Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
File: hyELNM4ALjCgpU-r-ivKxG36cig.mft (raw, json)
Hash identifier: r7nrHmIlCudA0SXj1hZlFirclYX4mg8+wUZOxW/+H7A=
Subject key identifier: B7:76:9D:C7:E6:00:E7:D5:DE:D4:C2:27:D6:95:D3:D4:0D:31:3E:16
Authority key identifier: 87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
Certificate issuer: /CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Certificate serial: 0198D5F1421581E513ACB592E6DEF29016CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
Manifest number: 0468
Signing time: Sat 23 Aug 2025 08:00:14 +0000
Manifest this update: Sat 23 Aug 2025 08:00:14 +0000
Manifest next update: Sun 24 Aug 2025 08:00:14 +0000
Files and hashes: 1: Oi0Mexif2IU5YWgRrWRDGcE4Aw4.roa (hash: hcI8ATUfRYduE8yCuLSr8RsjKUn++KtzCI3lWbIhr1A=)
2: RNEIzNGbtOLDhiuIlbx5LtZxiHA.roa (hash: YH3jUp9Z5jmgiTgvLayfiplIuhfqDKTG69/LcYMXnX0=)
3: hyELNM4ALjCgpU-r-ivKxG36cig.crl (hash: 357OQG96t0dBWtpuu8PudVs8+od+F5vgfy29fb/xTco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:42:15:81:e5:13:ac:b5:92:e6:de:f2:90:16:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Validity
Not Before: Aug 23 08:00:14 2025 GMT
Not After : Aug 24 08:00:14 2025 GMT
Subject: CN=b7769dc7e600e7d5ded4c227d695d3d40d313e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:de:fc:a0:63:56:b8:23:97:b8:66:51:77:
e2:c6:65:b6:1a:31:09:9c:8a:61:35:6b:8b:7d:67:
49:64:ee:5c:cc:97:5f:a8:e5:62:aa:e9:f6:25:9f:
5d:90:0e:4f:e9:af:6a:97:bc:14:dc:0b:7b:24:a6:
15:7d:cc:d7:3f:5a:2f:0b:d9:fa:a5:33:10:11:3b:
54:ef:92:64:d7:e4:6d:59:9d:f7:c6:13:c9:2e:fa:
8a:b0:04:d8:a2:f8:67:07:d8:b6:b7:67:82:01:34:
3a:87:6c:f2:ae:7e:9a:5e:e1:74:89:73:fe:2b:f4:
20:dc:81:d2:46:59:0d:37:0c:9a:8a:14:74:44:d9:
6f:8b:66:a5:72:2f:53:f3:a8:a7:90:c1:67:0f:9e:
52:70:00:e9:fc:3a:d9:a4:e7:07:2b:97:33:ad:55:
4d:c4:32:8a:2b:7b:87:78:0b:20:a6:34:b0:4c:d1:
4d:9c:35:eb:99:b7:e0:be:8e:3f:45:c0:e0:8a:37:
59:9b:a8:0b:41:b7:5b:14:6b:b9:03:53:e1:60:c1:
2b:0e:e8:4f:a8:10:9d:61:14:c9:72:86:fc:27:a5:
99:3b:98:b5:b6:ba:fb:47:14:cd:1d:98:04:bd:cc:
b3:f3:f7:99:51:5a:c8:ef:23:f2:2a:24:8a:3b:67:
1e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:76:9D:C7:E6:00:E7:D5:DE:D4:C2:27:D6:95:D3:D4:0D:31:3E:16
X509v3 Authority Key Identifier:
keyid:87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:28:f8:74:f9:ec:13:3c:ee:d0:e0:cf:31:28:c1:0e:e6:3a:
de:4d:b9:9a:54:fd:26:e2:ef:0d:a8:23:a3:89:11:e0:57:37:
2d:11:08:01:e1:fc:38:bb:a7:15:8d:19:f3:bd:d8:d2:f3:f5:
5d:91:ed:b9:9a:71:51:9e:00:4d:85:ff:7e:91:8d:37:45:41:
81:c4:e8:c3:1a:45:31:1a:34:67:bc:e3:cc:02:44:fd:19:21:
fa:b9:b5:24:d1:c8:d5:bb:d9:00:b5:00:cc:b5:2b:1d:db:02:
30:ad:91:87:1e:68:3d:92:59:3f:d0:ab:b9:b5:98:22:73:1e:
61:a3:0e:ce:5b:ae:cf:2b:03:f3:35:be:1c:fc:1f:36:c2:19:
74:de:be:1a:6d:bb:04:ae:8f:e2:78:b3:0c:25:96:f2:90:75:
48:70:10:82:20:c9:a4:88:7c:46:97:51:7f:cf:70:64:39:4c:
b7:28:9e:49:2e:46:50:87:4f:1e:03:74:7e:17:64:46:4c:ca:
57:38:95:7f:66:dc:ac:30:65:2f:2f:1b:86:00:08:a2:a7:ab:
13:3b:9f:24:b9:3e:2c:f3:91:ed:21:69:77:6a:36:a5:06:3a:
b5:e8:5c:01:8a:82:a5:47:66:1b:bb:92:75:7a:56:e4:78:f3:
d1:cc:9c:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8UIVgeUTrLWS5t7ykBbLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MjEwYjM0Y2UwMDJlMzBhMGE1NGZhYmZhMmJjYWM0NmRm
YTcyMjgwHhcNMjUwODIzMDgwMDE0WhcNMjUwODI0MDgwMDE0WjAzMTEwLwYDVQQD
EyhiNzc2OWRjN2U2MDBlN2Q1ZGVkNGMyMjdkNjk1ZDNkNDBkMzEzZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIDe/KBjVrgjl7hmUXfixmW2GjEJ
nIphNWuLfWdJZO5czJdfqOViqun2JZ9dkA5P6a9ql7wU3At7JKYVfczXP1ovC9n6
pTMQETtU75Jk1+RtWZ33xhPJLvqKsATYovhnB9i2t2eCATQ6h2zyrn6aXuF0iXP+
K/Qg3IHSRlkNNwyaihR0RNlvi2alci9T86inkMFnD55ScADp/DrZpOcHK5czrVVN
xDKKK3uHeAsgpjSwTNFNnDXrmbfgvo4/RcDgijdZm6gLQbdbFGu5A1PhYMErDuhP
qBCdYRTJcob8J6WZO5i1trr7RxTNHZgEvcyz8/eZUVrI7yPyKiSKO2cejwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLd2ncfmAOfV3tTCJ9aV09QNMT4WMB8GA1UdIwQY
MBaAFIchCzTOAC4woKVPq/orysRt+nIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yOWEwZGMtMjBhZi00MzdlLTk4NzAt
MzY2OWQxYjU2OWQ2LzEvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8yOWEwZGMtMjBhZi00MzdlLTk4NzAtMzY2OWQxYjU2OWQ2
LzEvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmyj4dPns
Ezzu0ODPMSjBDuY63k25mlT9JuLvDagjo4kR4Fc3LREIAeH8OLunFY0Z873Y0vP1
XZHtuZpxUZ4ATYX/fpGNN0VBgcTowxpFMRo0Z7zjzAJE/Rkh+rm1JNHI1bvZALUA
zLUrHdsCMK2Rhx5oPZJZP9CrubWYInMeYaMOzluuzysD8zW+HPwfNsIZdN6+Gm27
BK6P4nizDCWW8pB1SHAQgiDJpIh8RpdRf89wZDlMtyieSS5GUIdPHgN0fhdkRkzK
VziVf2bcrDBlLy8bhgAIoqerEzufJLk+LPOR7SFpd2o2pQY6tehcAYqCpUdmG7uS
dXpW5Hjz0cycHw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:31:15 2025 by rpki-client