Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier: Xe3y6Eiqimwy3bPZ48fet2YcgaAlW87cbdRusiJEf68=
Subject key identifier: CB:FF:68:18:5B:BD:5B:39:37:9D:83:E5:FF:80:21:C1:A5:8D:86:24
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial: 0199FF5963DEC2DA5015E5C213DB8BD767BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number: 144C
Signing time: Mon 20 Oct 2025 02:01:12 +0000
Manifest this update: Mon 20 Oct 2025 02:01:12 +0000
Manifest next update: Tue 21 Oct 2025 02:01:12 +0000
Files and hashes: 1: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: PEGnTUv8idiCvlCAP3fdrF3qfD6BKX8etnxsOnpY2MY=)
2: pd4NfQq1m5q0gJRIY8-JV63L0Ug.roa (hash: 2jDsm0ha9EaVCILusmCVnInYpOVbfVEOKEtxwwvPFb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:63:de:c2:da:50:15:e5:c2:13:db:8b:d7:67:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Validity
Not Before: Oct 20 02:01:12 2025 GMT
Not After : Oct 21 02:01:12 2025 GMT
Subject: CN=cbff68185bbd5b39379d83e5ff8021c1a58d8624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:14:35:cf:2a:2e:19:81:62:77:8e:b2:4d:5b:
1a:fa:16:37:1f:cd:c3:6a:17:8c:39:9f:ba:c4:99:
52:40:58:38:8a:3f:a3:d0:c1:32:be:71:c7:18:4a:
fc:77:22:68:f9:90:2e:a4:74:5e:c4:2e:c2:3c:d2:
87:52:db:22:82:1c:69:ee:9d:71:5c:fe:f7:a9:13:
da:5c:fa:8a:01:57:67:2d:51:1d:f4:e4:de:b8:48:
2b:d8:47:cd:09:65:9c:9a:d8:d0:97:92:c9:51:2e:
6b:82:ed:ba:a1:26:65:f1:7b:1b:17:54:97:d1:db:
78:48:d3:47:b4:17:04:b6:37:f7:fe:b6:32:f0:b6:
22:cf:28:9d:b6:a5:08:fa:9f:89:8c:8e:60:92:03:
9a:76:c5:33:17:a1:59:44:e7:73:0a:7e:53:e7:4f:
1b:0d:60:4f:59:ea:a0:62:c2:c2:20:7c:82:99:9b:
6f:9b:36:d9:73:6d:70:ad:49:77:4c:76:c6:09:ca:
36:ab:28:8b:6b:68:b4:ef:0c:0f:5f:e2:e8:2e:40:
8a:95:58:9d:99:f0:3e:de:68:03:3e:e8:03:7f:9d:
a3:a2:a2:25:cb:a7:c3:f9:be:e2:81:46:e7:e5:3a:
13:e5:1e:7a:d2:2e:24:9e:5a:47:49:77:d9:51:66:
fe:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FF:68:18:5B:BD:5B:39:37:9D:83:E5:FF:80:21:C1:A5:8D:86:24
X509v3 Authority Key Identifier:
keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:91:cb:cc:ec:95:61:3c:ef:a8:de:ad:72:7b:81:59:4e:59:
15:da:e5:be:02:e5:66:92:6b:51:f4:f6:8a:cc:08:7b:37:87:
8d:d4:68:65:bb:ff:61:b8:7f:7a:9a:34:d1:d9:1f:cf:7b:75:
02:32:3c:92:d8:54:01:0a:b7:b1:fe:30:8f:47:d4:78:ec:86:
60:f2:b9:76:33:e5:48:bc:91:18:22:e2:85:e1:d8:30:7b:7c:
d6:8e:4b:66:46:4d:b1:8a:a4:98:96:94:d2:1e:94:a1:ab:f1:
af:ed:e6:10:df:21:d8:75:0e:21:45:90:bc:10:41:33:e8:cc:
cb:f4:e6:1e:c4:b4:99:55:3b:9c:51:e6:c0:23:67:fe:3a:2a:
ca:c7:26:55:ad:bf:d6:18:5c:bf:09:9a:9a:b0:24:7e:c3:d8:
07:4c:6c:1a:ef:33:87:94:15:48:b7:9b:cb:2d:f5:0c:48:c7:
01:95:5e:c7:19:f1:f3:08:12:a6:86:3e:97:54:fc:03:f2:df:
10:52:9c:81:dd:33:7a:4a:08:52:19:37:8e:af:70:8a:1c:ca:
33:d3:e2:cd:88:c3:bb:6f:e4:77:d6:6f:70:18:5d:e3:2b:68:
99:8b:c1:b9:85:d2:2e:a8:77:75:83:6d:23:86:85:37:81:64:
2d:24:c0:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WWPewtpQFeXCE9uL12e6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZDdmN2QyZmMxMzQ4OTE0YzAwNmI1NWFiOTNmMmQyZTMz
OTBkZTYwHhcNMjUxMDIwMDIwMTEyWhcNMjUxMDIxMDIwMTEyWjAzMTEwLwYDVQQD
EyhjYmZmNjgxODViYmQ1YjM5Mzc5ZDgzZTVmZjgwMjFjMWE1OGQ4NjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BQ1zyouGYFid46yTVsa+hY3H83D
aheMOZ+6xJlSQFg4ij+j0MEyvnHHGEr8dyJo+ZAupHRexC7CPNKHUtsighxp7p1x
XP73qRPaXPqKAVdnLVEd9OTeuEgr2EfNCWWcmtjQl5LJUS5rgu26oSZl8XsbF1SX
0dt4SNNHtBcEtjf3/rYy8LYizyidtqUI+p+JjI5gkgOadsUzF6FZROdzCn5T508b
DWBPWeqgYsLCIHyCmZtvmzbZc21wrUl3THbGCco2qyiLa2i07wwPX+LoLkCKlVid
mfA+3mgDPugDf52joqIly6fD+b7igUbn5ToT5R560i4knlpHSXfZUWb+xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMv/aBhbvVs5N52D5f+AIcGljYYkMB8GA1UdIwQY
MBaAFIfX99L8E0iRTABrVauT8tLjOQ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQt
MzAxZGYyNzIxNTJlLzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQtMzAxZGYyNzIxNTJl
LzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJHLzOyV
YTzvqN6tcnuBWU5ZFdrlvgLlZpJrUfT2iswIezeHjdRoZbv/Ybh/epo00dkfz3t1
AjI8kthUAQq3sf4wj0fUeOyGYPK5djPlSLyRGCLiheHYMHt81o5LZkZNsYqkmJaU
0h6Uoavxr+3mEN8h2HUOIUWQvBBBM+jMy/TmHsS0mVU7nFHmwCNn/joqyscmVa2/
1hhcvwmamrAkfsPYB0xsGu8zh5QVSLebyy31DEjHAZVexxnx8wgSpoY+l1T8A/Lf
EFKcgd0zekoIUhk3jq9wihzKM9PizYjDu2/kd9ZvcBhd4ytomYvBuYXSLqh3dYNt
I4aFN4FkLSTAnA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:08 2025 by rpki-client