Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
File: fHIvhbMedl2Pd7aStdKoTBEdgF0.mft (raw, json)
Hash identifier: qzR6+2Aii1Xre4gBFXJQZFVCbDqyzWSqg7M0h+iJesc=
Subject key identifier: BA:28:2A:DE:48:29:35:1C:3B:05:8C:38:55:4E:75:AC:83:28:41:6C
Authority key identifier: 7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
Certificate issuer: /CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Certificate serial: 0198D661444CAF368ABFAC4D8AB29BD04230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
Manifest number: 1028
Signing time: Sat 23 Aug 2025 10:02:35 +0000
Manifest this update: Sat 23 Aug 2025 10:02:35 +0000
Manifest next update: Sun 24 Aug 2025 10:02:35 +0000
Files and hashes: 1: aPGkJWWfqnHSYtcmHdQOMi1mheA.roa (hash: 6hq3FWs22+JzOpc7JMDFeHh8CJMVuPtspAIB0Mwo68c=)
2: fHIvhbMedl2Pd7aStdKoTBEdgF0.crl (hash: 5vSnKi2drZ+e6WcrQhejavQy9IRfra4N53VEJE7+vr8=)
3: kOhrGOFiHCQXDK7SqjPEybS0hcw.roa (hash: ybpwH1QupQRJQ6+PK49HntOhSn/3Y1wfK/QgMWHmniQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:44:4c:af:36:8a:bf:ac:4d:8a:b2:9b:d0:42:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Validity
Not Before: Aug 23 10:02:35 2025 GMT
Not After : Aug 24 10:02:35 2025 GMT
Subject: CN=ba282ade4829351c3b058c38554e75ac8328416c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:f1:44:9b:f4:e1:63:25:c6:23:27:fe:4f:
59:8c:e2:53:39:40:fc:78:c0:37:c8:86:4a:77:0e:
19:7d:62:21:f6:94:17:99:62:66:59:08:5e:28:28:
69:7b:90:3c:ee:b1:8d:b8:13:f1:85:03:aa:4a:0b:
40:21:ea:0b:0c:51:04:d8:09:8c:00:02:84:86:3e:
38:b5:b5:86:ca:ee:30:ef:0f:b7:47:05:00:5e:1b:
b3:bd:db:b0:76:39:37:f6:f6:5b:93:55:a2:b4:df:
3f:69:4b:43:23:d7:21:db:64:83:65:e2:8c:0a:fb:
9e:a3:e3:ed:bc:62:cd:3c:f0:e1:5e:3d:a0:01:16:
2f:10:37:b2:7f:17:bf:cd:7f:38:8b:d1:2f:ec:01:
b8:e2:ee:56:02:75:f8:d4:83:46:94:2a:a3:70:e5:
7f:11:42:5d:e5:fc:7d:83:8d:31:da:76:2d:a3:d7:
5e:af:5c:52:56:de:88:99:b0:d8:6c:a8:96:ec:c5:
a2:c1:68:48:4c:e2:9d:d0:21:b5:ce:6d:80:43:7b:
86:29:81:d5:c1:0b:85:8a:71:5c:6d:fc:d4:b4:77:
48:25:02:be:69:eb:52:bd:27:78:c9:09:d0:b1:68:
42:fa:26:0d:8c:33:5a:e4:10:18:81:95:7d:8c:9a:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:28:2A:DE:48:29:35:1C:3B:05:8C:38:55:4E:75:AC:83:28:41:6C
X509v3 Authority Key Identifier:
keyid:7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a9:c0:d7:5b:31:39:ba:da:10:81:07:be:d6:5f:ec:5e:9c:
42:1f:28:3c:f0:d2:f7:ff:24:11:b3:bc:c4:25:cc:01:4b:fb:
f2:fc:5b:30:1a:b3:6f:6a:5e:78:a5:0e:a4:6e:02:7f:91:1b:
24:bc:5f:91:5a:98:a5:c7:f6:5c:bc:bc:3f:10:a5:d0:c8:36:
aa:5f:2c:d4:d5:40:ec:fe:cd:2f:77:be:b7:02:e1:46:b7:21:
1f:0d:40:02:91:48:7b:dc:95:67:82:e2:c5:a0:60:c8:72:46:
17:68:d5:a0:a0:b5:ca:32:2c:1c:6f:bd:8e:f3:39:6b:1e:22:
3a:86:56:9e:9d:c0:cc:34:85:a2:b4:e6:07:d0:d8:a8:43:8e:
9c:be:cb:38:16:08:13:31:77:63:65:ff:f0:18:c7:58:74:4f:
fb:e8:ca:fa:41:42:bc:86:a7:a3:52:ec:52:de:3c:bc:2c:4b:
48:e2:58:4e:8e:53:4f:13:b6:f9:54:f7:de:e2:ca:16:5d:d3:
c2:7f:c6:a6:22:7b:f4:b4:ec:c7:ed:b7:78:83:be:18:dc:ed:
b0:19:cb:a2:0b:6a:9d:6b:71:cc:f8:42:1e:87:ec:4f:bf:84:
e5:70:30:6a:c1:35:b4:8c:d8:a9:00:72:9a:a7:e3:56:1a:4e:
a4:04:a7:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYURMrzaKv6xNirKb0EIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNzIyZjg1YjMxZTc2NWQ4Zjc3YjY5MmI1ZDJhODRjMTEx
ZDgwNWQwHhcNMjUwODIzMTAwMjM1WhcNMjUwODI0MTAwMjM1WjAzMTEwLwYDVQQD
EyhiYTI4MmFkZTQ4MjkzNTFjM2IwNThjMzg1NTRlNzVhYzgzMjg0MTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JbxRJv04WMlxiMn/k9ZjOJTOUD8
eMA3yIZKdw4ZfWIh9pQXmWJmWQheKChpe5A87rGNuBPxhQOqSgtAIeoLDFEE2AmM
AAKEhj44tbWGyu4w7w+3RwUAXhuzvduwdjk39vZbk1WitN8/aUtDI9ch22SDZeKM
Cvueo+PtvGLNPPDhXj2gARYvEDeyfxe/zX84i9Ev7AG44u5WAnX41INGlCqjcOV/
EUJd5fx9g40x2nYto9der1xSVt6ImbDYbKiW7MWiwWhITOKd0CG1zm2AQ3uGKYHV
wQuFinFcbfzUtHdIJQK+aetSvSd4yQnQsWhC+iYNjDNa5BAYgZV9jJrpNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLooKt5IKTUcOwWMOFVOdayDKEFsMB8GA1UdIwQY
MBaAFHxyL4WzHnZdj3e2krXSqEwRHYBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkhJdmhiTWVkbDJQZDdhU3RkS29UQkVkZ0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81NjYyNDYtY2EyYS00MTFiLWFhZjIt
YzY4MjE4NGQ3MDRkLzEvZkhJdmhiTWVkbDJQZDdhU3RkS29UQkVkZ0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi81NjYyNDYtY2EyYS00MTFiLWFhZjItYzY4MjE4NGQ3MDRk
LzEvZkhJdmhiTWVkbDJQZDdhU3RkS29UQkVkZ0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvqnA11sx
ObraEIEHvtZf7F6cQh8oPPDS9/8kEbO8xCXMAUv78vxbMBqzb2peeKUOpG4Cf5Eb
JLxfkVqYpcf2XLy8PxCl0Mg2ql8s1NVA7P7NL3e+twLhRrchHw1AApFIe9yVZ4Li
xaBgyHJGF2jVoKC1yjIsHG+9jvM5ax4iOoZWnp3AzDSForTmB9DYqEOOnL7LOBYI
EzF3Y2X/8BjHWHRP++jK+kFCvIano1LsUt48vCxLSOJYTo5TTxO2+VT33uLKFl3T
wn/GpiJ79LTsx+23eIO+GNztsBnLogtqnWtxzPhCHofsT7+E5XAwasE1tIzYqQBy
mqfjVhpOpASnAg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:03:56 2025 by rpki-client