
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
File: pH9wjDSl5x2vPS5UuZq3Twae-As.mft (raw, json)
Hash identifier: EMadQtKsEtyKi2pU6qDMaY+7J4ZqexNPJcRgEecZ22s=
Subject key identifier: 1E:8C:20:27:41:20:42:6C:24:18:13:E6:3B:81:1F:6A:F7:E5:05:E1
Authority key identifier: A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
Certificate issuer: /CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Certificate serial: 0198D516204DEF4F1456149D5CD25A7C85D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
Manifest number: 0BE3
Signing time: Sat 23 Aug 2025 04:00:53 +0000
Manifest this update: Sat 23 Aug 2025 04:00:53 +0000
Manifest next update: Sun 24 Aug 2025 04:00:53 +0000
Files and hashes: 1: 6y2PxXoNf17k752-h-Vh6181ybg.roa (hash: /D4LWQIJRMeiTsLLzqJFb6QygqeaBkt1FMx26cAAcmk=)
2: Uxq2zaQ3C0F2KaVo_-rxCUMMpzU.roa (hash: VbEHRBQ6CnI3V57/ypd9YP2tAsM8cgW+F1+a7XG3s5Q=)
3: pH9wjDSl5x2vPS5UuZq3Twae-As.crl (hash: //Sk2NwzNlG7UH014jYkQ6Falkk1/TlJCl0L7oPvz74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:20:4d:ef:4f:14:56:14:9d:5c:d2:5a:7c:85:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Validity
Not Before: Aug 23 04:00:53 2025 GMT
Not After : Aug 24 04:00:53 2025 GMT
Subject: CN=1e8c20274120426c241813e63b811f6af7e505e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:20:89:b0:17:40:9d:9a:78:b5:6c:50:77:
c4:21:e6:c0:07:bd:da:99:81:18:b5:c9:bf:09:da:
46:18:b7:00:82:85:63:47:85:d4:a8:9a:8d:d0:41:
60:ce:9f:49:08:5b:68:4b:eb:3b:f5:8d:65:03:a2:
6d:0e:75:d7:98:00:41:c0:99:21:fe:39:03:f7:6f:
d5:e6:39:c9:f1:6f:65:78:79:63:60:bf:9f:8e:cc:
93:50:1b:8a:1f:c6:55:a3:b4:37:85:84:21:35:b0:
0e:e3:8e:cd:3c:75:02:88:7f:e6:80:ab:33:49:6d:
07:33:07:de:ee:5d:6e:3b:1e:7f:15:c1:59:04:4c:
e6:bb:db:bb:5b:6d:b9:96:78:2e:86:fa:bd:ff:17:
bd:0d:75:b0:51:44:9b:d8:e8:4b:e1:25:29:06:f1:
c2:07:70:9c:47:4d:71:0a:47:6c:bd:a6:59:9f:bd:
3e:ee:ef:20:72:97:49:38:ac:e0:20:07:5a:c9:e3:
0e:7b:ce:2f:34:f4:27:8b:0b:72:8b:65:f6:ef:b2:
21:c4:82:03:ed:1d:e9:d9:cd:31:33:88:60:12:4b:
cf:f4:12:f9:96:cb:c5:7b:80:49:29:85:8e:7f:d1:
ac:9a:66:60:f8:1b:c3:47:46:f7:a7:fe:d2:3c:d0:
d1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8C:20:27:41:20:42:6C:24:18:13:E6:3B:81:1F:6A:F7:E5:05:E1
X509v3 Authority Key Identifier:
keyid:A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:39:6e:60:42:fc:d3:1e:7b:f5:92:8e:fc:01:62:91:cd:79:
96:6e:80:b3:1d:af:e7:9b:04:1a:30:3a:bb:18:64:1c:91:b5:
13:65:7a:74:81:29:13:57:5a:5d:26:94:ea:f3:b2:57:98:ae:
fd:bc:4d:05:8d:05:c1:bf:ab:9f:f1:b4:57:72:bc:b1:d2:53:
54:27:46:be:ee:03:15:f8:3a:83:77:e9:52:c6:27:49:ca:bd:
26:3a:61:8e:4d:cd:18:2c:2d:9a:96:90:54:92:13:5c:b3:04:
cf:a6:b6:9a:1a:f2:b6:c6:00:93:22:bc:4b:bb:8f:a2:d5:89:
eb:48:d6:fd:6c:e8:d8:4c:66:47:4e:0e:f1:00:07:f3:03:1b:
11:ef:d5:78:c7:fe:d1:c5:e9:f4:3d:03:9b:3a:34:70:a5:48:
3f:0a:c6:b6:50:5d:fc:cc:08:14:fe:99:21:a1:27:02:c9:14:
2b:07:18:68:03:39:a2:e7:eb:ce:19:6d:2d:d0:4d:71:1e:46:
99:90:d8:9d:ba:b4:2f:a3:83:23:da:4c:2e:03:d6:11:14:03:
4c:99:3c:0d:eb:9b:5d:99:7f:e5:c0:a2:b6:a6:35:67:6d:6a:
db:48:b6:10:44:04:49:ac:22:d4:ff:77:7c:f8:d8:19:8d:4c:
97:77:df:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFiBN708UVhSdXNJafIXWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0N2Y3MDhjMzRhNWU3MWRhZjNkMmU1NGI5OWFiNzRmMDY5
ZWY4MGIwHhcNMjUwODIzMDQwMDUzWhcNMjUwODI0MDQwMDUzWjAzMTEwLwYDVQQD
EygxZThjMjAyNzQxMjA0MjZjMjQxODEzZTYzYjgxMWY2YWY3ZTUwNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMsgibAXQJ2aeLVsUHfEIebAB73a
mYEYtcm/CdpGGLcAgoVjR4XUqJqN0EFgzp9JCFtoS+s79Y1lA6JtDnXXmABBwJkh
/jkD92/V5jnJ8W9leHljYL+fjsyTUBuKH8ZVo7Q3hYQhNbAO447NPHUCiH/mgKsz
SW0HMwfe7l1uOx5/FcFZBEzmu9u7W225lnguhvq9/xe9DXWwUUSb2OhL4SUpBvHC
B3CcR01xCkdsvaZZn70+7u8gcpdJOKzgIAdayeMOe84vNPQniwtyi2X277IhxIID
7R3p2c0xM4hgEkvP9BL5lsvFe4BJKYWOf9GsmmZg+BvDR0b3p/7SPNDRVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6MICdBIEJsJBgT5juBH2r35QXhMB8GA1UdIwQY
MBaAFKR/cIw0pecdrz0uVLmat08GnvgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8wMTlhMWUtYmU5OC00MTRjLThjMmMt
NmIyN2ZmMjI1N2M2LzEvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8wMTlhMWUtYmU5OC00MTRjLThjMmMtNmIyN2ZmMjI1N2M2
LzEvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTluYEL8
0x579ZKO/AFikc15lm6Asx2v55sEGjA6uxhkHJG1E2V6dIEpE1daXSaU6vOyV5iu
/bxNBY0Fwb+rn/G0V3K8sdJTVCdGvu4DFfg6g3fpUsYnScq9Jjphjk3NGCwtmpaQ
VJITXLMEz6a2mhrytsYAkyK8S7uPotWJ60jW/Wzo2ExmR04O8QAH8wMbEe/VeMf+
0cXp9D0Dmzo0cKVIPwrGtlBd/MwIFP6ZIaEnAskUKwcYaAM5oufrzhltLdBNcR5G
mZDYnbq0L6ODI9pMLgPWERQDTJk8DeubXZl/5cCitqY1Z21q20i2EEQESawi1P93
fPjYGY1Ml3ffiw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:38 2025 by rpki-client