Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
File: hrIjA95LCocPz-e2VWwCT3XHajQ.mft (raw, json)
Hash identifier: sL5exWDH1xWk4TWOtAa5S8YlXyb3R9dMuH0JU3C0sGk=
Subject key identifier: F5:F9:2A:62:2B:1E:F9:4F:EB:9C:5E:B9:3A:05:B6:2C:92:70:6A:7D
Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Certificate serial: 0198D773BB2DE854DF2BA1A9D0FF5571C0FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
Manifest number: 114B
Signing time: Sat 23 Aug 2025 15:02:22 +0000
Manifest this update: Sat 23 Aug 2025 15:02:22 +0000
Manifest next update: Sun 24 Aug 2025 15:02:22 +0000
Files and hashes: 1: ZjB1G19DDx_6Q5oScLG5jMaC8XA.roa (hash: 7/c0oLP47xBtzbpIYR3dJCRfL58YizRnGJk+IU5Vsgc=)
2: bckQXnbwfKXBuJ2fgXGJ6V-6Qfk.roa (hash: v7e6EIu7w13jemXrMUjQBx6+ZKi093MMCQO7o8uB3rY=)
3: hrIjA95LCocPz-e2VWwCT3XHajQ.crl (hash: Itk3qtLmiPaQYg242BJEks3l0UybL99ekMmYNPkvIVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:bb:2d:e8:54:df:2b:a1:a9:d0:ff:55:71:c0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Validity
Not Before: Aug 23 15:02:22 2025 GMT
Not After : Aug 24 15:02:22 2025 GMT
Subject: CN=f5f92a622b1ef94feb9c5eb93a05b62c92706a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:46:6e:10:9b:6f:df:58:ef:2c:13:69:9a:
09:64:fd:80:58:dc:ae:0a:89:16:dc:d0:41:0f:15:
cf:85:69:e7:38:4a:f4:d2:a9:ea:84:84:d3:81:7f:
88:bb:f9:d6:e6:b0:4b:8b:da:3c:28:cf:4c:6d:8b:
cd:36:8b:98:fc:9b:f3:c2:b7:73:1c:ca:e4:ec:3a:
30:9b:65:c7:c6:9f:55:d9:e6:00:3a:dc:81:27:e6:
83:1b:cb:82:16:cb:ad:5a:9c:b5:7b:9d:ee:8a:59:
a0:07:31:53:d4:f6:76:f2:cd:30:b0:b5:5b:37:0e:
73:90:77:28:48:ce:33:e1:09:92:ba:a2:34:c2:64:
77:bd:52:03:9c:9c:2d:88:9b:21:99:c8:f5:df:31:
87:e1:c7:60:50:10:c2:ed:76:99:ed:0d:69:71:d2:
a9:8f:ff:b9:f4:8f:3d:77:d3:29:08:c3:f3:b6:18:
82:44:52:dd:77:6e:a0:ab:74:76:cd:1a:d2:4b:03:
ad:6b:03:0e:2e:68:45:6e:88:3c:3c:52:79:91:6a:
60:7e:0b:36:b3:02:41:9e:e3:95:6e:5b:9f:cb:1b:
b0:9e:de:df:8a:56:4d:4e:85:7f:f5:58:6d:f3:8d:
6d:f9:ee:38:49:a9:d8:9c:11:2a:99:e9:7b:d3:21:
37:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F9:2A:62:2B:1E:F9:4F:EB:9C:5E:B9:3A:05:B6:2C:92:70:6A:7D
X509v3 Authority Key Identifier:
keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f1:69:d5:26:61:0b:12:27:e5:06:62:e6:70:0f:dc:2b:05:
76:03:3b:3c:c5:e7:16:54:6f:c8:89:06:a3:7b:57:71:60:5a:
91:a7:a3:1f:46:f0:87:4e:48:67:09:a4:22:f5:9d:d4:0e:e0:
24:a3:c6:d6:96:70:fd:34:a2:13:7e:4b:2c:57:87:5f:5d:78:
27:7d:97:83:37:5c:6f:36:b6:d8:b7:69:c8:a7:76:43:e1:67:
25:8b:61:d3:67:93:d0:0c:ac:e1:b3:5c:c4:50:c8:9c:5a:57:
66:45:5d:17:a6:ff:45:51:52:57:98:35:6c:a6:df:be:e1:87:
c3:1d:49:64:b7:82:c4:7a:a0:c2:b3:1d:75:98:1e:45:ee:0e:
c1:bc:6d:28:05:59:fc:b8:e6:16:ca:f3:0a:2f:6f:15:44:d0:
d7:4f:6d:16:93:ce:e9:74:9d:90:b8:dc:28:84:29:e0:f4:ac:
8a:d9:ca:82:1d:63:ff:06:c9:e7:a8:ea:1c:d2:83:d9:33:e4:
eb:3c:3b:67:25:63:5f:20:da:26:3a:3a:95:f2:7b:90:88:ab:
4f:c0:92:ce:a3:e3:6f:3c:ff:ac:09:38:c3:f8:d6:f9:b9:41:
d8:39:c0:c2:7c:f5:db:f7:f4:11:85:ae:1f:d1:46:36:b2:51:
fd:3b:2f:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXc7st6FTfK6Gp0P9VccD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YjIyMzAzZGU0YjBhODcwZmNmZTdiNjU1NmMwMjRmNzVj
NzZhMzQwHhcNMjUwODIzMTUwMjIyWhcNMjUwODI0MTUwMjIyWjAzMTEwLwYDVQQD
EyhmNWY5MmE2MjJiMWVmOTRmZWI5YzVlYjkzYTA1YjYyYzkyNzA2YTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcZGbhCbb99Y7ywTaZoJZP2AWNyu
CokW3NBBDxXPhWnnOEr00qnqhITTgX+Iu/nW5rBLi9o8KM9MbYvNNouY/Jvzwrdz
HMrk7Dowm2XHxp9V2eYAOtyBJ+aDG8uCFsutWpy1e53uilmgBzFT1PZ28s0wsLVb
Nw5zkHcoSM4z4QmSuqI0wmR3vVIDnJwtiJshmcj13zGH4cdgUBDC7XaZ7Q1pcdKp
j/+59I89d9MpCMPzthiCRFLdd26gq3R2zRrSSwOtawMOLmhFbog8PFJ5kWpgfgs2
swJBnuOVblufyxuwnt7filZNToV/9Vht841t+e44SanYnBEqmel70yE3OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX5KmIrHvlP65xeuToFtiyScGp9MB8GA1UdIwQY
MBaAFIayIwPeSwqHD8/ntlVsAk91x2o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3Mjkt
NzJhYjU5ODdmNjA5LzEvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3MjktNzJhYjU5ODdmNjA5
LzEvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/Fp1SZh
CxIn5QZi5nAP3CsFdgM7PMXnFlRvyIkGo3tXcWBakaejH0bwh05IZwmkIvWd1A7g
JKPG1pZw/TSiE35LLFeHX114J32Xgzdcbza22LdpyKd2Q+FnJYth02eT0Ays4bNc
xFDInFpXZkVdF6b/RVFSV5g1bKbfvuGHwx1JZLeCxHqgwrMddZgeRe4OwbxtKAVZ
/LjmFsrzCi9vFUTQ109tFpPO6XSdkLjcKIQp4PSsitnKgh1j/wbJ56jqHNKD2TPk
6zw7ZyVjXyDaJjo6lfJ7kIirT8CSzqPjbzz/rAk4w/jW+blB2DnAwnz12/f0EYWu
H9FGNrJR/TsvpA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:31:04 2025 by rpki-client