:15:c7:53:5e:39:f0:1d:ee:
e0:48:66:1d:5c:c9:e5:28:32:90:6f:d2:62:ad:39:
1b:d7:b8:fe:6b:07:73:10:ce:a6:36:38:ca:5a:8b:
b6:b0:0e:5a:b2:65:4f:54:96:6e:4b:fb:11:c3:24:
ba:cd:fb:57:3f:48:21:d3:57:68:4e:63:f1:23:b1:
2f:42:22:6e:c3:87:b6:6f:a9:c1:1f:ac:a0:ef:12:
bc:aa:ed:6a:98:5f:d8:69:56:22:f9:19:b3:70:75:
52:1c:1f:6d:f5:37:8b:87:21:ce:f7:cf:75:bf:a4:
f3:5b:8c:4e:1c:98:87:35:1e:67:c6:c6:f1:8a:8e:
82:9a:e9:f7:65:63:a6:b6:ad:19:66:d1:7f:22:ee:
78:39:22:bc:63:1d:d3:52:22:84:44:f8:37:1a:3a:
4c:aa:45:11:ff:99:73:5a:cf:84:37:18:17:0a:ce:
ac:dc:99:ef:52:52:7a:16:45:d0:21:a3:db:e5:84:
e4:6a:01:48:7f:41:d5:ed:fb:89:b0:80:38:ef:90:
33:e9:c1:be:22:3e:ca:13:3d:b5:34:71:5f:e0:70:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EF:E7:77:B3:E7:71:40:49:EB:2D:49:0A:9A:27:12:7A:4A:D2:81
X509v3 Authority Key Identifier:
keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:96:01:19:26:9d:6a:4c:4b:bf:2e:b7:34:de:b9:ae:38:aa:
fc:e6:4f:fe:cd:12:3d:31:ca:89:02:d2:7b:4d:72:8f:79:42:
6f:a7:d4:ea:79:ca:f7:bd:75:0d:19:68:19:19:c5:eb:18:f0:
07:37:c4:fb:e3:5a:36:b8:d3:fe:fb:5f:34:9d:03:39:a5:dc:
4e:a2:40:15:55:08:94:f9:b2:c0:0e:d2:e7:68:d6:ed:3f:64:
b3:89:53:e1:ee:01:e3:8c:57:db:22:f2:82:c8:69:c5:31:bc:
5b:0d:6d:9a:3a:0c:bd:28:ec:d7:25:d0:c9:56:f2:4b:bc:f1:
d2:6e:73:7d:49:3a:16:53:96:53:f4:f5:68:04:dc:61:2f:40:
34:f3:55:e4:d8:e1:6f:88:bd:8c:c5:0e:2c:af:9c:a5:f9:df:
f7:22:d2:82:d5:71:8a:6d:1e:b8:b5:35:2d:78:90:0a:2f:8e:
9b:50:f8:71:3e:f9:62:8c:fa:ab:1d:d2:2c:bb:92:de:31:cb:
2f:ec:09:f5:49:a7:ed:09:c6:b2:15:8c:b4:7b:63:c8:77:40:
e9:b5:c0:37:ca:d4:aa:8c:8d:8a:96:82:67:db:3f:77:87:a2:
8b:bd:3d:ef:1b:c9:be:a7:54:f6:55:c9:7c:1a:32:da:80:71:
33:5b:12:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh3biabdYnCKgufWoFy6BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMGE2ZjZmM2E5YWUxZGE1ZTViZTg3NTJmYWIxOGRlYjI4
YmE2MTQwHhcNMjUxMTA1MDEwMDIzWhcNMjUxMTA2MDEwMDIzWjAzMTEwLwYDVQQD
EygzM2VmZTc3N2IzZTc3MTQwNDllYjJkNDkwYTlhMjcxMjdhNGFkMjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD7A4g4DKUqs6FDpKP5+vinaL9Zh
7EFrjvYqy+Q8UFYbuA5eFcdTXjnwHe7gSGYdXMnlKDKQb9JirTkb17j+awdzEM6m
NjjKWou2sA5asmVPVJZuS/sRwyS6zftXP0gh01doTmPxI7EvQiJuw4e2b6nBH6yg
7xK8qu1qmF/YaVYi+RmzcHVSHB9t9TeLhyHO9891v6TzW4xOHJiHNR5nxsbxio6C
mun3ZWOmtq0ZZtF/Iu54OSK8Yx3TUiKERPg3GjpMqkUR/5lzWs+ENxgXCs6s3Jnv
UlJ6FkXQIaPb5YTkagFIf0HV7fuJsIA475Az6cG+Ij7KEz21NHFf4HCBqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPv53ez53FASestSQqaJxJ6StKBMB8GA1UdIwQY
MBaAFBwKb286muHaXlvodS+rGN6yi6YUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFwdmJ6cWE0ZHBlVy1oMUw2c1kzcktMcGhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yYTlkZDQtMTdiOC00NzNjLTgzYmYt
OWFmMTA3NGMyMjdmLzEvSEFwdmJ6cWE0ZHBlVy1oMUw2c1kzcktMcGhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8yYTlkZDQtMTdiOC00NzNjLTgzYmYtOWFmMTA3NGMyMjdm
LzEvSEFwdmJ6cWE0ZHBlVy1oMUw2c1kzcktMcGhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5YBGSad
akxLvy63NN65rjiq/OZP/s0SPTHKiQLSe01yj3lCb6fU6nnK9711DRloGRnF6xjw
BzfE++NaNrjT/vtfNJ0DOaXcTqJAFVUIlPmywA7S52jW7T9ks4lT4e4B44xX2yLy
gshpxTG8Ww1tmjoMvSjs1yXQyVbyS7zx0m5zfUk6FlOWU/T1aATcYS9ANPNV5Njh
b4i9jMUOLK+cpfnf9yLSgtVxim0euLU1LXiQCi+Om1D4cT75Yoz6qx3SLLuS3jHL
L+wJ9Umn7QnGshWMtHtjyHdA6bXAN8rUqoyNipaCZ9s/d4eii7097xvJvqdU9lXJ
fBoy2oBxM1sS1g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:11:18 2025 by rpki-client