Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
File: hC4XioXWwwtXKyAmHET456S_wnI.mft (raw, json)
Hash identifier: 9rSVQLfNKn583jeFvuWUo1sTO7GiO9eHuWEjNnyZ9Oc=
Subject key identifier: 5A:48:DF:18:CE:64:26:36:F1:C5:96:80:DE:7D:DB:84:05:C8:09:FE
Authority key identifier: 84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
Certificate issuer: /CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Certificate serial: 0198D7A896B07A0B58285EB637DCDD5E822F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
Manifest number: 0DDB
Signing time: Sat 23 Aug 2025 16:00:06 +0000
Manifest this update: Sat 23 Aug 2025 16:00:06 +0000
Manifest next update: Sun 24 Aug 2025 16:00:06 +0000
Files and hashes: 1: hC4XioXWwwtXKyAmHET456S_wnI.crl (hash: etKuKXoYGoWhPbtoQgTeqD62he8F75GK5Y9MAQQE2A4=)
2: tpGVDM97XGpA5ofHLGA9otQIFM8.roa (hash: aWl1cnx2HDb3renuM7Fi/tYunaPtkTPWaRgrB19Lp4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:96:b0:7a:0b:58:28:5e:b6:37:dc:dd:5e:82:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Validity
Not Before: Aug 23 16:00:06 2025 GMT
Not After : Aug 24 16:00:06 2025 GMT
Subject: CN=5a48df18ce642636f1c59680de7ddb8405c809fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:ab:17:72:ec:62:d8:5b:7e:94:67:33:07:
79:57:c8:10:6d:5b:79:37:2c:c0:67:39:b9:2a:c6:
98:d0:9d:16:88:5d:17:17:4c:20:b0:60:86:f4:a6:
e8:38:40:3b:0a:10:da:b4:c6:00:97:b3:9b:35:70:
84:40:80:bb:e8:de:c5:f5:ef:35:78:64:40:01:8e:
20:ba:f8:80:ab:89:05:39:fc:10:22:d3:58:bb:a7:
24:40:0a:e5:aa:c6:b6:7b:51:e7:92:63:c9:6b:b2:
46:1e:dd:30:3e:b3:05:3c:1f:61:8d:1c:c1:c4:20:
d8:eb:db:e4:26:a6:72:f3:84:2f:fb:3d:ee:1c:28:
5d:cc:0a:c0:13:7b:f0:e2:f1:4f:7d:11:7a:b5:56:
b9:4c:4e:cb:a5:5b:b9:9b:8a:68:02:ea:6c:d6:db:
16:9c:99:a7:98:bb:af:56:aa:6c:63:68:4f:f2:ae:
41:f9:29:ec:a8:29:44:98:ca:95:13:e3:a0:9d:73:
cb:04:b2:b7:9e:91:be:92:e3:dc:9c:50:c7:9b:4b:
1c:cf:f5:87:36:1b:f8:50:69:d0:9d:56:95:ec:ac:
5c:d8:af:de:a5:19:3e:e7:9a:1f:e8:6c:00:eb:7c:
57:17:04:6e:93:d0:96:d9:9c:8b:f1:7f:58:ee:70:
08:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:48:DF:18:CE:64:26:36:F1:C5:96:80:DE:7D:DB:84:05:C8:09:FE
X509v3 Authority Key Identifier:
keyid:84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:52:f7:9d:53:0e:28:aa:d8:86:b2:1c:d2:84:56:8d:e4:19:
b7:bd:27:d7:47:99:21:43:1b:1e:d0:1d:7c:3a:16:25:1e:72:
bf:ec:05:3f:f5:13:4d:21:9a:46:ac:f1:6f:86:d3:ae:bb:52:
45:54:1c:06:0c:22:c2:42:6a:6a:41:48:d2:02:03:13:e2:05:
ff:11:a8:82:ad:b2:39:27:c0:ba:7b:09:61:2c:48:2e:01:c9:
16:55:2b:b0:b1:15:61:c3:fe:a2:92:0e:5a:c0:aa:ac:45:a7:
65:12:76:16:23:91:ad:7f:03:dd:05:34:95:ab:23:27:08:6e:
d7:f2:54:d0:c0:b5:43:c4:4f:62:a6:05:c6:ad:39:67:5f:07:
1f:0b:df:d7:9d:83:d6:79:d4:0c:46:60:22:d4:f3:be:c2:a5:
17:dc:c7:bf:14:c7:14:64:7a:02:13:f0:f0:f2:b2:6a:c7:3e:
fb:3e:c9:d3:5c:4e:0f:5a:4b:e6:c9:98:69:29:c1:e5:03:fe:
34:ca:42:54:cd:ea:d7:37:41:50:80:7c:43:ba:b1:11:3f:f0:
44:61:94:77:38:33:42:d1:9b:d3:af:69:33:2d:34:41:84:0a:
1f:67:ca:6c:bd:a1:4c:bc:a4:a0:d2:5c:5b:98:5c:b2:63:b9:
d2:56:01:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqJawegtYKF62N9zdXoIvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MmUxNzhhODVkNmMzMGI1NzJiMjAyNjFjNDRmOGU3YTRi
ZmMyNzIwHhcNMjUwODIzMTYwMDA2WhcNMjUwODI0MTYwMDA2WjAzMTEwLwYDVQQD
Eyg1YTQ4ZGYxOGNlNjQyNjM2ZjFjNTk2ODBkZTdkZGI4NDA1YzgwOWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3urF3LsYthbfpRnMwd5V8gQbVt5
NyzAZzm5KsaY0J0WiF0XF0wgsGCG9KboOEA7ChDatMYAl7ObNXCEQIC76N7F9e81
eGRAAY4guviAq4kFOfwQItNYu6ckQArlqsa2e1HnkmPJa7JGHt0wPrMFPB9hjRzB
xCDY69vkJqZy84Qv+z3uHChdzArAE3vw4vFPfRF6tVa5TE7LpVu5m4poAups1tsW
nJmnmLuvVqpsY2hP8q5B+SnsqClEmMqVE+OgnXPLBLK3npG+kuPcnFDHm0scz/WH
Nhv4UGnQnVaV7Kxc2K/epRk+55of6GwA63xXFwRuk9CW2ZyL8X9Y7nAIcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpI3xjOZCY28cWWgN5924QFyAn+MB8GA1UdIwQY
MBaAFIQuF4qF1sMLVysgJhxE+Oekv8JyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEM0WGlvWFd3d3RYS3lBbUhFVDQ1NlNfd25JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wNzMwZDEtZmVlMy00NjU0LTlkZWEt
ZTE4N2JlOWI2YzIzLzEvaEM0WGlvWFd3d3RYS3lBbUhFVDQ1NlNfd25JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8wNzMwZDEtZmVlMy00NjU0LTlkZWEtZTE4N2JlOWI2YzIz
LzEvaEM0WGlvWFd3d3RYS3lBbUhFVDQ1NlNfd25JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClL3nVMO
KKrYhrIc0oRWjeQZt70n10eZIUMbHtAdfDoWJR5yv+wFP/UTTSGaRqzxb4bTrrtS
RVQcBgwiwkJqakFI0gIDE+IF/xGogq2yOSfAunsJYSxILgHJFlUrsLEVYcP+opIO
WsCqrEWnZRJ2FiORrX8D3QU0lasjJwhu1/JU0MC1Q8RPYqYFxq05Z18HHwvf152D
1nnUDEZgItTzvsKlF9zHvxTHFGR6AhPw8PKyasc++z7J01xOD1pL5smYaSnB5QP+
NMpCVM3q1zdBUIB8Q7qxET/wRGGUdzgzQtGb069pMy00QYQKH2fKbL2hTLykoNJc
W5hcsmO50lYBfg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:29 2025 by rpki-client