Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json)
Hash identifier: GKnKTy+E0CZyXqG64m1Kqb7qeP/tvsHOflL1PGeBjcs=
Subject key identifier: BF:EB:28:CA:02:FF:1E:54:5C:61:A3:30:EE:F6:0D:5D:18:02:1E:82
Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Certificate serial: 0198D65FB4AEB128E4BA25982181F9AC6D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
Manifest number: 0FBE
Signing time: Sat 23 Aug 2025 10:00:52 +0000
Manifest this update: Sat 23 Aug 2025 10:00:52 +0000
Manifest next update: Sun 24 Aug 2025 10:00:52 +0000
Files and hashes: 1: TwlfNDSczGUl34rteJgSuHXTO94.roa (hash: gBwK3ZQY+snmvfWIA0VgAvr4/MBSK9FpiTLSXZrUgpg=)
2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: 4qquPcyFvvBZCY+gBZGUlh5Br5KfMWMlg/B3GueTiyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b4:ae:b1:28:e4:ba:25:98:21:81:f9:ac:6d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Validity
Not Before: Aug 23 10:00:52 2025 GMT
Not After : Aug 24 10:00:52 2025 GMT
Subject: CN=bfeb28ca02ff1e545c61a330eef60d5d18021e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:92:e2:b3:78:9e:7b:f7:fb:cc:a9:86:c2:f9:
75:4c:12:96:0c:ec:ee:ee:04:b3:f3:6c:f6:e7:ba:
a7:20:3f:e2:bd:e5:eb:80:8c:37:93:9c:a6:55:07:
8c:73:71:77:2a:ee:38:d7:91:52:8a:70:5e:bc:b4:
8e:0b:c3:bf:5e:f0:b1:5d:94:78:05:44:21:18:b6:
08:c4:f6:b6:0e:2c:55:74:76:24:cd:aa:5f:79:c8:
99:6b:d2:d6:c5:15:88:c4:15:4b:b7:3b:d5:a5:29:
6d:5c:0b:7b:a0:f4:45:b7:a0:00:db:52:d9:76:b7:
38:09:c4:6f:c1:77:e9:8a:25:c3:02:24:dd:39:bc:
1b:25:85:82:b1:0d:42:9f:7c:48:f5:79:a4:a2:2c:
f6:ca:65:96:ec:90:6a:71:ec:76:7f:ab:ff:1b:65:
70:d2:38:8f:ac:a4:97:c1:73:0e:4a:1a:2c:22:d4:
b2:29:dd:2b:1c:36:e7:4f:95:85:22:a5:f4:67:4e:
94:bb:4c:5f:91:d2:84:5e:b9:3f:fe:c7:f3:35:1b:
5c:66:1b:2a:88:b3:83:24:2f:85:4b:f6:38:7f:f0:
8b:e4:a0:18:fe:6e:9f:e2:ad:55:b0:71:3f:d1:4e:
a1:54:6e:f3:88:65:f2:67:5b:70:c6:1c:51:c0:e8:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EB:28:CA:02:FF:1E:54:5C:61:A3:30:EE:F6:0D:5D:18:02:1E:82
X509v3 Authority Key Identifier:
keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:30:3f:96:27:3c:e9:8f:b7:41:36:f9:b9:d7:13:6c:a1:9a:
a3:df:87:c9:5e:f4:75:87:49:1c:2f:22:2e:08:4b:70:61:c6:
5c:bf:98:f8:d0:ed:28:18:62:44:b0:5d:3f:f1:2d:33:c2:b2:
ee:cc:d0:98:47:70:55:fe:25:ed:a5:e0:b7:a3:6b:4b:a1:25:
49:74:8d:d7:7e:ff:3b:96:57:90:a7:45:28:14:7b:c2:71:75:
17:2c:2b:6f:0a:b9:c9:92:45:12:12:96:a5:ad:e1:a2:9f:b7:
50:47:00:f9:66:cb:97:cf:8e:b8:7b:c1:38:1a:77:c3:30:90:
01:c9:25:99:7d:87:32:65:00:16:1e:e3:32:87:d3:3f:88:f7:
a5:f7:da:f3:89:14:1d:15:c2:6b:26:b8:47:8c:67:72:af:fd:
49:c5:5a:69:7a:f8:15:a1:a4:a9:c6:04:dd:2d:a6:94:10:cf:
c9:6e:63:21:2b:0d:5d:46:3e:b5:b7:45:5d:39:7a:46:7e:3b:
51:59:4b:d2:4e:37:40:1a:38:b1:5c:d8:89:07:9d:af:a2:59:
c7:85:2d:93:2c:de:e0:01:56:a6:e7:63:80:73:d0:a6:25:3d:
86:0a:0e:49:8a:0f:a2:19:38:16:5c:81:e8:fa:5c:d0:63:82:
da:cc:4f:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX7SusSjkuiWYIYH5rG1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGFhMTZmZDJhMmM5MzZjMGFhNGZiNTYyNGY2MmJjNTZh
NTRkZjgwHhcNMjUwODIzMTAwMDUyWhcNMjUwODI0MTAwMDUyWjAzMTEwLwYDVQQD
EyhiZmViMjhjYTAyZmYxZTU0NWM2MWEzMzBlZWY2MGQ1ZDE4MDIxZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJLis3iee/f7zKmGwvl1TBKWDOzu
7gSz82z257qnID/iveXrgIw3k5ymVQeMc3F3Ku4415FSinBevLSOC8O/XvCxXZR4
BUQhGLYIxPa2DixVdHYkzapfeciZa9LWxRWIxBVLtzvVpSltXAt7oPRFt6AA21LZ
drc4CcRvwXfpiiXDAiTdObwbJYWCsQ1Cn3xI9Xmkoiz2ymWW7JBqcex2f6v/G2Vw
0jiPrKSXwXMOShosItSyKd0rHDbnT5WFIqX0Z06Uu0xfkdKEXrk//sfzNRtcZhsq
iLODJC+FS/Y4f/CL5KAY/m6f4q1VsHE/0U6hVG7ziGXyZ1twxhxRwOimowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/rKMoC/x5UXGGjMO72DV0YAh6CMB8GA1UdIwQY
MBaAFIdKoW/Sosk2wKpPtWJPYrxWpU34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTct
ZmRiYzdjNGNmNDllLzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTctZmRiYzdjNGNmNDll
LzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjA/lic8
6Y+3QTb5udcTbKGao9+HyV70dYdJHC8iLghLcGHGXL+Y+NDtKBhiRLBdP/EtM8Ky
7szQmEdwVf4l7aXgt6NrS6ElSXSN137/O5ZXkKdFKBR7wnF1Fywrbwq5yZJFEhKW
pa3hop+3UEcA+WbLl8+OuHvBOBp3wzCQAcklmX2HMmUAFh7jMofTP4j3pffa84kU
HRXCaya4R4xncq/9ScVaaXr4FaGkqcYE3S2mlBDPyW5jISsNXUY+tbdFXTl6Rn47
UVlL0k43QBo4sVzYiQedr6JZx4Utkyze4AFWpudjgHPQpiU9hgoOSYoPohk4FlyB
6Ppc0GOC2sxP6g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:47 2025 by rpki-client