Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
File: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json)
Hash identifier: kefF7qBKlGNIn3fO+FbxtxK3CpgxjxfrafbV7c5U8vs=
Subject key identifier: F8:82:0E:00:E9:8A:72:E5:E6:E9:EE:DA:91:BC:4C:2B:00:CE:A7:EB
Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
Certificate issuer: /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Certificate serial: 0198D4E0D2293BC97785319CF737EA49AD4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
Manifest number: 05DC
Signing time: Sat 23 Aug 2025 03:02:40 +0000
Manifest this update: Sat 23 Aug 2025 03:02:40 +0000
Manifest next update: Sun 24 Aug 2025 03:02:40 +0000
Files and hashes: 1: 0Z-rzxBLOWIfSfgExnNziFjknFI.roa (hash: WIPxFrkjwE/aiN3DpBiUfgIiKOHJkBOTh5tGpO+hM/Q=)
2: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: oaQk31mXFutlQgBdPhg+ikrW7gmfinxX9vUH17hit8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d2:29:3b:c9:77:85:31:9c:f7:37:ea:49:ad:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Validity
Not Before: Aug 23 03:02:40 2025 GMT
Not After : Aug 24 03:02:40 2025 GMT
Subject: CN=f8820e00e98a72e5e6e9eeda91bc4c2b00cea7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cc:c0:ab:e9:0e:14:72:78:1a:ac:60:49:e4:
24:0e:dc:f5:3e:9f:82:ca:d2:ee:46:8c:cf:ec:d8:
3e:a9:8d:09:21:d3:ac:5f:eb:43:ad:46:77:35:97:
70:f0:87:61:97:9c:fb:ee:51:79:3e:e7:8e:ab:d3:
38:4f:8b:49:8c:d5:4b:65:8f:8f:77:80:14:bc:ad:
21:ed:eb:ca:3e:77:74:9b:4e:88:bb:f4:40:f5:24:
9b:48:da:59:d5:18:30:46:d6:43:27:fb:39:d1:b8:
83:78:4a:44:b2:96:2d:ca:86:04:1d:64:be:a5:91:
2d:8a:8e:da:b1:11:35:aa:15:8e:01:84:6b:4a:45:
90:9e:15:af:81:be:43:a3:93:37:73:e0:30:51:0c:
9a:67:11:89:71:45:8c:fe:51:f1:55:c0:40:33:ce:
d2:38:12:2c:e2:bc:f8:54:14:00:3c:f4:f1:e3:80:
eb:fd:a6:d0:35:e1:4a:36:13:79:ce:7c:34:41:e9:
12:f9:cc:b9:e8:03:51:f6:99:f1:9b:67:68:8d:31:
5a:9c:b3:f8:19:8b:3a:74:4a:76:8b:05:00:51:8b:
2d:62:28:75:52:82:1c:41:f3:f3:25:e8:f2:47:a0:
c6:1c:58:5b:c8:4b:00:07:9b:45:f1:06:e2:5a:34:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:82:0E:00:E9:8A:72:E5:E6:E9:EE:DA:91:BC:4C:2B:00:CE:A7:EB
X509v3 Authority Key Identifier:
keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:97:46:b1:d9:05:f8:da:1a:d4:74:5b:92:6e:27:52:94:fd:
dc:33:0f:ab:5f:34:22:03:d9:2c:ba:05:47:e3:93:7a:2d:e9:
94:fc:3e:a8:1b:04:ea:b2:75:6c:03:da:a0:a0:20:04:51:72:
94:73:d3:a7:f4:0e:2f:0a:b1:d9:9b:2c:75:31:1a:46:1b:50:
31:41:8c:2c:68:84:06:18:e2:ec:05:10:e1:4d:82:17:b1:c1:
0a:70:68:3d:19:6b:ef:f1:da:bf:2a:a6:24:7d:47:d4:47:ab:
dc:e2:2f:be:45:bd:e5:67:d4:96:95:0d:ef:57:59:a8:cf:cf:
52:48:13:81:2b:3b:d7:8d:63:99:8a:24:40:39:28:d6:33:8a:
c4:3c:e7:54:d1:40:74:33:fd:cb:53:c0:fa:fd:9e:1c:f6:d9:
60:0c:5e:75:88:70:f2:ed:5e:e4:9f:fa:b2:44:2a:36:4a:14:
75:d3:20:99:8a:65:f7:08:62:62:91:f9:a7:98:f2:47:39:ab:
4e:96:0e:f6:bf:93:09:35:9b:8a:6c:e8:a4:fe:8f:86:99:27:
24:54:9b:0d:d7:44:98:98:d2:bc:a9:68:9f:c7:24:1a:cc:01:
42:79:06:76:ca:67:d4:d1:1f:1e:e7:ea:af:c8:e3:f1:2b:82:
73:87:4f:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4NIpO8l3hTGc9zfqSa1KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0N2U2MmNiZjVmZWYzMzc3ZjllN2NkNTg1NThmNDRlMmVl
YTliY2UwHhcNMjUwODIzMDMwMjQwWhcNMjUwODI0MDMwMjQwWjAzMTEwLwYDVQQD
EyhmODgyMGUwMGU5OGE3MmU1ZTZlOWVlZGE5MWJjNGMyYjAwY2VhN2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlczAq+kOFHJ4GqxgSeQkDtz1Pp+C
ytLuRozP7Ng+qY0JIdOsX+tDrUZ3NZdw8Idhl5z77lF5PueOq9M4T4tJjNVLZY+P
d4AUvK0h7evKPnd0m06Iu/RA9SSbSNpZ1RgwRtZDJ/s50biDeEpEspYtyoYEHWS+
pZEtio7asRE1qhWOAYRrSkWQnhWvgb5Do5M3c+AwUQyaZxGJcUWM/lHxVcBAM87S
OBIs4rz4VBQAPPTx44Dr/abQNeFKNhN5znw0QekS+cy56ANR9pnxm2dojTFanLP4
GYs6dEp2iwUAUYstYih1UoIcQfPzJejyR6DGHFhbyEsAB5tF8QbiWjQcYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiCDgDpinLl5unu2pG8TCsAzqfrMB8GA1UdIwQY
MBaAFNR+Ysv1/vM3f5581YVY9E4u6pvOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hYTlkNGUtMTIyNi00MGU3LWE5YzEt
NDY5ZDNhNTFkNDdkLzEvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hYTlkNGUtMTIyNi00MGU3LWE5YzEtNDY5ZDNhNTFkNDdk
LzEvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZdGsdkF
+Noa1HRbkm4nUpT93DMPq180IgPZLLoFR+OTei3plPw+qBsE6rJ1bAPaoKAgBFFy
lHPTp/QOLwqx2ZssdTEaRhtQMUGMLGiEBhji7AUQ4U2CF7HBCnBoPRlr7/Havyqm
JH1H1Eer3OIvvkW95WfUlpUN71dZqM/PUkgTgSs7141jmYokQDko1jOKxDznVNFA
dDP9y1PA+v2eHPbZYAxedYhw8u1e5J/6skQqNkoUddMgmYpl9whiYpH5p5jyRzmr
TpYO9r+TCTWbimzopP6PhpknJFSbDddEmJjSvKlon8ckGswBQnkGdspn1NEfHufq
r8jj8SuCc4dPEg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:23 2025 by rpki-client