Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
File: hCVmomcjm6WlPmRH7GrdFiM38NM.mft (raw, json)
Hash identifier: w2Ypu8EvxLQXj9w3cxe6j4SU2+LCJcWavVHNhlcy8Zs=
Subject key identifier: 8E:3F:AB:96:87:27:E6:55:7B:14:9D:15:E6:0C:D4:E9:9B:BE:C1:C0
Authority key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
Certificate issuer: /CN=842566a267239ba5a53e6447ec6add162337f0d3
Certificate serial: 019A4EF5B6CFF6FAAC5982B633F92869F668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
Manifest number: 0FDD
Signing time: Tue 04 Nov 2025 13:01:57 +0000
Manifest this update: Tue 04 Nov 2025 13:01:57 +0000
Manifest next update: Wed 05 Nov 2025 13:01:57 +0000
Files and hashes: 1: hCVmomcjm6WlPmRH7GrdFiM38NM.crl (hash: EFmw73SwXkRo4rM7jIuEcM+cwJ3LcySRl3Q34OhZwOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b6:cf:f6:fa:ac:59:82:b6:33:f9:28:69:f6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842566a267239ba5a53e6447ec6add162337f0d3
Validity
Not Before: Nov 4 13:01:57 2025 GMT
Not After : Nov 5 13:01:57 2025 GMT
Subject: CN=8e3fab968727e6557b149d15e60cd4e99bbec1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:64:84:c0:13:f4:3e:a3:2b:5f:ec:6e:65:42:
fd:6e:89:d1:a9:ae:5e:41:27:b1:a7:66:5c:f7:d0:
6b:75:9d:63:ad:f4:41:48:98:fa:1e:85:2c:49:51:
80:a1:d7:ab:f0:67:2d:51:c9:f6:ec:b4:f4:9e:e1:
82:d5:4b:63:38:7e:ae:d6:62:2a:05:8f:87:13:ea:
93:09:7f:40:e6:51:10:0f:bc:a6:39:2a:4d:ca:f5:
3a:5d:46:f7:a6:f3:0b:5a:56:2f:09:c3:b2:35:8e:
84:14:48:bb:9d:6c:0c:ca:52:33:b8:16:a0:9f:8c:
b4:35:80:d4:4a:c0:b7:46:85:da:38:40:13:b6:76:
a3:b5:d8:9e:26:c4:11:30:3d:28:16:c8:d2:3b:c8:
fa:6f:dd:ee:5f:5f:d6:95:35:44:b3:87:c5:51:47:
7f:56:3f:dd:4a:4c:0a:7a:10:02:21:f5:38:5e:3f:
2b:2f:a3:ba:7b:e9:69:8d:ba:ee:d4:98:76:ff:4e:
ae:b2:50:95:92:57:b0:08:ab:1f:60:6c:e3:87:16:
bf:21:db:ae:fc:ba:1f:2f:fe:d7:d9:29:a6:c9:66:
82:fc:7c:2d:9d:53:05:da:69:d7:26:38:b7:85:83:
dd:42:28:2d:23:a1:08:4a:84:cc:91:05:e4:f1:2f:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3F:AB:96:87:27:E6:55:7B:14:9D:15:E6:0C:D4:E9:9B:BE:C1:C0
X509v3 Authority Key Identifier:
keyid:84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a9:8f:bd:21:84:41:4a:d2:8e:4d:bf:e1:92:18:16:f8:d5:
3a:6e:51:d8:5b:60:a0:4d:22:0d:2e:22:21:66:9a:e9:25:6c:
6e:2c:fd:36:61:96:07:5c:d8:78:8f:31:50:b0:46:ce:2d:1a:
dd:aa:0a:a0:a4:3d:ed:8e:8c:3d:69:ec:8a:f1:c5:d0:88:bf:
a0:fe:73:52:ca:69:ff:d8:c7:0a:96:85:04:4e:5a:44:a4:34:
4e:fe:d3:8f:94:12:9b:10:f2:0c:36:d3:98:33:62:de:00:4d:
55:45:0f:09:3f:a6:9d:c1:88:7a:22:f1:df:e5:fc:83:99:c7:
2f:de:70:4f:1b:a3:69:88:c7:c7:dc:68:b0:47:fc:e6:8a:87:
4d:be:36:d1:e0:4b:d8:64:e2:7e:11:50:39:9e:86:4a:fd:51:
ec:1f:34:bd:6e:f6:ec:9d:65:d9:c9:06:5f:81:3e:87:7c:57:
f6:3f:66:24:83:32:05:e8:a4:06:50:e0:bb:cc:4e:7f:03:16:
49:c5:b7:df:24:19:2d:e2:c4:98:fd:88:a4:24:6f:46:fd:2c:
ca:e4:8b:99:f9:ef:5c:7c:82:43:b0:ce:18:5d:a4:7a:0f:b7:
4b:34:3c:55:47:69:af:0b:04:28:75:2c:7d:61:0a:2c:8d:41:
7c:07:c8:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9bbP9vqsWYK2M/koafZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MjU2NmEyNjcyMzliYTVhNTNlNjQ0N2VjNmFkZDE2MjMz
N2YwZDMwHhcNMjUxMTA0MTMwMTU3WhcNMjUxMTA1MTMwMTU3WjAzMTEwLwYDVQQD
Eyg4ZTNmYWI5Njg3MjdlNjU1N2IxNDlkMTVlNjBjZDRlOTliYmVjMWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WSEwBP0PqMrX+xuZUL9bonRqa5e
QSexp2Zc99BrdZ1jrfRBSJj6HoUsSVGAoder8GctUcn27LT0nuGC1UtjOH6u1mIq
BY+HE+qTCX9A5lEQD7ymOSpNyvU6XUb3pvMLWlYvCcOyNY6EFEi7nWwMylIzuBag
n4y0NYDUSsC3RoXaOEATtnajtdieJsQRMD0oFsjSO8j6b93uX1/WlTVEs4fFUUd/
Vj/dSkwKehACIfU4Xj8rL6O6e+lpjbru1Jh2/06uslCVklewCKsfYGzjhxa/Iduu
/LofL/7X2SmmyWaC/HwtnVMF2mnXJji3hYPdQigtI6EISoTMkQXk8S/toQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4/q5aHJ+ZVexSdFeYM1OmbvsHAMB8GA1UdIwQY
MBaAFIQlZqJnI5ulpT5kR+xq3RYjN/DTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaENWbW9tY2ptNldsUG1SSDdHcmRGaU0zOE5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82ZDJjZjItODBhYy00MzhiLThiNDAt
NmIxZWQ2YjA4YzU4LzEvaENWbW9tY2ptNldsUG1SSDdHcmRGaU0zOE5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC82ZDJjZjItODBhYy00MzhiLThiNDAtNmIxZWQ2YjA4YzU4
LzEvaENWbW9tY2ptNldsUG1SSDdHcmRGaU0zOE5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACamPvSGE
QUrSjk2/4ZIYFvjVOm5R2FtgoE0iDS4iIWaa6SVsbiz9NmGWB1zYeI8xULBGzi0a
3aoKoKQ97Y6MPWnsivHF0Ii/oP5zUspp/9jHCpaFBE5aRKQ0Tv7Tj5QSmxDyDDbT
mDNi3gBNVUUPCT+mncGIeiLx3+X8g5nHL95wTxujaYjHx9xosEf85oqHTb420eBL
2GTifhFQOZ6GSv1R7B80vW727J1l2ckGX4E+h3xX9j9mJIMyBeikBlDgu8xOfwMW
ScW33yQZLeLEmP2IpCRvRv0syuSLmfnvXHyCQ7DOGF2keg+3SzQ8VUdprwsEKHUs
fWEKLI1BfAfINg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:54 2025 by rpki-client