Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier: t3FQq8xGe7XSRhsuPJIBnj59ki3dv5f/o6uJnleJ+Pg=
Subject key identifier: 1B:BE:24:C4:9D:1D:C3:A0:15:68:1C:4C:F8:10:30:BD:59:53:50:48
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 0198D54DEF61BB109C8987C290BFC74A9E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number: 0F56
Signing time: Sat 23 Aug 2025 05:01:51 +0000
Manifest this update: Sat 23 Aug 2025 05:01:51 +0000
Manifest next update: Sun 24 Aug 2025 05:01:51 +0000
Files and hashes: 1: 1-TKHNCKbZE8g4XJcuPLU9wUNwXw.roa (hash: 4YE3N5IWvrJIb1gbK5UKUvbBqNqAEHWjC5reIu6mjb8=)
2: KPSPKR5CERt24RgHkaAIVOQ-_3Y.roa (hash: /B2g+d8SvUFH1wq4gYFhblNg4apBCw0hfFmzBcRbekw=)
3: bFD1sjNrlT8-Exv5RMapq_1KPJ0.roa (hash: dms0tmgxNyDbB9rboVPonFSAfotpbIdMya/cvQRCIY0=)
4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: U77r4WRDe0GtsqKaIu5YuDLYu/49fnhwstXcswxQGZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ef:61:bb:10:9c:89:87:c2:90:bf:c7:4a:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Aug 23 05:01:51 2025 GMT
Not After : Aug 24 05:01:51 2025 GMT
Subject: CN=1bbe24c49d1dc3a015681c4cf81030bd59535048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e9:b1:ba:c2:dd:7c:1d:f1:53:87:f7:f0:d7:
00:bd:13:de:ac:2f:00:d6:42:e1:ba:b9:91:de:c9:
fa:ab:e2:25:c4:b5:ef:f5:d7:b3:92:35:7b:f4:a7:
d7:be:7a:d6:a5:30:89:9d:fd:1d:db:02:34:ac:aa:
2f:c0:10:e5:a3:d4:bc:6d:72:ad:bd:3a:38:43:fa:
2c:a8:fb:ea:2f:98:a1:ec:08:6a:0b:fc:b4:4f:43:
5a:2f:37:a0:0d:ae:17:c9:68:8d:37:f9:69:11:7a:
6a:a6:9e:49:69:40:7a:10:61:0d:3d:0e:00:f7:2e:
35:b2:b6:8a:0b:3f:ac:8f:64:30:83:83:fc:f5:ab:
b7:98:98:72:9b:36:f6:a6:33:15:7c:fb:06:57:0f:
b0:a1:38:af:6c:e8:62:f9:fb:4a:c8:bb:28:b4:dd:
c5:99:78:b6:d5:0d:fc:eb:ec:0d:88:87:2c:bf:35:
26:50:32:3e:be:07:9b:be:f1:d8:cf:2b:0b:b7:89:
95:f8:ad:dc:4a:e1:cb:91:02:ba:c1:0e:0f:d6:5b:
b3:06:06:79:92:dd:5d:0f:ad:d7:21:03:c8:9f:cd:
2a:8b:1a:7e:f9:c2:60:0c:52:f6:f4:c7:c7:2e:01:
e9:cd:c9:4d:11:0b:54:d4:bb:3a:9b:c0:b1:e8:d0:
ca:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BE:24:C4:9D:1D:C3:A0:15:68:1C:4C:F8:10:30:BD:59:53:50:48
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:be:00:24:c5:40:00:85:28:d6:2d:9c:07:66:d4:07:41:5a:
20:6a:96:b0:e0:fb:89:04:18:78:34:1c:ad:5a:cf:e7:37:a1:
b5:c7:94:6e:9b:b6:86:2f:92:a4:28:d3:f0:48:d6:8a:ff:f3:
91:a0:af:fb:f6:d3:f8:2a:de:b4:8b:aa:d3:da:55:da:3f:73:
f1:00:6f:16:0e:d0:98:ca:81:3a:ea:00:22:91:a1:80:5b:62:
ff:77:ec:a3:72:d8:b3:88:21:79:73:5c:b5:32:62:ab:0d:1f:
0f:84:8e:62:b8:0b:46:e1:97:50:59:9f:84:c1:7e:f4:5d:a9:
c0:8f:09:f2:c8:86:8e:ed:2f:cb:8d:6f:6e:e8:be:31:48:29:
b0:00:88:64:57:36:4c:6d:ec:e8:34:e1:67:12:36:00:b3:cf:
71:4e:c1:5b:22:cb:1f:e2:19:5a:1e:f7:e7:38:e4:3d:59:89:
87:ee:f8:da:a7:42:1e:38:7a:0d:c5:98:c2:95:7f:78:28:bf:
97:d5:34:f4:88:62:ec:79:d2:01:16:43:e0:c6:cc:98:60:b4:
c5:09:2a:3d:a0:ea:54:52:ab:40:db:8e:59:5d:eb:ff:9a:f0:
fe:42:5d:fd:e9:70:b2:fd:0f:f5:3b:75:2f:10:f7:cb:44:87:
ab:95:48:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTe9huxCciYfCkL/HSp6AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2I3NDJhMDNiYzljODU1MDcyMTdhMjUyMDRkZmZmODJm
Y2NkZjkwHhcNMjUwODIzMDUwMTUxWhcNMjUwODI0MDUwMTUxWjAzMTEwLwYDVQQD
EygxYmJlMjRjNDlkMWRjM2EwMTU2ODFjNGNmODEwMzBiZDU5NTM1MDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOmxusLdfB3xU4f38NcAvRPerC8A
1kLhurmR3sn6q+IlxLXv9dezkjV79KfXvnrWpTCJnf0d2wI0rKovwBDlo9S8bXKt
vTo4Q/osqPvqL5ih7AhqC/y0T0NaLzegDa4XyWiNN/lpEXpqpp5JaUB6EGENPQ4A
9y41sraKCz+sj2Qwg4P89au3mJhymzb2pjMVfPsGVw+woTivbOhi+ftKyLsotN3F
mXi21Q386+wNiIcsvzUmUDI+vgebvvHYzysLt4mV+K3cSuHLkQK6wQ4P1luzBgZ5
kt1dD63XIQPIn80qixp++cJgDFL29MfHLgHpzclNEQtU1Ls6m8Cx6NDKfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBu+JMSdHcOgFWgcTPgQML1ZU1BIMB8GA1UdIwQY
MBaAFIbLdCoDvJyFUHIXolIE3/+C/M35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgt
MDVmMThmYzIxMmE3LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgtMDVmMThmYzIxMmE3
LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdr4AJMVA
AIUo1i2cB2bUB0FaIGqWsOD7iQQYeDQcrVrP5zehtceUbpu2hi+SpCjT8EjWiv/z
kaCv+/bT+CretIuq09pV2j9z8QBvFg7QmMqBOuoAIpGhgFti/3fso3LYs4gheXNc
tTJiqw0fD4SOYrgLRuGXUFmfhMF+9F2pwI8J8siGju0vy41vbui+MUgpsACIZFc2
TG3s6DThZxI2ALPPcU7BWyLLH+IZWh735zjkPVmJh+742qdCHjh6DcWYwpV/eCi/
l9U09Ihi7HnSARZD4MbMmGC0xQkqPaDqVFKrQNuOWV3r/5rw/kJd/elwsv0P9Tt1
LxD3y0SHq5VIrA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:13 2025 by rpki-client