Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
File: hu4gHGXWVe6c_iUflR6pG7oVRWc.mft (raw, json)
Hash identifier: pz4cc5lM+PdcXGR8h9jqWTengLGK6WWGNaamTl6NkzE=
Subject key identifier: 9E:68:C4:D7:D7:7B:44:90:73:83:82:E5:A8:8E:51:44:40:3B:7D:F4
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 019A4D07C8E9B99AE2233B3DEAEBD20D22A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
Manifest number: 171A
Signing time: Tue 04 Nov 2025 04:02:26 +0000
Manifest this update: Tue 04 Nov 2025 04:02:26 +0000
Manifest next update: Wed 05 Nov 2025 04:02:26 +0000
Files and hashes: 1: BTKNM_yY9cf5nMbyQBGXEDyeLi0.roa (hash: DzzXp7ohKMicQourdcNR0kS22RTAEFQSJ/9tBCQrWcc=)
2: GzDT8w0Ptt9b8FyYostNarXRHiw.roa (hash: A6DYaaXmihlLD1PftD3BewQ0V2peW0M1Cn7b21EMdZs=)
3: NClupgqAUdwnU34Sum2MaF9qVA0.roa (hash: aDGxKYq2Y8XMXNzlWk4ySV396lfiu4EB4r+x7lrq+P8=)
4: hu4gHGXWVe6c_iUflR6pG7oVRWc.crl (hash: gHpigl/EmKutIgNxunjd5CCx8bjRk0yxL01w0KFMJyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:c8:e9:b9:9a:e2:23:3b:3d:ea:eb:d2:0d:22:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Nov 4 04:02:26 2025 GMT
Not After : Nov 5 04:02:26 2025 GMT
Subject: CN=9e68c4d7d77b4490738382e5a88e5144403b7df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:0b:9e:d0:e0:2b:0a:85:6e:0b:22:62:aa:
3f:63:85:88:64:22:b9:b8:ce:5d:28:18:9c:d6:f1:
cd:a1:00:fa:78:53:10:13:f3:0d:62:06:e5:50:95:
0a:24:d9:39:02:0e:cc:10:9d:7e:49:48:dc:90:08:
66:d5:39:e1:11:54:a8:00:62:ad:c7:29:9a:38:c8:
e8:43:19:e3:dd:ce:81:eb:50:ee:06:b7:0f:03:f4:
89:ad:58:0d:2a:74:9a:d7:80:53:2c:ef:02:cd:15:
03:2b:a5:3e:a1:7d:57:b2:d1:dd:df:38:d7:06:01:
10:07:1c:0a:0d:30:12:09:24:ab:ea:3e:e5:91:16:
ac:7a:29:d9:ce:3c:18:04:df:71:7f:1b:89:be:37:
45:73:14:c6:f3:cc:74:e5:65:5f:f6:aa:07:16:ec:
6c:cf:4a:87:cc:0b:8e:0f:9f:75:71:0b:01:28:fb:
56:d2:73:16:a7:40:44:9a:db:20:af:d0:7c:1e:d4:
2a:c4:a9:db:1d:60:66:09:76:02:eb:74:89:ef:c5:
dc:79:26:c3:e7:97:2b:e6:3d:08:12:22:55:a4:11:
bd:7b:c0:af:ee:11:cb:4a:62:a2:ef:74:aa:a5:a0:
49:ba:41:f1:c9:29:76:0c:d9:b3:0e:4b:54:8d:ad:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:68:C4:D7:D7:7B:44:90:73:83:82:E5:A8:8E:51:44:40:3B:7D:F4
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:03:a0:76:0d:c0:02:6c:10:b4:7f:67:1f:0f:4a:41:ed:db:
0c:37:0b:2f:5f:33:6d:ed:60:2d:7a:e9:bb:9a:b3:38:b5:09:
97:15:8a:34:63:24:16:fa:03:5c:d6:e3:ab:da:bd:01:f6:42:
d9:7f:67:0d:a1:bf:5a:cf:87:3f:5c:56:ca:66:e2:8f:32:39:
8f:f4:b1:a2:17:7a:df:63:a9:bb:ba:e8:26:6c:2b:68:7e:cc:
06:49:4b:50:e3:5a:6f:77:db:78:ef:b4:f4:33:12:36:2c:b3:
38:9c:08:eb:21:41:44:3d:11:50:ee:2f:45:19:ec:42:68:bb:
1e:2f:bc:51:a6:7f:52:3b:87:30:ac:cf:b2:b5:7b:d6:66:1e:
7c:8e:62:df:39:18:bb:d2:f9:0b:6a:73:be:be:60:b6:18:c8:
d2:52:df:3d:92:c0:0a:01:00:bd:aa:47:b1:0d:d0:4b:b9:82:
e5:d4:ee:e3:9b:39:90:ce:9b:fb:0c:26:e0:d6:b8:3e:40:73:
c2:39:07:26:4e:c5:91:b5:2b:47:f9:64:33:2b:4c:e8:30:87:
af:88:e8:58:0d:20:11:12:ad:b3:bd:37:ac:e0:2b:8a:b2:cd:
07:a6:4d:3d:7c:da:f2:83:c6:c7:d6:48:b8:ce:d2:ca:44:4a:
8d:1e:83:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNB8jpuZriIzs96uvSDSKiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZWUyMDFjNjVkNjU1ZWU5Y2ZlMjUxZjk1MWVhOTFiYmEx
NTQ1NjcwHhcNMjUxMTA0MDQwMjI2WhcNMjUxMTA1MDQwMjI2WjAzMTEwLwYDVQQD
Eyg5ZTY4YzRkN2Q3N2I0NDkwNzM4MzgyZTVhODhlNTE0NDQwM2I3ZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzALntDgKwqFbgsiYqo/Y4WIZCK5
uM5dKBic1vHNoQD6eFMQE/MNYgblUJUKJNk5Ag7MEJ1+SUjckAhm1TnhEVSoAGKt
xymaOMjoQxnj3c6B61DuBrcPA/SJrVgNKnSa14BTLO8CzRUDK6U+oX1XstHd3zjX
BgEQBxwKDTASCSSr6j7lkRaseinZzjwYBN9xfxuJvjdFcxTG88x05WVf9qoHFuxs
z0qHzAuOD591cQsBKPtW0nMWp0BEmtsgr9B8HtQqxKnbHWBmCXYC63SJ78XceSbD
55cr5j0IEiJVpBG9e8Cv7hHLSmKi73SqpaBJukHxySl2DNmzDktUja21mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5oxNfXe0SQc4OC5aiOUURAO330MB8GA1UdIwQY
MBaAFIbuIBxl1lXunP4lH5UeqRu6FUVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHU0Z0hHWFdWZTZjX2lVZmxSNnBHN29WUldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xM2E3MzUtM2IxYy00ZDljLThjZmEt
YThjYThlNGM3ZTc3LzEvaHU0Z0hHWFdWZTZjX2lVZmxSNnBHN29WUldjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xM2E3MzUtM2IxYy00ZDljLThjZmEtYThjYThlNGM3ZTc3
LzEvaHU0Z0hHWFdWZTZjX2lVZmxSNnBHN29WUldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAOgdg3A
AmwQtH9nHw9KQe3bDDcLL18zbe1gLXrpu5qzOLUJlxWKNGMkFvoDXNbjq9q9AfZC
2X9nDaG/Ws+HP1xWymbijzI5j/Sxohd632Opu7roJmwraH7MBklLUONab3fbeO+0
9DMSNiyzOJwI6yFBRD0RUO4vRRnsQmi7Hi+8UaZ/UjuHMKzPsrV71mYefI5i3zkY
u9L5C2pzvr5gthjI0lLfPZLACgEAvapHsQ3QS7mC5dTu45s5kM6b+wwm4Na4PkBz
wjkHJk7FkbUrR/lkMytM6DCHr4joWA0gERKts703rOArirLNB6ZNPXza8oPGx9ZI
uM7SykRKjR6DUg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:39 2025 by rpki-client