Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
File: hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json)
Hash identifier: O0d4I1CsuIi6QgBP7ql1PEhYUEjrixLzNz2b6zmxxQA=
Subject key identifier: 51:0E:E0:65:A3:DC:33:EF:4E:65:E9:D5:E5:34:83:AF:DA:26:F4:62
Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9
Certificate serial: 019A50E3FBB18B99C9D9261E1756EF16BBF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 22:01:49 +0000
Manifest this update: Tue 04 Nov 2025 22:01:49 +0000
Manifest next update: Wed 05 Nov 2025 22:01:49 +0000
Files and hashes: 1: P7kra4ub5VF3YEJjz3ym8CwbAXA.roa (hash: AJEYR0xnzVy6utllNh8R4LIoanjGY6stnMXm+hMmUEo=)
2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: 9YMxl1xVyeAdwpaMwTohKJbR6c2lZJXVnWRs9YQI6bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:fb:b1:8b:99:c9:d9:26:1e:17:56:ef:16:bb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9
Validity
Not Before: Nov 4 22:01:49 2025 GMT
Not After : Nov 5 22:01:49 2025 GMT
Subject: CN=510ee065a3dc33ef4e65e9d5e53483afda26f462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:76:60:42:51:66:c4:8e:13:7f:31:c4:78:ec:
04:66:7c:c2:45:a8:be:ff:75:72:27:22:0a:26:a8:
1c:65:2f:3f:65:09:f9:e9:01:36:11:0f:1b:b6:56:
37:3e:0d:c6:25:47:b7:80:81:fb:40:2c:00:d3:4f:
21:cc:17:0b:9e:f4:c7:1e:10:5d:fc:27:c7:10:0b:
ca:62:7b:11:04:e3:82:54:83:c2:ae:b6:69:59:b4:
be:90:e8:29:11:8f:b7:37:45:65:a5:df:11:78:92:
ab:de:bb:8a:af:45:e9:69:08:31:81:b8:14:77:6b:
94:53:df:39:e6:a9:3a:eb:2a:1b:46:86:8b:82:09:
4d:c8:9a:45:61:06:49:a4:26:ae:48:c7:a8:fe:f9:
f9:5e:2e:04:8a:18:58:63:b5:0e:fb:2f:d6:59:61:
99:b0:17:5e:4a:5e:bd:a8:90:b7:ff:32:a1:99:2b:
09:ff:f1:e3:b8:0c:00:c0:98:c8:7e:d3:45:3b:6f:
df:59:ea:c6:e9:5f:59:dc:74:70:98:c1:9c:85:b2:
ad:ab:ec:3d:a9:1c:ad:ea:00:49:e7:a1:c4:01:52:
e5:79:0b:cf:99:3f:b5:d6:fd:c6:3b:b0:11:c1:80:
f3:2b:f2:b5:f1:66:44:f4:4c:b0:36:b5:4f:af:81:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0E:E0:65:A3:DC:33:EF:4E:65:E9:D5:E5:34:83:AF:DA:26:F4:62
X509v3 Authority Key Identifier:
keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d2:69:17:5d:5b:1f:08:e6:57:7d:56:40:26:d5:25:47:ab:
3b:69:af:f1:b6:06:97:54:a1:6d:7a:eb:92:d5:ca:bf:ce:37:
e4:75:90:65:5a:e0:0c:5a:31:39:3d:91:51:12:88:e3:90:f9:
1c:9c:15:b9:b8:e9:16:1a:98:64:d9:b8:af:89:9c:41:bc:73:
b5:c5:50:3b:44:82:df:70:4f:4e:ed:46:6f:7b:39:e0:8e:c7:
ee:cb:52:88:fb:c1:92:22:69:b3:3c:6a:1a:06:20:94:84:14:
c0:99:2a:49:5a:0b:61:f8:0b:6e:61:04:6c:2b:f0:06:52:ad:
cf:35:98:7c:6d:08:d9:68:b3:56:fe:13:bc:a7:b0:5b:09:d1:
f6:8a:8d:80:28:cc:be:37:09:ea:f9:50:c7:f2:f5:d3:bf:2d:
ca:b3:b9:fb:f5:70:35:41:dd:40:ba:18:db:75:6d:f0:37:97:
01:7b:d6:9a:f9:52:52:62:7b:50:bb:7d:11:58:f5:e0:ab:88:
87:0d:28:cb:35:af:1f:69:88:6f:0a:02:b6:34:d9:5e:66:06:
e3:c8:f2:de:a4:0b:ef:af:fe:91:72:dc:92:98:00:2e:3d:fe:
ef:4b:86:94:f0:ae:cf:d3:20:f0:a5:74:a1:c2:45:a0:e8:49:
06:f1:89:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4/uxi5nJ2SYeF1bvFrvzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NjZhNWRkZTI3ZjkxMWRhOGJlNzNjMjYxZmY1NWI1ODgx
MTk4YTkwHhcNMjUxMTA0MjIwMTQ5WhcNMjUxMTA1MjIwMTQ5WjAzMTEwLwYDVQQD
Eyg1MTBlZTA2NWEzZGMzM2VmNGU2NWU5ZDVlNTM0ODNhZmRhMjZmNDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XZgQlFmxI4TfzHEeOwEZnzCRai+
/3VyJyIKJqgcZS8/ZQn56QE2EQ8btlY3Pg3GJUe3gIH7QCwA008hzBcLnvTHHhBd
/CfHEAvKYnsRBOOCVIPCrrZpWbS+kOgpEY+3N0Vlpd8ReJKr3ruKr0XpaQgxgbgU
d2uUU9855qk66yobRoaLgglNyJpFYQZJpCauSMeo/vn5Xi4EihhYY7UO+y/WWWGZ
sBdeSl69qJC3/zKhmSsJ//HjuAwAwJjIftNFO2/fWerG6V9Z3HRwmMGchbKtq+w9
qRyt6gBJ56HEAVLleQvPmT+11v3GO7ARwYDzK/K18WZE9EywNrVPr4HJ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEO4GWj3DPvTmXp1eU0g6/aJvRiMB8GA1UdIwQY
MBaAFIRmpd3if5EdqL5zwmH/VbWIEZipMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiNjAtOGFhNy00NjFmLTljZDkt
N2NjYmI0NWRjYTUxLzEvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiNjAtOGFhNy00NjFmLTljZDktN2NjYmI0NWRjYTUx
LzEvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldJpF11b
HwjmV31WQCbVJUerO2mv8bYGl1ShbXrrktXKv8435HWQZVrgDFoxOT2RURKI45D5
HJwVubjpFhqYZNm4r4mcQbxztcVQO0SC33BPTu1Gb3s54I7H7stSiPvBkiJpszxq
GgYglIQUwJkqSVoLYfgLbmEEbCvwBlKtzzWYfG0I2WizVv4TvKewWwnR9oqNgCjM
vjcJ6vlQx/L1078tyrO5+/VwNUHdQLoY23Vt8DeXAXvWmvlSUmJ7ULt9EVj14KuI
hw0oyzWvH2mIbwoCtjTZXmYG48jy3qQL76/+kXLckpgALj3+70uGlPCuz9Mg8KV0
ocJFoOhJBvGJvA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:00 2025 by rpki-client