Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
File: h5Q8uG46cDgTd4-reQ1l8NohYVo.mft (raw, json)
Hash identifier: ZX2VRidC4ScniLKq/gvjhrDwdxqJUTwXfwAE2HFtiM8=
Subject key identifier: 95:A7:D9:27:CA:7F:8B:25:B1:89:D8:92:FC:6C:2C:F1:45:36:9F:B8
Authority key identifier: 87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
Certificate issuer: /CN=87943cb86e3a703813778fab790d65f0da21615a
Certificate serial: 0198D4E0DDA764C2461E43A751FDBBE7D3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 03:02:43 +0000
Manifest this update: Sat 23 Aug 2025 03:02:43 +0000
Manifest next update: Sun 24 Aug 2025 03:02:43 +0000
Files and hashes: 1: UyiCJXS5zLJCJ-mb2r3uZMMtApg.roa (hash: 6+o4TOXaHYgYpVjpt7E7at5geUDl0m5s/WhQVOEUlU0=)
2: h5Q8uG46cDgTd4-reQ1l8NohYVo.crl (hash: BnH044P7T5vl94HoDe0a8P/Y92g8Bk3RU0U83YOB6MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:dd:a7:64:c2:46:1e:43:a7:51:fd:bb:e7:d3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87943cb86e3a703813778fab790d65f0da21615a
Validity
Not Before: Aug 23 03:02:43 2025 GMT
Not After : Aug 24 03:02:43 2025 GMT
Subject: CN=95a7d927ca7f8b25b189d892fc6c2cf145369fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:78:b8:48:bd:21:16:48:bd:43:e9:be:e2:
0a:a6:e6:4b:5e:c1:dd:8e:f0:08:16:69:30:37:45:
82:5f:eb:87:0b:b6:d7:59:01:6a:a7:9f:8d:a5:2e:
72:c6:e5:12:29:b4:31:d7:8f:8f:8c:84:2d:04:52:
88:10:0b:ef:fe:27:11:0e:35:1f:be:ca:c6:41:9c:
45:8b:01:b9:ac:01:41:fc:18:ef:7f:3c:3e:e0:f1:
3b:19:6a:e6:58:8e:a1:1b:75:34:a3:34:f5:4a:66:
b9:92:20:5a:77:77:d1:06:c2:59:a2:fb:df:ad:8b:
08:04:d4:01:ad:aa:61:45:95:90:68:c4:2e:54:48:
17:bb:cc:6c:45:44:ad:cf:f4:b9:8b:b9:ed:52:9f:
1f:17:fe:2a:84:ff:53:b4:ea:6e:9a:d2:cd:77:1a:
f4:04:bf:5b:ad:89:66:a8:1e:62:81:93:f8:35:b2:
27:3c:11:3a:b8:8d:9f:44:03:f4:24:6e:45:ec:45:
61:ef:c2:06:00:24:47:1e:67:77:2c:3c:ed:ff:64:
83:c7:7a:6f:56:e7:f3:bd:0e:bc:70:fc:92:da:92:
a3:4e:ec:3c:3f:44:d9:0f:fe:4d:4b:8f:b3:90:11:
7f:65:57:84:83:24:5b:4c:58:88:88:5f:2d:c5:0b:
1c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A7:D9:27:CA:7F:8B:25:B1:89:D8:92:FC:6C:2C:F1:45:36:9F:B8
X509v3 Authority Key Identifier:
keyid:87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:17:3f:33:90:39:da:ff:04:ec:c4:d5:a0:34:4c:7b:c3:5e:
11:0e:25:34:5f:a3:7c:07:ff:36:29:8e:b1:af:27:d5:db:fe:
1d:12:1f:9f:e2:e1:09:1c:dc:78:46:b9:99:0e:2e:6f:22:f9:
d7:f8:0f:61:89:e1:eb:5c:e4:39:d7:ae:3a:fa:91:a5:50:ff:
5b:af:ca:be:30:e2:56:f0:d3:e3:b7:ba:f1:72:b5:15:9d:5a:
1e:b6:ea:02:00:f2:17:80:e7:4f:8e:d3:98:aa:3d:5a:c4:e5:
57:f2:61:eb:b7:af:be:3a:b9:e8:45:d1:5b:a1:e2:c8:07:59:
8a:15:96:9c:35:ed:9d:5c:2c:10:0e:63:91:01:2b:cd:5f:05:
cc:40:dc:b9:b3:f7:f0:b2:68:23:04:64:3c:4f:bb:5c:d6:e7:
c8:34:4d:52:32:af:1f:db:2c:0a:c9:cb:01:02:1d:cf:62:8c:
11:6e:56:dc:ec:6d:56:8e:95:2e:b1:35:fe:a9:b1:47:cd:5b:
21:92:6b:a4:7f:bf:1f:ef:8e:6f:ef:4e:b1:1e:d4:5c:8f:65:
15:cc:dc:ec:bf:b6:47:cb:44:89:9a:8d:f0:4a:d9:b6:03:35:
c2:92:b9:00:6d:85:58:2b:b6:c4:a9:7f:b7:92:48:8a:a6:88:
01:b3:2e:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4N2nZMJGHkOnUf2759P3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OTQzY2I4NmUzYTcwMzgxMzc3OGZhYjc5MGQ2NWYwZGEy
MTYxNWEwHhcNMjUwODIzMDMwMjQzWhcNMjUwODI0MDMwMjQzWjAzMTEwLwYDVQQD
Eyg5NWE3ZDkyN2NhN2Y4YjI1YjE4OWQ4OTJmYzZjMmNmMTQ1MzY5ZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGN4uEi9IRZIvUPpvuIKpuZLXsHd
jvAIFmkwN0WCX+uHC7bXWQFqp5+NpS5yxuUSKbQx14+PjIQtBFKIEAvv/icRDjUf
vsrGQZxFiwG5rAFB/Bjvfzw+4PE7GWrmWI6hG3U0ozT1Sma5kiBad3fRBsJZovvf
rYsIBNQBraphRZWQaMQuVEgXu8xsRUStz/S5i7ntUp8fF/4qhP9TtOpumtLNdxr0
BL9brYlmqB5igZP4NbInPBE6uI2fRAP0JG5F7EVh78IGACRHHmd3LDzt/2SDx3pv
VufzvQ68cPyS2pKjTuw8P0TZD/5NS4+zkBF/ZVeEgyRbTFiIiF8txQscpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWn2SfKf4slsYnYkvxsLPFFNp+4MB8GA1UdIwQY
MBaAFIeUPLhuOnA4E3ePq3kNZfDaIWFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85NThmZWYtMGQ1NS00YzAwLWJlOGEt
Y2M1ODA1MjFkMDBmLzEvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85NThmZWYtMGQ1NS00YzAwLWJlOGEtY2M1ODA1MjFkMDBm
LzEvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxc/M5A5
2v8E7MTVoDRMe8NeEQ4lNF+jfAf/NimOsa8n1dv+HRIfn+LhCRzceEa5mQ4ubyL5
1/gPYYnh61zkOdeuOvqRpVD/W6/KvjDiVvDT47e68XK1FZ1aHrbqAgDyF4DnT47T
mKo9WsTlV/Jh67evvjq56EXRW6HiyAdZihWWnDXtnVwsEA5jkQErzV8FzEDcubP3
8LJoIwRkPE+7XNbnyDRNUjKvH9ssCsnLAQIdz2KMEW5W3OxtVo6VLrE1/qmxR81b
IZJrpH+/H++Ob+9OsR7UXI9lFczc7L+2R8tEiZqN8ErZtgM1wpK5AG2FWCu2xKl/
t5JIiqaIAbMuLQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:57 2025 by rpki-client