Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: x9PRVc3DFO3naBECsJzShdhPd90oHIA2znUcDr/gkts=
Subject key identifier: E1:BC:63:83:27:A1:89:D6:06:3B:98:26:CF:46:E6:81:74:FA:EC:74
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 019A4DAAFB035B6903A7BBF7914177A2885F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 0306
Signing time: Tue 04 Nov 2025 07:00:42 +0000
Manifest this update: Tue 04 Nov 2025 07:00:42 +0000
Manifest next update: Wed 05 Nov 2025 07:00:42 +0000
Files and hashes: 1: 3412M_EtpZn6LWYcU4f3oIK6xWg.roa (hash: 0CHNt2RVOJ0fr7rsHxwpKCupnQAvdSeftNGlZDlJ/Ag=)
2: CXsNLwzW6cJkedPQnrBx1vfHrVw.roa (hash: BlnuhSPsolnIt+w6KIqhtNhxjTsnyj9Eh6s3gnyN9Ws=)
3: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: JBKZXZrJAhrjdWxkgsFkKS1za6kDS3RwUmUOU/KqYo0=)
4: vkFd4xJmSIJd3JXc4hy9xBnTUgo.roa (hash: EZ8noFz8pUG/Mp84LZG9CdH2CpZHNivjG9K+XxXNqrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:fb:03:5b:69:03:a7:bb:f7:91:41:77:a2:88:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Nov 4 07:00:42 2025 GMT
Not After : Nov 5 07:00:42 2025 GMT
Subject: CN=e1bc638327a189d6063b9826cf46e68174faec74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:96:29:c6:72:ae:51:e6:54:56:36:a3:70:
18:cc:5c:61:23:1f:0d:1c:07:d8:a7:b0:b7:81:41:
3d:02:7c:4b:c5:27:a6:33:b8:04:60:c8:95:00:98:
67:5b:29:05:86:20:3d:3b:c5:b3:f6:23:35:63:07:
86:3d:70:42:22:1a:ea:d2:7e:e5:4f:bf:86:59:07:
d1:5d:c3:10:b6:ae:c9:b8:e4:95:7f:66:45:12:5a:
72:f5:34:4a:57:1c:40:d5:42:5a:10:f6:b8:1b:70:
02:ef:c0:fd:71:1d:c5:1a:43:9c:17:fe:2b:5d:ff:
41:be:7e:f6:c0:3f:88:80:c4:9e:46:07:28:48:a0:
70:2d:e2:07:f3:aa:ed:91:dd:fe:85:7f:6f:87:ed:
3f:35:d3:20:bc:30:e1:a2:36:34:30:f7:65:1a:42:
ae:1a:67:99:a9:23:76:e1:2d:91:56:c7:fa:70:78:
47:b3:35:af:89:e6:4c:f0:27:49:7d:ac:c8:d3:2a:
34:2c:ec:4f:ce:5c:0b:16:b8:73:2c:a0:18:e6:29:
52:8d:3b:76:5d:db:f7:29:f1:92:91:8f:93:1d:a1:
1d:76:78:78:80:55:91:1f:da:59:9e:b6:94:08:6b:
08:97:14:c1:de:b9:04:ac:44:d4:a7:49:a4:a0:c1:
cd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BC:63:83:27:A1:89:D6:06:3B:98:26:CF:46:E6:81:74:FA:EC:74
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e9:09:fb:6c:89:09:7e:7a:30:1d:41:66:01:f4:70:61:ca:
8a:f3:3f:cd:8b:84:86:72:83:db:b1:7a:c9:73:96:a3:19:46:
0e:54:d4:a1:3b:fd:58:be:02:8f:02:3d:f9:c6:1e:20:04:53:
b6:c4:06:5c:ef:a9:ad:5c:b3:7a:1c:76:c8:82:fa:e4:2a:be:
3f:c9:6c:17:c9:7e:41:1d:6a:5a:d7:94:5a:33:2c:39:1f:e6:
6a:d7:63:e3:3c:f5:2c:fd:82:e7:06:3d:7f:53:66:c5:ae:12:
f5:50:ad:44:c6:f3:99:c6:4d:a1:08:5f:db:48:f8:a6:72:b0:
2a:6a:45:10:d4:16:25:b2:bd:25:35:93:0c:4f:c3:ee:0f:1a:
26:a4:b8:c4:4c:d3:e6:db:5c:8a:8b:15:63:aa:97:cf:aa:27:
e2:67:7c:80:d3:4a:d5:06:87:b0:12:bb:90:6e:3b:b2:f0:75:
e7:99:46:c4:26:b9:6a:61:08:2e:0f:f4:7f:be:e2:b4:a4:33:
e1:bf:6a:2c:8f:2f:fb:1d:7a:1c:76:89:28:27:ca:d5:8a:73:
7e:ff:5b:f0:a5:2f:24:bb:71:ab:ab:ef:00:64:9f:50:fa:fc:
0c:00:d0:8e:15:8d:ce:b6:f5:fd:fa:3d:39:3f:86:a2:5f:b3:
32:55:d2:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqvsDW2kDp7v3kUF3oohfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMWUyZWFhZWYwNzAxNTk1YWMyNzU0ZDAxMjEyMTdlN2I5
MWQ3MzkwHhcNMjUxMTA0MDcwMDQyWhcNMjUxMTA1MDcwMDQyWjAzMTEwLwYDVQQD
EyhlMWJjNjM4MzI3YTE4OWQ2MDYzYjk4MjZjZjQ2ZTY4MTc0ZmFlYzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCyWKcZyrlHmVFY2o3AYzFxhIx8N
HAfYp7C3gUE9AnxLxSemM7gEYMiVAJhnWykFhiA9O8Wz9iM1YweGPXBCIhrq0n7l
T7+GWQfRXcMQtq7JuOSVf2ZFElpy9TRKVxxA1UJaEPa4G3AC78D9cR3FGkOcF/4r
Xf9Bvn72wD+IgMSeRgcoSKBwLeIH86rtkd3+hX9vh+0/NdMgvDDhojY0MPdlGkKu
GmeZqSN24S2RVsf6cHhHszWvieZM8CdJfazI0yo0LOxPzlwLFrhzLKAY5ilSjTt2
Xdv3KfGSkY+THaEddnh4gFWRH9pZnraUCGsIlxTB3rkErETUp0mkoMHN0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOG8Y4MnoYnWBjuYJs9G5oF0+ux0MB8GA1UdIwQY
MBaAFB8eLqrvBwFZWsJ1TQEhIX57kdc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMt
MmIzNGI4NDMzYmI1LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMtMmIzNGI4NDMzYmI1
LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADukJ+2yJ
CX56MB1BZgH0cGHKivM/zYuEhnKD27F6yXOWoxlGDlTUoTv9WL4CjwI9+cYeIART
tsQGXO+prVyzehx2yIL65Cq+P8lsF8l+QR1qWteUWjMsOR/matdj4zz1LP2C5wY9
f1Nmxa4S9VCtRMbzmcZNoQhf20j4pnKwKmpFENQWJbK9JTWTDE/D7g8aJqS4xEzT
5ttciosVY6qXz6on4md8gNNK1QaHsBK7kG47svB155lGxCa5amEILg/0f77itKQz
4b9qLI8v+x16HHaJKCfK1Ypzfv9b8KUvJLtxq6vvAGSfUPr8DADQjhWNzrb1/fo9
OT+Gol+zMlXSCQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:31 2025 by rpki-client