Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier: 45eSNIZ6ATUTAkCWCYcm/u12Ej0AzGKUwrmw3GVOX2E=
Subject key identifier: 8D:6A:B7:24:29:EF:94:E1:24:DF:05:33:F2:B4:2E:5B:48:E3:5D:E2
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 0198D54E8A26DD94C878D0033AD3FCA81F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 05:02:30 +0000
Manifest this update: Sat 23 Aug 2025 05:02:30 +0000
Manifest next update: Sun 24 Aug 2025 05:02:30 +0000
Files and hashes: 1: DLMTOoacedomtvAfOo_wUgsg7ZM.roa (hash: CuMafo/kjG1kejlU1ti10/bQ5ADJP+5OLOjwOYxRNqo=)
2: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: p78OUxV14txvWOZCd/i9cRYdgi0Ap6WLr/sMTIYekvk=)
3: KySbiR-MGliV0HnEusiYoVPq_Tw.roa (hash: Tom90ESsjuLbQCudFU+oOzUxWbGr9ZgqEwEe4qv+gmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8a:26:dd:94:c8:78:d0:03:3a:d3:fc:a8:1f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: Aug 23 05:02:30 2025 GMT
Not After : Aug 24 05:02:30 2025 GMT
Subject: CN=8d6ab72429ef94e124df0533f2b42e5b48e35de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:7c:5c:9c:52:88:c1:4f:60:c3:be:cf:d1:
6f:10:c2:73:22:13:3f:db:00:5c:97:07:d0:9e:2b:
39:bd:75:14:19:c6:f4:73:65:33:7a:8c:b4:4d:68:
5d:d3:5d:ea:17:da:2c:bd:fe:47:c6:8d:8e:5a:a6:
89:a6:db:11:93:0c:c1:ae:c0:ea:f9:06:4b:5f:2d:
49:a7:7c:43:75:46:3e:cd:7f:21:0a:3a:3c:a3:3f:
e4:fa:06:8e:ce:12:e8:bc:dc:08:ec:1b:d1:44:1e:
90:03:99:bb:a1:6f:dd:c9:04:a0:ad:ef:11:38:a4:
4b:f4:3e:68:35:05:3a:82:23:d0:77:54:6d:1b:87:
87:f1:c1:1a:50:f5:17:78:de:9d:44:4d:0e:78:8b:
d7:b9:d1:90:72:4c:f2:b0:91:05:4d:c1:bb:fe:04:
d2:7a:55:01:64:05:dc:73:ee:f3:16:d7:0a:be:19:
a9:76:58:f6:f5:4a:8c:a5:15:6c:d7:51:a1:0b:d4:
cc:41:b9:b0:8d:cb:4b:07:c5:7d:b0:fb:61:11:ad:
22:65:b5:d0:02:f8:52:13:0f:79:46:9f:f2:72:c5:
c1:d5:cd:ca:a8:f2:7c:d7:99:d8:67:91:a7:c4:bb:
0a:56:da:e9:b0:2b:05:28:ba:41:07:15:ef:ef:dc:
8c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6A:B7:24:29:EF:94:E1:24:DF:05:33:F2:B4:2E:5B:48:E3:5D:E2
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:32:88:6a:6a:55:69:63:fd:69:62:5b:f7:5a:9d:2a:f9:80:
49:73:5d:a8:28:ee:46:4d:87:c5:e7:37:37:cf:9a:90:f2:9e:
1f:f5:1f:e5:6d:4e:47:ce:c5:1f:42:fd:11:b3:c0:84:7a:a0:
f2:cf:cf:fc:65:32:a0:d5:1e:d8:66:96:6a:28:d8:ee:c6:59:
b7:53:4e:8a:a2:4a:c7:2d:61:c6:c5:ad:8f:76:4b:81:92:c8:
8c:75:4a:3e:6f:d4:d9:93:5a:02:8d:ae:a5:b7:0e:76:93:41:
8a:ef:68:f2:b4:a7:06:66:f4:c8:fd:d2:50:96:92:9a:5d:b8:
30:20:04:39:12:cc:f5:82:1e:95:4f:a8:3a:a1:30:68:5e:d8:
d5:d7:39:42:4b:18:a3:7f:72:29:90:c4:aa:94:9b:df:bb:e4:
25:66:40:03:e0:e3:15:ff:8d:3d:20:b4:79:10:00:f2:4a:14:
31:66:83:14:50:63:9c:9c:9b:82:a6:a5:d4:b8:fc:ec:94:0a:
a6:ac:31:04:0e:ae:ad:d2:9a:71:c2:4e:8b:80:b5:37:1c:44:
ac:20:a0:4d:fd:6b:6b:8b:73:9a:6a:e0:71:b8:6a:dc:64:c3:
b6:3c:05:5a:2b:6c:ea:eb:0a:b6:63:ec:34:16:7e:0f:55:af:
2b:eb:b3:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVToom3ZTIeNADOtP8qB9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZDVmZWY2OTJiNGMyZDIyYmRkMDMxZmFiZmE3MTEwYjdi
MzZlODEwHhcNMjUwODIzMDUwMjMwWhcNMjUwODI0MDUwMjMwWjAzMTEwLwYDVQQD
Eyg4ZDZhYjcyNDI5ZWY5NGUxMjRkZjA1MzNmMmI0MmU1YjQ4ZTM1ZGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPd8XJxSiMFPYMO+z9FvEMJzIhM/
2wBclwfQnis5vXUUGcb0c2Uzeoy0TWhd013qF9osvf5Hxo2OWqaJptsRkwzBrsDq
+QZLXy1Jp3xDdUY+zX8hCjo8oz/k+gaOzhLovNwI7BvRRB6QA5m7oW/dyQSgre8R
OKRL9D5oNQU6giPQd1RtG4eH8cEaUPUXeN6dRE0OeIvXudGQckzysJEFTcG7/gTS
elUBZAXcc+7zFtcKvhmpdlj29UqMpRVs11GhC9TMQbmwjctLB8V9sPthEa0iZbXQ
AvhSEw95Rp/ycsXB1c3KqPJ815nYZ5GnxLsKVtrpsCsFKLpBBxXv79yMHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1qtyQp75ThJN8FM/K0LltI413iMB8GA1UdIwQY
MBaAFB/V/vaStMLSK90DH6v6cRC3s26BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80OGUxYWUtOTBlOC00ZTQyLWFmM2Qt
NTEwMWJlNWRkNjE1LzEvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80OGUxYWUtOTBlOC00ZTQyLWFmM2QtNTEwMWJlNWRkNjE1
LzEvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjKIampV
aWP9aWJb91qdKvmASXNdqCjuRk2Hxec3N8+akPKeH/Uf5W1OR87FH0L9EbPAhHqg
8s/P/GUyoNUe2GaWaijY7sZZt1NOiqJKxy1hxsWtj3ZLgZLIjHVKPm/U2ZNaAo2u
pbcOdpNBiu9o8rSnBmb0yP3SUJaSml24MCAEORLM9YIelU+oOqEwaF7Y1dc5QksY
o39yKZDEqpSb37vkJWZAA+DjFf+NPSC0eRAA8koUMWaDFFBjnJybgqal1Lj87JQK
pqwxBA6urdKaccJOi4C1NxxErCCgTf1ra4tzmmrgcbhq3GTDtjwFWits6usKtmPs
NBZ+D1WvK+uziA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:22 2025 by rpki-client