Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
File: HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft (raw, json)
Hash identifier: IJetOj5vTHpAUAJHXGDJtXWJTlRKZ8Y0t1sJffQFbGU=
Subject key identifier: 97:52:3B:CE:DD:31:A2:E0:1F:EE:22:A2:29:1C:D4:88:03:00:84:F3
Authority key identifier: 1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C
Certificate issuer: /CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
Certificate serial: 019A4F61DBE4AADE8A063233671B6BC4641A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
Manifest number: 1431
Signing time: Tue 04 Nov 2025 15:00:04 +0000
Manifest this update: Tue 04 Nov 2025 15:00:04 +0000
Manifest next update: Wed 05 Nov 2025 15:00:04 +0000
Files and hashes: 1: HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl (hash: 4PU2D24wzzWmaaBs/WbOz4TDcbzUSSjmiNRddPEWhHA=)
2: Vu2y-aZXZUUf1w0WU_d1LDGMCjI.roa (hash: FtyHvpwzr+fctqlndkuiTxqEdI3uy3i+5i35b5nlvso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:db:e4:aa:de:8a:06:32:33:67:1b:6b:c4:64:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
Validity
Not Before: Nov 4 15:00:04 2025 GMT
Not After : Nov 5 15:00:04 2025 GMT
Subject: CN=97523bcedd31a2e01fee22a2291cd488030084f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0b:db:d6:84:1b:c5:63:cb:80:2a:4e:4f:b7:
37:dc:d8:b2:d2:04:3c:ab:88:b1:6c:6f:8c:64:47:
4e:e6:71:ec:b3:01:2e:e1:90:19:1d:8b:61:41:fd:
10:89:a4:89:0b:f9:e0:5b:30:9f:1f:26:0f:84:59:
81:8d:12:38:df:13:dc:a9:f8:11:fb:d9:e7:11:44:
1a:8b:d5:62:0f:74:5c:db:38:21:e5:0d:df:2e:7b:
0d:58:ab:ae:fc:3f:b3:96:df:64:07:37:45:9c:24:
d4:ab:db:3e:e8:5f:9d:4a:1a:10:55:31:ea:07:9b:
3d:3a:49:95:51:97:77:41:75:66:61:2f:7f:cc:34:
f7:d3:22:36:27:17:b1:1d:5b:92:ad:a4:4d:d8:4d:
e4:ee:53:83:fa:0e:14:e0:11:7d:ac:c2:d4:db:6c:
69:c7:02:ea:1c:1f:24:af:b7:bb:59:a9:b1:54:8a:
ee:c9:04:61:92:b9:b4:95:30:42:4a:5e:9a:c6:47:
21:c5:0a:df:3c:16:8a:13:a9:6f:7a:d1:c3:e0:16:
6b:96:f5:6a:e3:ee:ad:5a:fe:10:1f:b0:27:c4:4b:
99:be:a3:1a:ac:02:5e:2e:ad:06:b5:7c:34:33:c0:
bf:08:a7:df:2e:a5:74:d8:3e:ab:1e:fe:e6:49:99:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:52:3B:CE:DD:31:A2:E0:1F:EE:22:A2:29:1C:D4:88:03:00:84:F3
X509v3 Authority Key Identifier:
keyid:1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f7:58:20:30:49:5d:4c:bb:c8:37:ee:90:1c:f8:db:8d:a6:
14:c8:d4:94:e0:88:54:42:68:1c:78:77:06:e3:64:10:63:b4:
67:7d:85:f3:2d:2f:e7:5f:98:70:cb:ab:86:ed:d6:52:b0:a9:
09:d7:eb:30:d8:ee:db:b6:4a:35:c8:9a:47:63:8c:ef:02:3a:
70:7b:3a:1e:ea:68:14:fa:10:e6:f2:3f:05:6f:fc:da:e4:2c:
3b:54:1d:51:b9:db:0e:24:ff:57:f3:43:76:d7:8c:f2:b5:69:
94:94:58:5c:c3:b0:67:4a:a4:d5:63:1a:b4:26:23:00:1a:ba:
6b:1e:17:a6:f5:98:a7:fc:79:c9:bc:e5:68:e1:6f:fb:97:aa:
73:98:57:66:fe:1a:1b:97:53:56:28:aa:ec:b4:7c:8c:89:5b:
24:7d:3c:41:34:17:02:d1:58:d1:c8:ff:61:8d:c6:f1:62:47:
db:29:61:3d:5a:e8:0e:1b:1f:db:51:72:91:da:2b:7c:1b:3f:
06:7b:d5:d9:b7:88:5b:ea:d9:e4:9d:c3:b6:a3:8b:fe:1d:7f:
b2:b5:1a:85:b7:aa:bc:65:d0:d6:4a:89:7a:27:1a:10:6c:7a:
00:58:57:06:ce:8a:4e:7e:3a:4d:24:aa:d0:c3:1e:47:8a:5d:
bd:f6:c5:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYdvkqt6KBjIzZxtrxGQaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZDkzMDg0Y2VjNDQ5YmVkOGE2ZmMwMDhiYzdkZDk5NWVi
MzczMWMwHhcNMjUxMTA0MTUwMDA0WhcNMjUxMTA1MTUwMDA0WjAzMTEwLwYDVQQD
Eyg5NzUyM2JjZWRkMzFhMmUwMWZlZTIyYTIyOTFjZDQ4ODAzMDA4NGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Avb1oQbxWPLgCpOT7c33Niy0gQ8
q4ixbG+MZEdO5nHsswEu4ZAZHYthQf0QiaSJC/ngWzCfHyYPhFmBjRI43xPcqfgR
+9nnEUQai9ViD3Rc2zgh5Q3fLnsNWKuu/D+zlt9kBzdFnCTUq9s+6F+dShoQVTHq
B5s9OkmVUZd3QXVmYS9/zDT30yI2JxexHVuSraRN2E3k7lOD+g4U4BF9rMLU22xp
xwLqHB8kr7e7WamxVIruyQRhkrm0lTBCSl6axkchxQrfPBaKE6lvetHD4BZrlvVq
4+6tWv4QH7AnxEuZvqMarAJeLq0GtXw0M8C/CKffLqV02D6rHv7mSZlfRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdSO87dMaLgH+4ioikc1IgDAITzMB8GA1UdIwQY
MBaAFB7ZMITOxEm+2Kb8AIvH3Zles3McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHRrd2hNN0VTYjdZcHZ3QWk4ZmRtVjZ6Y3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mMGI3MjMtNzdmMS00NGMwLThmY2Et
N2M2NDY3OTUwOTBiLzEvSHRrd2hNN0VTYjdZcHZ3QWk4ZmRtVjZ6Y3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9mMGI3MjMtNzdmMS00NGMwLThmY2EtN2M2NDY3OTUwOTBi
LzEvSHRrd2hNN0VTYjdZcHZ3QWk4ZmRtVjZ6Y3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvdYIDBJ
XUy7yDfukBz4242mFMjUlOCIVEJoHHh3BuNkEGO0Z32F8y0v51+YcMurhu3WUrCp
CdfrMNju27ZKNciaR2OM7wI6cHs6HupoFPoQ5vI/BW/82uQsO1QdUbnbDiT/V/ND
dteM8rVplJRYXMOwZ0qk1WMatCYjABq6ax4XpvWYp/x5ybzlaOFv+5eqc5hXZv4a
G5dTViiq7LR8jIlbJH08QTQXAtFY0cj/YY3G8WJH2ylhPVroDhsf21FykdorfBs/
BnvV2beIW+rZ5J3DtqOL/h1/srUahbeqvGXQ1kqJeicaEGx6AFhXBs6KTn46TSSq
0MMeR4pdvfbF5Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:16 2025 by rpki-client