Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
File: hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json)
Hash identifier: gpeJWKMWMemY+2jIfKVREdNahouOuLIV/h3EhSDHk2o=
Subject key identifier: 16:04:3E:83:C8:99:52:BA:4E:9A:3A:C7:41:9F:9B:60:8D:1F:B9:FA
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial: 0198D70607D77451E11E59B499AE7C04E05E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
Manifest number: 0196
Signing time: Sat 23 Aug 2025 13:02:33 +0000
Manifest this update: Sat 23 Aug 2025 13:02:33 +0000
Manifest next update: Sun 24 Aug 2025 13:02:33 +0000
Files and hashes: 1: O5dJ1P8qPLvqN1TFZCJv-BCHVwE.roa (hash: 3xRQqmBaiPMEC6+BvwWE12p1a9per8d/4WLoxHZdLwY=)
2: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: cczm5awTzxzU3/nhfY+ZjQ33ivE6tYdQ4v7T+JIYid0=)
3: hs1Ttmuuy8oKm2rJqVYgyDXaPIw.roa (hash: Byo6rO4TnKOVrKw6LlKH8flPLRHULJLiFuZMsf82Wv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:07:d7:74:51:e1:1e:59:b4:99:ae:7c:04:e0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
Validity
Not Before: Aug 23 13:02:33 2025 GMT
Not After : Aug 24 13:02:33 2025 GMT
Subject: CN=16043e83c89952ba4e9a3ac7419f9b608d1fb9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:40:02:52:91:03:e3:82:9f:e3:a8:0a:13:
5f:d7:bb:ff:e1:9e:ca:c0:ef:77:db:78:b6:79:64:
71:c2:52:c7:f3:f6:92:84:be:60:84:71:7f:f2:58:
54:86:aa:57:a4:7f:d5:9b:93:2b:32:29:70:a0:98:
2e:34:37:0e:ba:51:e3:92:3f:66:11:61:27:b0:32:
69:20:40:4d:3f:5e:60:79:cd:4e:cc:1d:43:e5:59:
f6:c8:cc:a0:0e:fa:61:b8:c7:38:86:4f:79:4e:12:
a1:d1:39:4e:54:49:b0:40:04:bf:8f:cf:f3:62:fc:
a2:34:53:58:55:90:c7:9f:16:69:db:17:57:98:4b:
87:f1:af:64:78:ce:fd:c1:c4:92:17:13:cf:6a:35:
ef:a7:58:c4:87:61:aa:ef:d6:3b:b0:f1:1e:d4:63:
90:f1:f5:ca:ca:50:76:2e:53:e5:6f:ad:a6:88:68:
5e:2b:95:78:a2:3f:37:bd:96:f3:d0:7b:de:6f:9a:
4b:61:e2:a3:d7:1c:c1:78:db:73:de:65:b6:e8:26:
35:73:c5:a7:aa:fa:80:21:05:a0:b7:9e:c9:24:49:
2c:6a:e8:e3:ad:63:a7:38:7f:02:ec:e6:b2:4c:1a:
3d:fb:17:74:0b:0a:91:af:3a:d5:dc:8d:1e:84:82:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:04:3E:83:C8:99:52:BA:4E:9A:3A:C7:41:9F:9B:60:8D:1F:B9:FA
X509v3 Authority Key Identifier:
keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9a:1c:2b:06:b9:79:bb:a3:a9:53:4e:d7:bc:80:fa:1c:5d:
f7:0b:9b:c0:85:03:df:53:10:69:ca:85:e1:dd:bc:31:73:db:
e8:03:59:7c:dd:c0:c3:7a:67:78:3d:20:32:a6:cc:02:7b:5c:
ae:ec:1c:5c:1a:51:50:29:6d:29:55:8a:92:cd:0d:c1:b1:ab:
aa:5a:3b:79:51:58:16:da:2f:f3:4b:b2:92:1e:58:ea:97:da:
5b:c4:29:d2:d5:02:33:e4:8a:58:5b:4d:03:2d:1a:03:d5:c1:
f0:e7:26:66:b3:e7:a9:8d:79:8b:08:65:ba:2c:59:7a:93:bc:
a9:40:94:e7:1f:b8:0a:5e:62:f0:49:01:93:ac:ee:ab:72:7d:
d5:c5:42:70:5d:44:c9:c4:22:0d:e9:ad:67:68:5d:b9:a8:4c:
bd:1e:bf:0d:39:82:9f:4a:c1:4c:5e:4d:39:df:3b:0d:90:8a:
9c:6d:84:76:40:e4:ec:d7:67:30:b2:ca:1a:fe:2e:5e:0c:25:
8c:43:2b:a8:c7:7d:45:25:d8:8d:90:54:15:1b:6c:b7:8f:c7:
eb:c6:b0:72:4f:ae:41:11:75:be:82:2e:65:76:9d:d6:79:01:
fd:5b:c8:1c:1a:bb:ac:fb:47:db:51:2a:3b:41:6e:2f:80:79:
ff:e2:2f:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBgfXdFHhHlm0ma58BOBeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NmNkN2JjMTkxNDIwNTZhY2FmOTU3M2NhYTFhZjhkZTg3
MTgxNTYwHhcNMjUwODIzMTMwMjMzWhcNMjUwODI0MTMwMjMzWjAzMTEwLwYDVQQD
EygxNjA0M2U4M2M4OTk1MmJhNGU5YTNhYzc0MTlmOWI2MDhkMWZiOWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysdAAlKRA+OCn+OoChNf17v/4Z7K
wO9323i2eWRxwlLH8/aShL5ghHF/8lhUhqpXpH/Vm5MrMilwoJguNDcOulHjkj9m
EWEnsDJpIEBNP15gec1OzB1D5Vn2yMygDvphuMc4hk95ThKh0TlOVEmwQAS/j8/z
YvyiNFNYVZDHnxZp2xdXmEuH8a9keM79wcSSFxPPajXvp1jEh2Gq79Y7sPEe1GOQ
8fXKylB2LlPlb62miGheK5V4oj83vZbz0Hveb5pLYeKj1xzBeNtz3mW26CY1c8Wn
qvqAIQWgt57JJEksaujjrWOnOH8C7OayTBo9+xd0CwqRrzrV3I0ehILYQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYEPoPImVK6Tpo6x0Gfm2CNH7n6MB8GA1UdIwQY
MBaAFIRs17wZFCBWrK+Vc8qhr43ocYFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEd6WHZCa1VJRmFzcjVWenlxR3ZqZWh4Z1ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85OTA1OTAtNGE2My00YjJmLWE5MzMt
ZDE5NTlmM2UyZjc2LzEvaEd6WHZCa1VJRmFzcjVWenlxR3ZqZWh4Z1ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85OTA1OTAtNGE2My00YjJmLWE5MzMtZDE5NTlmM2UyZjc2
LzEvaEd6WHZCa1VJRmFzcjVWenlxR3ZqZWh4Z1ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZocKwa5
ebujqVNO17yA+hxd9wubwIUD31MQacqF4d28MXPb6ANZfN3Aw3pneD0gMqbMAntc
ruwcXBpRUCltKVWKks0NwbGrqlo7eVFYFtov80uykh5Y6pfaW8Qp0tUCM+SKWFtN
Ay0aA9XB8OcmZrPnqY15iwhluixZepO8qUCU5x+4Cl5i8EkBk6zuq3J91cVCcF1E
ycQiDemtZ2hduahMvR6/DTmCn0rBTF5NOd87DZCKnG2EdkDk7NdnMLLKGv4uXgwl
jEMrqMd9RSXYjZBUFRtst4/H68awck+uQRF1voIuZXad1nkB/VvIHBq7rPtH21Eq
O0FuL4B5/+Ivhw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:21 2025 by rpki-client