Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
File: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft (raw, json)
Hash identifier: SWvmt63e4hJRi0Dmb48lkr+zpbNLX31l7cghO5XZP/4=
Subject key identifier: 62:7B:19:13:BE:EC:8D:D1:48:E9:72:06:6E:D2:CE:CF:45:F2:3D:1C
Authority key identifier: 44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
Certificate issuer: /CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Certificate serial: 0198D5BC0FE9AB51A5D72B364E364BEE6534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
Manifest number: 1440
Signing time: Sat 23 Aug 2025 07:02:08 +0000
Manifest this update: Sat 23 Aug 2025 07:02:08 +0000
Manifest next update: Sun 24 Aug 2025 07:02:08 +0000
Files and hashes: 1: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl (hash: 8HBCxCTfpQIG8ngGptKTbV10kBOGlZx8pSylr6WlHNU=)
2: UK2n5J82Y8mJ_ChH-Mf3D9V405E.roa (hash: tUUMnCPKY1tGYA08Lbr1dGnhLn6RW32Wd2MZ44NLy2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0f:e9:ab:51:a5:d7:2b:36:4e:36:4b:ee:65:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Validity
Not Before: Aug 23 07:02:08 2025 GMT
Not After : Aug 24 07:02:08 2025 GMT
Subject: CN=627b1913beec8dd148e972066ed2cecf45f23d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:81:6f:7c:32:c2:62:c9:e5:8e:5d:e4:5f:
9c:6b:cc:61:51:8a:d8:ba:86:4c:03:59:19:b8:82:
8c:d1:c0:b3:56:b5:b1:a8:47:ea:ca:e6:2a:66:74:
fc:f1:b5:56:a3:5c:df:8c:85:92:c5:58:f2:cb:34:
09:79:89:c5:ca:93:14:72:fa:8a:f8:43:b1:cd:18:
d8:e7:e3:29:f9:d7:d9:39:98:a2:7c:67:57:46:38:
a4:09:7e:fa:bb:23:82:de:2c:f4:d8:54:d0:1b:cc:
84:7e:4d:84:e0:4f:b6:16:f8:27:45:85:26:07:d5:
da:13:82:d8:ba:5f:d9:e8:d7:be:c8:b2:c1:e3:f7:
20:a4:cd:d2:1d:07:74:39:b7:0c:58:c9:2b:0a:6f:
ab:d8:c4:ae:75:19:f7:ec:57:aa:86:3f:c4:12:53:
02:b0:c7:25:8f:82:dc:8f:e9:ab:0e:64:1d:18:65:
48:f9:28:61:d8:44:3f:d6:30:73:8f:22:4d:c7:b8:
90:91:ea:bc:32:73:01:a6:bc:87:4b:ae:50:0a:db:
45:7f:82:61:49:3e:71:95:da:24:16:30:3a:05:4c:
d4:a9:1c:fb:a6:7c:47:0b:08:2b:7b:c0:06:63:70:
a3:a2:1a:8a:66:34:aa:fe:6d:10:59:84:f9:1a:3f:
c4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7B:19:13:BE:EC:8D:D1:48:E9:72:06:6E:D2:CE:CF:45:F2:3D:1C
X509v3 Authority Key Identifier:
keyid:44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c2:6f:61:b3:eb:96:d2:43:ad:cb:54:e1:8a:4e:04:ca:b2:
65:f6:c8:12:2b:a6:d6:a7:6b:f1:55:6f:a7:f4:c8:cd:e9:e3:
dc:42:5f:ad:f3:61:9b:e1:84:1a:9f:4d:3b:3d:79:d8:cf:19:
55:43:e9:6a:43:08:e2:53:6f:c5:4f:9a:e8:8f:d5:43:1f:51:
87:b6:70:bb:1f:1a:fc:db:c9:01:19:22:d9:b7:53:e2:f0:6a:
47:16:dd:8e:c2:03:91:fd:bd:12:d7:64:33:25:50:5e:04:60:
fc:42:c8:62:c3:ba:c2:09:17:28:0d:df:50:0a:79:40:96:91:
56:ca:5a:63:01:39:81:26:7e:6a:8c:bb:d5:f2:33:06:9b:5f:
f7:fc:43:19:12:d6:32:df:51:88:2e:ed:e2:7f:20:b4:98:42:
7b:53:67:7d:ec:df:58:4a:d6:2e:02:30:17:c3:92:f8:83:5d:
64:b3:5c:3a:90:49:c8:00:ca:8b:de:c6:00:a9:72:df:4e:60:
ca:c4:33:69:30:6b:50:dc:f2:ad:e4:57:c6:5a:39:2a:6f:85:
8b:71:7e:ab:3c:21:6f:3f:a6:dd:85:7f:0c:1f:3c:9b:32:e5:
a1:71:fa:54:7b:ce:d5:e1:3c:95:83:99:34:b9:77:e8:6d:d3:
e2:4b:28:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvA/pq1Gl1ys2TjZL7mU0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0N2NkNDFkOWU2Y2NmODAzMDZjMWI0NmJkYzBiNTc3YjFl
ZTJjYWUwHhcNMjUwODIzMDcwMjA4WhcNMjUwODI0MDcwMjA4WjAzMTEwLwYDVQQD
Eyg2MjdiMTkxM2JlZWM4ZGQxNDhlOTcyMDY2ZWQyY2VjZjQ1ZjIzZDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYmBb3wywmLJ5Y5d5F+ca8xhUYrY
uoZMA1kZuIKM0cCzVrWxqEfqyuYqZnT88bVWo1zfjIWSxVjyyzQJeYnFypMUcvqK
+EOxzRjY5+Mp+dfZOZiifGdXRjikCX76uyOC3iz02FTQG8yEfk2E4E+2FvgnRYUm
B9XaE4LYul/Z6Ne+yLLB4/cgpM3SHQd0ObcMWMkrCm+r2MSudRn37Feqhj/EElMC
sMclj4Lcj+mrDmQdGGVI+Shh2EQ/1jBzjyJNx7iQkeq8MnMBpryHS65QCttFf4Jh
ST5xldokFjA6BUzUqRz7pnxHCwgre8AGY3CjohqKZjSq/m0QWYT5Gj/ECQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJ7GRO+7I3RSOlyBm7Szs9F8j0cMB8GA1UdIwQY
MBaAFER81B2ebM+AMGwbRr3AtXex7iyuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkh6VUhaNXN6NEF3YkJ0R3ZjQzFkN0h1TEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xMjAzZDctNDFhYi00MDRjLTkyOWIt
Yjk3ODM4YzhkNjU4LzEvUkh6VUhaNXN6NEF3YkJ0R3ZjQzFkN0h1TEs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8xMjAzZDctNDFhYi00MDRjLTkyOWItYjk3ODM4YzhkNjU4
LzEvUkh6VUhaNXN6NEF3YkJ0R3ZjQzFkN0h1TEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMJvYbPr
ltJDrctU4YpOBMqyZfbIEium1qdr8VVvp/TIzenj3EJfrfNhm+GEGp9NOz152M8Z
VUPpakMI4lNvxU+a6I/VQx9Rh7Zwux8a/NvJARki2bdT4vBqRxbdjsIDkf29Etdk
MyVQXgRg/ELIYsO6wgkXKA3fUAp5QJaRVspaYwE5gSZ+aoy71fIzBptf9/xDGRLW
Mt9RiC7t4n8gtJhCe1NnfezfWErWLgIwF8OS+INdZLNcOpBJyADKi97GAKly305g
ysQzaTBrUNzyreRXxlo5Km+Fi3F+qzwhbz+m3YV/DB88mzLloXH6VHvO1eE8lYOZ
NLl36G3T4ksosg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:50 2025 by rpki-client