Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
File: HJe0gj08nhIexkmCHgDwp5rrm40.mft (raw, json)
Hash identifier: M5gaPVlTI009s9zto3j7DfQJ05yCkIK558x7uFf9Ah4=
Subject key identifier: B0:FE:DA:C0:AF:CF:2A:77:EA:21:04:55:4F:68:24:85:47:87:D8:78
Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Certificate serial: 0198D7A8A8DD9565CCFDE5E0FD6E3E746A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 16:00:11 +0000
Manifest this update: Sat 23 Aug 2025 16:00:11 +0000
Manifest next update: Sun 24 Aug 2025 16:00:11 +0000
Files and hashes: 1: 8jvY6gdKf49fsHMa8JzUxLXy6Co.roa (hash: zq4v0B4wOz8tRoHJTPQ0OEhJqUOFXXY6z/cXiV3Bsic=)
2: HJe0gj08nhIexkmCHgDwp5rrm40.crl (hash: 7b1y5Y5hwDyuZjCeUpUhuU193syUh/6PJhQXWakvNwE=)
3: MKGyJdFY_R5aFNPzG6jh9qi5L8g.roa (hash: 4xTLRWvAhNdFnC4rR2yT1xCAEdrH5/3kjyyJfVcTeSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:a8:dd:95:65:cc:fd:e5:e0:fd:6e:3e:74:6a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Validity
Not Before: Aug 23 16:00:11 2025 GMT
Not After : Aug 24 16:00:11 2025 GMT
Subject: CN=b0fedac0afcf2a77ea2104554f6824854787d878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:91:2a:a0:3b:c3:03:99:35:e6:fb:96:a1:
7b:3e:3a:bc:3a:c0:be:4a:9f:14:31:b1:bf:39:a6:
32:e9:29:64:f5:31:d1:77:83:1b:59:ec:9f:b6:d4:
47:27:22:ef:90:64:65:b9:31:08:f6:dc:17:da:77:
64:0c:e8:4d:8c:5f:92:18:1c:8d:07:ce:a2:99:d5:
31:c7:e8:9a:e8:22:0f:53:8d:bd:22:7d:3d:d3:ce:
8e:be:4c:1f:fa:de:82:77:58:67:5f:0d:c9:d0:35:
ec:5c:87:64:c8:7f:b4:be:a9:f0:2e:28:e9:07:95:
9e:81:c4:9c:70:66:24:d2:d0:c4:3e:b0:7f:e7:40:
6c:8e:d0:fa:3a:7c:34:bb:82:fc:56:ce:c6:58:6d:
27:17:ed:9c:ac:1d:b8:ea:78:ea:8d:60:76:86:bb:
91:34:70:c6:3f:25:6d:db:87:f4:b9:ca:9e:78:d7:
22:4e:68:8f:2b:f9:71:88:62:2c:77:a4:fe:e2:b5:
e5:f5:3e:7d:eb:00:57:ea:01:77:7a:0e:87:67:91:
8f:70:5a:ec:80:30:4f:37:5b:41:88:e9:70:8a:e6:
10:49:5c:8d:7a:61:c9:32:1a:0b:07:01:b9:85:90:
e9:4f:58:90:30:6b:7a:85:dd:e2:69:81:1a:60:c2:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FE:DA:C0:AF:CF:2A:77:EA:21:04:55:4F:68:24:85:47:87:D8:78
X509v3 Authority Key Identifier:
keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:88:9f:c4:d8:67:63:c6:37:d7:19:ec:2e:67:93:b7:64:89:
a7:75:ca:21:e3:bf:c9:3d:3b:f0:fa:8e:24:11:15:d8:0d:01:
d2:f2:00:d1:8e:8c:d2:00:09:e5:ad:3f:f7:d0:16:4f:4e:f7:
40:00:e0:55:d2:19:c7:60:4b:78:a0:eb:4c:1a:e3:b9:7a:ee:
34:0a:90:09:31:4e:aa:8f:68:8e:f4:d9:fb:d2:03:1e:53:c5:
d7:99:a2:e7:b2:39:fe:70:b9:76:c2:fb:0e:4a:7e:6a:fa:ac:
25:33:8d:87:eb:fe:07:58:94:00:29:f5:e2:15:88:2c:27:43:
5c:49:08:50:5d:8e:cc:3b:83:cd:ea:d6:03:81:78:85:62:3c:
c0:53:14:6c:b8:e4:13:4e:08:89:b6:99:03:31:f1:4f:21:f8:
8e:7a:8c:9c:61:34:32:6a:9a:b6:20:11:a2:4c:62:02:93:17:
4e:6b:24:77:5b:00:1e:57:e6:4f:a7:5d:9c:5d:69:45:8f:fd:
c4:58:15:67:a1:02:08:04:31:de:d8:a8:ac:7d:ec:49:98:46:
39:6a:c3:6e:f2:d2:1d:70:b8:31:9f:18:30:2e:32:bf:a0:e8:
11:d9:72:2a:0a:76:ba:7e:84:df:9f:75:66:11:4b:99:46:72:
9c:7b:40:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqKjdlWXM/eXg/W4+dGo0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTdiNDgyM2QzYzllMTIxZWM2NDk4MjFlMDBmMGE3OWFl
YjliOGQwHhcNMjUwODIzMTYwMDExWhcNMjUwODI0MTYwMDExWjAzMTEwLwYDVQQD
EyhiMGZlZGFjMGFmY2YyYTc3ZWEyMTA0NTU0ZjY4MjQ4NTQ3ODdkODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1uRKqA7wwOZNeb7lqF7Pjq8OsC+
Sp8UMbG/OaYy6Slk9THRd4MbWeyfttRHJyLvkGRluTEI9twX2ndkDOhNjF+SGByN
B86imdUxx+ia6CIPU429In09086Ovkwf+t6Cd1hnXw3J0DXsXIdkyH+0vqnwLijp
B5WegcSccGYk0tDEPrB/50BsjtD6Onw0u4L8Vs7GWG0nF+2crB246njqjWB2hruR
NHDGPyVt24f0ucqeeNciTmiPK/lxiGIsd6T+4rXl9T596wBX6gF3eg6HZ5GPcFrs
gDBPN1tBiOlwiuYQSVyNemHJMhoLBwG5hZDpT1iQMGt6hd3iaYEaYMKOoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLD+2sCvzyp36iEEVU9oJIVHh9h4MB8GA1UdIwQY
MBaAFByXtII9PJ4SHsZJgh4A8Kea65uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTkt
OWI5Y2Q4OTY1OWUwLzEvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTktOWI5Y2Q4OTY1OWUw
LzEvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYifxNhn
Y8Y31xnsLmeTt2SJp3XKIeO/yT078PqOJBEV2A0B0vIA0Y6M0gAJ5a0/99AWT073
QADgVdIZx2BLeKDrTBrjuXruNAqQCTFOqo9ojvTZ+9IDHlPF15mi57I5/nC5dsL7
Dkp+avqsJTONh+v+B1iUACn14hWILCdDXEkIUF2OzDuDzerWA4F4hWI8wFMUbLjk
E04IibaZAzHxTyH4jnqMnGE0MmqatiARokxiApMXTmskd1sAHlfmT6ddnF1pRY/9
xFgVZ6ECCAQx3tiorH3sSZhGOWrDbvLSHXC4MZ8YMC4yv6DoEdlyKgp2un6E3591
ZhFLmUZynHtAoA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:37:26 2025 by rpki-client