Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
File: rwmHHP1haABnerIynsumHed3V-Y.mft (raw, json)
Hash identifier: UXiyjazpWAfvnF4nXilwK4Fv06PYxQlKmGb6YEKOYYk=
Subject key identifier: F4:3A:0E:6C:89:61:6B:88:B9:9E:1D:9E:0F:6D:02:3B:3F:E8:B3:BA
Authority key identifier: AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6
Certificate issuer: /CN=af09871cfd616800677ab2329ecba61de77757e6
Certificate serial: 0198D515B2002DCDB412162728D8F197B40B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
Manifest number: 01B1
Signing time: Sat 23 Aug 2025 04:00:25 +0000
Manifest this update: Sat 23 Aug 2025 04:00:25 +0000
Manifest next update: Sun 24 Aug 2025 04:00:25 +0000
Files and hashes: 1: _TdfyDspFjo8HcBVAH4tKaY1ryc.roa (hash: HRin1YqVyIdAgsGnpfqM25NMMm45zP4o3p+MrSb9sdE=)
2: rwmHHP1haABnerIynsumHed3V-Y.crl (hash: yNygq4ejjHnsQb2WaDGe5RKLVN1WWJA1wD6mS+/XXhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:b2:00:2d:cd:b4:12:16:27:28:d8:f1:97:b4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09871cfd616800677ab2329ecba61de77757e6
Validity
Not Before: Aug 23 04:00:25 2025 GMT
Not After : Aug 24 04:00:25 2025 GMT
Subject: CN=f43a0e6c89616b88b99e1d9e0f6d023b3fe8b3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:eb:ce:ae:36:50:b2:84:42:a3:f0:ad:91:
5e:f5:22:ae:4d:65:14:d2:67:96:b9:3c:0d:36:48:
71:02:0b:70:66:e7:53:20:6c:16:56:2d:89:8e:eb:
89:41:c7:69:6f:ce:44:03:82:6f:70:90:9c:ac:7b:
42:8b:41:26:5f:e5:bc:e7:a8:ba:13:42:f8:d3:8e:
58:47:42:1e:80:55:8e:35:21:58:59:23:05:c6:81:
61:fb:b0:2a:4a:2d:20:c0:aa:57:1f:d3:bc:b2:2e:
ca:8a:22:4f:91:79:da:4f:0d:77:17:ce:13:fe:13:
9e:fa:8f:53:72:67:7b:ef:9b:ff:34:5c:a7:3c:4b:
1a:59:e6:dc:23:02:83:1b:6c:6e:d3:d4:a5:6f:55:
72:a1:e7:67:23:5b:27:dd:7f:cb:1a:b6:05:39:b3:
58:42:6d:f6:a4:45:f6:4c:89:ff:22:ea:03:ac:f3:
41:9e:51:2d:7b:b7:1c:a7:30:ab:d6:1d:54:b4:4f:
b0:aa:d3:12:9c:72:31:9f:16:5a:6c:2b:e0:57:85:
30:80:46:91:3d:07:d7:20:f2:cd:f1:6d:09:6d:6e:
f7:fe:94:f3:78:0f:ca:f7:b2:ce:08:c2:4b:ad:43:
2d:e6:b5:fd:64:9d:6c:6a:b1:ed:db:90:91:47:07:
c4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3A:0E:6C:89:61:6B:88:B9:9E:1D:9E:0F:6D:02:3B:3F:E8:B3:BA
X509v3 Authority Key Identifier:
keyid:AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b2:0b:28:93:10:5e:02:6a:14:5e:93:af:6f:29:13:e5:d9:
dc:77:7d:c0:67:ad:05:a0:96:18:57:c1:ea:8a:c4:74:b1:f2:
55:ba:f2:51:a1:4c:02:33:82:fb:7f:75:85:79:78:e0:bb:21:
b9:33:e8:8e:06:8a:a6:f0:57:07:a6:f4:d9:7f:c0:41:80:73:
7d:98:58:3f:d4:9a:a3:b6:b5:60:22:3e:72:c0:1f:1c:ae:9c:
c5:18:4c:04:90:db:cd:bd:88:e5:bb:b0:32:8c:d8:14:f4:46:
d4:03:32:06:84:01:1b:8e:9c:09:c5:8f:f3:ea:20:08:02:3b:
ee:c8:e7:d8:5d:f6:a4:c5:49:6a:d1:51:be:1b:08:de:ee:dc:
97:bf:0a:e3:a5:2c:0a:6c:df:c8:92:f9:5e:d0:a7:27:c1:66:
e4:d8:68:d3:60:8e:7b:75:84:2c:bf:ca:7f:43:b7:c6:7b:2d:
74:80:64:d7:12:1f:87:b9:cb:36:1e:85:85:d4:01:66:a3:51:
b2:ec:3c:9a:82:17:dc:65:af:ee:8e:da:73:b4:3d:82:26:5c:
fc:b1:0f:ae:78:db:f4:ae:39:5a:4e:04:df:14:48:9a:99:8e:
b2:4e:d5:a1:af:51:f8:79:05:be:db:b8:52:84:a9:bf:ba:26:
51:cc:1f:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFbIALc20EhYnKNjxl7QLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMDk4NzFjZmQ2MTY4MDA2NzdhYjIzMjllY2JhNjFkZTc3
NzU3ZTYwHhcNMjUwODIzMDQwMDI1WhcNMjUwODI0MDQwMDI1WjAzMTEwLwYDVQQD
EyhmNDNhMGU2Yzg5NjE2Yjg4Yjk5ZTFkOWUwZjZkMDIzYjNmZThiM2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxrrzq42ULKEQqPwrZFe9SKuTWUU
0meWuTwNNkhxAgtwZudTIGwWVi2JjuuJQcdpb85EA4JvcJCcrHtCi0EmX+W856i6
E0L4045YR0IegFWONSFYWSMFxoFh+7AqSi0gwKpXH9O8si7KiiJPkXnaTw13F84T
/hOe+o9Tcmd775v/NFynPEsaWebcIwKDG2xu09Slb1VyoednI1sn3X/LGrYFObNY
Qm32pEX2TIn/IuoDrPNBnlEte7ccpzCr1h1UtE+wqtMSnHIxnxZabCvgV4UwgEaR
PQfXIPLN8W0JbW73/pTzeA/K97LOCMJLrUMt5rX9ZJ1sarHt25CRRwfE0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQ6DmyJYWuIuZ4dng9tAjs/6LO6MB8GA1UdIwQY
MBaAFK8Jhxz9YWgAZ3qyMp7Lph3nd1fmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcndtSEhQMWhhQUJuZXJJeW5zdW1IZWQzVi1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84YWQ5YjMtMGI5Zi00MjI0LTkwOWIt
YjQzZGJmODk1Y2ZlLzEvcndtSEhQMWhhQUJuZXJJeW5zdW1IZWQzVi1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84YWQ5YjMtMGI5Zi00MjI0LTkwOWItYjQzZGJmODk1Y2Zl
LzEvcndtSEhQMWhhQUJuZXJJeW5zdW1IZWQzVi1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7ILKJMQ
XgJqFF6Tr28pE+XZ3Hd9wGetBaCWGFfB6orEdLHyVbryUaFMAjOC+391hXl44Lsh
uTPojgaKpvBXB6b02X/AQYBzfZhYP9Sao7a1YCI+csAfHK6cxRhMBJDbzb2I5buw
MozYFPRG1AMyBoQBG46cCcWP8+ogCAI77sjn2F32pMVJatFRvhsI3u7cl78K46Us
CmzfyJL5XtCnJ8Fm5Nho02COe3WELL/Kf0O3xnstdIBk1xIfh7nLNh6FhdQBZqNR
suw8moIX3GWv7o7ac7Q9giZc/LEPrnjb9K45Wk4E3xRImpmOsk7Voa9R+HkFvtu4
UoSpv7omUcwfAQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:34 2025 by rpki-client