Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
File: h9mQExRnt30RFit5--OwbKirLTk.mft (raw, json)
Hash identifier: KQrgCGoqFqIYslrYMDKnRLsWZWcnFzd13sqBL7EqwsY=
Subject key identifier: FA:3D:D6:DA:B3:DE:90:BE:67:2A:CF:BF:85:81:76:59:E0:CE:99:97
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 0198D54E9F6E4FA429736ED78C9EAD9D15B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
Manifest number: 165A
Signing time: Sat 23 Aug 2025 05:02:36 +0000
Manifest this update: Sat 23 Aug 2025 05:02:36 +0000
Manifest next update: Sun 24 Aug 2025 05:02:36 +0000
Files and hashes: 1: BpGdK4vNgugH_zIwdKpTLTonzFI.roa (hash: XCtnPAQsPAejFAsLvLkAMfASQaAA0TQU3hCkuPs7vLM=)
2: XOmOBh50cvCvJmnFjaJhaHYW2sE.roa (hash: 6F6wNjub6rC7wNAaFOeBE6JJ3w2cU7C6GJM4bNB9ZQQ=)
3: h9mQExRnt30RFit5--OwbKirLTk.crl (hash: yP+j9pdlSw9Z1ftTUliuHUYtAchpGYs4aDtGKweBbSU=)
4: viZJ1ILrK-Lhvo6EpJnhGu2o9Q4.roa (hash: VBEvk2C209Y5tb0FL9tK/NrEWGQ6MCpm2RIBK/aQkDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:9f:6e:4f:a4:29:73:6e:d7:8c:9e:ad:9d:15:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: Aug 23 05:02:36 2025 GMT
Not After : Aug 24 05:02:36 2025 GMT
Subject: CN=fa3dd6dab3de90be672acfbf85817659e0ce9997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:7a:6c:46:57:97:2d:da:10:15:01:1b:8f:
30:73:70:27:60:e3:ab:fa:f8:cf:23:9b:e1:c6:c2:
f8:e6:b1:3f:80:6c:8a:32:6d:cc:c9:0d:2a:4c:77:
70:b7:f0:9d:90:13:25:f4:2c:b5:e2:38:de:51:9e:
e2:d3:2a:a9:d0:c8:49:db:a5:5a:b6:2d:77:2d:7d:
02:1a:79:45:0a:57:f2:17:d4:cd:2c:c2:06:70:9e:
7e:c3:ad:31:ed:eb:dd:ac:e5:05:0a:e0:a8:c1:6d:
f2:f4:5b:4f:8d:6b:f0:a4:a2:d7:2c:f4:c9:c8:5e:
b8:9f:96:cc:6c:e4:1c:06:51:ef:fe:1d:69:83:1d:
f8:c6:20:5f:81:38:10:47:72:32:1b:b6:5f:49:e6:
53:d1:10:3b:7e:0a:7a:0f:d3:80:61:68:d5:05:b6:
d8:1c:55:34:a5:f6:25:97:a0:26:6e:84:25:e2:2f:
4c:13:3c:db:08:0d:1e:1e:59:da:55:93:6f:f9:da:
cd:5a:e1:32:3f:11:d3:6d:b0:00:31:42:21:45:81:
15:f6:ba:60:74:f8:d0:09:c8:73:4d:c6:d4:e3:86:
36:82:33:87:03:89:83:cf:da:f1:5e:6d:65:28:1e:
59:0d:5e:18:be:29:3e:af:78:84:2e:c0:27:75:8d:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3D:D6:DA:B3:DE:90:BE:67:2A:CF:BF:85:81:76:59:E0:CE:99:97
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b0:69:4c:45:28:28:b4:6f:33:56:25:cf:48:e5:69:30:fb:
28:5b:74:8c:a7:74:97:75:ec:d8:40:02:29:64:a5:b8:e6:8b:
21:d3:13:e9:04:e5:ee:84:e5:83:ea:bb:74:3e:05:a0:c4:01:
d2:d5:30:b8:16:e2:6a:4b:6c:44:b7:51:88:5c:71:67:1d:11:
23:ff:1d:b3:c1:2d:13:2d:ac:af:64:d2:25:09:8a:22:54:94:
05:6a:8a:aa:3b:55:ad:e5:93:c1:3f:ab:10:fd:3e:b2:a1:d1:
f3:27:f6:5f:3c:2c:73:11:4d:90:2f:10:98:45:81:a0:c8:22:
34:cb:36:b3:f0:65:c1:65:c0:1b:0a:8e:18:8e:b5:12:4f:15:
40:de:8d:66:72:a9:39:a3:56:26:57:72:8c:9a:a6:b5:83:73:
95:13:d4:70:23:31:bd:c0:f4:8d:50:4a:c0:a0:10:59:bd:91:
8e:1c:5e:28:ea:a2:3c:95:e8:ff:61:51:69:23:fc:bc:bd:0b:
65:f6:b6:53:67:70:d7:63:3f:b0:19:12:6e:5a:4c:fd:80:16:
2f:de:ec:a8:64:eb:b9:71:96:30:41:68:bf:a6:d8:bc:d5:6e:
19:30:39:c0:5c:3e:d6:4b:69:6c:dd:40:73:9f:b0:4c:62:82:
a2:91:7d:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTp9uT6Qpc27XjJ6tnRW1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZDk5MDEzMTQ2N2I3N2QxMTE2MmI3OWZiZTNiMDZjYThh
YjJkMzkwHhcNMjUwODIzMDUwMjM2WhcNMjUwODI0MDUwMjM2WjAzMTEwLwYDVQQD
EyhmYTNkZDZkYWIzZGU5MGJlNjcyYWNmYmY4NTgxNzY1OWUwY2U5OTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+16bEZXly3aEBUBG48wc3AnYOOr
+vjPI5vhxsL45rE/gGyKMm3MyQ0qTHdwt/CdkBMl9Cy14jjeUZ7i0yqp0MhJ26Va
ti13LX0CGnlFClfyF9TNLMIGcJ5+w60x7evdrOUFCuCowW3y9FtPjWvwpKLXLPTJ
yF64n5bMbOQcBlHv/h1pgx34xiBfgTgQR3IyG7ZfSeZT0RA7fgp6D9OAYWjVBbbY
HFU0pfYll6AmboQl4i9MEzzbCA0eHlnaVZNv+drNWuEyPxHTbbAAMUIhRYEV9rpg
dPjQCchzTcbU44Y2gjOHA4mDz9rxXm1lKB5ZDV4Yvik+r3iELsAndY1asQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPo91tqz3pC+ZyrPv4WBdlngzpmXMB8GA1UdIwQY
MBaAFIfZkBMUZ7d9ERYrefvjsGyoqy05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMt
YjhlOGIzNGRiMjkwLzEvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMtYjhlOGIzNGRiMjkw
LzEvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7BpTEUo
KLRvM1Ylz0jlaTD7KFt0jKd0l3Xs2EACKWSluOaLIdMT6QTl7oTlg+q7dD4FoMQB
0tUwuBbiaktsRLdRiFxxZx0RI/8ds8EtEy2sr2TSJQmKIlSUBWqKqjtVreWTwT+r
EP0+sqHR8yf2XzwscxFNkC8QmEWBoMgiNMs2s/BlwWXAGwqOGI61Ek8VQN6NZnKp
OaNWJldyjJqmtYNzlRPUcCMxvcD0jVBKwKAQWb2RjhxeKOqiPJXo/2FRaSP8vL0L
Zfa2U2dw12M/sBkSblpM/YAWL97sqGTruXGWMEFov6bYvNVuGTA5wFw+1ktpbN1A
c5+wTGKCopF90Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:54 2025 by rpki-client