Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
File: rHpOXEMf9seeT1vRtGsF-fRBEM4.mft (raw, json)
Hash identifier: FEH/59fVz/GYzrBVYRAKhxMsEOLL8r64aO+EdXJQwm4=
Subject key identifier: 5F:0F:3E:0D:47:16:9E:04:75:8A:0F:98:CE:9D:94:EF:9E:FF:67:37
Authority key identifier: AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
Certificate issuer: /CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Certificate serial: 0198D8BD8A4BBA78A339935BCF4B95447642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
Manifest number: 0CE8
Signing time: Sat 23 Aug 2025 21:02:36 +0000
Manifest this update: Sat 23 Aug 2025 21:02:36 +0000
Manifest next update: Sun 24 Aug 2025 21:02:36 +0000
Files and hashes: 1: YFU0rK0Che90IboZIqxr-FhxEZs.roa (hash: +N2ECLyQEU3So4t+LKUIhIdvw7PoPWjMAcQERFvIBbI=)
2: rHpOXEMf9seeT1vRtGsF-fRBEM4.crl (hash: JH14q4fSfm6Htcrh+pQzyrreKbiYlnRm9Y0gTtuRqNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 21:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:8a:4b:ba:78:a3:39:93:5b:cf:4b:95:44:76:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Validity
Not Before: Aug 23 21:02:36 2025 GMT
Not After : Aug 24 21:02:36 2025 GMT
Subject: CN=5f0f3e0d47169e04758a0f98ce9d94ef9eff6737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:b4:c2:45:34:1f:c9:f2:7e:d7:8b:34:e0:
cb:29:a0:2e:80:60:bf:83:76:02:c7:a6:77:a0:e3:
90:59:82:16:4d:64:1b:76:4d:a6:59:d4:b8:33:98:
e8:65:e1:02:4f:ec:de:ad:c7:5e:71:36:94:fd:d7:
6e:ce:da:e9:0d:f8:1e:e3:fe:0b:00:04:0e:66:62:
b5:f1:f1:f3:a9:2c:19:c9:ca:7f:87:c6:90:6c:3c:
38:bb:81:97:b7:c1:65:8e:40:a0:df:8a:4e:c4:90:
48:a5:a2:a8:15:80:bb:da:8b:1b:12:22:97:cc:8e:
7e:12:ab:0a:54:40:ca:4f:2a:ae:a9:db:a4:5a:bb:
9b:d0:6c:d8:0f:33:db:7a:90:bf:61:67:ce:35:aa:
61:e8:60:1c:8f:69:0e:26:c6:7f:27:ee:06:72:34:
e3:7a:61:c6:3c:b9:da:ff:02:67:f4:5f:09:44:e0:
ee:da:81:c3:19:61:e7:e0:80:24:72:e0:87:36:fa:
56:4b:93:25:46:61:9a:d6:d9:c7:b4:9c:83:60:73:
6f:90:3c:7c:61:d6:b0:88:8c:77:92:b5:72:6d:72:
94:ea:d5:cc:66:b3:e3:62:03:8e:b4:bd:61:8a:4d:
7d:8c:e1:de:a3:0c:ac:9c:c3:95:20:30:40:a3:7f:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0F:3E:0D:47:16:9E:04:75:8A:0F:98:CE:9D:94:EF:9E:FF:67:37
X509v3 Authority Key Identifier:
keyid:AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fe:39:4f:b5:79:26:5c:b1:f7:12:a6:e0:ab:c1:2c:d0:85:
59:28:90:b1:83:ac:f5:40:5f:b0:ba:5c:d0:49:92:bb:88:ab:
9b:d6:ab:da:56:6d:c8:1a:e5:97:b2:bb:5b:a7:bd:85:a0:16:
f0:21:96:63:93:57:40:13:37:b0:55:a9:62:ed:16:a8:cf:b3:
9c:01:fc:ea:00:10:36:d9:17:1e:98:6f:3e:09:a8:7f:18:58:
7c:41:79:49:0d:8b:0c:50:02:c1:83:93:fe:d4:4e:8e:cc:e8:
9d:40:50:cd:ff:64:6a:a0:4b:ef:39:91:e7:90:a0:65:54:e7:
62:6d:20:f7:c3:65:dc:94:98:eb:5a:49:a2:e6:2e:02:ae:dd:
d0:be:df:ac:da:51:e2:ab:cb:f3:2f:79:2b:a8:5d:ca:13:35:
6a:bf:15:6b:ef:9b:2c:5f:90:70:72:d1:4c:83:06:cd:1a:cb:
8e:00:73:53:20:22:02:4f:54:00:df:a2:ba:73:dc:49:bb:13:
44:8a:6f:29:1a:96:bc:11:c1:d1:ec:2a:7f:28:9d:2d:81:34:
f1:64:2c:b8:85:32:a4:d8:bf:7d:47:48:12:29:5a:05:45:90:
6e:2c:96:04:7b:89:86:e7:f3:bf:fa:3a:b2:58:02:64:88:08:
45:f8:ff:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYvYpLunijOZNbz0uVRHZCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjN2E0ZTVjNDMxZmY2Yzc5ZTRmNWJkMWI0NmIwNWY5ZjQ0
MTEwY2UwHhcNMjUwODIzMjEwMjM2WhcNMjUwODI0MjEwMjM2WjAzMTEwLwYDVQQD
Eyg1ZjBmM2UwZDQ3MTY5ZTA0NzU4YTBmOThjZTlkOTRlZjllZmY2NzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28S0wkU0H8nyfteLNODLKaAugGC/
g3YCx6Z3oOOQWYIWTWQbdk2mWdS4M5joZeECT+zercdecTaU/dduztrpDfge4/4L
AAQOZmK18fHzqSwZycp/h8aQbDw4u4GXt8FljkCg34pOxJBIpaKoFYC72osbEiKX
zI5+EqsKVEDKTyquqdukWrub0GzYDzPbepC/YWfONaph6GAcj2kOJsZ/J+4GcjTj
emHGPLna/wJn9F8JRODu2oHDGWHn4IAkcuCHNvpWS5MlRmGa1tnHtJyDYHNvkDx8
YdawiIx3krVybXKU6tXMZrPjYgOOtL1hik19jOHeowysnMOVIDBAo3+YzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8PPg1HFp4EdYoPmM6dlO+e/2c3MB8GA1UdIwQY
MBaAFKx6TlxDH/bHnk9b0bRrBfn0QRDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckhwT1hFTWY5c2VlVDF2UnRHc0YtZlJCRU00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jODhkNTAtOTIzYi00ODUzLTkwOWMt
ZjRlZmQxNzdlOWQwLzEvckhwT1hFTWY5c2VlVDF2UnRHc0YtZlJCRU00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jODhkNTAtOTIzYi00ODUzLTkwOWMtZjRlZmQxNzdlOWQw
LzEvckhwT1hFTWY5c2VlVDF2UnRHc0YtZlJCRU00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/45T7V5
Jlyx9xKm4KvBLNCFWSiQsYOs9UBfsLpc0EmSu4irm9ar2lZtyBrll7K7W6e9haAW
8CGWY5NXQBM3sFWpYu0WqM+znAH86gAQNtkXHphvPgmofxhYfEF5SQ2LDFACwYOT
/tROjszonUBQzf9kaqBL7zmR55CgZVTnYm0g98Nl3JSY61pJouYuAq7d0L7frNpR
4qvL8y95K6hdyhM1ar8Va++bLF+QcHLRTIMGzRrLjgBzUyAiAk9UAN+iunPcSbsT
RIpvKRqWvBHB0ewqfyidLYE08WQsuIUypNi/fUdIEilaBUWQbiyWBHuJhufzv/o6
slgCZIgIRfj/tQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:23:11 2025 by rpki-client