Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
File: c8_hHopwk73JW8AeINtDduIqpRY.mft (raw, json)
Hash identifier: C+efVDVRzFXV4kM44IK3h3UdkrTnyFHw2G2Quh2xuXM=
Subject key identifier: 21:FC:55:E6:01:CD:22:3C:1B:8B:28:61:47:08:5A:49:61:B7:3D:35
Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
Certificate issuer: /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Certificate serial: 019A4F6223B4886F1D8276551AB7B2D3057F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
Manifest number: 0420
Signing time: Tue 04 Nov 2025 15:00:22 +0000
Manifest this update: Tue 04 Nov 2025 15:00:22 +0000
Manifest next update: Wed 05 Nov 2025 15:00:22 +0000
Files and hashes: 1: SVFNCXAgs-J1Ur0M2wuVWaTBzQI.roa (hash: rGZg6LxxY7ku4GUoLGf94rOsH2eH6eg3rUYHF4vWHMk=)
2: c8_hHopwk73JW8AeINtDduIqpRY.crl (hash: lyVqYnO8Pj1mLEQp3IR4KrB4CoWV0N7FEEK+BNYLUBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:23:b4:88:6f:1d:82:76:55:1a:b7:b2:d3:05:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Validity
Not Before: Nov 4 15:00:22 2025 GMT
Not After : Nov 5 15:00:22 2025 GMT
Subject: CN=21fc55e601cd223c1b8b286147085a4961b73d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:20:77:dd:5c:2b:a0:f8:d2:dc:02:96:b5:
f6:c3:b5:63:c5:1c:5c:2e:6f:95:a2:39:32:04:e2:
80:34:d4:00:22:8a:c5:e1:dd:6e:f7:08:e3:ab:41:
c6:2c:6e:db:b7:33:65:e7:52:dd:5d:29:b8:75:fd:
c6:54:30:82:3d:d4:a7:e4:f9:93:4b:4f:56:3e:21:
59:20:9c:df:2d:cc:2d:9a:44:91:ae:61:73:f5:df:
a3:73:26:93:61:51:bb:28:1e:e9:71:2f:99:27:d3:
fd:89:88:19:65:11:5f:3b:84:4a:00:94:ee:51:6c:
21:ec:f7:7a:e3:3a:a9:d9:2b:96:c7:17:8b:01:9c:
9a:47:cf:f3:1c:fa:7d:61:79:6c:59:e0:ce:c3:f1:
6c:95:1a:1f:84:a5:5a:84:e6:2a:f6:a8:08:27:3c:
a1:bf:b3:28:08:34:1c:e6:73:ce:b4:24:38:be:d6:
ae:c6:3f:0a:96:5e:d3:f4:7f:2f:7b:38:35:a2:f8:
b1:fd:7c:4d:65:ae:61:0d:fb:c5:73:e6:15:7a:15:
70:02:5a:02:d1:e2:17:22:6b:5c:9d:fb:45:e5:7a:
92:ab:d6:09:a4:e1:e9:39:b9:92:ab:6b:0e:32:18:
c0:93:bc:34:d5:8f:2b:30:f8:97:91:a5:52:65:2a:
31:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FC:55:E6:01:CD:22:3C:1B:8B:28:61:47:08:5A:49:61:B7:3D:35
X509v3 Authority Key Identifier:
keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:28:72:94:02:3e:15:f7:e5:d1:2f:0d:1a:80:d1:d8:dc:af:
df:42:75:5e:86:42:4b:61:61:ba:84:59:94:1d:a4:f0:d3:6b:
e6:b7:1e:34:38:82:91:34:2e:4d:ea:24:3b:85:b3:0f:a3:7d:
f5:72:b7:c6:38:d2:7e:23:7b:85:7c:ba:f7:95:4a:15:b9:2b:
c7:b9:0b:1b:f3:8e:45:94:75:3f:7b:53:e9:a5:47:1d:cb:eb:
b9:25:e5:d3:65:9e:cb:cb:bf:21:82:38:fd:96:16:ea:e3:d3:
b3:36:41:bf:a7:99:30:15:4f:f6:9c:39:83:6b:dd:ed:cf:c3:
dc:6b:13:98:33:5a:83:90:53:67:64:12:7a:3e:ca:b8:8a:3c:
be:bb:8f:c3:83:74:52:78:4b:bd:77:d6:e1:a2:4c:77:8f:d9:
d0:62:bb:66:36:c0:cc:e9:b1:a9:73:30:29:0c:62:80:fe:68:
16:a3:d8:af:13:b9:70:19:74:90:28:47:43:1c:60:31:62:0e:
4e:6e:0d:ef:b3:82:13:79:fa:8b:d1:25:b2:8c:1a:6e:99:ff:
87:d2:0c:68:77:49:2e:bb:b7:76:41:7a:f7:cb:98:80:69:21:
72:35:06:37:f6:43:fa:0a:ae:6d:f4:90:1d:3b:bd:cc:01:92:
a8:cd:30:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYiO0iG8dgnZVGrey0wV/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczY2ZlMTFlOGE3MDkzYmRjOTViYzAxZTIwZGI0Mzc2ZTIy
YWE1MTYwHhcNMjUxMTA0MTUwMDIyWhcNMjUxMTA1MTUwMDIyWjAzMTEwLwYDVQQD
EygyMWZjNTVlNjAxY2QyMjNjMWI4YjI4NjE0NzA4NWE0OTYxYjczZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrIgd91cK6D40twClrX2w7VjxRxc
Lm+VojkyBOKANNQAIorF4d1u9wjjq0HGLG7btzNl51LdXSm4df3GVDCCPdSn5PmT
S09WPiFZIJzfLcwtmkSRrmFz9d+jcyaTYVG7KB7pcS+ZJ9P9iYgZZRFfO4RKAJTu
UWwh7Pd64zqp2SuWxxeLAZyaR8/zHPp9YXlsWeDOw/FslRofhKVahOYq9qgIJzyh
v7MoCDQc5nPOtCQ4vtauxj8Kll7T9H8vezg1ovix/XxNZa5hDfvFc+YVehVwAloC
0eIXImtcnftF5XqSq9YJpOHpObmSq2sOMhjAk7w01Y8rMPiXkaVSZSox1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCH8VeYBzSI8G4soYUcIWklhtz01MB8GA1UdIwQY
MBaAFHPP4R6KcJO9yVvAHiDbQ3biKqUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iYWY5ZjMtMGU0OC00YzQ3LWJjMjYt
MWIxMTAwNzMxNDQ4LzEvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9iYWY5ZjMtMGU0OC00YzQ3LWJjMjYtMWIxMTAwNzMxNDQ4
LzEvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgChylAI+
Fffl0S8NGoDR2Nyv30J1XoZCS2FhuoRZlB2k8NNr5rceNDiCkTQuTeokO4WzD6N9
9XK3xjjSfiN7hXy695VKFbkrx7kLG/OORZR1P3tT6aVHHcvruSXl02Wey8u/IYI4
/ZYW6uPTszZBv6eZMBVP9pw5g2vd7c/D3GsTmDNag5BTZ2QSej7KuIo8vruPw4N0
UnhLvXfW4aJMd4/Z0GK7ZjbAzOmxqXMwKQxigP5oFqPYrxO5cBl0kChHQxxgMWIO
Tm4N77OCE3n6i9Elsowabpn/h9IMaHdJLru3dkF698uYgGkhcjUGN/ZD+gqubfSQ
HTu9zAGSqM0w4A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:00 2025 by rpki-client