Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
File: H-AtvuYsmPAfIPR3DRakf3mr4yw.mft (raw, json)
Hash identifier: bg0nnRczidr9U6WxfMbSSefP0Wc9C6G9V08UZVx7XHQ=
Subject key identifier: 1C:31:68:4C:0B:04:E7:38:6F:A4:47:DD:B8:3C:3B:EB:3B:70:67:D5
Authority key identifier: 1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
Certificate issuer: /CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Certificate serial: 0198D5BC0B2301AFFD1BC98C780D5062BA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:07 +0000
Manifest this update: Sat 23 Aug 2025 07:02:07 +0000
Manifest next update: Sun 24 Aug 2025 07:02:07 +0000
Files and hashes: 1: B_Zgbr5zHePzPX0kzYDR02lMQd0.roa (hash: oTbqq1QauLG6/LAk+F5PPgZYsS1F6hnMzvsYBg19oqU=)
2: H-AtvuYsmPAfIPR3DRakf3mr4yw.crl (hash: ozYQQ16b1OPgfdlaHLxDBl60JiyUJ0V/mLR465+l9Sw=)
3: iB3qHj6jc-vYvyyZv2bCeRVUFSQ.roa (hash: GN+JMGlNiyjaBMnzgzzZxTHdUtxnuMF8sNkbCRGW38U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0b:23:01:af:fd:1b:c9:8c:78:0d:50:62:ba:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Validity
Not Before: Aug 23 07:02:07 2025 GMT
Not After : Aug 24 07:02:07 2025 GMT
Subject: CN=1c31684c0b04e7386fa447ddb83c3beb3b7067d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:8d:8a:98:28:19:51:73:5a:25:c8:52:51:
cf:ca:f7:16:25:ae:a5:99:8e:95:91:67:77:fd:3b:
e0:e7:04:35:5e:24:3a:f2:59:fd:c3:07:dd:27:e1:
0a:fe:ba:53:ce:40:12:b5:4c:51:52:28:57:91:02:
90:e9:f2:58:16:3e:87:29:cd:49:38:35:46:9d:7a:
55:08:ad:f1:67:30:d7:81:8c:8c:6a:97:be:28:3d:
e8:58:c5:fe:d9:84:f9:cd:15:cb:16:f2:35:31:4f:
76:f4:6a:f0:5f:27:82:45:e0:49:7b:4f:02:e0:e8:
10:6d:ad:3a:29:ef:57:91:0e:ec:90:a9:0d:2d:45:
dd:4d:cd:49:e2:1d:0a:d6:1e:f7:d0:a9:39:24:e1:
d1:4f:8a:15:29:be:62:c4:a5:24:85:b9:29:81:39:
42:0e:3f:5f:5d:48:b8:ea:6a:1f:39:eb:e3:e1:94:
85:96:18:86:dd:fa:64:a8:9a:e5:a6:08:02:26:7e:
87:f8:d2:f0:ce:f3:ea:89:72:2a:2b:cb:87:69:06:
2a:70:f9:15:4c:c3:12:a6:68:bb:a3:be:0e:17:8e:
37:c6:bb:14:1d:68:7b:ea:b0:8c:bd:6c:cc:c8:8d:
b8:de:2b:ab:92:2c:77:9d:3f:cf:b8:86:29:7b:28:
9e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:31:68:4C:0B:04:E7:38:6F:A4:47:DD:B8:3C:3B:EB:3B:70:67:D5
X509v3 Authority Key Identifier:
keyid:1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e6:c4:8d:1f:49:8e:ff:f5:09:7b:1b:7e:f9:6e:6d:fe:da:
28:91:68:7f:95:12:59:99:de:87:58:d1:aa:a4:7d:53:35:82:
5e:88:a1:40:64:4a:5a:28:8c:63:6e:1a:4a:2c:12:f3:ab:48:
36:a1:98:b0:3f:13:01:55:2c:21:bb:53:16:72:94:4c:ae:a7:
6c:05:75:18:3e:bd:59:e0:af:94:f6:09:07:c0:13:9e:27:66:
7c:05:10:10:ec:4a:e2:5d:db:7b:97:3d:38:9f:c2:21:d5:e5:
c1:fb:10:8f:b3:8d:be:f6:16:17:f1:d1:c1:36:88:04:3f:1c:
1e:76:83:20:c9:de:0e:ff:6e:83:84:04:18:db:2e:cd:fb:64:
23:26:b4:a8:6c:45:e7:3d:f8:6b:9f:52:22:61:c1:f5:ae:66:
6a:9b:3b:dc:bc:51:21:dd:4b:81:c9:77:0c:59:b9:ce:7c:65:
04:62:fd:46:fa:92:bf:be:b2:fa:db:81:46:a0:2f:52:40:41:
bc:b1:d1:42:68:2d:00:f8:11:d4:52:be:a3:54:57:a3:b7:0d:
38:bd:bb:02:97:48:a9:1f:14:4e:5d:2a:93:a9:79:17:c2:d2:
35:b8:2e:96:e4:69:eb:c4:ef:cc:d0:3e:c3:90:1c:74:19:47:
5c:17:fa:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvAsjAa/9G8mMeA1QYroOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZTAyZGJlZTYyYzk4ZjAxZjIwZjQ3NzBkMTZhNDdmNzlh
YmUzMmMwHhcNMjUwODIzMDcwMjA3WhcNMjUwODI0MDcwMjA3WjAzMTEwLwYDVQQD
EygxYzMxNjg0YzBiMDRlNzM4NmZhNDQ3ZGRiODNjM2JlYjNiNzA2N2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowuNipgoGVFzWiXIUlHPyvcWJa6l
mY6VkWd3/Tvg5wQ1XiQ68ln9wwfdJ+EK/rpTzkAStUxRUihXkQKQ6fJYFj6HKc1J
ODVGnXpVCK3xZzDXgYyMape+KD3oWMX+2YT5zRXLFvI1MU929GrwXyeCReBJe08C
4OgQba06Ke9XkQ7skKkNLUXdTc1J4h0K1h730Kk5JOHRT4oVKb5ixKUkhbkpgTlC
Dj9fXUi46mofOevj4ZSFlhiG3fpkqJrlpggCJn6H+NLwzvPqiXIqK8uHaQYqcPkV
TMMSpmi7o74OF443xrsUHWh76rCMvWzMyI243iurkix3nT/PuIYpeyiezQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwxaEwLBOc4b6RH3bg8O+s7cGfVMB8GA1UdIwQY
MBaAFB/gLb7mLJjwHyD0dw0WpH95q+MsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC1BdHZ1WXNtUEFmSVBSM0RSYWtmM21yNHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9hMTJhMzAtZDYwZi00MDMyLTg4NjMt
MjEyNTNlYTlmM2E0LzEvSC1BdHZ1WXNtUEFmSVBSM0RSYWtmM21yNHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9hMTJhMzAtZDYwZi00MDMyLTg4NjMtMjEyNTNlYTlmM2E0
LzEvSC1BdHZ1WXNtUEFmSVBSM0RSYWtmM21yNHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPObEjR9J
jv/1CXsbfvlubf7aKJFof5USWZneh1jRqqR9UzWCXoihQGRKWiiMY24aSiwS86tI
NqGYsD8TAVUsIbtTFnKUTK6nbAV1GD69WeCvlPYJB8ATnidmfAUQEOxK4l3be5c9
OJ/CIdXlwfsQj7ONvvYWF/HRwTaIBD8cHnaDIMneDv9ug4QEGNsuzftkIya0qGxF
5z34a59SImHB9a5maps73LxRId1Lgcl3DFm5znxlBGL9RvqSv76y+tuBRqAvUkBB
vLHRQmgtAPgR1FK+o1RXo7cNOL27ApdIqR8UTl0qk6l5F8LSNbguluRp68TvzNA+
w5AcdBlHXBf6rw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:44 2025 by rpki-client