Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
File: hiuiH8_MNMnZtafGCBWF4KDucK4.mft (raw, json)
Hash identifier: qdMqtOi7v4NIsr0D7ekVW11Cj5Yx7DWl/YObJxk33us=
Subject key identifier: C8:CF:77:89:AB:01:72:39:97:75:2F:C6:0B:F0:20:55:3A:0A:C5:66
Authority key identifier: 86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
Certificate issuer: /CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Certificate serial: 019A50071986E1B9BAA5E7A3A1D613474000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
Manifest number: 0807
Signing time: Tue 04 Nov 2025 18:00:33 +0000
Manifest this update: Tue 04 Nov 2025 18:00:33 +0000
Manifest next update: Wed 05 Nov 2025 18:00:33 +0000
Files and hashes: 1: hiuiH8_MNMnZtafGCBWF4KDucK4.crl (hash: MAROeDpAShAY2bkqrWw5jFS/soQmfrnbjgBnGXA2Npk=)
2: iVxulShReTYBVaVMHOSAPgJMX4w.roa (hash: K1U4ekJDUmOT/6sNVV1rdRQsFS3D9+kf/By0ijYc4Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:19:86:e1:b9:ba:a5:e7:a3:a1:d6:13:47:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Validity
Not Before: Nov 4 18:00:33 2025 GMT
Not After : Nov 5 18:00:33 2025 GMT
Subject: CN=c8cf7789ab01723997752fc60bf020553a0ac566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:3f:02:bd:88:aa:a2:d1:0a:a4:3f:0e:dc:
57:74:31:9f:28:99:15:41:7c:dd:3f:d7:38:6c:e0:
11:17:d2:35:e1:0b:1a:63:d5:2b:43:1d:aa:00:ea:
30:74:c4:f3:42:f4:28:bd:4f:3d:04:dd:27:c8:3c:
02:d5:57:5d:bc:7b:dc:7f:c2:80:94:74:6b:2f:01:
fc:0a:91:97:58:5a:39:ee:15:8e:7f:ec:8f:4d:45:
8f:3f:17:25:5d:f6:8c:ec:47:9c:a9:6c:62:62:19:
5a:58:75:19:9e:cd:5f:d9:a1:71:eb:2b:23:f8:36:
21:b4:10:76:b6:0e:fa:b8:1c:0f:0f:43:97:b1:aa:
1c:4f:ec:c1:28:ad:0f:9d:b6:22:02:8f:ed:7a:96:
36:06:5a:fd:28:4c:ba:e3:be:4b:60:a2:e5:2c:55:
1f:9b:fd:af:97:e4:7c:f1:62:48:a9:6e:85:2e:94:
dd:a4:c1:ed:f6:b3:11:4d:b0:fc:8c:c5:8a:b6:3b:
09:fb:9e:63:91:d5:8d:ed:29:af:6a:84:ef:46:a7:
a9:28:86:26:9d:7f:59:c0:34:ea:3e:01:39:d8:6b:
5c:00:50:b8:2e:20:17:75:33:6f:3a:41:a3:c6:95:
54:e7:ca:95:f0:3d:b2:b7:be:98:31:be:50:bc:97:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CF:77:89:AB:01:72:39:97:75:2F:C6:0B:F0:20:55:3A:0A:C5:66
X509v3 Authority Key Identifier:
keyid:86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3e:9b:f8:7a:ab:5e:43:89:a1:02:b7:2c:ef:6e:eb:64:6a:
d9:21:0c:78:30:18:43:44:34:fc:3f:7e:07:74:4f:c8:f4:e0:
85:a5:6e:45:03:ee:7a:9e:37:b0:4f:bd:0a:85:02:42:a3:45:
96:72:1e:63:b3:cb:e1:21:f1:d8:48:5a:79:06:6c:8b:8c:e9:
56:cd:92:44:a5:75:d7:38:6a:24:66:5e:27:b7:77:5f:21:89:
06:fd:60:cf:19:b6:80:1e:95:c0:0a:32:7c:3e:1c:3d:2c:fd:
0b:1c:fb:7b:8c:13:76:f3:15:d8:e0:2b:2a:f3:3f:f3:72:d9:
d4:db:33:ae:22:df:f3:68:d3:bf:6c:95:5f:66:84:fc:10:49:
a7:0c:5e:eb:e1:c9:c2:0d:09:c3:db:fa:0c:08:73:b5:9f:b5:
d4:84:b5:9a:02:82:ca:5a:fe:d0:6c:41:9c:6d:05:17:43:76:
66:89:a5:6b:67:c8:50:d9:d4:03:09:fd:0b:62:28:2c:1d:59:
d7:05:f5:77:68:db:02:8f:0f:c7:d5:2b:64:68:13:51:4c:94:
17:3a:56:7f:c4:1c:a1:44:ed:1b:1f:25:30:fa:d7:88:50:90:
e5:52:25:e8:14:1c:30:f1:7c:90:e2:92:62:ad:0c:44:43:b5:
d0:d5:45:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBxmG4bm6peejodYTR0AAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MmJhMjFmY2ZjYzM0YzlkOWI1YTdjNjA4MTU4NWUwYTBl
ZTcwYWUwHhcNMjUxMTA0MTgwMDMzWhcNMjUxMTA1MTgwMDMzWjAzMTEwLwYDVQQD
EyhjOGNmNzc4OWFiMDE3MjM5OTc3NTJmYzYwYmYwMjA1NTNhMGFjNTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMs/Ar2IqqLRCqQ/DtxXdDGfKJkV
QXzdP9c4bOARF9I14QsaY9UrQx2qAOowdMTzQvQovU89BN0nyDwC1VddvHvcf8KA
lHRrLwH8CpGXWFo57hWOf+yPTUWPPxclXfaM7EecqWxiYhlaWHUZns1f2aFx6ysj
+DYhtBB2tg76uBwPD0OXsaocT+zBKK0PnbYiAo/tepY2Blr9KEy6475LYKLlLFUf
m/2vl+R88WJIqW6FLpTdpMHt9rMRTbD8jMWKtjsJ+55jkdWN7SmvaoTvRqepKIYm
nX9ZwDTqPgE52GtcAFC4LiAXdTNvOkGjxpVU58qV8D2yt76YMb5QvJdIHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjPd4mrAXI5l3UvxgvwIFU6CsVmMB8GA1UdIwQY
MBaAFIYroh/PzDTJ2bWnxggVheCg7nCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGl1aUg4X01OTW5adGFmR0NCV0Y0S0R1Y0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80NzVlNmYtODlhNS00M2U4LTgzYjkt
NDk1YTk1OWIxNmU3LzEvaGl1aUg4X01OTW5adGFmR0NCV0Y0S0R1Y0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni80NzVlNmYtODlhNS00M2U4LTgzYjktNDk1YTk1OWIxNmU3
LzEvaGl1aUg4X01OTW5adGFmR0NCV0Y0S0R1Y0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZD6b+Hqr
XkOJoQK3LO9u62Rq2SEMeDAYQ0Q0/D9+B3RPyPTghaVuRQPuep43sE+9CoUCQqNF
lnIeY7PL4SHx2EhaeQZsi4zpVs2SRKV11zhqJGZeJ7d3XyGJBv1gzxm2gB6VwAoy
fD4cPSz9Cxz7e4wTdvMV2OArKvM/83LZ1NszriLf82jTv2yVX2aE/BBJpwxe6+HJ
wg0Jw9v6DAhztZ+11IS1mgKCylr+0GxBnG0FF0N2Zomla2fIUNnUAwn9C2IoLB1Z
1wX1d2jbAo8Px9UrZGgTUUyUFzpWf8QcoUTtGx8lMPrXiFCQ5VIl6BQcMPF8kOKS
Yq0MREO10NVFqw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:57 2025 by rpki-client