Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
File: HCtQ2u86DL23KyPKPbvvwVc1g_k.mft (raw, json)
Hash identifier: 8qQqRXGmfHgsMwNLh/ekMsch3xM7eeWXHnuzy59gdac=
Subject key identifier: BB:10:6C:99:03:A7:AA:3B:64:A8:3B:C0:53:B9:2D:E8:51:92:38:4A
Authority key identifier: 1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
Certificate issuer: /CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Certificate serial: 019A503DD98B5AE3291986C51B2251109524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
Manifest number: 0C33
Signing time: Tue 04 Nov 2025 19:00:21 +0000
Manifest this update: Tue 04 Nov 2025 19:00:21 +0000
Manifest next update: Wed 05 Nov 2025 19:00:21 +0000
Files and hashes: 1: HCtQ2u86DL23KyPKPbvvwVc1g_k.crl (hash: h76MN/bT7yVgywmZva86W5EtD5SjTavqWnN/jl3YsN8=)
2: ZGoOUwMopHkREW85RzSsR457AEU.roa (hash: ll6YKs1Lb4wcNMvOVUUEMK6peyuIPU/LPfVQcksc3+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:d9:8b:5a:e3:29:19:86:c5:1b:22:51:10:95:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Validity
Not Before: Nov 4 19:00:21 2025 GMT
Not After : Nov 5 19:00:21 2025 GMT
Subject: CN=bb106c9903a7aa3b64a83bc053b92de85192384a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:90:49:c6:2b:64:b5:95:bf:8e:e1:c8:69:fc:
59:a7:db:cc:6c:4e:32:b7:dd:8c:66:3e:2b:c3:3e:
b9:71:4f:fd:20:d6:c0:3f:d4:46:c9:ee:69:09:36:
a8:3a:1c:68:4c:8b:de:3f:6b:51:f1:2b:14:b3:8b:
66:49:d0:e0:36:8d:b4:b0:2d:39:7e:4e:09:2f:21:
5a:05:35:25:cb:22:72:f3:bf:34:a4:63:63:75:78:
5e:06:1b:d1:78:d7:c7:68:ce:26:b8:e4:d8:74:ca:
c2:ba:51:1f:8c:ae:da:ec:8e:b2:5d:20:d7:22:a9:
d3:80:75:ae:44:31:d3:a3:9a:1f:7b:c9:37:89:1e:
64:73:0e:d1:50:f4:15:84:03:5e:f3:60:f6:6f:3a:
53:ff:f9:ad:c1:69:ac:23:63:1e:53:82:10:ab:60:
2e:76:b0:33:5b:0d:0c:18:50:e7:17:f5:32:50:51:
67:cf:b7:d4:71:a5:76:3b:7f:a3:81:1a:84:38:0f:
32:46:3d:1b:3d:e1:f4:e7:03:9f:f0:e6:f2:3a:c1:
94:53:77:53:3d:9a:cc:78:42:50:82:47:0c:f7:58:
75:bc:05:ef:66:3b:93:ca:80:c8:11:00:9d:21:c7:
fd:d7:a4:c6:10:70:10:74:1a:d4:f6:80:2c:55:7e:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:10:6C:99:03:A7:AA:3B:64:A8:3B:C0:53:B9:2D:E8:51:92:38:4A
X509v3 Authority Key Identifier:
keyid:1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d1:75:7b:46:e8:f8:81:ec:a1:f7:9f:97:cc:c6:b8:68:9d:
3b:f8:0b:df:9a:6a:88:c2:c8:20:a4:62:87:c6:de:db:a7:c9:
1d:7c:60:ba:4e:5d:a8:ad:f0:f7:24:4b:ee:f6:6b:28:31:97:
c6:c7:a7:56:32:a7:66:be:3d:f6:28:0f:14:0f:88:68:4f:ed:
51:c2:9d:67:d9:f7:93:d1:ab:35:e3:f6:91:88:b8:1a:b2:cd:
5d:16:f8:f4:2f:83:af:45:d6:b4:31:4d:2f:77:01:42:fa:86:
0f:34:82:8b:80:a1:49:68:df:f8:de:e7:40:58:76:8f:88:6e:
41:f7:61:cf:a1:00:fe:ce:5f:b8:2e:34:8f:3b:4a:04:ac:26:
60:48:4a:82:81:1d:ac:92:c9:e6:8b:1e:b2:45:bd:ed:ab:8c:
06:12:17:59:00:b7:a1:f1:c3:d2:18:04:41:6c:4f:51:2a:be:
fb:25:82:36:27:14:5e:81:7a:0f:c7:e5:94:dd:86:42:5e:04:
f6:e2:fb:5d:9a:5a:f2:72:31:3c:f6:38:eb:f2:0c:0e:b8:b6:
39:b6:17:7f:d4:b9:03:21:31:9a:92:9c:d6:7a:6c:f7:40:e9:
2a:2c:9d:0a:68:1b:41:da:30:a9:9a:26:ae:e3:38:63:1f:38:
b1:5c:9e:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPdmLWuMpGYbFGyJREJUkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmI1MGRhZWYzYTBjYmRiNzJiMjNjYTNkYmJlZmMxNTcz
NTgzZjkwHhcNMjUxMTA0MTkwMDIxWhcNMjUxMTA1MTkwMDIxWjAzMTEwLwYDVQQD
EyhiYjEwNmM5OTAzYTdhYTNiNjRhODNiYzA1M2I5MmRlODUxOTIzODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJBJxitktZW/juHIafxZp9vMbE4y
t92MZj4rwz65cU/9INbAP9RGye5pCTaoOhxoTIveP2tR8SsUs4tmSdDgNo20sC05
fk4JLyFaBTUlyyJy8780pGNjdXheBhvReNfHaM4muOTYdMrCulEfjK7a7I6yXSDX
IqnTgHWuRDHTo5ofe8k3iR5kcw7RUPQVhANe82D2bzpT//mtwWmsI2MeU4IQq2Au
drAzWw0MGFDnF/UyUFFnz7fUcaV2O3+jgRqEOA8yRj0bPeH05wOf8ObyOsGUU3dT
PZrMeEJQgkcM91h1vAXvZjuTyoDIEQCdIcf916TGEHAQdBrU9oAsVX5QmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsQbJkDp6o7ZKg7wFO5LehRkjhKMB8GA1UdIwQY
MBaAFBwrUNrvOgy9tysjyj2778FXNYP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82ZjJiMzctMGQxNy00NWFiLTgyODIt
YWI0MjYzZWQ0MGRlLzEvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82ZjJiMzctMGQxNy00NWFiLTgyODItYWI0MjYzZWQ0MGRl
LzEvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedF1e0bo
+IHsofefl8zGuGidO/gL35pqiMLIIKRih8be26fJHXxguk5dqK3w9yRL7vZrKDGX
xsenVjKnZr499igPFA+IaE/tUcKdZ9n3k9GrNeP2kYi4GrLNXRb49C+Dr0XWtDFN
L3cBQvqGDzSCi4ChSWjf+N7nQFh2j4huQfdhz6EA/s5fuC40jztKBKwmYEhKgoEd
rJLJ5oseskW97auMBhIXWQC3ofHD0hgEQWxPUSq++yWCNicUXoF6D8fllN2GQl4E
9uL7XZpa8nIxPPY46/IMDri2ObYXf9S5AyExmpKc1nps90DpKiydCmgbQdowqZom
ruM4Yx84sVyeEg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:17 2025 by rpki-client