Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier: HZticuJi8Z4UgX9k2LCZ6TTWy+/27pgiIezNfxmMJJQ=
Subject key identifier: AE:00:FC:A5:4F:7C:A5:57:8A:FF:62:CC:91:D3:4E:42:6A:6B:93:DB
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 019A006C0677D3EC0CABF3C7EF77DA8FA78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number: 1291
Signing time: Mon 20 Oct 2025 07:01:10 +0000
Manifest this update: Mon 20 Oct 2025 07:01:10 +0000
Manifest next update: Tue 21 Oct 2025 07:01:10 +0000
Files and hashes: 1: EqmxfEPR61JZ1PILd4aiLsGlGKg.roa (hash: o+GN8e0CITe+H1MxoXkf/yVp/P7VliN/bKmtLSSdiwk=)
2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: jjwsEPj4uli60AZM/mDvvRlO6ZIj0WND0/QcxygXQ3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:06:77:d3:ec:0c:ab:f3:c7:ef:77:da:8f:a7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: Oct 20 07:01:10 2025 GMT
Not After : Oct 21 07:01:10 2025 GMT
Subject: CN=ae00fca54f7ca5578aff62cc91d34e426a6b93db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b7:91:44:9e:2b:96:20:6b:13:10:b7:35:98:
2b:6a:70:1f:03:7f:c4:47:41:68:53:44:34:fa:75:
8a:39:bc:0a:d3:24:24:49:4f:ef:4f:29:19:c0:80:
f8:30:2d:1f:4c:e7:cb:b5:d1:6c:cf:d8:68:ab:0c:
64:1f:59:fe:bd:99:33:f7:69:37:f7:5a:8a:60:a5:
05:01:44:35:e7:e0:ec:d9:88:e9:a3:a4:f4:03:cf:
87:c9:b6:66:7b:01:0e:2c:32:c1:4a:16:49:71:53:
60:cd:e2:2e:cb:bb:b3:1e:f6:29:82:42:1a:d5:0d:
b1:af:b6:f2:ca:db:1c:d2:9c:5f:ea:ce:1d:e4:a3:
c6:8e:95:16:01:75:b0:42:57:f2:62:9f:7f:a0:a2:
2b:b5:96:7e:bc:ee:13:30:7e:9e:69:bd:3d:d9:f2:
82:e1:ae:50:f7:ee:25:fb:e2:a6:83:6d:21:51:63:
62:d9:fb:69:6f:18:0c:fe:65:b6:8e:6d:be:94:27:
8e:b5:2c:17:96:82:f8:b6:5a:87:15:83:c1:a4:cb:
eb:18:23:01:79:e5:fb:dd:e6:3e:b6:c7:48:93:43:
2c:26:0d:6f:ee:39:99:22:59:8a:74:c5:32:c1:96:
b7:eb:d3:8e:b5:5a:ad:14:9d:bb:9f:2c:cc:2e:df:
1d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:00:FC:A5:4F:7C:A5:57:8A:FF:62:CC:91:D3:4E:42:6A:6B:93:DB
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fb:12:58:97:14:4d:03:64:81:cf:52:38:96:ad:a4:83:e9:
10:8a:2d:cb:6c:49:c8:ff:16:e8:c7:6a:b2:b2:fd:76:f1:f4:
08:0e:62:83:02:0c:87:6f:3f:2f:70:dd:59:0d:54:d7:04:e5:
31:a3:b5:87:7a:ba:e3:54:b7:db:18:87:e4:8c:83:5e:1b:d2:
5e:fb:bb:3b:23:c2:6e:2f:fe:8f:99:36:5c:d7:68:22:05:0c:
3b:46:55:58:44:ff:9d:82:17:af:00:3e:3e:be:8c:c0:28:8c:
10:26:bd:6a:0f:58:0f:46:17:0f:9f:52:8c:14:25:fc:bc:79:
e5:a4:81:df:da:f6:c3:46:97:e7:3b:47:28:3f:8d:a4:99:09:
f4:aa:76:48:52:34:cb:38:4b:c4:4b:a0:73:67:0b:3e:b2:b5:
4f:98:5b:4c:8d:bb:54:f3:ae:53:09:1a:ac:55:72:1c:f2:11:
62:76:01:85:16:c6:5e:f3:4a:77:8b:de:b0:ce:08:82:b8:3a:
bd:d6:f5:c2:0f:1e:d2:0d:01:e4:8a:a7:24:8c:85:ac:fc:c7:
ce:cc:f8:2d:e8:04:db:d5:3c:5d:02:00:ee:8d:1e:0e:5c:c4:
3d:f6:4d:41:56:df:ad:a0:ed:cb:ae:e8:a7:68:06:2b:a9:e7:
be:8e:e2:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbAZ30+wMq/PH73faj6ePMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZjQ1ZTNhNDA2OWQ0ZjVlYmQ1ZjZlNjQyMWQ4ZDNjYWJl
MzA5MjEwHhcNMjUxMDIwMDcwMTEwWhcNMjUxMDIxMDcwMTEwWjAzMTEwLwYDVQQD
EyhhZTAwZmNhNTRmN2NhNTU3OGFmZjYyY2M5MWQzNGU0MjZhNmI5M2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8reRRJ4rliBrExC3NZgranAfA3/E
R0FoU0Q0+nWKObwK0yQkSU/vTykZwID4MC0fTOfLtdFsz9hoqwxkH1n+vZkz92k3
91qKYKUFAUQ15+Ds2Yjpo6T0A8+HybZmewEOLDLBShZJcVNgzeIuy7uzHvYpgkIa
1Q2xr7byytsc0pxf6s4d5KPGjpUWAXWwQlfyYp9/oKIrtZZ+vO4TMH6eab092fKC
4a5Q9+4l++Kmg20hUWNi2ftpbxgM/mW2jm2+lCeOtSwXloL4tlqHFYPBpMvrGCMB
eeX73eY+tsdIk0MsJg1v7jmZIlmKdMUywZa369OOtVqtFJ27nyzMLt8d/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4A/KVPfKVXiv9izJHTTkJqa5PbMB8GA1UdIwQY
MBaAFIf0XjpAadT169X25kIdjTyr4wkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYt
NjMxOWJiMDc5YzQ0LzEvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYtNjMxOWJiMDc5YzQ0
LzEvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfsSWJcU
TQNkgc9SOJatpIPpEIoty2xJyP8W6MdqsrL9dvH0CA5igwIMh28/L3DdWQ1U1wTl
MaO1h3q641S32xiH5IyDXhvSXvu7OyPCbi/+j5k2XNdoIgUMO0ZVWET/nYIXrwA+
Pr6MwCiMECa9ag9YD0YXD59SjBQl/Lx55aSB39r2w0aX5ztHKD+NpJkJ9Kp2SFI0
yzhLxEugc2cLPrK1T5hbTI27VPOuUwkarFVyHPIRYnYBhRbGXvNKd4vesM4Igrg6
vdb1wg8e0g0B5IqnJIyFrPzHzsz4LegE29U8XQIA7o0eDlzEPfZNQVbfraDty67o
p2gGK6nnvo7iyQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:47:54 2025 by rpki-client