Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
File: h6WU4wS2ghg6ojWeQOHc75P-BXA.mft (raw, json)
Hash identifier: yvpzHd8CfnMtSQ0SKtrY2BTaXua6Hbre7mBEf4PUBZo=
Subject key identifier: 70:89:86:C5:65:58:47:35:61:4E:75:00:00:ED:91:C7:62:FB:79:61
Authority key identifier: 87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
Certificate issuer: /CN=87a594e304b682183aa2359e40e1dcef93fe0570
Certificate serial: 0199FD348BFF8CA71C0E7C65138167CF6F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
Manifest number: 05F7
Signing time: Sun 19 Oct 2025 16:01:43 +0000
Manifest this update: Sun 19 Oct 2025 16:01:43 +0000
Manifest next update: Mon 20 Oct 2025 16:01:43 +0000
Files and hashes: 1: Vzz9bAfXoV_CbBlQ5On5u4sMVy4.roa (hash: 9L5UOAnznGuqnwBvCvaXb3wcpMtqdknz4TA8q7GIbmw=)
2: h6WU4wS2ghg6ojWeQOHc75P-BXA.crl (hash: MUvDETnzjpIRVgZOvV1zURDeMfiYCUsQlhKprJnLg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8b:ff:8c:a7:1c:0e:7c:65:13:81:67:cf:6f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a594e304b682183aa2359e40e1dcef93fe0570
Validity
Not Before: Oct 19 16:01:43 2025 GMT
Not After : Oct 20 16:01:43 2025 GMT
Subject: CN=708986c565584735614e750000ed91c762fb7961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:0f:7a:c6:f8:b1:0b:a7:2d:1b:fa:e8:e3:
91:cd:62:95:85:1e:93:b6:3a:1d:21:de:a4:12:86:
f5:59:5e:fa:2d:e6:03:1e:d6:16:c1:e2:38:98:ef:
2c:e7:2b:e3:a0:d9:af:b8:52:ca:d6:b8:b5:ae:60:
1b:da:1a:81:da:2c:1b:aa:f1:b9:a0:c9:fa:e5:1b:
2b:2e:b4:1f:65:36:7a:2b:02:7b:00:70:02:bd:68:
a2:53:ee:57:b6:64:48:7c:ad:76:21:27:3d:46:6d:
80:43:ed:b6:85:a1:63:d7:cb:d6:c1:42:03:ba:99:
97:58:d0:8c:73:01:9f:f3:f9:9f:a5:99:29:b7:e5:
4b:d0:25:b8:47:aa:88:f1:cd:c7:55:a4:63:48:a9:
e7:8f:a2:50:95:b0:62:42:0f:d1:da:49:2f:1c:14:
06:40:65:7a:8b:1d:a8:a7:05:5a:f4:12:86:a5:80:
bf:09:35:c6:5f:b3:ed:cf:da:c4:06:84:4e:4e:5a:
77:97:f2:5d:e2:e5:d9:c8:5e:f6:33:72:20:aa:e6:
4b:26:bd:6e:a5:e2:27:02:29:7e:b1:03:12:11:bb:
f3:0a:34:00:67:b1:8b:16:e5:0d:0f:06:0f:da:f1:
a8:48:c6:ee:15:0d:f3:64:00:00:63:1c:4a:00:b8:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:89:86:C5:65:58:47:35:61:4E:75:00:00:ED:91:C7:62:FB:79:61
X509v3 Authority Key Identifier:
keyid:87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:50:6f:94:08:0d:b8:8e:54:7e:49:75:e5:60:5a:16:86:91:
29:20:69:00:18:03:c2:26:60:58:42:ba:41:8e:6f:8b:ea:18:
5b:f0:5c:06:44:56:17:c1:81:8e:b6:12:b4:ff:bb:48:a2:06:
6c:90:34:3d:29:c5:da:62:1b:5a:d6:8b:4c:c7:eb:11:ca:43:
cf:c7:35:54:68:9d:56:b2:5e:3c:cc:6f:2e:6a:b8:59:86:8b:
57:6e:ad:90:51:45:b2:c6:59:21:c4:c7:e7:36:6c:fd:ea:7d:
42:5a:c8:e9:fd:1f:73:5c:6c:a4:35:20:42:dd:a5:9c:ef:51:
cb:ae:5c:9f:d0:1f:2d:ee:4f:af:cf:ea:fb:5f:9e:6c:ea:12:
90:4f:30:ce:7a:9a:e4:16:81:2c:64:f9:ee:45:15:8e:d1:f0:
93:91:8d:5a:42:fd:52:74:89:7d:41:09:94:73:b8:c3:3d:8c:
ef:16:bb:3b:1d:1d:95:e1:33:4c:8a:5d:1d:83:f9:34:02:03:
d4:c4:0d:5e:12:8e:a1:39:5e:a7:e2:62:e8:25:60:e9:26:86:
1a:f5:4d:2d:86:68:6d:c2:bd:be:00:fc:0e:0d:aa:06:9a:78:
e8:14:ed:84:46:4f:73:e7:af:7f:65:cf:dc:09:2e:51:af:7b:
1e:17:bc:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NIv/jKccDnxlE4Fnz29bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YTU5NGUzMDRiNjgyMTgzYWEyMzU5ZTQwZTFkY2VmOTNm
ZTA1NzAwHhcNMjUxMDE5MTYwMTQzWhcNMjUxMDIwMTYwMTQzWjAzMTEwLwYDVQQD
Eyg3MDg5ODZjNTY1NTg0NzM1NjE0ZTc1MDAwMGVkOTFjNzYyZmI3OTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DsPesb4sQunLRv66OORzWKVhR6T
tjodId6kEob1WV76LeYDHtYWweI4mO8s5yvjoNmvuFLK1ri1rmAb2hqB2iwbqvG5
oMn65RsrLrQfZTZ6KwJ7AHACvWiiU+5XtmRIfK12ISc9Rm2AQ+22haFj18vWwUID
upmXWNCMcwGf8/mfpZkpt+VL0CW4R6qI8c3HVaRjSKnnj6JQlbBiQg/R2kkvHBQG
QGV6ix2opwVa9BKGpYC/CTXGX7Ptz9rEBoROTlp3l/Jd4uXZyF72M3IgquZLJr1u
peInAil+sQMSEbvzCjQAZ7GLFuUNDwYP2vGoSMbuFQ3zZAAAYxxKALgdVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCJhsVlWEc1YU51AADtkcdi+3lhMB8GA1UdIwQY
MBaAFIellOMEtoIYOqI1nkDh3O+T/gVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Zjg2OTktN2I1Mi00MDZlLTgyYzAt
YjllMzRhMzhmM2E5LzEvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80Zjg2OTktN2I1Mi00MDZlLTgyYzAtYjllMzRhMzhmM2E5
LzEvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtlBvlAgN
uI5Ufkl15WBaFoaRKSBpABgDwiZgWEK6QY5vi+oYW/BcBkRWF8GBjrYStP+7SKIG
bJA0PSnF2mIbWtaLTMfrEcpDz8c1VGidVrJePMxvLmq4WYaLV26tkFFFssZZIcTH
5zZs/ep9QlrI6f0fc1xspDUgQt2lnO9Ry65cn9AfLe5Pr8/q+1+ebOoSkE8wznqa
5BaBLGT57kUVjtHwk5GNWkL9UnSJfUEJlHO4wz2M7xa7Ox0dleEzTIpdHYP5NAID
1MQNXhKOoTlep+Ji6CVg6SaGGvVNLYZobcK9vgD8Dg2qBpp46BTthEZPc+evf2XP
3AkuUa97Hhe88w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:45 2025 by rpki-client