Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
File: hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft (raw, json)
Hash identifier: VTSWU6O4Z3IubesDfWsscJF993d377LbBTkAJGnEVz8=
Subject key identifier: 57:39:87:93:E9:FE:62:53:54:17:FF:66:AE:80:0A:04:79:DF:98:77
Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6
Certificate serial: 0198D65F16AC8FEC5FF5EDF8F9412344EA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
Manifest number: 0359
Signing time: Sat 23 Aug 2025 10:00:12 +0000
Manifest this update: Sat 23 Aug 2025 10:00:12 +0000
Manifest next update: Sun 24 Aug 2025 10:00:12 +0000
Files and hashes: 1: UUl9tjMfoZ7A5klfeBDKB274xTs.roa (hash: SBvHQQieYmwuldne0ESh4KLqZuA1XSHveZCrpCqrHvQ=)
2: hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl (hash: 7Mo6rjRF6jpymBP4If5WH2XvhxAoqfrkTzmemM/x2m4=)
3: k3kU5aAomwikuRNdsT68Tqjcik4.roa (hash: wCPtZXM9gkCUtgXFEirTaWeSRaiZvXJy0sUEtKPb0ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:16:ac:8f:ec:5f:f5:ed:f8:f9:41:23:44:ea:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6
Validity
Not Before: Aug 23 10:00:12 2025 GMT
Not After : Aug 24 10:00:12 2025 GMT
Subject: CN=57398793e9fe62535417ff66ae800a0479df9877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:bb:fb:04:59:a0:d0:3c:4c:1b:53:ff:75:
7c:c3:e9:9d:45:fc:cc:61:da:67:35:4d:31:f2:07:
e2:fe:5d:0e:a3:8e:ee:d3:61:a7:87:a8:d9:5b:6a:
15:cb:cd:a6:95:86:d8:b3:16:86:af:e8:89:7f:49:
69:bd:7a:ff:32:de:41:66:32:6f:7d:4c:6c:56:2d:
ca:ba:01:5f:56:47:0b:7b:3b:ee:38:c5:de:03:e6:
32:4c:c6:ca:31:45:b9:46:d0:e1:34:42:44:97:50:
d0:f3:1a:fd:0b:ec:88:b6:04:26:d7:b7:4b:17:62:
2b:19:d6:8e:26:0b:ea:e0:f6:ba:1c:d4:79:7f:1d:
45:94:b6:51:81:d8:df:94:ae:38:70:84:b9:bd:cb:
23:ea:8c:c0:7b:6b:18:d6:a7:85:53:cf:8d:de:eb:
02:27:da:fb:11:b8:56:7a:55:fd:3a:37:b6:f4:8a:
4b:b2:d6:10:b7:20:a7:82:ef:f7:bb:6e:f9:9c:a4:
51:37:4a:ff:1f:19:c7:79:4c:10:97:8a:1d:a0:6a:
59:47:f3:7e:67:71:99:96:7a:55:d9:6a:09:1b:4e:
f7:b6:bc:d7:f7:7b:ff:5d:05:7a:d0:ab:da:1a:67:
a6:e5:13:fb:82:ab:0c:6c:9a:c2:e8:17:18:c6:cb:
04:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:39:87:93:E9:FE:62:53:54:17:FF:66:AE:80:0A:04:79:DF:98:77
X509v3 Authority Key Identifier:
keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9d:f7:ac:46:46:96:67:0b:f4:12:13:1c:7a:ac:91:6b:6c:
3d:29:93:2b:82:79:33:66:61:24:27:ae:11:58:d6:ce:0b:3d:
80:02:73:34:e8:84:51:42:52:05:3b:b4:a3:c6:17:cf:61:c7:
07:5e:d6:1c:ed:7e:cb:0d:2c:77:70:1e:3c:b0:11:b8:01:1d:
79:5b:cf:e4:d6:31:3c:f7:88:d7:70:65:7f:12:f3:f1:cf:33:
ff:0c:17:4d:59:3a:e7:b2:cc:c5:ea:08:e0:c1:c6:4d:b8:eb:
69:11:96:88:9f:ab:b3:2b:79:58:33:a6:5d:4f:8c:fc:03:b6:
02:a9:05:c5:50:94:91:31:d4:5c:ab:96:0c:e3:36:35:60:00:
ac:a0:81:52:d9:31:91:c6:e8:0d:08:90:e3:04:55:1d:e1:c0:
21:36:82:fa:a6:2a:96:c4:27:57:5b:9d:c9:c7:fb:ab:63:be:
ed:8b:a5:6e:96:bd:79:52:df:14:a1:b8:1c:be:8e:26:c2:d7:
9f:7b:ed:72:ba:bd:b3:29:63:76:70:07:08:49:e4:e9:a9:65:
25:53:7f:3a:86:31:69:fa:1c:82:2b:b7:d9:ca:89:29:ee:46:
b3:70:7d:a1:1b:0d:a7:df:53:2a:72:52:8d:ef:6a:01:ca:b2:
cc:25:d7:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXxasj+xf9e34+UEjROo3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MmJjMTQ1YzViMjIzOTRkNmZlYWU5OTZiYzBiYjI1MjU0
ODAxYzYwHhcNMjUwODIzMTAwMDEyWhcNMjUwODI0MTAwMDEyWjAzMTEwLwYDVQQD
Eyg1NzM5ODc5M2U5ZmU2MjUzNTQxN2ZmNjZhZTgwMGEwNDc5ZGY5ODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHe7+wRZoNA8TBtT/3V8w+mdRfzM
YdpnNU0x8gfi/l0Oo47u02Gnh6jZW2oVy82mlYbYsxaGr+iJf0lpvXr/Mt5BZjJv
fUxsVi3KugFfVkcLezvuOMXeA+YyTMbKMUW5RtDhNEJEl1DQ8xr9C+yItgQm17dL
F2IrGdaOJgvq4Pa6HNR5fx1FlLZRgdjflK44cIS5vcsj6ozAe2sY1qeFU8+N3usC
J9r7EbhWelX9Oje29IpLstYQtyCngu/3u275nKRRN0r/HxnHeUwQl4odoGpZR/N+
Z3GZlnpV2WoJG073trzX93v/XQV60KvaGmem5RP7gqsMbJrC6BcYxssEGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFc5h5Pp/mJTVBf/Zq6ACgR535h3MB8GA1UdIwQY
MBaAFIUrwUXFsiOU1v6umWvAuyUlSAHGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFN2QlJjV3lJNVRXX3E2WmE4QzdKU1ZJQWNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jYTRmZjUtNDhhOC00ZWNjLWJhNzMt
OGQwNzEwZjNkMjc2LzEvaFN2QlJjV3lJNVRXX3E2WmE4QzdKU1ZJQWNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9jYTRmZjUtNDhhOC00ZWNjLWJhNzMtOGQwNzEwZjNkMjc2
LzEvaFN2QlJjV3lJNVRXX3E2WmE4QzdKU1ZJQWNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJ33rEZG
lmcL9BITHHqskWtsPSmTK4J5M2ZhJCeuEVjWzgs9gAJzNOiEUUJSBTu0o8YXz2HH
B17WHO1+yw0sd3AePLARuAEdeVvP5NYxPPeI13BlfxLz8c8z/wwXTVk657LMxeoI
4MHGTbjraRGWiJ+rsyt5WDOmXU+M/AO2AqkFxVCUkTHUXKuWDOM2NWAArKCBUtkx
kcboDQiQ4wRVHeHAITaC+qYqlsQnV1udycf7q2O+7Yulbpa9eVLfFKG4HL6OJsLX
n3vtcrq9syljdnAHCEnk6allJVN/OoYxafocgiu32cqJKe5Gs3B9oRsNp99TKnJS
je9qAcqyzCXXbg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:26:06 2025 by rpki-client