Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
File: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json)
Hash identifier: D9u0l8tHFeH3lQzh1pS5gg/A2p2nOdZIfd0IBBicTJo=
Subject key identifier: A7:93:C3:E4:70:2E:A2:1D:04:D3:70:A2:BD:EA:3D:C8:4A:B8:A6:DE
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Certificate issuer: /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial: 019A4EF5CCA575F35777B8E0BB98EB39ACCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
Manifest number: 066C
Signing time: Tue 04 Nov 2025 13:02:02 +0000
Manifest this update: Tue 04 Nov 2025 13:02:02 +0000
Manifest next update: Wed 05 Nov 2025 13:02:02 +0000
Files and hashes: 1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: rReA6KeF5uig6pcfTozKiECBXLzOHCCaWhU3A1/dxjQ=)
2: AuXo05ybv8icHHWqDyU8sDSnZ1Y.roa (hash: UxOR6qET+hxOD3wGEyopUX9auNkRzvxhrEq1sLIBOVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:cc:a5:75:f3:57:77:b8:e0:bb:98:eb:39:ac:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
Validity
Not Before: Nov 4 13:02:02 2025 GMT
Not After : Nov 5 13:02:02 2025 GMT
Subject: CN=a793c3e4702ea21d04d370a2bdea3dc84ab8a6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:8a:6b:d8:88:ae:fc:3d:f9:86:73:71:c7:
21:ff:0b:7a:09:57:a8:ae:10:ee:cd:1a:0e:7c:86:
85:f8:e6:af:57:16:8b:f5:ad:a5:4a:5e:c2:f1:b4:
ea:cf:bf:f1:04:02:79:83:5e:25:a0:53:c7:93:12:
dd:a5:86:0d:35:e6:4a:0e:7c:26:00:ba:34:3e:a2:
c9:6d:46:eb:29:32:09:c3:27:c2:b0:ca:36:d6:d4:
a0:e9:f3:d2:d1:d9:cb:6c:c6:27:7a:db:f8:36:68:
ac:29:7b:2c:88:58:39:92:09:38:c4:57:1a:31:59:
c0:96:66:12:6f:41:ce:54:61:df:fa:a9:6e:a0:be:
47:4d:d5:8a:b6:ae:75:6c:78:70:9c:61:dc:42:6f:
66:21:49:e4:11:04:19:a0:ba:63:e0:f7:ef:b4:89:
52:46:3d:06:f2:f8:f5:b9:10:fe:80:e8:82:48:ac:
fb:e9:98:4f:14:af:44:eb:77:96:59:71:ce:5a:43:
e4:9b:9f:3d:bf:1e:f4:93:64:20:e0:92:f9:51:7c:
52:b4:cd:47:d2:02:a9:d3:75:01:fc:7b:ca:4e:72:
a4:c1:ca:ca:80:a8:37:23:ee:c4:ee:f1:f9:92:bb:
6b:08:80:e4:16:51:07:20:a3:96:6d:a0:a1:c4:10:
9f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:93:C3:E4:70:2E:A2:1D:04:D3:70:A2:BD:EA:3D:C8:4A:B8:A6:DE
X509v3 Authority Key Identifier:
keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c0:f7:1c:c8:a3:ad:d3:fb:d0:79:69:cb:46:cc:e5:6a:9c:
08:19:28:e4:db:ed:f8:4f:d0:67:1e:98:c4:4b:c6:cd:49:ec:
b2:41:26:05:1f:e2:d7:29:aa:1d:16:ee:5d:28:10:dd:e2:d1:
7d:2f:96:b7:9e:25:b4:18:d9:81:25:0c:1f:53:f5:fb:11:e5:
cc:40:dd:3b:07:0a:d6:94:25:89:26:d5:07:88:13:f6:dd:f9:
82:5f:fc:94:30:40:6c:bb:d3:03:f2:82:aa:ed:eb:10:b9:8d:
f8:2b:1e:78:a7:30:78:22:94:2f:a2:43:0c:c5:e8:b0:56:34:
af:bd:c2:ff:ee:d1:8c:5c:6d:22:d4:3e:89:22:97:68:04:64:
90:6b:56:c3:bb:4e:73:ba:61:9a:67:c4:34:c4:19:7f:ff:f9:
d2:e3:92:fd:24:eb:83:3f:38:55:fa:69:f6:d4:90:d1:13:25:
16:6f:d6:ad:ec:ce:e5:55:53:56:b4:1c:62:c0:90:d8:79:33:
c6:cb:26:66:de:af:fa:9b:55:72:fe:5c:5f:6e:ee:85:ab:17:
30:38:be:83:bf:ef:3c:01:05:1e:bf:68:f6:f2:07:c4:68:c7:
a6:6b:e9:4f:f2:53:2c:58:92:a3:65:3b:c5:31:03:46:f4:fd:
a6:22:9f:2b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpO9cyldfNXd7jgu5jrOazPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NzliYWE4OWUyMTQxMzNjY2Y2NDYwZjI0MjA2YWQyYzg2
NjcwZWIwHhcNMjUxMTA0MTMwMjAyWhcNMjUxMTA1MTMwMjAyWjAzMTEwLwYDVQQD
EyhhNzkzYzNlNDcwMmVhMjFkMDRkMzcwYTJiZGVhM2RjODRhYjhhNmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRWKa9iIrvw9+YZzccch/wt6CVeo
rhDuzRoOfIaF+OavVxaL9a2lSl7C8bTqz7/xBAJ5g14loFPHkxLdpYYNNeZKDnwm
ALo0PqLJbUbrKTIJwyfCsMo21tSg6fPS0dnLbMYnetv4NmisKXssiFg5kgk4xFca
MVnAlmYSb0HOVGHf+qluoL5HTdWKtq51bHhwnGHcQm9mIUnkEQQZoLpj4PfvtIlS
Rj0G8vj1uRD+gOiCSKz76ZhPFK9E63eWWXHOWkPkm589vx70k2Qg4JL5UXxStM1H
0gKp03UB/HvKTnKkwcrKgKg3I+7E7vH5krtrCIDkFlEHIKOWbaChxBCfoQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKeTw+RwLqIdBNNwor3qPchKuKbeMB8GA1UdIwQY
MBaAFPh5uqieIUEzzPZGDyQgatLIZnDrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IbTZxSjRoUVRQTTlrWVBKQ0JxMHNobWNPcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvNGNlZmFiLTQ3NzUtNDI1OC1iOTcx
LTRmY2Y4NGM4NWI2My8xLzEtSG02cUo0aFFUUE05a1lQSkNCcTBzaG1jT3MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2E3LzRjZWZhYi00Nzc1LTQyNTgtYjk3MS00ZmNmODRjODVi
NjMvMS8xLUhtNnFKNGhRVFBNOWtZUEpDQnEwc2htY09zLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMD3
HMijrdP70Hlpy0bM5WqcCBko5Nvt+E/QZx6YxEvGzUnsskEmBR/i1ymqHRbuXSgQ
3eLRfS+Wt54ltBjZgSUMH1P1+xHlzEDdOwcK1pQliSbVB4gT9t35gl/8lDBAbLvT
A/KCqu3rELmN+CseeKcweCKUL6JDDMXosFY0r73C/+7RjFxtItQ+iSKXaARkkGtW
w7tOc7phmmfENMQZf//50uOS/STrgz84Vfpp9tSQ0RMlFm/WrezO5VVTVrQcYsCQ
2HkzxssmZt6v+ptVcv5cX27uhasXMDi+g7/vPAEFHr9o9vIHxGjHpmvpT/JTLFiS
o2U7xTEDRvT9piKfKw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:52:14 2025 by rpki-client