Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
File: h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft (raw, json)
Hash identifier: T7jkx7C61sQVnpdx3noaRswsXuoR80+/U2IHB0loUgQ=
Subject key identifier: FA:E8:A4:2E:50:24:77:57:FA:F1:91:5E:79:8F:F6:AA:C0:62:39:CB
Authority key identifier: 87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
Certificate issuer: /CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Certificate serial: 0198D73B459C2F85B7CA25BF25E3E159C6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
Manifest number: 0DC1
Signing time: Sat 23 Aug 2025 14:00:42 +0000
Manifest this update: Sat 23 Aug 2025 14:00:42 +0000
Manifest next update: Sun 24 Aug 2025 14:00:42 +0000
Files and hashes: 1: RHGOdSgcoaK-6eU2dKjKlpRjaMo.roa (hash: NRVJAc4Gjyt0Wmb+WBhbiFKpJbnBkqjBbBZ7MMuCSS0=)
2: h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl (hash: kPUarvh1MtIXjmaRc63kP1ZFPg8bYEPOkzCR/H1FtiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:45:9c:2f:85:b7:ca:25:bf:25:e3:e1:59:c6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Validity
Not Before: Aug 23 14:00:42 2025 GMT
Not After : Aug 24 14:00:42 2025 GMT
Subject: CN=fae8a42e50247757faf1915e798ff6aac06239cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:ac:47:7c:da:46:67:35:93:66:64:7a:e5:
01:8c:0e:01:1b:69:9d:5d:3d:c3:5c:e1:b4:81:00:
c0:0f:f3:75:7e:8e:50:f2:53:19:7d:0a:03:93:66:
4a:2a:f7:df:78:dd:fd:d4:0c:8d:bd:3b:60:45:44:
ee:38:9d:e2:1e:da:5d:84:88:0c:39:50:e6:17:2d:
bb:51:19:62:02:bb:1b:70:f3:32:57:50:b9:b2:3e:
70:d4:48:2d:0e:a1:9e:77:e5:1a:d6:ba:b0:67:c8:
90:54:54:32:6c:5a:a7:62:cd:7b:f9:0d:fa:98:56:
b6:f1:f9:c7:f1:4f:3f:bd:1b:30:52:0e:91:f7:23:
38:6f:3a:50:dd:28:df:9b:1b:64:83:5b:9f:c0:82:
20:75:28:60:80:b8:98:67:ef:fd:db:3f:d0:ee:27:
f3:6f:43:bd:80:98:0e:d1:30:86:b3:58:ae:75:8c:
03:8a:a0:99:22:88:c3:e0:bd:2f:33:b0:15:e4:d7:
d2:86:35:f0:40:5d:02:ef:04:2d:f7:99:1d:60:4a:
e1:e1:c0:82:3b:cd:e4:c6:cb:4e:f4:4b:39:9a:d7:
bb:53:2f:9f:fc:62:18:8c:25:91:66:8f:bb:b8:f9:
fe:dc:eb:85:6d:68:1e:32:d7:ae:bb:e7:97:0a:30:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E8:A4:2E:50:24:77:57:FA:F1:91:5E:79:8F:F6:AA:C0:62:39:CB
X509v3 Authority Key Identifier:
keyid:87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bb:b2:03:28:73:dd:e1:56:ac:88:a8:90:55:7c:85:e3:d7:
83:1a:0f:b9:93:69:8c:88:ec:6f:80:d2:8d:5e:d2:b2:71:96:
d9:45:75:54:a1:bc:04:5d:10:c5:ed:23:e1:f2:81:42:b6:92:
58:82:d3:9e:19:42:41:06:a1:82:04:81:f2:c1:86:68:d2:bd:
84:19:83:1a:1a:b1:70:56:f2:77:f4:a7:cd:8b:24:f4:63:b4:
c0:b2:49:4b:62:69:cb:52:b4:15:8e:3d:12:d4:cc:ce:bd:42:
61:d0:aa:ca:a6:60:ee:68:6f:f0:e9:93:27:7e:9a:ca:16:45:
9e:6d:8d:7e:c9:f5:4a:28:b9:c2:96:40:dc:a8:0f:43:d2:00:
c7:69:5e:e4:4c:d8:4b:49:a1:f2:e6:c7:d9:b8:1d:31:8d:23:
02:6b:91:e0:d9:db:fd:52:0d:7b:af:bf:ec:bc:ec:27:a1:d5:
5d:63:b0:b3:d4:89:c6:01:0e:0d:59:ff:03:b1:b2:a8:f5:9d:
1e:c1:94:4b:36:8b:ed:7a:d6:17:53:19:90:d2:7a:5a:a7:1c:
44:16:de:30:79:d3:f3:86:81:9a:8f:78:66:d4:a6:4b:47:1e:
bf:2f:cb:97:31:8c:4a:75:0d:af:9e:6b:72:e4:b3:e1:56:14:
e6:b9:0e:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO0WcL4W3yiW/JePhWcalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YTk4YWUxMGQ4NTQ3OGNlYzVjMjU1NjNjNzNlYmI1NmM5
YjFhNDYwHhcNMjUwODIzMTQwMDQyWhcNMjUwODI0MTQwMDQyWjAzMTEwLwYDVQQD
EyhmYWU4YTQyZTUwMjQ3NzU3ZmFmMTkxNWU3OThmZjZhYWMwNjIzOWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPqsR3zaRmc1k2ZkeuUBjA4BG2md
XT3DXOG0gQDAD/N1fo5Q8lMZfQoDk2ZKKvffeN391AyNvTtgRUTuOJ3iHtpdhIgM
OVDmFy27URliArsbcPMyV1C5sj5w1EgtDqGed+Ua1rqwZ8iQVFQybFqnYs17+Q36
mFa28fnH8U8/vRswUg6R9yM4bzpQ3Sjfmxtkg1ufwIIgdShggLiYZ+/92z/Q7ifz
b0O9gJgO0TCGs1iudYwDiqCZIojD4L0vM7AV5NfShjXwQF0C7wQt95kdYErh4cCC
O83kxstO9Es5mte7Uy+f/GIYjCWRZo+7uPn+3OuFbWgeMteuu+eXCjDIcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPropC5QJHdX+vGRXnmP9qrAYjnLMB8GA1UdIwQY
MBaAFIepiuENhUeM7FwlVjxz67VsmxpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDZtSzRRMkZSNHpzWENWV1BIUHJ0V3liR2tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83MjA4NDMtYWRlZi00MzM4LTg5OTUt
MWM1NTZiMDNiMjJjLzEvaDZtSzRRMkZSNHpzWENWV1BIUHJ0V3liR2tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83MjA4NDMtYWRlZi00MzM4LTg5OTUtMWM1NTZiMDNiMjJj
LzEvaDZtSzRRMkZSNHpzWENWV1BIUHJ0V3liR2tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7uyAyhz
3eFWrIiokFV8hePXgxoPuZNpjIjsb4DSjV7SsnGW2UV1VKG8BF0Qxe0j4fKBQraS
WILTnhlCQQahggSB8sGGaNK9hBmDGhqxcFbyd/SnzYsk9GO0wLJJS2Jpy1K0FY49
EtTMzr1CYdCqyqZg7mhv8OmTJ36ayhZFnm2Nfsn1Sii5wpZA3KgPQ9IAx2le5EzY
S0mh8ubH2bgdMY0jAmuR4Nnb/VINe6+/7LzsJ6HVXWOws9SJxgEODVn/A7GyqPWd
HsGUSzaL7XrWF1MZkNJ6WqccRBbeMHnT84aBmo94ZtSmS0cevy/LlzGMSnUNr55r
cuSz4VYU5rkO3A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:19 2025 by rpki-client