
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: aVV0hZgj5navRWuiNzXtVmapjC67oJElv3gk36UC7fc=
Subject key identifier: B8:0D:9A:E3:65:AF:27:00:3C:B3:DC:D7:0C:C9:48:55:46:A8:6D:C0
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 0198D6610064A10A746D34218111EEF9AD9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 0351
Signing time: Sat 23 Aug 2025 10:02:18 +0000
Manifest this update: Sat 23 Aug 2025 10:02:18 +0000
Manifest next update: Sun 24 Aug 2025 10:02:18 +0000
Files and hashes: 1: 6Q2HcS2RcDd9Dr_MYHyibugbWc0.roa (hash: +al/CVwN5+E5qhE2z1hKzqr2S4yV6SQ/qbFlSTBTEk8=)
2: YJ38H1JUnUf4GaAI-4_L--wUJZI.roa (hash: GvPm+IdYGRMKJSr2LCsRHgR1/00CHHLsiEJ+iJ60p6s=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: yoeyOHLkQ5Y2ItFT1113j1Oy0hSgH2iIJLTFb4SIT6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:00:64:a1:0a:74:6d:34:21:81:11:ee:f9:ad:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Aug 23 10:02:18 2025 GMT
Not After : Aug 24 10:02:18 2025 GMT
Subject: CN=b80d9ae365af27003cb3dcd70cc9485546a86dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:b2:96:4c:31:8f:b9:c1:03:71:31:f3:42:
c8:ab:90:43:28:1f:28:f4:e6:31:14:91:50:0e:72:
0d:6d:d5:ff:00:78:8f:1b:9c:ec:f5:45:94:43:03:
f0:97:1c:49:48:04:1f:b0:8b:eb:81:98:de:55:9f:
7a:eb:4b:6d:59:2d:59:68:55:ad:ed:1d:44:ac:c9:
29:1b:1d:a3:90:6f:2b:d3:a2:96:e7:ed:2b:03:03:
aa:e7:75:75:7a:f5:1e:50:95:67:e5:88:89:24:80:
7c:2b:96:b1:35:88:ce:ff:53:b4:66:54:9d:82:b5:
c4:34:82:e3:7b:e0:3d:a8:85:28:25:9e:d1:fa:91:
d8:01:97:e7:3e:de:cd:0a:4b:04:26:f4:be:b0:30:
e4:9f:43:3c:e5:12:27:d5:f7:44:f1:f6:66:db:2e:
4a:23:ef:b6:35:01:e2:b4:9d:d8:d8:42:2b:62:18:
da:48:ac:ee:5f:93:25:36:4c:b3:be:ad:79:c0:7b:
00:a7:e8:09:17:0f:50:45:7e:6b:16:59:2a:b1:10:
56:f6:a2:da:00:42:f7:4c:3b:3b:40:ee:2c:93:6f:
9a:56:52:0e:e8:c6:9f:e1:fd:d6:eb:c9:07:55:2a:
ef:bf:7b:27:40:2e:8f:30:2e:03:11:05:0e:bd:5e:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0D:9A:E3:65:AF:27:00:3C:B3:DC:D7:0C:C9:48:55:46:A8:6D:C0
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:52:66:cb:d0:86:77:80:06:58:ec:71:7f:2f:33:5a:cb:c5:
00:80:d8:00:d4:26:27:3d:da:3d:b0:b2:fb:5d:27:57:9e:5b:
6e:ad:83:70:31:32:99:42:a0:a4:e2:88:3e:ac:fc:c4:39:55:
bf:c4:8d:cb:0b:2b:c4:01:84:53:fa:5c:b6:7b:2d:bd:c1:c0:
28:4a:54:03:3f:bc:e4:7e:2b:e9:fb:f6:33:b0:2a:d1:d0:a8:
ae:25:60:a3:7f:3a:8c:dc:2a:47:6b:04:c2:f5:73:62:60:c7:
35:a0:78:ed:c1:28:61:ce:4d:ae:95:f5:ef:28:bc:6d:64:72:
be:f6:d2:d0:84:8e:5e:f9:46:16:0d:f4:d5:9d:cd:1a:da:99:
e9:6a:78:00:35:34:8d:3a:b4:1e:d3:9e:9b:f4:c5:d5:2a:dd:
02:b1:10:ba:f7:43:dd:09:a8:e6:32:21:76:86:cb:1f:c4:7c:
c6:15:6b:60:d3:48:62:65:4c:b5:06:3a:7a:c2:78:b9:4d:5c:
4d:39:a5:3b:bb:05:c9:f9:77:5c:82:a9:b2:c0:2d:fb:c3:42:
a7:71:5f:94:cd:3e:28:cd:87:8b:5d:99:7a:d1:49:7c:4e:60:
51:47:11:a0:0d:8d:ff:04:05:21:ba:5b:b8:e5:d5:da:46:68:
2b:21:1e:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYQBkoQp0bTQhgRHu+a2aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWRlODczMmIxMDE3MTM4Zjg3MDMyYjcwZmEzYjdiODc3
NmVmNzEwHhcNMjUwODIzMTAwMjE4WhcNMjUwODI0MTAwMjE4WjAzMTEwLwYDVQQD
EyhiODBkOWFlMzY1YWYyNzAwM2NiM2RjZDcwY2M5NDg1NTQ2YTg2ZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFyylkwxj7nBA3Ex80LIq5BDKB8o
9OYxFJFQDnINbdX/AHiPG5zs9UWUQwPwlxxJSAQfsIvrgZjeVZ9660ttWS1ZaFWt
7R1ErMkpGx2jkG8r06KW5+0rAwOq53V1evUeUJVn5YiJJIB8K5axNYjO/1O0ZlSd
grXENILje+A9qIUoJZ7R+pHYAZfnPt7NCksEJvS+sDDkn0M85RIn1fdE8fZm2y5K
I++2NQHitJ3Y2EIrYhjaSKzuX5MlNkyzvq15wHsAp+gJFw9QRX5rFlkqsRBW9qLa
AEL3TDs7QO4sk2+aVlIO6Maf4f3W68kHVSrvv3snQC6PMC4DEQUOvV4sKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgNmuNlrycAPLPc1wzJSFVGqG3AMB8GA1UdIwQY
MBaAFIRd6HMrEBcTj4cDK3D6O3uHdu9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85YWZiMzMtZTBhYS00OTNiLWE0NmQt
YTg4NWZiNDBkOTBkLzEvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85YWZiMzMtZTBhYS00OTNiLWE0NmQtYTg4NWZiNDBkOTBk
LzEvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFJmy9CG
d4AGWOxxfy8zWsvFAIDYANQmJz3aPbCy+10nV55bbq2DcDEymUKgpOKIPqz8xDlV
v8SNywsrxAGEU/pctnstvcHAKEpUAz+85H4r6fv2M7Aq0dCoriVgo386jNwqR2sE
wvVzYmDHNaB47cEoYc5NrpX17yi8bWRyvvbS0ISOXvlGFg301Z3NGtqZ6Wp4ADU0
jTq0HtOem/TF1SrdArEQuvdD3Qmo5jIhdobLH8R8xhVrYNNIYmVMtQY6esJ4uU1c
TTmlO7sFyfl3XIKpssAt+8NCp3FflM0+KM2Hi12ZetFJfE5gUUcRoA2N/wQFIbpb
uOXV2kZoKyEeXA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:27 2025 by rpki-client