Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier: Be9+KV02JZk2bU8htUR/BZa9P09uvnYRYNVKpWrEF2I=
Subject key identifier: 89:5B:14:EE:F1:EC:35:7F:49:67:38:37:29:E1:20:56:AB:A7:B4:96
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial: 019A4E19089EA355F3D208C17AF463E8E022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 09:00:54 +0000
Manifest this update: Tue 04 Nov 2025 09:00:54 +0000
Manifest next update: Wed 05 Nov 2025 09:00:54 +0000
Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: tn3T+p4NKdwgKfpPNM/lre3S6JRr98aYom0dKMb/IEk=)
2: NLCwkRuxMAVqIE4s2Awhm1yzmmc.roa (hash: 7DV7f34yFMiHA1iSUlpq7Rg0BJ76/rrx0KnPa1dhIeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:08:9e:a3:55:f3:d2:08:c1:7a:f4:63:e8:e0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Validity
Not Before: Nov 4 09:00:54 2025 GMT
Not After : Nov 5 09:00:54 2025 GMT
Subject: CN=895b14eef1ec357f4967383729e12056aba7b496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:fc:9a:02:c8:a2:93:3c:e2:66:d9:28:61:
3a:cf:f6:ff:22:21:fa:97:f0:45:92:43:6d:5d:f0:
27:63:2c:4b:fd:ee:cf:35:14:49:5e:0d:44:fb:b3:
b0:50:d8:06:c3:1f:71:cc:a5:ec:e4:95:1e:51:1a:
bd:4d:6f:94:01:15:03:06:6d:99:72:ef:1b:90:44:
b6:87:a9:da:74:72:72:ae:93:d2:3e:36:fe:bd:ee:
40:16:96:93:77:60:90:5e:ee:14:7e:2c:a7:51:ad:
66:a5:4e:82:8b:dd:23:78:cd:c4:4f:e0:08:f4:19:
b0:c5:44:6b:c3:ee:e1:01:ff:76:59:ac:0b:70:9e:
71:e8:90:ff:d9:bf:5e:fb:2d:e4:50:15:e6:07:42:
9a:26:55:35:af:d9:4d:29:f0:f2:bf:2f:a3:99:48:
81:5e:2e:49:ca:97:96:81:1c:85:c3:fb:54:5e:94:
7a:d3:f4:53:97:07:6e:07:89:e0:72:a8:55:d0:b4:
33:9b:fa:a6:2f:95:11:bc:ce:03:5d:b0:76:c3:db:
b4:20:8b:b0:eb:4c:53:96:27:9d:2b:67:aa:54:6f:
03:44:b5:ae:e0:8f:61:e5:3d:01:1b:68:70:77:26:
21:41:de:97:c8:1e:d7:5e:d8:2d:9b:19:46:f0:33:
28:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5B:14:EE:F1:EC:35:7F:49:67:38:37:29:E1:20:56:AB:A7:B4:96
X509v3 Authority Key Identifier:
keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:96:32:01:de:cc:10:55:83:d7:72:01:fb:5e:dc:f3:1c:05:
6b:2c:3a:d4:c4:0a:bf:43:0a:48:40:ff:f9:50:74:6e:25:72:
ff:c9:66:d3:be:f6:b9:d9:e7:46:5d:57:1f:2d:49:c8:df:29:
ac:58:ea:5b:0b:b4:7a:86:38:2c:2b:bc:2b:45:26:e4:d6:b4:
47:91:a1:37:33:b0:9c:c3:d9:b2:6c:dd:ab:53:7d:78:58:71:
cf:67:5d:b0:1a:c3:19:dc:64:11:4e:5c:a4:d8:4b:d7:9f:a7:
71:d9:97:bf:35:87:b8:15:f0:e1:33:61:9e:f5:cf:35:06:a1:
4a:4b:79:c4:58:9b:8d:1b:11:d3:d6:db:80:01:00:d5:6a:97:
af:ea:98:8a:11:04:9f:0f:f2:d4:21:93:c1:2c:a7:69:51:91:
de:dd:7f:6f:dc:09:ed:5b:a6:2d:fe:d9:86:a2:64:dd:4d:99:
b9:c5:99:ef:33:cd:9b:2c:76:64:65:d6:ba:30:c8:19:3c:ff:
b4:00:d0:c3:ab:50:4d:39:43:b4:15:7d:e7:e3:9f:98:45:d2:
85:11:ff:b7:d0:21:db:58:77:43:76:57:bf:1f:b4:80:e7:19:
71:04:74:e9:65:ef:2c:1c:08:03:ba:8b:10:23:cd:76:e7:1c:
50:65:c6:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGQieo1Xz0gjBevRj6OAiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMGUyMTZlNTc5MWUxYjAxZGEyMWJjYWYzMzAwNDFhZDcy
YTdlNmMwHhcNMjUxMTA0MDkwMDU0WhcNMjUxMTA1MDkwMDU0WjAzMTEwLwYDVQQD
Eyg4OTViMTRlZWYxZWMzNTdmNDk2NzM4MzcyOWUxMjA1NmFiYTdiNDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo078mgLIopM84mbZKGE6z/b/IiH6
l/BFkkNtXfAnYyxL/e7PNRRJXg1E+7OwUNgGwx9xzKXs5JUeURq9TW+UARUDBm2Z
cu8bkES2h6nadHJyrpPSPjb+ve5AFpaTd2CQXu4UfiynUa1mpU6Ci90jeM3ET+AI
9BmwxURrw+7hAf92WawLcJ5x6JD/2b9e+y3kUBXmB0KaJlU1r9lNKfDyvy+jmUiB
Xi5JypeWgRyFw/tUXpR60/RTlwduB4ngcqhV0LQzm/qmL5URvM4DXbB2w9u0IIuw
60xTliedK2eqVG8DRLWu4I9h5T0BG2hwdyYhQd6XyB7XXtgtmxlG8DMoqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlbFO7x7DV/SWc4NynhIFarp7SWMB8GA1UdIwQY
MBaAFBwOIW5XkeGwHaIbyvMwBBrXKn5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEt
MmMwZmM2YmUxZTU3LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEtMmMwZmM2YmUxZTU3
LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpYyAd7M
EFWD13IB+17c8xwFayw61MQKv0MKSED/+VB0biVy/8lm0772udnnRl1XHy1JyN8p
rFjqWwu0eoY4LCu8K0Um5Na0R5GhNzOwnMPZsmzdq1N9eFhxz2ddsBrDGdxkEU5c
pNhL15+ncdmXvzWHuBXw4TNhnvXPNQahSkt5xFibjRsR09bbgAEA1WqXr+qYihEE
nw/y1CGTwSynaVGR3t1/b9wJ7VumLf7ZhqJk3U2ZucWZ7zPNmyx2ZGXWujDIGTz/
tADQw6tQTTlDtBV95+OfmEXShRH/t9Ah21h3Q3ZXvx+0gOcZcQR06WXvLBwIA7qL
ECPNduccUGXGrA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:56 2025 by rpki-client