Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: LiOSPQg9MnSw1jhsL7OjFTUE+tEXRE4sijZ/LPXeaeE=
Subject key identifier: 5B:0C:BC:7C:31:D1:6D:EB:5B:56:87:12:27:7C:6F:2C:BF:04:5B:16
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 019A50075CFA2A4E2A117F94418CF6CC2C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 13A1
Signing time: Tue 04 Nov 2025 18:00:51 +0000
Manifest this update: Tue 04 Nov 2025 18:00:51 +0000
Manifest next update: Wed 05 Nov 2025 18:00:51 +0000
Files and hashes: 1: KIolqJ5Rs9ZhvtnGtDf7moJJ2_E.roa (hash: d0kz1GVWlhFBJRVBQyJqX/EmCfxG7jLUjxwkYTyT+k0=)
2: OIw1IENePZ-upkTKRtn8rlZjiKY.roa (hash: zOqnUi4pX1IWvLYQ+EBAhcXccgQfhAY/XDiO0iIVI4U=)
3: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: DbtHADrXfwN9piaarybTn2HF9gqOM3bOfggsTF+4eM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:5c:fa:2a:4e:2a:11:7f:94:41:8c:f6:cc:2c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Nov 4 18:00:51 2025 GMT
Not After : Nov 5 18:00:51 2025 GMT
Subject: CN=5b0cbc7c31d16deb5b568712277c6f2cbf045b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c8:de:92:0f:98:b9:ca:a1:2a:c7:52:31:65:
36:9e:50:8b:c4:b3:e6:23:de:2b:0c:11:92:90:f0:
e4:5a:ab:36:b3:db:fd:d5:e2:7e:56:62:d2:4b:7f:
67:e0:17:45:25:2f:03:fb:21:1e:22:87:52:1f:df:
c8:ca:aa:57:d5:b1:68:1d:73:f9:d5:83:d8:f1:ce:
8f:15:57:e1:58:63:4e:c4:b1:3c:13:19:17:74:2e:
8c:ed:94:83:5f:5d:e8:13:9b:20:66:c8:3b:2a:3a:
3f:8d:a9:15:f7:04:6d:ca:df:a7:ef:14:3f:2e:89:
e5:dc:06:c5:b6:71:3f:ff:44:7d:86:ad:2d:08:12:
b0:8a:78:95:23:ae:d1:5e:bf:b0:04:70:a8:a1:93:
bf:d2:b1:58:41:52:6e:64:5f:5e:b5:1c:83:e2:34:
08:5e:77:f5:b7:20:36:ab:2c:dc:48:3d:ba:96:b1:
c7:7e:22:05:8b:d8:84:72:71:42:34:10:c7:d5:8d:
3e:89:8b:06:a7:ef:99:54:d8:e1:60:1b:1c:a9:af:
a3:f9:8e:a5:b6:3d:5f:2b:8e:8f:0f:c9:bd:6a:02:
9c:7e:8c:a7:ac:12:50:fa:b2:8c:0e:0b:2a:1c:30:
2a:be:b6:10:4c:c2:47:5b:9f:3e:99:e2:5a:0a:17:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0C:BC:7C:31:D1:6D:EB:5B:56:87:12:27:7C:6F:2C:BF:04:5B:16
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:75:32:e7:40:fa:87:1f:d8:ae:62:87:41:05:58:ce:85:04:
a6:97:84:43:05:26:57:24:0c:43:aa:72:47:13:8b:b3:03:fa:
74:41:9b:f1:50:af:27:24:01:be:39:ca:0d:8d:2e:42:4d:14:
56:66:7c:e8:c4:5e:5e:f5:c8:af:46:2c:98:19:4d:8e:ef:bb:
32:c9:ef:49:4e:9d:3e:fb:e4:a2:d5:4e:2d:96:21:b7:a8:b5:
0c:ed:35:35:bc:f7:42:25:1b:44:d7:0e:b4:fe:b7:61:1b:8a:
80:c9:88:d0:f5:d2:f5:3b:cb:52:f0:61:8d:b1:a4:f9:f8:ed:
8c:d2:b7:ae:d9:f7:f7:3f:c6:eb:fe:af:aa:de:f1:43:b0:e1:
4b:50:60:a2:4b:bb:63:f5:c6:bb:64:8a:69:97:52:5b:29:1c:
62:6e:59:3d:26:cc:eb:b8:31:e0:46:68:36:51:eb:d8:c1:5c:
16:79:b4:e2:71:55:b3:47:4b:70:60:46:85:02:b4:2b:bb:01:
38:57:0d:c3:ff:7c:63:74:50:41:62:a5:8a:d2:f2:4f:3c:4a:
7d:c0:1b:51:8a:8c:a7:86:be:04:50:90:6a:95:0d:8d:8e:82:
f0:5b:e4:df:eb:b0:52:12:79:fe:67:e5:9e:3c:67:d2:9a:40:
c1:7b:96:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB1z6Kk4qEX+UQYz2zCxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MTI3MmU0ZTgxODZiOWNmM2QxZWI0MjY2NWM1M2NlNzE0
ZjRkNGIwHhcNMjUxMTA0MTgwMDUxWhcNMjUxMTA1MTgwMDUxWjAzMTEwLwYDVQQD
Eyg1YjBjYmM3YzMxZDE2ZGViNWI1Njg3MTIyNzdjNmYyY2JmMDQ1YjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Mjekg+YucqhKsdSMWU2nlCLxLPm
I94rDBGSkPDkWqs2s9v91eJ+VmLSS39n4BdFJS8D+yEeIodSH9/IyqpX1bFoHXP5
1YPY8c6PFVfhWGNOxLE8ExkXdC6M7ZSDX13oE5sgZsg7Kjo/jakV9wRtyt+n7xQ/
Lonl3AbFtnE//0R9hq0tCBKwiniVI67RXr+wBHCooZO/0rFYQVJuZF9etRyD4jQI
Xnf1tyA2qyzcSD26lrHHfiIFi9iEcnFCNBDH1Y0+iYsGp++ZVNjhYBscqa+j+Y6l
tj1fK46PD8m9agKcfoynrBJQ+rKMDgsqHDAqvrYQTMJHW58+meJaCheq8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsMvHwx0W3rW1aHEid8byy/BFsWMB8GA1UdIwQY
MBaAFIUScuToGGuc89HrQmZcU85xT01LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lZDk0YjEtYjU3My00NWU0LTllMjEt
M2Y0MmM3MTc4MGJjLzEvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lZDk0YjEtYjU3My00NWU0LTllMjEtM2Y0MmM3MTc4MGJj
LzEvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnUy50D6
hx/YrmKHQQVYzoUEppeEQwUmVyQMQ6pyRxOLswP6dEGb8VCvJyQBvjnKDY0uQk0U
VmZ86MReXvXIr0YsmBlNju+7MsnvSU6dPvvkotVOLZYht6i1DO01Nbz3QiUbRNcO
tP63YRuKgMmI0PXS9TvLUvBhjbGk+fjtjNK3rtn39z/G6/6vqt7xQ7DhS1Bgoku7
Y/XGu2SKaZdSWykcYm5ZPSbM67gx4EZoNlHr2MFcFnm04nFVs0dLcGBGhQK0K7sB
OFcNw/98Y3RQQWKlitLyTzxKfcAbUYqMp4a+BFCQapUNjY6C8Fvk3+uwUhJ5/mfl
njxn0ppAwXuWGw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:40 2025 by rpki-client