Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
File: h30YEASPQ3IFBuTBgg9v4I_3ym4.mft (raw, json)
Hash identifier: 0WhtAzRrR//qFQB6QHOY+GirhGm3Hh5gMNGMbLuwOtw=
Subject key identifier: 7A:A7:28:58:21:04:16:64:DE:C0:4C:6D:66:C2:5E:39:40:2A:60:38
Authority key identifier: 87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
Certificate issuer: /CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
Certificate serial: 0198D473BDE280618D237A82945F4A006825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
Manifest number: 0BE3
Signing time: Sat 23 Aug 2025 01:03:31 +0000
Manifest this update: Sat 23 Aug 2025 01:03:31 +0000
Manifest next update: Sun 24 Aug 2025 01:03:31 +0000
Files and hashes: 1: BUF7f1UtiJtn_Bvl19qd2EwX0QQ.roa (hash: aqc2Xj2T1ZitA4dQvOlzNWa0gg3kBqNbkLQxtT41W0I=)
2: h30YEASPQ3IFBuTBgg9v4I_3ym4.crl (hash: B86It/HQr750UGVC2k/MiDztV2tcKvC1YeRDpKLEY2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:bd:e2:80:61:8d:23:7a:82:94:5f:4a:00:68:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
Validity
Not Before: Aug 23 01:03:31 2025 GMT
Not After : Aug 24 01:03:31 2025 GMT
Subject: CN=7aa7285821041664dec04c6d66c25e39402a6038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0b:5d:12:42:d3:c4:ab:15:ea:60:a1:84:06:
73:00:52:e0:02:78:ff:46:59:2c:c5:0b:e6:cc:e7:
1c:81:41:ba:01:78:e9:83:c0:4c:e2:55:b7:a5:f3:
4d:8a:87:d5:3e:b6:84:bf:2b:88:fd:2d:c2:bd:de:
93:e3:01:c1:c4:8d:e2:73:41:da:a8:32:0c:2b:21:
95:df:f5:1f:0f:4e:4d:ee:15:57:bb:04:b4:38:3a:
61:71:81:fb:04:c4:90:3a:7b:e3:68:ce:d4:94:12:
4c:56:f7:3b:ba:07:b9:52:2e:9b:40:e5:c2:ad:c9:
65:f3:c8:3e:cf:7e:0f:07:f7:d1:79:4a:22:ba:f1:
87:9a:9a:4b:cb:53:4f:d8:8d:b6:47:f5:4d:e5:2a:
8f:f6:f7:fa:e8:c4:07:5b:87:67:e8:ff:d2:95:9e:
9c:5e:f9:52:e5:41:17:de:93:bf:aa:3b:ab:75:5a:
a1:c0:ad:f0:d8:c5:0f:e7:45:6d:8c:23:d6:93:bb:
d1:0d:56:39:2f:10:3c:3b:0d:a0:3d:17:a5:20:eb:
01:de:22:ab:35:c9:ff:45:39:8a:a6:3c:6d:6d:19:
0f:18:b4:5a:fb:f8:18:49:5a:20:d8:a5:a3:c9:04:
12:1d:67:7a:22:fe:09:35:49:94:e6:a0:fa:10:53:
24:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A7:28:58:21:04:16:64:DE:C0:4C:6D:66:C2:5E:39:40:2A:60:38
X509v3 Authority Key Identifier:
keyid:87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:44:8c:f1:4d:2c:03:20:55:f6:50:2c:92:62:8d:73:76:1b:
0c:c8:25:85:0c:c0:ca:1b:b8:65:1a:93:a4:ea:4e:61:7c:ae:
d0:e4:0d:3e:a6:82:fc:20:1d:10:22:c4:7d:bc:48:c1:70:7c:
03:c7:68:2d:b4:ec:0e:8b:6a:75:e7:0a:d7:d5:a3:ad:16:ce:
37:95:29:ca:e6:70:58:e4:05:74:6c:75:a6:3b:bf:84:e8:3c:
67:5a:0a:7c:2b:ad:03:3c:f5:f2:c3:02:ee:c8:03:d2:08:08:
5b:13:31:81:f7:23:6b:08:76:b8:c7:9a:58:ab:3b:a8:6b:4b:
fd:30:0d:7e:76:18:6a:66:db:35:24:22:1a:48:8c:ae:ef:45:
ff:07:1f:c8:12:0d:1b:b2:ec:58:5c:1f:e9:aa:9a:e7:e4:cc:
21:db:b2:c5:c3:53:0b:90:a3:88:9e:5c:45:a2:78:65:66:47:
39:8a:71:00:89:d0:ff:0e:49:57:03:26:83:cd:4a:ea:95:7f:
db:f9:3a:55:54:b5:61:e9:5b:51:8f:f5:6c:48:1b:ed:45:d6:
0c:d6:bc:db:51:58:02:83:20:80:ea:ee:18:33:41:65:37:c5:
94:f5:93:96:df:a4:a7:7d:b3:d9:e9:f6:50:bb:5e:85:b6:b2:
43:74:ea:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc73igGGNI3qClF9KAGglMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3N2QxODEwMDQ4ZjQzNzIwNTA2ZTRjMTgyMGY2ZmUwOGZm
N2NhNmUwHhcNMjUwODIzMDEwMzMxWhcNMjUwODI0MDEwMzMxWjAzMTEwLwYDVQQD
Eyg3YWE3Mjg1ODIxMDQxNjY0ZGVjMDRjNmQ2NmMyNWUzOTQwMmE2MDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AtdEkLTxKsV6mChhAZzAFLgAnj/
RlksxQvmzOccgUG6AXjpg8BM4lW3pfNNiofVPraEvyuI/S3Cvd6T4wHBxI3ic0Ha
qDIMKyGV3/UfD05N7hVXuwS0ODphcYH7BMSQOnvjaM7UlBJMVvc7uge5Ui6bQOXC
rcll88g+z34PB/fReUoiuvGHmppLy1NP2I22R/VN5SqP9vf66MQHW4dn6P/SlZ6c
XvlS5UEX3pO/qjurdVqhwK3w2MUP50VtjCPWk7vRDVY5LxA8Ow2gPRelIOsB3iKr
Ncn/RTmKpjxtbRkPGLRa+/gYSVog2KWjyQQSHWd6Iv4JNUmU5qD6EFMkfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqnKFghBBZk3sBMbWbCXjlAKmA4MB8GA1UdIwQY
MBaAFId9GBAEj0NyBQbkwYIPb+CP98puMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDMwWUVBU1BRM0lGQnVUQmdnOXY0SV8zeW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kMzM3N2EtOGQzOC00MjM1LWFhNzMt
N2U4OWI3MjAxOTBkLzEvaDMwWUVBU1BRM0lGQnVUQmdnOXY0SV8zeW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9kMzM3N2EtOGQzOC00MjM1LWFhNzMtN2U4OWI3MjAxOTBk
LzEvaDMwWUVBU1BRM0lGQnVUQmdnOXY0SV8zeW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhESM8U0s
AyBV9lAskmKNc3YbDMglhQzAyhu4ZRqTpOpOYXyu0OQNPqaC/CAdECLEfbxIwXB8
A8doLbTsDotqdecK19WjrRbON5UpyuZwWOQFdGx1pju/hOg8Z1oKfCutAzz18sMC
7sgD0ggIWxMxgfcjawh2uMeaWKs7qGtL/TANfnYYambbNSQiGkiMru9F/wcfyBIN
G7LsWFwf6aqa5+TMIduyxcNTC5CjiJ5cRaJ4ZWZHOYpxAInQ/w5JVwMmg81K6pV/
2/k6VVS1YelbUY/1bEgb7UXWDNa821FYAoMggOruGDNBZTfFlPWTlt+kp32z2en2
ULtehbayQ3Tq0A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:18 2025 by rpki-client