Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier: 7FuJ7ndcXTWwwl3+iHa8SGRiedhYuUoeXWoZxu3SojU=
Subject key identifier: 96:DD:C6:EE:F0:DB:AF:EB:9A:47:EF:5B:C0:D6:45:14:9F:70:A9:C3
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial: 019A4EF5B70B9E6BF366502C286AC9E2691D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:01:57 +0000
Manifest this update: Tue 04 Nov 2025 13:01:57 +0000
Manifest next update: Wed 05 Nov 2025 13:01:57 +0000
Files and hashes: 1: KUCsTzvnwNnMm7Jeca6aVL9k1f0.roa (hash: 08CBdTpQIdxpgYISvMqyNDiM+ICQK0H520OtR31swUg=)
2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: g/xiOU/AcxT/QlN82pg0UPmsdg/e6mXciqZ3+d8rtiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b7:0b:9e:6b:f3:66:50:2c:28:6a:c9:e2:69:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Validity
Not Before: Nov 4 13:01:57 2025 GMT
Not After : Nov 5 13:01:57 2025 GMT
Subject: CN=96ddc6eef0dbafeb9a47ef5bc0d645149f70a9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:5d:af:fb:bf:ff:5f:2e:1e:c4:e1:75:e5:
90:fd:c2:f9:7f:d2:40:e1:8c:af:44:0c:f4:de:b7:
1e:c2:19:c0:51:99:cf:01:a3:be:57:8d:f3:46:ee:
17:6d:0b:49:c7:6a:68:e9:6a:66:0d:20:ec:83:88:
3d:f3:98:76:54:b6:58:7d:36:e4:c4:d5:05:94:8b:
82:5f:81:6c:58:f0:d2:98:5b:f9:03:56:f9:9e:69:
c0:a6:18:4a:18:85:55:c0:27:7e:a1:34:7f:0f:c4:
e3:1e:f4:13:73:e4:02:91:26:5a:ee:f7:f2:5b:cd:
68:29:89:7f:f0:c3:5e:75:89:e3:81:20:b5:2b:a2:
63:6d:91:10:ec:08:b6:a4:89:6d:7c:a1:9c:b8:a3:
de:22:01:80:39:ce:b7:bc:8a:51:9e:7a:df:6b:6e:
54:b9:ca:47:2e:27:f8:4d:a9:04:8e:c3:4b:0b:07:
08:85:4d:fb:b4:44:cf:c9:eb:07:d9:96:56:b4:90:
72:9f:94:95:1a:73:cd:d5:55:2c:ec:fc:48:75:6f:
ae:51:41:4d:a1:56:b2:2f:3a:fc:f4:56:75:43:ad:
4d:49:e5:29:d6:d2:e7:b6:4c:bc:ff:38:41:84:6c:
9b:74:b7:24:5e:7e:ed:24:bf:d6:b1:36:15:e9:bd:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DD:C6:EE:F0:DB:AF:EB:9A:47:EF:5B:C0:D6:45:14:9F:70:A9:C3
X509v3 Authority Key Identifier:
keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7c:c7:43:8f:96:ec:34:a8:06:cb:c8:6d:a2:1c:61:42:ba:
0f:60:b8:71:dc:a4:5e:67:fb:12:80:76:39:68:0b:75:e4:b2:
d2:a3:8d:17:e2:1b:7a:9e:9e:70:e8:12:df:3d:50:78:73:1b:
f4:d4:4f:d2:55:95:48:03:f3:15:e4:b4:8b:be:9e:60:b0:f6:
ca:5e:38:d5:f8:bd:33:74:02:d5:cd:98:c1:3c:d4:0f:a8:3e:
9f:06:e4:13:9e:2b:e2:cd:3a:e6:63:12:58:44:91:0f:b9:91:
58:b3:f8:15:31:4a:90:39:98:ae:6b:ef:5d:9d:e8:7c:f2:e6:
f1:a9:e4:af:d9:ab:22:e2:33:4f:3a:f0:4c:fc:86:65:8d:4d:
3f:97:9c:c2:8b:e3:8b:fa:7e:89:b6:5b:d8:ac:d4:37:c1:ea:
12:82:de:3d:e0:c0:f9:bb:b9:b3:c3:96:0d:16:1e:df:6d:ec:
05:2e:71:d8:e7:a3:74:a7:38:c7:da:63:91:88:9e:a6:9a:95:
0f:8f:3b:15:9e:9d:a8:c0:eb:1c:1d:1b:d3:58:c2:f2:2d:d8:
15:fe:ca:44:cb:e2:80:ba:e8:3f:21:ce:e2:37:e0:94:b4:48:
eb:28:1f:70:ab:2c:6c:94:c8:5d:ab:b8:97:38:3f:ee:51:6d:
8f:e8:90:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9bcLnmvzZlAsKGrJ4mkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGUxMDNhYWVjNDMyZmMxOTFkNDk4MTliZDFhYjcxZmUx
Y2ZhODAwHhcNMjUxMTA0MTMwMTU3WhcNMjUxMTA1MTMwMTU3WjAzMTEwLwYDVQQD
Eyg5NmRkYzZlZWYwZGJhZmViOWE0N2VmNWJjMGQ2NDUxNDlmNzBhOWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHJdr/u//18uHsThdeWQ/cL5f9JA
4YyvRAz03rcewhnAUZnPAaO+V43zRu4XbQtJx2po6WpmDSDsg4g985h2VLZYfTbk
xNUFlIuCX4FsWPDSmFv5A1b5nmnAphhKGIVVwCd+oTR/D8TjHvQTc+QCkSZa7vfy
W81oKYl/8MNedYnjgSC1K6JjbZEQ7Ai2pIltfKGcuKPeIgGAOc63vIpRnnrfa25U
ucpHLif4TakEjsNLCwcIhU37tETPyesH2ZZWtJByn5SVGnPN1VUs7PxIdW+uUUFN
oVayLzr89FZ1Q61NSeUp1tLntky8/zhBhGybdLckXn7tJL/WsTYV6b3RvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbdxu7w26/rmkfvW8DWRRSfcKnDMB8GA1UdIwQY
MBaAFIVOEDquxDL8GR1JgZvRq3H+HPqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFU0UU9xN0VNdndaSFVtQm05R3JjZjRjLW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82NWY0YTItNWY2OS00NjViLTg4OTEt
OWMwMWRmN2I5ZTY2LzEvaFU0UU9xN0VNdndaSFVtQm05R3JjZjRjLW9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi82NWY0YTItNWY2OS00NjViLTg4OTEtOWMwMWRmN2I5ZTY2
LzEvaFU0UU9xN0VNdndaSFVtQm05R3JjZjRjLW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXzHQ4+W
7DSoBsvIbaIcYUK6D2C4cdykXmf7EoB2OWgLdeSy0qONF+Ibep6ecOgS3z1QeHMb
9NRP0lWVSAPzFeS0i76eYLD2yl441fi9M3QC1c2YwTzUD6g+nwbkE54r4s065mMS
WESRD7mRWLP4FTFKkDmYrmvvXZ3ofPLm8ankr9mrIuIzTzrwTPyGZY1NP5ecwovj
i/p+ibZb2KzUN8HqEoLePeDA+bu5s8OWDRYe323sBS5x2OejdKc4x9pjkYieppqV
D487FZ6dqMDrHB0b01jC8i3YFf7KRMvigLroPyHO4jfglLRI6ygfcKssbJTIXau4
lzg/7lFtj+iQyQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:27 2025 by rpki-client