Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: 8b+oi2CGKpchUTDXxqNQEmVC1HGgS3e4pjoZ/4cExaM=
Subject key identifier: 21:2D:09:3F:57:41:76:D6:EF:B1:12:36:66:61:14:AA:46:15:47:0E
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 019A4EF491D3E049718728E8B32D879575C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 16A2
Signing time: Tue 04 Nov 2025 13:00:42 +0000
Manifest this update: Tue 04 Nov 2025 13:00:42 +0000
Manifest next update: Wed 05 Nov 2025 13:00:42 +0000
Files and hashes: 1: F9OoqFi0y_GmOqfd2KThNGIcQRY.roa (hash: lknpUMMVcnd7NcsdFUBWrkK4Xx0BYlNeNsb3yAIL3yk=)
2: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: QaZP+c1vF7zBA73w8sabOaEUmMZIklUBQwT2zLFY9KA=)
3: xiqfg-sD-JA_U5POqcioMLPnSTo.roa (hash: JD/nDI8VlQSh0memjTUGDYmELCHkrFvR/ey5KgQYfKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:91:d3:e0:49:71:87:28:e8:b3:2d:87:95:75:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Nov 4 13:00:42 2025 GMT
Not After : Nov 5 13:00:42 2025 GMT
Subject: CN=212d093f574176d6efb11236666114aa4615470e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6b:11:96:1b:b5:23:94:25:80:fc:a8:5d:9c:
27:9c:62:21:e0:f1:38:bb:d4:26:1f:7f:e9:34:07:
69:fb:54:64:73:d9:5b:34:1b:e9:17:55:5b:6a:3d:
0a:2f:87:89:0a:9f:28:49:b2:2f:b4:eb:cd:a4:69:
c4:d0:08:5a:45:cc:51:73:b0:9e:29:43:55:1b:8d:
b6:28:64:e8:54:b7:3d:b7:6b:4f:f7:41:54:27:dc:
5b:09:77:38:73:95:8d:c0:66:69:57:05:60:cc:67:
2c:03:e7:96:da:eb:74:96:67:af:25:1d:ca:f2:6e:
e5:d8:6e:08:86:50:26:40:18:52:ca:41:8d:da:77:
e2:82:1a:b4:17:6e:0a:68:fb:b3:b9:16:57:3e:23:
ae:fa:70:f0:03:2f:13:89:9d:03:08:cc:0d:db:bf:
87:5e:12:1b:65:83:39:9c:88:e4:76:1d:0c:4c:38:
10:a8:1c:70:27:fb:5c:30:06:db:56:e9:a9:e8:35:
a4:86:84:7b:24:23:39:dc:4d:2f:f8:05:21:db:09:
73:31:10:0d:d3:39:b3:36:41:37:b8:3d:13:b8:a7:
4b:f5:99:58:f0:f5:9b:d0:b4:cb:6f:f0:c9:a5:87:
9b:9a:a4:c5:45:b3:66:c8:18:ac:44:3a:b6:67:c5:
6c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2D:09:3F:57:41:76:D6:EF:B1:12:36:66:61:14:AA:46:15:47:0E
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b9:e6:90:6b:fb:00:55:4a:2e:a2:42:fd:4b:52:2d:15:b1:
67:dd:7e:25:d9:5d:f8:a3:0f:47:b4:5d:d1:eb:f1:4a:35:4f:
59:58:56:24:a6:8f:fa:d8:b9:21:63:61:fd:dd:f7:60:f7:f8:
51:e3:ec:18:60:0f:e3:38:26:89:bc:98:f6:31:be:a5:89:e0:
5d:4e:ae:b3:9d:c8:d9:48:83:e2:58:a5:94:a1:a2:a9:5c:9d:
01:15:4b:e9:d2:b0:5d:24:3c:ec:99:11:64:ea:23:29:21:11:
9a:02:bc:b6:a4:87:46:0f:28:47:49:a4:d6:ea:b9:21:a0:08:
17:61:12:96:d1:79:a5:ed:b2:40:fc:45:10:02:6e:08:eb:92:
9a:8d:ed:05:20:4e:b3:e3:46:56:97:3c:7f:b6:77:ed:cd:66:
a8:82:5b:3e:90:0b:d2:e5:87:7a:25:2d:60:73:dc:80:b6:44:
95:bf:d4:94:89:39:5a:b7:15:b2:00:d1:a7:3a:87:cd:83:74:
99:ea:ce:66:81:dd:53:57:26:a6:aa:32:61:dc:81:87:39:8f:
1e:4f:8a:71:c2:22:6f:09:80:c5:ef:11:b9:c6:5c:f0:05:33:
6a:36:5e:3f:d2:1f:f7:af:54:a0:91:57:0d:e9:26:01:5a:87:
50:4a:c6:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9JHT4Elxhyjosy2HlXXCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGM3NzMzNmQ2NmY3YjAyMzhlNmMxODRjNjRmYTRmMjRk
MDlmMDEwHhcNMjUxMTA0MTMwMDQyWhcNMjUxMTA1MTMwMDQyWjAzMTEwLwYDVQQD
EygyMTJkMDkzZjU3NDE3NmQ2ZWZiMTEyMzY2NjYxMTRhYTQ2MTU0NzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WsRlhu1I5QlgPyoXZwnnGIh4PE4
u9QmH3/pNAdp+1Rkc9lbNBvpF1Vbaj0KL4eJCp8oSbIvtOvNpGnE0AhaRcxRc7Ce
KUNVG422KGToVLc9t2tP90FUJ9xbCXc4c5WNwGZpVwVgzGcsA+eW2ut0lmevJR3K
8m7l2G4IhlAmQBhSykGN2nfighq0F24KaPuzuRZXPiOu+nDwAy8TiZ0DCMwN27+H
XhIbZYM5nIjkdh0MTDgQqBxwJ/tcMAbbVump6DWkhoR7JCM53E0v+AUh2wlzMRAN
0zmzNkE3uD0TuKdL9ZlY8PWb0LTLb/DJpYebmqTFRbNmyBisRDq2Z8VsEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEtCT9XQXbW77ESNmZhFKpGFUcOMB8GA1UdIwQY
MBaAFB6MdzNtZvewI45sGExk+k8k0J8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2Et
OTk5NTdkZjQ5OTdlLzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2EtOTk5NTdkZjQ5OTdl
LzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbnmkGv7
AFVKLqJC/UtSLRWxZ91+Jdld+KMPR7Rd0evxSjVPWVhWJKaP+ti5IWNh/d33YPf4
UePsGGAP4zgmibyY9jG+pYngXU6us53I2UiD4lillKGiqVydARVL6dKwXSQ87JkR
ZOojKSERmgK8tqSHRg8oR0mk1uq5IaAIF2ESltF5pe2yQPxFEAJuCOuSmo3tBSBO
s+NGVpc8f7Z37c1mqIJbPpAL0uWHeiUtYHPcgLZElb/UlIk5WrcVsgDRpzqHzYN0
merOZoHdU1cmpqoyYdyBhzmPHk+KccIibwmAxe8RucZc8AUzajZeP9If969UoJFX
DekmAVqHUErGRw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:54 2025 by rpki-client