Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier: jm99QGu73j6/ZjW2KsxsW+aChLjQUXFY7SDJ6SsvWgg=
Subject key identifier: CC:BB:FB:C7:99:F1:73:D9:8D:79:5D:F5:8B:9A:90:CD:78:FC:7B:B4
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial: 0198D4049F5D4022AC1BCA860F8F9D34AD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number: 13B1
Signing time: Fri 22 Aug 2025 23:02:09 +0000
Manifest this update: Fri 22 Aug 2025 23:02:09 +0000
Manifest next update: Sat 23 Aug 2025 23:02:09 +0000
Files and hashes: 1: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: LYOy+mitplTX9mELWJP5CPFR0BnWn7vy0gd5ckzXI/E=)
2: pd4NfQq1m5q0gJRIY8-JV63L0Ug.roa (hash: 2jDsm0ha9EaVCILusmCVnInYpOVbfVEOKEtxwwvPFb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:9f:5d:40:22:ac:1b:ca:86:0f:8f:9d:34:ad:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Validity
Not Before: Aug 22 23:02:09 2025 GMT
Not After : Aug 23 23:02:09 2025 GMT
Subject: CN=ccbbfbc799f173d98d795df58b9a90cd78fc7bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:ad:8a:e7:02:7c:7f:af:50:aa:0f:0e:ba:
bb:a4:6e:06:86:ee:28:72:3c:f1:39:6c:75:9e:98:
0b:de:7c:ca:d7:bd:cb:58:84:b5:db:10:2d:05:2c:
fe:e2:35:df:15:83:3b:0e:93:e7:47:1c:63:47:b3:
08:2f:dd:42:70:24:85:59:e0:64:49:3b:52:ac:a4:
12:33:05:9b:6d:83:0c:d1:df:0f:06:83:19:85:f1:
e3:28:27:e0:d5:20:e0:27:e9:59:ff:26:48:49:6e:
7d:af:e2:c3:82:41:7d:cd:38:91:33:92:52:84:d3:
8e:1b:09:35:eb:7b:c1:93:69:90:0a:e0:66:aa:16:
fc:e4:a2:d4:b8:f0:b1:76:f8:ef:a2:ed:f7:5d:11:
f9:56:85:f2:71:61:a2:af:a5:2f:64:98:4f:8b:95:
fb:69:79:fe:c1:62:33:7b:2d:b4:81:0b:68:f2:88:
aa:24:19:9b:ad:98:ba:0e:ae:85:a2:62:8c:0a:d8:
c0:0d:6a:31:d5:b2:0e:d5:a3:bc:42:de:5e:09:76:
a7:e8:d6:e5:46:41:77:ae:54:9a:fa:4e:1c:f0:4a:
7e:15:e3:d9:d5:bc:2d:5c:b6:62:79:7a:9f:f6:2b:
0e:bb:4d:e6:99:c1:5f:42:7d:7c:18:76:fd:ee:00:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BB:FB:C7:99:F1:73:D9:8D:79:5D:F5:8B:9A:90:CD:78:FC:7B:B4
X509v3 Authority Key Identifier:
keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c8:53:68:40:2e:96:85:f3:d7:c1:44:c9:b7:41:1a:eb:ed:
3a:2d:ab:6f:3c:9c:07:99:a0:48:b4:45:37:72:ca:c1:3c:9f:
a7:21:fe:48:e8:7f:94:0b:a9:29:6b:ac:89:00:5d:ba:00:a3:
3a:df:46:d4:08:93:d9:25:5d:af:97:21:86:c0:8e:93:60:57:
b8:ee:22:f8:98:3b:d1:23:e4:1d:c7:fb:cb:68:be:69:69:a1:
4f:9c:0f:c1:18:85:94:d8:56:22:32:96:59:08:a6:85:88:8a:
bc:60:86:87:4d:6d:18:e8:de:34:49:37:c3:fb:cf:92:e7:2c:
00:ef:39:6f:9f:e3:74:1a:cc:7c:ab:8a:0e:2b:df:25:ca:c0:
99:72:c0:b0:a9:ce:b7:73:58:1f:2f:0e:e1:ee:4b:0f:e2:20:
59:ac:13:17:b5:4d:6d:7f:b3:d9:e9:87:3c:54:55:14:d0:41:
f2:27:50:6b:24:f3:1f:68:fc:03:d8:83:6e:f4:81:80:79:53:
f7:ff:f8:9e:87:2c:a4:64:b5:f7:8b:f2:2e:f8:89:92:be:3d:
3a:91:43:da:c4:2c:88:fd:de:ad:78:e1:aa:92:58:0b:a2:65:
d9:ef:86:fb:36:06:bb:2f:e9:a8:9e:cf:a6:fc:88:b5:fe:7c:
57:e2:8b:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBJ9dQCKsG8qGD4+dNK1HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZDdmN2QyZmMxMzQ4OTE0YzAwNmI1NWFiOTNmMmQyZTMz
OTBkZTYwHhcNMjUwODIyMjMwMjA5WhcNMjUwODIzMjMwMjA5WjAzMTEwLwYDVQQD
EyhjY2JiZmJjNzk5ZjE3M2Q5OGQ3OTVkZjU4YjlhOTBjZDc4ZmM3YmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowGtiucCfH+vUKoPDrq7pG4Ghu4o
cjzxOWx1npgL3nzK173LWIS12xAtBSz+4jXfFYM7DpPnRxxjR7MIL91CcCSFWeBk
STtSrKQSMwWbbYMM0d8PBoMZhfHjKCfg1SDgJ+lZ/yZISW59r+LDgkF9zTiRM5JS
hNOOGwk163vBk2mQCuBmqhb85KLUuPCxdvjvou33XRH5VoXycWGir6UvZJhPi5X7
aXn+wWIzey20gQto8oiqJBmbrZi6Dq6FomKMCtjADWox1bIO1aO8Qt5eCXan6Nbl
RkF3rlSa+k4c8Ep+FePZ1bwtXLZieXqf9isOu03mmcFfQn18GHb97gDUJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMy7+8eZ8XPZjXld9YuakM14/Hu0MB8GA1UdIwQY
MBaAFIfX99L8E0iRTABrVauT8tLjOQ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQt
MzAxZGYyNzIxNTJlLzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQtMzAxZGYyNzIxNTJl
LzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMhTaEAu
loXz18FEybdBGuvtOi2rbzycB5mgSLRFN3LKwTyfpyH+SOh/lAupKWusiQBdugCj
Ot9G1AiT2SVdr5chhsCOk2BXuO4i+Jg70SPkHcf7y2i+aWmhT5wPwRiFlNhWIjKW
WQimhYiKvGCGh01tGOjeNEk3w/vPkucsAO85b5/jdBrMfKuKDivfJcrAmXLAsKnO
t3NYHy8O4e5LD+IgWawTF7VNbX+z2emHPFRVFNBB8idQayTzH2j8A9iDbvSBgHlT
9//4nocspGS194vyLviJkr49OpFD2sQsiP3erXjhqpJYC6Jl2e+G+zYGuy/pqJ7P
pvyItf58V+KLDQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:48 2025 by rpki-client