Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier: pmCmsYY98BdtKCR6zbfxSwbHe3Tgmdn2ILGQ0EiFh+w=
Subject key identifier: 6F:64:5E:C3:76:1A:C7:5E:D0:E3:ED:C6:05:01:41:E1:71:B4:76:AE
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial: 019A4F993B575B275F4806A70E78FCAB8633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number: 0835
Signing time: Tue 04 Nov 2025 16:00:33 +0000
Manifest this update: Tue 04 Nov 2025 16:00:33 +0000
Manifest next update: Wed 05 Nov 2025 16:00:33 +0000
Files and hashes: 1: 00q_V9fiuxK8x1J5dDf6heEWqpM.roa (hash: XdV8RV4SCz2Bjb29weutw1xlx9C6MC3WoiwiAcbHJHU=)
2: 0DRjjmcZlOUPV43RadORGLY5fAU.roa (hash: OsLSdbKdwCfPfb6fa3q09CVq+CXKI7ScoH/tLbYmOyY=)
3: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: I3gHIrqxidDPsEdQu8Eiai2foX+cQiZIZ1w7CepECkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:3b:57:5b:27:5f:48:06:a7:0e:78:fc:ab:86:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Validity
Not Before: Nov 4 16:00:33 2025 GMT
Not After : Nov 5 16:00:33 2025 GMT
Subject: CN=6f645ec3761ac75ed0e3edc6050141e171b476ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:cb:50:25:d2:ea:1c:19:d3:7c:a7:47:ef:
10:da:56:0f:ae:46:73:c3:d0:e3:fe:23:38:4d:0a:
f1:c0:13:ec:dd:18:03:69:48:87:0e:ba:e4:4c:a7:
0e:19:c1:b0:89:53:95:17:a3:ff:a0:53:4c:ef:fe:
1f:4d:48:aa:af:20:ad:61:60:90:88:cf:d4:b2:3b:
b2:38:92:c6:7e:44:17:15:cd:e0:30:46:91:ed:43:
06:a9:b4:d5:35:d1:fa:ba:34:ba:9e:3a:8a:86:c1:
70:ef:9d:d7:cd:93:fd:98:f1:ce:f1:09:2d:5f:84:
8d:82:dc:6b:0d:63:c6:f9:a6:5d:5d:02:78:c4:5d:
40:8e:6c:cc:d8:ab:a2:3e:3a:e0:df:ea:9a:4d:b7:
97:c1:a3:9d:4d:68:08:08:a0:96:58:2c:40:60:bf:
6a:4a:39:e3:a2:41:94:46:71:1e:93:e7:db:f5:9f:
a4:a7:aa:41:b7:d3:37:fe:b4:79:5e:85:f1:7a:aa:
64:72:f4:fe:91:6c:35:d8:1d:a4:4d:71:fa:99:a1:
9b:f5:4c:55:39:49:cf:ed:12:da:56:ce:26:29:71:
90:e0:ef:8f:6b:6f:fd:d0:73:51:51:3d:87:f8:ec:
09:bb:6d:ab:6c:f9:c9:4a:cf:18:4c:8f:c4:c2:1d:
74:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:64:5E:C3:76:1A:C7:5E:D0:E3:ED:C6:05:01:41:E1:71:B4:76:AE
X509v3 Authority Key Identifier:
keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ec:25:57:3c:30:b4:06:ef:9d:7f:dd:d8:5a:2c:04:db:89:
66:d3:17:7d:d6:61:33:29:48:7d:56:31:ed:3b:b8:50:46:b4:
af:25:23:f9:a1:3c:82:df:48:16:ec:1c:ba:23:c6:19:16:e5:
9f:87:fe:1a:81:50:a6:63:15:a0:55:20:15:f7:2a:9d:2b:c4:
8a:18:59:99:bf:ec:38:a4:ff:85:a5:3b:c5:03:de:e5:cd:02:
c6:09:11:ae:fe:f4:03:13:de:82:4d:7d:46:ae:2f:c5:d1:01:
c6:0d:65:e3:48:1d:ee:33:02:6d:2f:bd:b7:41:3c:08:c4:c0:
a1:64:f7:17:ca:cb:49:30:a5:0f:43:84:a9:8b:6c:df:79:5a:
84:19:29:15:13:1f:fe:a1:5c:57:b4:22:78:86:2c:9f:ca:b8:
5d:03:d5:42:73:c6:25:58:07:cd:e1:33:a8:3d:2b:c8:24:17:
f4:33:cd:79:dd:b4:c5:79:37:3e:72:5f:ea:55:bd:5e:ee:13:
74:b5:76:15:d5:fd:1c:d2:2c:7d:af:77:83:24:fc:e4:b7:fa:
40:e0:5b:9b:94:28:6d:5b:83:0b:16:bb:f6:5a:3e:bb:4a:e7:
6d:85:90:92:d5:8b:13:81:08:5c:5c:78:0e:cf:75:c0:82:68:
92:10:0d:4f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpPmTtXWydfSAanDnj8q4YzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMWIyNDc4ZGZlMGYzM2EyNzhiMTNmNDJkZDMxOTYwMWQ2
Mzc4YTgwHhcNMjUxMTA0MTYwMDMzWhcNMjUxMTA1MTYwMDMzWjAzMTEwLwYDVQQD
Eyg2ZjY0NWVjMzc2MWFjNzVlZDBlM2VkYzYwNTAxNDFlMTcxYjQ3NmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRXLUCXS6hwZ03ynR+8Q2lYPrkZz
w9Dj/iM4TQrxwBPs3RgDaUiHDrrkTKcOGcGwiVOVF6P/oFNM7/4fTUiqryCtYWCQ
iM/UsjuyOJLGfkQXFc3gMEaR7UMGqbTVNdH6ujS6njqKhsFw753XzZP9mPHO8Qkt
X4SNgtxrDWPG+aZdXQJ4xF1AjmzM2KuiPjrg3+qaTbeXwaOdTWgICKCWWCxAYL9q
SjnjokGURnEek+fb9Z+kp6pBt9M3/rR5XoXxeqpkcvT+kWw12B2kTXH6maGb9UxV
OUnP7RLaVs4mKXGQ4O+Pa2/90HNRUT2H+OwJu22rbPnJSs8YTI/Ewh10fwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFG9kXsN2Gsde0OPtxgUBQeFxtHauMB8GA1UdIwQY
MBaAFPobJHjf4PM6J4sT9C3TGWAdY3ioMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oc2tlTl9nOHpvbml4UDBMZE1aWUIxamVLZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvMDhhOWM4LTRiZTMtNDY4Mi1hZjgy
LTJhMWNjZTdkMmM2NS8xLzEtaHNrZU5fZzh6b25peFAwTGRNWllCMWplS2cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FmLzA4YTljOC00YmUzLTQ2ODItYWY4Mi0yYTFjY2U3ZDJj
NjUvMS8xLWhza2VOX2c4em9uaXhQMExkTVpZQjFqZUtnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+wl
VzwwtAbvnX/d2FosBNuJZtMXfdZhMylIfVYx7Tu4UEa0ryUj+aE8gt9IFuwcuiPG
GRbln4f+GoFQpmMVoFUgFfcqnSvEihhZmb/sOKT/haU7xQPe5c0CxgkRrv70AxPe
gk19Rq4vxdEBxg1l40gd7jMCbS+9t0E8CMTAoWT3F8rLSTClD0OEqYts33lahBkp
FRMf/qFcV7QieIYsn8q4XQPVQnPGJVgHzeEzqD0ryCQX9DPNed20xXk3PnJf6lW9
Xu4TdLV2FdX9HNIsfa93gyT85Lf6QOBbm5QobVuDCxa79lo+u0rnbYWQktWLE4EI
XFx4Ds91wIJokhANTw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:09 2025 by rpki-client