Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
File: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft (raw, json)
Hash identifier: ScKsf5n0mUGXtyCbXOrJAx9Ssd8FU9sZ3B680JD88lA=
Subject key identifier: 3D:01:51:94:49:84:ED:E5:88:E7:48:ED:75:89:53:65:B3:EA:19:AC
Authority key identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
Certificate issuer: /CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Certificate serial: 0198D5F123C135E9272CC015AEEB7A0BB884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 08:00:06 +0000
Manifest this update: Sat 23 Aug 2025 08:00:06 +0000
Manifest next update: Sun 24 Aug 2025 08:00:06 +0000
Files and hashes: 1: SJWhB7kWgTlTbR2flWrmQ2wlKOY.roa (hash: p8++Hz/3lRer+jzGUuklhwrO6NIeyYEbaz4oXToL4+U=)
2: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl (hash: cUeYkfKsyWHZpnINB1VZu1of8fkbM1IFxVcVSrA0GDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:23:c1:35:e9:27:2c:c0:15:ae:eb:7a:0b:b8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Validity
Not Before: Aug 23 08:00:06 2025 GMT
Not After : Aug 24 08:00:06 2025 GMT
Subject: CN=3d0151944984ede588e748ed75895365b3ea19ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:1c:2c:f5:05:11:91:f9:32:75:c1:7f:c4:
2e:0b:07:56:fd:7d:1c:31:1d:1d:10:2c:9c:c7:0f:
66:ae:13:6d:d7:2e:b6:50:71:58:0b:bf:9f:8a:e5:
b4:29:e2:67:1f:b9:08:0d:f5:45:07:56:77:25:d5:
8e:ca:80:96:8c:89:32:67:2a:dc:2d:c6:2e:c7:76:
39:95:95:e8:ca:b2:39:39:15:b2:b8:be:93:6e:29:
ff:7d:40:4e:0e:e1:93:2f:10:13:f2:17:d0:db:14:
4f:de:8b:ed:63:11:77:dd:c4:e3:c1:0a:5a:68:94:
88:be:e5:fc:28:b3:cc:bc:55:c8:ac:54:3e:25:2c:
8c:75:76:13:d0:fa:e5:f4:af:66:c0:2a:27:27:65:
fd:b5:c7:ab:3f:99:9d:79:11:21:d9:ba:c4:44:55:
d9:20:e0:e6:32:22:63:fc:3e:e4:63:3a:e6:23:94:
39:6d:cf:17:6d:7a:c5:bc:b3:a6:d0:6c:b2:14:78:
f9:ad:9f:c0:4a:b5:b2:86:ed:52:8a:05:cb:0a:a4:
6b:5d:27:3b:c3:ec:b1:8c:72:2c:b1:48:fe:66:bb:
80:11:16:2b:f3:f7:5e:f7:35:c2:7c:38:73:5e:04:
a4:35:8e:b0:8e:b8:c0:b4:b5:4e:64:c8:9b:72:9b:
fc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:01:51:94:49:84:ED:E5:88:E7:48:ED:75:89:53:65:B3:EA:19:AC
X509v3 Authority Key Identifier:
keyid:85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ae:57:92:c2:95:c3:da:ac:15:d0:86:15:a3:0b:23:ab:0d:
a9:1a:62:99:79:7b:0e:9c:1a:fd:23:48:eb:cc:3a:ed:99:ad:
2f:50:85:68:06:97:55:0c:68:9f:0d:74:01:33:fa:4f:78:24:
b0:15:b1:19:f4:a6:ff:70:6d:6b:5d:54:1f:01:92:46:05:ce:
74:fa:58:4a:3a:dd:05:15:2c:e8:02:f5:a1:b2:aa:50:cc:ca:
07:db:88:dc:0b:0b:92:cb:02:40:d8:b8:ec:46:58:e4:32:75:
70:5b:2e:a0:98:20:8e:ca:84:40:ad:82:7b:63:e8:f1:24:26:
4f:db:82:25:4c:27:a2:66:84:e9:57:b0:3b:56:fd:4a:d5:84:
7e:0b:a1:24:09:ef:a3:0e:ae:b8:e7:f1:76:2e:4c:f2:df:87:
e4:9a:d3:2c:5c:f7:be:22:1d:96:f0:e8:31:4b:d7:19:cf:3a:
0c:44:08:f5:0a:a4:e7:76:cb:d9:fc:ef:a0:d0:1d:e8:a0:2c:
69:e8:33:41:56:aa:4f:5c:f2:8d:89:2c:8f:57:9e:f3:0b:82:
83:92:39:5c:3d:85:50:19:0a:ca:5e:fe:07:8c:ba:c7:1a:67:
0c:72:6a:2c:e6:ae:8a:7d:30:68:ee:6f:04:9e:f9:01:b6:62:
94:57:cd:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8SPBNeknLMAVrut6C7iEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OTE2YmU3ZTYzY2ZkOGM4Yjc3YzA1ODhkMTI2OTRmMTZi
MTRjZGEwHhcNMjUwODIzMDgwMDA2WhcNMjUwODI0MDgwMDA2WjAzMTEwLwYDVQQD
EygzZDAxNTE5NDQ5ODRlZGU1ODhlNzQ4ZWQ3NTg5NTM2NWIzZWExOWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutMcLPUFEZH5MnXBf8QuCwdW/X0c
MR0dECycxw9mrhNt1y62UHFYC7+fiuW0KeJnH7kIDfVFB1Z3JdWOyoCWjIkyZyrc
LcYux3Y5lZXoyrI5ORWyuL6Tbin/fUBODuGTLxAT8hfQ2xRP3ovtYxF33cTjwQpa
aJSIvuX8KLPMvFXIrFQ+JSyMdXYT0Prl9K9mwConJ2X9tcerP5mdeREh2brERFXZ
IODmMiJj/D7kYzrmI5Q5bc8XbXrFvLOm0GyyFHj5rZ/ASrWyhu1SigXLCqRrXSc7
w+yxjHIssUj+ZruAERYr8/de9zXCfDhzXgSkNY6wjrjAtLVOZMibcpv8hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0BUZRJhO3liOdI7XWJU2Wz6hmsMB8GA1UdIwQY
MBaAFIWRa+fmPP2Mi3fAWI0SaU8WsUzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81N2ZiMTQtZDcwNS00MDU1LTgwNDUt
YmNhMjM0ODI5ZjQ4LzEvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81N2ZiMTQtZDcwNS00MDU1LTgwNDUtYmNhMjM0ODI5ZjQ4
LzEvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJq5XksKV
w9qsFdCGFaMLI6sNqRpimXl7Dpwa/SNI68w67ZmtL1CFaAaXVQxonw10ATP6T3gk
sBWxGfSm/3Bta11UHwGSRgXOdPpYSjrdBRUs6AL1obKqUMzKB9uI3AsLkssCQNi4
7EZY5DJ1cFsuoJggjsqEQK2Ce2Po8SQmT9uCJUwnomaE6VewO1b9StWEfguhJAnv
ow6uuOfxdi5M8t+H5JrTLFz3viIdlvDoMUvXGc86DEQI9Qqk53bL2fzvoNAd6KAs
aegzQVaqT1zyjYksj1ee8wuCg5I5XD2FUBkKyl7+B4y6xxpnDHJqLOauin0waO5v
BJ75AbZilFfNgw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:26 2025 by rpki-client