Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: jsab9su9mM803pXeOhOkvbkg3oKJ08vXhPj+/9UOtbU=
Subject key identifier: 43:E8:A1:D8:A4:D8:C1:75:FC:3C:EF:F5:A8:10:F4:B4:B8:2C:DA:6A
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 019A4DE1F448A296A5F7CAD4C22B1E123C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:44 +0000
Manifest this update: Tue 04 Nov 2025 08:00:44 +0000
Manifest next update: Wed 05 Nov 2025 08:00:44 +0000
Files and hashes: 1: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: iXOrfT8wnXRV9F/aUS6rTNRwO8Umk4yTK0u+yO29hb0=)
2: PGC2gjbo2htZQJwYOmeelo5Z83Y.roa (hash: JFulXR+ljWTJG0RiuMIfac488bMeOxp9OF6JRC9SK3k=)
3: kTvVn_B76BHAkt21A667VWLx85c.roa (hash: RlO7Fkyzwvg6DOaLdLA5nagDWX7X86stBqbWJQSamrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f4:48:a2:96:a5:f7:ca:d4:c2:2b:1e:12:3c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Nov 4 08:00:44 2025 GMT
Not After : Nov 5 08:00:44 2025 GMT
Subject: CN=43e8a1d8a4d8c175fc3ceff5a810f4b4b82cda6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:24:e0:cc:43:95:2b:65:67:13:f8:5d:89:
0e:36:ab:68:99:fb:0b:39:2f:a8:64:60:7e:7e:9b:
a3:65:ae:a1:29:8e:ca:c5:9b:f8:c5:86:8e:b5:8d:
b1:5a:68:61:64:1d:65:38:92:5e:8b:6e:8f:e9:af:
75:60:e9:55:22:fa:e9:aa:18:40:ef:1c:60:3a:e5:
90:ab:c6:d4:16:17:4e:80:30:6f:0c:06:af:e2:ea:
43:88:1e:f5:3a:b6:92:4a:98:b1:23:23:1c:ad:a6:
d3:4b:1d:41:5a:a4:47:71:2f:17:bb:47:2f:7d:dd:
d9:79:dd:e5:65:64:fc:4a:21:79:32:6b:05:1e:80:
6b:ed:2c:9f:3e:4e:c2:3a:45:88:2e:59:6c:77:9e:
c6:84:2e:9c:a4:58:ff:61:b1:5c:a4:13:4c:44:f7:
8f:63:42:a8:e1:38:b8:3e:b1:55:29:ce:93:ff:29:
3f:ff:09:19:88:aa:b9:96:6f:81:4d:ff:55:f9:8c:
7c:1e:cf:14:b2:b8:0f:1a:a5:21:a2:c6:99:bc:d6:
e7:83:a0:ff:f8:94:28:db:63:07:1a:34:98:ae:1b:
05:2a:1d:5d:94:4f:55:e0:f8:ae:9b:00:57:97:43:
41:48:aa:f7:18:e4:eb:54:4f:c5:38:16:6c:14:02:
d1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E8:A1:D8:A4:D8:C1:75:FC:3C:EF:F5:A8:10:F4:B4:B8:2C:DA:6A
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a3:4e:68:c6:5d:12:50:da:7a:f9:b2:11:48:70:58:9e:32:
75:38:6e:51:04:97:e5:6a:b7:80:8e:bd:37:b5:23:c9:34:11:
f9:99:3e:2b:48:2d:cb:fa:77:23:46:a2:61:f9:b2:5a:52:0b:
e0:99:51:83:a7:41:44:9d:54:94:e4:b7:cf:2f:b6:e2:77:73:
2c:32:c3:b0:b7:bd:ca:82:3b:1a:98:e3:b6:2e:0d:6b:0d:0c:
af:49:4d:75:67:1d:de:ab:f6:f5:6b:c8:7e:db:d1:49:1d:fb:
9e:55:e3:80:74:24:80:14:8f:bb:58:54:22:12:c9:5c:24:b0:
73:e7:9f:6b:10:bd:dc:13:60:e2:a2:10:4d:42:09:63:69:0a:
b4:9a:bf:8b:ce:fe:e8:77:c5:4a:42:1f:96:50:50:43:c2:c6:
f0:cb:d4:b6:c7:8f:d5:38:ee:e1:ce:57:39:e3:ec:80:94:0b:
57:80:4a:cc:43:f0:05:28:bb:33:8a:a5:b2:8d:ac:0f:d0:01:
38:0c:f9:91:70:2d:58:12:57:83:60:57:ca:36:a1:eb:1f:f8:
d7:5a:6d:36:ae:d0:e0:81:37:e8:7d:32:27:0b:f9:9a:ef:ff:
fc:d7:1a:dc:f7:76:0f:da:9d:b3:15:5a:51:ae:43:e6:21:33:
1e:e8:39:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4fRIopal98rUwiseEjxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmODk2Y2QzZDhkMWEwNjk5ZGE1MjEwNTVkZmI1OGRjMDZk
ZGRmMzUwHhcNMjUxMTA0MDgwMDQ0WhcNMjUxMTA1MDgwMDQ0WjAzMTEwLwYDVQQD
Eyg0M2U4YTFkOGE0ZDhjMTc1ZmMzY2VmZjVhODEwZjRiNGI4MmNkYTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygwk4MxDlStlZxP4XYkONqtomfsL
OS+oZGB+fpujZa6hKY7KxZv4xYaOtY2xWmhhZB1lOJJei26P6a91YOlVIvrpqhhA
7xxgOuWQq8bUFhdOgDBvDAav4upDiB71OraSSpixIyMcrabTSx1BWqRHcS8Xu0cv
fd3Zed3lZWT8SiF5MmsFHoBr7SyfPk7COkWILllsd57GhC6cpFj/YbFcpBNMRPeP
Y0Ko4Ti4PrFVKc6T/yk//wkZiKq5lm+BTf9V+Yx8Hs8UsrgPGqUhosaZvNbng6D/
+JQo22MHGjSYrhsFKh1dlE9V4PiumwBXl0NBSKr3GOTrVE/FOBZsFALROwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPoodik2MF1/Dzv9agQ9LS4LNpqMB8GA1UdIwQY
MBaAFB+JbNPY0aBpnaUhBV37WNwG3d81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mYWI0OWEtOTFmNC00NjBjLTgyN2It
YzMzMjc4MjJhMTM4LzEvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mYWI0OWEtOTFmNC00NjBjLTgyN2ItYzMzMjc4MjJhMTM4
LzEvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaNOaMZd
ElDaevmyEUhwWJ4ydThuUQSX5Wq3gI69N7UjyTQR+Zk+K0gty/p3I0aiYfmyWlIL
4JlRg6dBRJ1UlOS3zy+24ndzLDLDsLe9yoI7Gpjjti4Naw0Mr0lNdWcd3qv29WvI
ftvRSR37nlXjgHQkgBSPu1hUIhLJXCSwc+efaxC93BNg4qIQTUIJY2kKtJq/i87+
6HfFSkIfllBQQ8LG8MvUtseP1Tju4c5XOePsgJQLV4BKzEPwBSi7M4qlso2sD9AB
OAz5kXAtWBJXg2BXyjah6x/411ptNq7Q4IE36H0yJwv5mu///Nca3Pd2D9qdsxVa
Ua5D5iEzHug58g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:49 2025 by rpki-client