
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier: relVDWypPF2js4EfhtPOc9+nTDan3liEFkP8cb7b9Mg=
Subject key identifier: 1F:25:B3:90:12:39:0C:F9:21:7D:75:76:19:CD:32:26:BD:FF:46:49
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 0199FBEA93339E3BDC495DF38F544D592830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number: 149D
Signing time: Sun 19 Oct 2025 10:01:18 +0000
Manifest this update: Sun 19 Oct 2025 10:01:18 +0000
Manifest next update: Mon 20 Oct 2025 10:01:18 +0000
Files and hashes: 1: FsnHQCl3YIPQ-Kr--FXccxOvsak.roa (hash: 36hDdDotapDvjoXAZEUVlMvaerSFU32EL1uK11igVxs=)
2: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: 0nJc/GNdjBMQRs4po72CIIWFh1pCVoW/XZlWEOcNI8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:93:33:9e:3b:dc:49:5d:f3:8f:54:4d:59:28:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: Oct 19 10:01:18 2025 GMT
Not After : Oct 20 10:01:18 2025 GMT
Subject: CN=1f25b39012390cf9217d757619cd3226bdff4649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:29:82:94:cd:aa:00:6e:fd:84:76:80:c7:
99:67:01:11:a2:93:8b:82:1a:6d:86:5e:1c:e2:2d:
d4:60:f2:19:ae:9c:ea:07:83:eb:ba:ab:1c:66:a1:
8e:ec:81:82:f4:3c:0d:e4:a7:a0:0b:74:36:29:ba:
3d:a0:c2:a2:f5:d9:f7:22:1d:7f:61:2a:10:50:2e:
30:ee:de:d1:f4:04:35:d9:5a:cc:a3:12:26:2e:16:
2c:d4:c7:7b:70:b9:1d:33:8d:a2:53:ad:25:69:57:
f6:25:17:44:a7:38:3e:2d:6f:1d:b8:2f:3c:f7:e5:
8d:ab:1d:15:70:3b:2a:36:f7:08:0e:61:4a:85:1b:
24:ce:af:6d:41:1a:0b:d5:94:e0:ac:6b:b7:98:bf:
15:8d:74:1a:94:f9:55:8c:47:da:f8:e9:a3:55:fe:
73:d0:08:dc:c4:c4:18:3a:2c:d6:26:6e:ce:6a:bc:
87:4e:e5:82:ce:72:cb:c9:43:00:6b:d4:60:7d:ab:
e6:fd:bb:6a:dd:bc:e0:62:94:86:96:fa:a0:27:f8:
df:18:72:6d:18:96:cb:2c:10:8e:63:3a:cd:8f:d7:
9f:a5:62:bd:07:26:e0:a3:d6:69:8c:92:4a:b7:30:
96:73:b9:52:51:58:23:c2:cd:25:f6:16:8a:da:f8:
11:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:25:B3:90:12:39:0C:F9:21:7D:75:76:19:CD:32:26:BD:FF:46:49
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:db:f9:5b:d3:78:5c:04:5f:2c:b7:6e:4a:60:ed:af:98:ff:
fd:21:8f:45:0a:d0:cd:65:e3:74:2d:9a:e6:08:94:32:e2:76:
b8:66:a5:7f:cd:e9:96:7b:8d:e5:f2:5a:ed:dd:4c:3d:89:a6:
da:10:2e:d1:06:62:65:a3:18:21:4c:51:9c:42:57:5a:6a:84:
33:d2:e5:5f:6f:3b:c3:ff:44:7a:53:3c:78:81:de:b5:1a:cd:
17:c4:6b:5a:4e:a8:6e:51:82:fa:9a:58:20:b0:5a:d7:55:b2:
df:ab:3a:a2:2a:86:97:b1:f6:75:8c:24:5a:71:6b:59:d8:76:
52:bc:e4:4e:fa:43:2f:38:ea:53:20:f3:1f:87:26:b1:f4:55:
f9:22:8f:c0:be:ba:96:47:a2:f1:ae:6d:c6:03:d9:4f:18:da:
94:35:1f:c2:60:f6:83:d4:40:17:fb:69:8c:fa:6d:08:cf:e0:
42:de:86:b6:4c:2f:7c:f0:8f:ba:39:94:bd:5b:95:ab:e7:df:
c0:47:5f:1e:48:42:cb:3e:1f:66:51:68:df:7c:7d:47:a5:71:
a9:89:af:ef:c8:45:46:9c:ef:bf:5c:ac:76:19:ff:44:f6:81:
84:d4:6e:41:7e:97:1b:90:70:2d:ad:fc:cd:04:0e:9f:75:5c:
1e:d1:ee:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76pMznjvcSV3zj1RNWSgwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ODUxNTQ0YTY0MjdkMmM4ZTI3OWU0Yjk0YjkyYWFmMDAw
OWVkMjcwHhcNMjUxMDE5MTAwMTE4WhcNMjUxMDIwMTAwMTE4WjAzMTEwLwYDVQQD
EygxZjI1YjM5MDEyMzkwY2Y5MjE3ZDc1NzYxOWNkMzIyNmJkZmY0NjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9EpgpTNqgBu/YR2gMeZZwERopOL
ghpthl4c4i3UYPIZrpzqB4PruqscZqGO7IGC9DwN5KegC3Q2Kbo9oMKi9dn3Ih1/
YSoQUC4w7t7R9AQ12VrMoxImLhYs1Md7cLkdM42iU60laVf2JRdEpzg+LW8duC88
9+WNqx0VcDsqNvcIDmFKhRskzq9tQRoL1ZTgrGu3mL8VjXQalPlVjEfa+OmjVf5z
0AjcxMQYOizWJm7OaryHTuWCznLLyUMAa9Rgfavm/btq3bzgYpSGlvqgJ/jfGHJt
GJbLLBCOYzrNj9efpWK9Bybgo9ZpjJJKtzCWc7lSUVgjws0l9haK2vgReQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8ls5ASOQz5IX11dhnNMia9/0ZJMB8GA1UdIwQY
MBaAFIeFFUSmQn0sjieeS5S5Kq8ACe0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYt
ODU0MzRmNjE2OWYxLzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYtODU0MzRmNjE2OWYx
LzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdv5W9N4
XARfLLduSmDtr5j//SGPRQrQzWXjdC2a5giUMuJ2uGalf83plnuN5fJa7d1MPYmm
2hAu0QZiZaMYIUxRnEJXWmqEM9LlX287w/9EelM8eIHetRrNF8RrWk6oblGC+ppY
ILBa11Wy36s6oiqGl7H2dYwkWnFrWdh2UrzkTvpDLzjqUyDzH4cmsfRV+SKPwL66
lkei8a5txgPZTxjalDUfwmD2g9RAF/tpjPptCM/gQt6GtkwvfPCPujmUvVuVq+ff
wEdfHkhCyz4fZlFo33x9R6VxqYmv78hFRpzvv1ysdhn/RPaBhNRuQX6XG5BwLa38
zQQOn3VcHtHuVw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:40 2025 by rpki-client