Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: zoscOl9lKrNxtBMXqHukI6JLzhlHBpMs5dSRGSqWfx8=
Subject key identifier: 08:A5:B0:87:CE:F4:BA:00:B2:24:66:AC:3A:95:0C:68:CE:51:06:EA
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 0199FB0F3D095B594A07019B1E68A29B0CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 116B
Signing time: Sun 19 Oct 2025 06:01:43 +0000
Manifest this update: Sun 19 Oct 2025 06:01:43 +0000
Manifest next update: Mon 20 Oct 2025 06:01:43 +0000
Files and hashes: 1: 7q0WrWMejy7wbR787YAaoWGbJFQ.roa (hash: wvukoKMYamTKrvVMIAVFKbPLx57mG8Vi2Twko2h+BGA=)
2: 9N4nOv3tg3sEbPyzZf0it1Hq25E.roa (hash: IJnSS5a9u+7nIpL38LijT/DvQkKhhTmKcLRcnn9ZFq4=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: czuKoFEdebjN4qIwNJ1pNuVatHqSgmb3SpkfG5ro/ZI=)
4: HFw-x8czfBceHHrxWFsisFaU53k.roa (hash: cYh9OngZxsihRjHnYd3zU3o4mbQkOgFi9+M2bbApN3k=)
5: X8AY7TE63_MLYw5qzgUDNFtz5p0.roa (hash: X2a5upeXUq+OfzrT3NEfhOg+ntOWBbajp/Ueexg9I2s=)
6: lZMuhPvtZ2azCXBKPog94p3v2Xw.roa (hash: xEuRWjb3WfY9qNirTUGj3ZWp2yVhhUygTy4CswJMg3c=)
7: uIXD9TM7mcGL2h8D_v3d0KyzT9E.roa (hash: N8tk1k3ctTBw3mBa+DDHR+60L2fh+aJO68VY7R3S2T4=)
8: vlexF02dkqJLD0WdrTxwGKUdE4I.roa (hash: cuDkI790X0jMiu+jzLtuqyGyt6ox4BybHkrBEnZriww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:3d:09:5b:59:4a:07:01:9b:1e:68:a2:9b:0c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Oct 19 06:01:43 2025 GMT
Not After : Oct 20 06:01:43 2025 GMT
Subject: CN=08a5b087cef4ba00b22466ac3a950c68ce5106ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0f:6d:13:94:8f:14:e6:6e:b8:56:b9:4c:ab:
4b:60:32:df:57:ae:38:06:7a:a7:7e:dd:62:58:90:
a1:42:6b:b2:a8:d6:92:4b:b6:c9:3d:26:dc:f5:6c:
db:7a:64:ca:26:80:a1:09:e6:3d:8c:9e:f9:77:32:
1e:58:b4:ea:dd:9a:ee:53:4c:46:fd:b3:d2:69:1b:
89:50:78:05:7b:12:8b:16:03:0e:41:c8:8b:bb:1f:
14:8b:ac:df:2c:41:20:35:f9:53:e7:d9:5d:6e:d4:
5b:f7:7b:be:23:8a:d8:bc:bc:93:97:b8:45:02:e4:
ea:fd:9f:be:1c:1c:c4:e2:1c:12:03:af:9b:5f:bf:
91:c6:79:4e:7a:96:b9:36:18:ee:90:f0:80:49:1a:
ab:11:34:a8:e9:ff:ed:67:56:b3:e2:61:9a:19:e5:
fa:03:af:ab:6e:c1:53:9d:fa:d6:ae:4b:f5:a5:2d:
c3:29:89:b4:1e:92:9b:ac:6c:fe:5c:d1:1f:09:7a:
e0:0f:7e:5c:7d:c8:56:4c:db:c6:55:67:21:a9:9a:
fe:5b:6b:e2:ff:de:cf:18:6f:c1:b6:35:fb:83:48:
1f:aa:90:96:30:3d:bc:2b:ca:83:cc:15:ff:f7:cb:
c3:17:0f:c4:b3:de:ed:6f:a5:31:ef:18:c1:bc:e7:
cf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A5:B0:87:CE:F4:BA:00:B2:24:66:AC:3A:95:0C:68:CE:51:06:EA
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:14:e7:ac:bf:b0:6c:28:6a:b9:8d:38:11:fb:e0:71:77:34:
eb:46:47:3e:95:bc:85:3e:67:cf:b8:7f:b5:02:ab:7d:12:33:
17:97:e1:ae:0e:90:51:c8:e5:4a:a7:25:52:f3:4c:fd:d7:5e:
25:67:72:72:f3:49:fb:34:95:f3:d9:d2:1c:7d:a3:63:eb:65:
22:da:8b:a7:c1:26:7c:4c:f8:5c:f7:62:c7:41:b5:13:cb:96:
6d:76:5b:d4:d6:aa:d6:93:24:29:24:0b:76:65:f3:a7:78:c4:
3b:c7:1a:af:c2:91:75:2b:d2:bb:1d:f8:9d:6a:a4:06:27:69:
d8:7e:b9:76:84:5c:9d:d9:8e:09:5a:60:44:2f:5a:3d:89:f3:
80:75:bd:ab:98:02:d4:4d:8e:bf:7b:8b:2f:7a:cd:b1:0a:7e:
6d:02:86:03:7a:60:e2:d1:9a:9f:75:ab:b5:25:6c:dc:50:b4:
3d:50:32:01:24:c2:90:57:82:86:e0:52:ed:a5:98:36:20:13:
c5:52:61:5f:cd:2b:50:9a:5e:dd:11:9c:7d:71:a0:20:18:f4:
5d:ba:70:f6:96:ff:b9:1e:e1:26:67:37:b3:fc:d7:71:49:74:
0f:5b:ca:5a:30:04:c9:3c:b1:f7:d9:5c:b7:d4:7a:f7:8c:63:
62:86:81:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Dz0JW1lKBwGbHmiimwytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYzQ5MjdhYjE5NGFlMTIzN2ZkZTJkM2JlZjY5MDM4ODkz
ZjBkYzUwHhcNMjUxMDE5MDYwMTQzWhcNMjUxMDIwMDYwMTQzWjAzMTEwLwYDVQQD
EygwOGE1YjA4N2NlZjRiYTAwYjIyNDY2YWMzYTk1MGM2OGNlNTEwNmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A9tE5SPFOZuuFa5TKtLYDLfV644
Bnqnft1iWJChQmuyqNaSS7bJPSbc9WzbemTKJoChCeY9jJ75dzIeWLTq3ZruU0xG
/bPSaRuJUHgFexKLFgMOQciLux8Ui6zfLEEgNflT59ldbtRb93u+I4rYvLyTl7hF
AuTq/Z++HBzE4hwSA6+bX7+RxnlOepa5NhjukPCASRqrETSo6f/tZ1az4mGaGeX6
A6+rbsFTnfrWrkv1pS3DKYm0HpKbrGz+XNEfCXrgD35cfchWTNvGVWchqZr+W2vi
/97PGG/BtjX7g0gfqpCWMD28K8qDzBX/98vDFw/Es97tb6Ux7xjBvOfPowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAilsIfO9LoAsiRmrDqVDGjOUQbqMB8GA1UdIwQY
MBaAFB/EknqxlK4SN/3i0772kDiJPw3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODIt
OGI4YTAxYmQ3NDE0LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODItOGI4YTAxYmQ3NDE0
LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxTnrL+w
bChquY04EfvgcXc060ZHPpW8hT5nz7h/tQKrfRIzF5fhrg6QUcjlSqclUvNM/dde
JWdycvNJ+zSV89nSHH2jY+tlItqLp8EmfEz4XPdix0G1E8uWbXZb1Naq1pMkKSQL
dmXzp3jEO8car8KRdSvSux34nWqkBidp2H65doRcndmOCVpgRC9aPYnzgHW9q5gC
1E2Ov3uLL3rNsQp+bQKGA3pg4tGan3WrtSVs3FC0PVAyASTCkFeChuBS7aWYNiAT
xVJhX80rUJpe3RGcfXGgIBj0Xbpw9pb/uR7hJmc3s/zXcUl0D1vKWjAEyTyx99lc
t9R694xjYoaB+A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:04 2025 by rpki-client