Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
File: H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft (raw, json)
Hash identifier: Qo7d5YLMm5CSQ4P7g2+7HxeTVJU8/J/a3+o7H46EC5g=
Subject key identifier: 13:45:5F:D0:FC:E9:90:F8:47:A2:67:C2:1A:F1:A4:80:18:F7:CE:FB
Authority key identifier: 1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
Certificate issuer: /CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Certificate serial: 0198D515E2D19FE7D734A44BDBC6AF4EABC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
Manifest number: 0A63
Signing time: Sat 23 Aug 2025 04:00:37 +0000
Manifest this update: Sat 23 Aug 2025 04:00:37 +0000
Manifest next update: Sun 24 Aug 2025 04:00:37 +0000
Files and hashes: 1: H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl (hash: WBw0Rxn1Om3zvR3UTY5jcFGfcY9+qwypjgDeY4dLGfg=)
2: iHSrTbxet8j5uaWQ6yDr02jRxjY.roa (hash: oCfYmcjvyzUP7DhCDsHSSh72gSgXxnVFLGRLc0v5Xfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e2:d1:9f:e7:d7:34:a4:4b:db:c6:af:4e:ab:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Validity
Not Before: Aug 23 04:00:37 2025 GMT
Not After : Aug 24 04:00:37 2025 GMT
Subject: CN=13455fd0fce990f847a267c21af1a48018f7cefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:36:94:d4:a8:05:5b:00:81:84:43:0a:20:
b3:3f:4e:9d:16:09:bf:d1:8d:51:90:81:e6:e1:9c:
92:42:8e:05:e9:16:4b:92:22:42:6a:74:7c:be:5a:
70:f6:44:89:37:32:d9:bd:7f:57:4e:9f:f7:43:bb:
1f:45:5b:d2:54:cf:36:ad:77:c9:3d:6a:3b:e1:26:
ef:33:cb:e8:5f:1d:62:d8:d2:40:72:6e:63:57:1c:
28:e3:33:ef:9d:7b:10:8e:f7:90:ea:54:46:5b:7b:
b5:55:eb:0f:6e:72:d0:17:ad:00:45:32:55:3c:50:
56:69:98:90:6f:7e:73:75:d8:02:e8:ef:aa:b2:79:
25:78:e5:71:a6:15:46:a8:22:b6:53:1f:db:09:c9:
d1:89:56:e7:38:78:4f:36:6e:cb:51:97:f3:84:65:
6e:1e:7d:5c:08:d8:69:ed:c5:94:02:2c:4e:89:f6:
11:f6:a9:56:cf:67:09:43:95:6a:c1:25:c5:90:8c:
dd:cc:c1:31:ac:0e:9c:c5:f0:ed:1f:43:e4:b9:c2:
d7:2a:38:e9:f0:90:a5:4e:25:3f:43:69:11:24:04:
0d:c0:7c:a3:8e:b9:db:e5:56:d2:e2:bf:97:1a:d1:
b1:c9:cb:2f:0a:c1:07:3d:76:5d:b1:61:ec:bd:ff:
d8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:45:5F:D0:FC:E9:90:F8:47:A2:67:C2:1A:F1:A4:80:18:F7:CE:FB
X509v3 Authority Key Identifier:
keyid:1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b0:c0:7b:2a:51:af:20:61:16:10:f9:26:db:c6:3e:9c:85:
9b:a0:b2:a7:c0:5c:98:d3:d1:33:9a:f2:4e:0d:66:25:ee:19:
38:d0:cc:84:60:8c:a6:ba:43:64:91:a6:23:e7:ac:b2:b4:d4:
8a:6e:c6:10:5b:80:07:e2:a1:b9:6d:f1:4e:d2:4f:76:f4:f5:
b0:f0:32:eb:7b:97:5f:b9:69:bd:3d:fd:86:7c:56:ea:a0:67:
eb:9a:a0:27:1a:29:26:f2:d2:b6:ad:5d:ab:d7:45:d7:04:ba:
5b:aa:57:36:8b:f3:59:e0:80:00:66:a2:fb:19:59:52:3b:ce:
6a:e0:89:fd:31:56:08:09:cc:3c:9e:fc:cd:9d:24:c6:b6:df:
d0:40:ab:d1:d0:58:ea:aa:df:43:c4:c0:9f:cf:07:95:7c:68:
09:d9:74:b7:3a:1b:7b:3f:a2:5f:ef:9e:56:3b:fc:bd:7a:7c:
5b:08:e2:6a:de:24:60:7e:dd:b3:b0:8e:f2:36:a3:04:e7:1c:
da:2a:af:c1:5e:f9:76:aa:74:02:f1:27:95:96:0f:14:b9:f1:
ee:79:5e:da:14:a8:9c:03:16:fa:a7:f7:2f:3c:30:e0:46:97:
d3:35:47:e0:cd:7c:7f:f1:d1:21:7b:b4:a8:be:38:8a:2b:68:
3a:8c:3a:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFeLRn+fXNKRL28avTqvJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNzE0MmI0NWI1Y2UzOTAxNmUyNWUwOWIyZmVkNTc5YTli
ZDc3ZDYwHhcNMjUwODIzMDQwMDM3WhcNMjUwODI0MDQwMDM3WjAzMTEwLwYDVQQD
EygxMzQ1NWZkMGZjZTk5MGY4NDdhMjY3YzIxYWYxYTQ4MDE4ZjdjZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAM2lNSoBVsAgYRDCiCzP06dFgm/
0Y1RkIHm4ZySQo4F6RZLkiJCanR8vlpw9kSJNzLZvX9XTp/3Q7sfRVvSVM82rXfJ
PWo74SbvM8voXx1i2NJAcm5jVxwo4zPvnXsQjveQ6lRGW3u1VesPbnLQF60ARTJV
PFBWaZiQb35zddgC6O+qsnkleOVxphVGqCK2Ux/bCcnRiVbnOHhPNm7LUZfzhGVu
Hn1cCNhp7cWUAixOifYR9qlWz2cJQ5VqwSXFkIzdzMExrA6cxfDtH0PkucLXKjjp
8JClTiU/Q2kRJAQNwHyjjrnb5VbS4r+XGtGxycsvCsEHPXZdsWHsvf/Y5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNFX9D86ZD4R6JnwhrxpIAY9877MB8GA1UdIwQY
MBaAFB9xQrRbXOOQFuJeCbL+1XmpvXfWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDNGQ3RGdGM0NUFXNGw0SnN2N1ZlYW05ZDlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZmVhZDctNTg2YS00YjM1LWIxOTkt
ZGZlNDVmNjcyZjgxLzEvSDNGQ3RGdGM0NUFXNGw0SnN2N1ZlYW05ZDlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kZmVhZDctNTg2YS00YjM1LWIxOTktZGZlNDVmNjcyZjgx
LzEvSDNGQ3RGdGM0NUFXNGw0SnN2N1ZlYW05ZDlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLDAeypR
ryBhFhD5JtvGPpyFm6Cyp8BcmNPRM5ryTg1mJe4ZONDMhGCMprpDZJGmI+essrTU
im7GEFuAB+KhuW3xTtJPdvT1sPAy63uXX7lpvT39hnxW6qBn65qgJxopJvLStq1d
q9dF1wS6W6pXNovzWeCAAGai+xlZUjvOauCJ/TFWCAnMPJ78zZ0kxrbf0ECr0dBY
6qrfQ8TAn88HlXxoCdl0tzobez+iX++eVjv8vXp8Wwjiat4kYH7ds7CO8jajBOcc
2iqvwV75dqp0AvEnlZYPFLnx7nle2hSonAMW+qf3Lzww4EaX0zVH4M18f/HRIXu0
qL44iitoOow6gw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:04 2025 by rpki-client