Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
File: h497ckDFitfp7vUFdPYIjpuQsC0.mft (raw, json)
Hash identifier: XOd+c4WViQUHk4Qngkf8A+VbljbLmDuW2mqEJ9TBb9Q=
Subject key identifier: FA:8A:4F:45:BF:89:A0:99:37:F9:1F:61:E5:53:C2:3C:DB:9C:AB:77
Authority key identifier: 87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
Certificate issuer: /CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Certificate serial: 0198D5F18376A36434409E075980F862EF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 08:00:31 +0000
Manifest this update: Sat 23 Aug 2025 08:00:31 +0000
Manifest next update: Sun 24 Aug 2025 08:00:31 +0000
Files and hashes: 1: 6mTYkUzvhb-Htm6lfZWXyJFAe3g.roa (hash: wl2jbKj60gngwVW2ZgUBMEJL1S5Obo/uhCmKyt9SPvM=)
2: h497ckDFitfp7vUFdPYIjpuQsC0.crl (hash: gh/RsN1LYC+9ENog8kWFCruPyYrwBky5FJcHrrkFEWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:83:76:a3:64:34:40:9e:07:59:80:f8:62:ef:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Validity
Not Before: Aug 23 08:00:31 2025 GMT
Not After : Aug 24 08:00:31 2025 GMT
Subject: CN=fa8a4f45bf89a09937f91f61e553c23cdb9cab77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:7a:92:a0:de:18:4e:b4:2d:d4:15:eb:0d:
3c:db:30:f9:6c:de:71:eb:a3:5e:f9:1e:42:1b:61:
2e:8c:c5:06:46:f7:59:2f:fc:72:9d:fd:e2:d7:74:
24:e4:38:ff:8e:f2:f7:43:a1:f4:0d:8f:34:9e:cd:
45:8b:5c:7f:c9:92:46:66:4e:34:e1:7d:20:68:be:
06:0a:db:bf:4c:47:35:47:35:3d:11:22:a1:41:d1:
9b:4b:39:4d:e2:45:28:60:8a:6d:8d:01:01:2a:2f:
e7:30:54:2f:58:14:03:6e:1a:16:0f:2b:fc:25:a0:
31:4d:24:2b:8a:a3:c9:77:85:ce:f4:ec:89:0d:66:
dd:7d:b7:ca:6a:2b:a3:32:26:77:3c:5f:b9:2b:7b:
29:ce:59:c0:0f:35:aa:6d:a6:4f:2b:4b:4b:46:ba:
cf:a7:4c:a0:e0:e5:db:ec:6e:6d:6a:35:64:df:15:
94:d0:a5:bd:06:be:a9:05:00:74:c4:a0:2a:0f:80:
62:62:d4:bf:bd:85:a0:a0:a3:28:b7:b8:72:26:29:
84:a6:df:c2:59:9f:9a:36:bb:21:15:b7:c8:46:78:
d8:79:28:53:3b:22:05:68:c7:5a:f9:10:eb:dc:63:
51:42:dc:cd:a1:98:c5:23:91:09:b5:9c:fa:1e:7f:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8A:4F:45:BF:89:A0:99:37:F9:1F:61:E5:53:C2:3C:DB:9C:AB:77
X509v3 Authority Key Identifier:
keyid:87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8e:ed:68:02:82:f5:b1:5c:6f:cb:6f:f0:a0:95:b1:a4:a8:
1e:37:6e:db:7b:b2:85:3e:b1:2c:fe:98:89:6c:0e:27:91:35:
0d:c1:40:93:fc:c5:aa:88:0b:dd:3f:65:3e:01:29:50:84:ef:
8b:31:1a:77:15:14:c4:4d:29:e7:b5:b3:97:bd:c7:5c:ad:d2:
f1:3a:1f:51:1d:e9:7a:82:6d:20:d5:16:b0:16:79:b8:b0:77:
d5:5c:1a:f2:2b:b0:da:e3:a0:21:47:a2:a8:4c:bd:4b:9a:46:
36:f5:3c:f0:bc:eb:18:86:f2:e0:f9:05:f2:1c:dd:a0:57:c9:
ed:16:29:44:fc:cc:08:1d:70:fe:c6:8a:a4:d2:ca:4d:c3:09:
94:9d:97:6e:1a:6e:aa:17:70:4a:2b:18:81:90:de:28:00:8f:
9c:d3:c2:20:ef:82:7f:a1:cb:89:0c:d1:ea:2a:41:82:84:5c:
86:05:c4:80:23:dc:fd:18:8f:20:ed:b8:ed:3a:2f:1c:e6:8a:
69:3f:af:46:13:8b:13:e7:97:ba:fa:63:fc:75:33:a8:73:2d:
92:62:4d:77:94:52:19:8a:e2:e6:14:05:52:f7:16:f3:59:ae:
42:b6:d8:f8:44:db:50:7c:2b:72:bc:e2:e7:ea:ab:33:56:0f:
c9:41:4d:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8YN2o2Q0QJ4HWYD4Yu89MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OGY3YjcyNDBjNThhZDdlOWVlZjUwNTc0ZjYwODhlOWI5
MGIwMmQwHhcNMjUwODIzMDgwMDMxWhcNMjUwODI0MDgwMDMxWjAzMTEwLwYDVQQD
EyhmYThhNGY0NWJmODlhMDk5MzdmOTFmNjFlNTUzYzIzY2RiOWNhYjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF56kqDeGE60LdQV6w082zD5bN5x
66Ne+R5CG2EujMUGRvdZL/xynf3i13Qk5Dj/jvL3Q6H0DY80ns1Fi1x/yZJGZk40
4X0gaL4GCtu/TEc1RzU9ESKhQdGbSzlN4kUoYIptjQEBKi/nMFQvWBQDbhoWDyv8
JaAxTSQriqPJd4XO9OyJDWbdfbfKaiujMiZ3PF+5K3spzlnADzWqbaZPK0tLRrrP
p0yg4OXb7G5tajVk3xWU0KW9Br6pBQB0xKAqD4BiYtS/vYWgoKMot7hyJimEpt/C
WZ+aNrshFbfIRnjYeShTOyIFaMda+RDr3GNRQtzNoZjFI5EJtZz6Hn+a0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqKT0W/iaCZN/kfYeVTwjzbnKt3MB8GA1UdIwQY
MBaAFIePe3JAxYrX6e71BXT2CI6bkLAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDQ5N2NrREZpdGZwN3ZVRmRQWUlqcHVRc0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mYzE1OWUtOGQ1Ni00YzNhLWFlNDIt
MGNiZGQ5NWExNmRkLzEvaDQ5N2NrREZpdGZwN3ZVRmRQWUlqcHVRc0MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mYzE1OWUtOGQ1Ni00YzNhLWFlNDItMGNiZGQ5NWExNmRk
LzEvaDQ5N2NrREZpdGZwN3ZVRmRQWUlqcHVRc0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbo7taAKC
9bFcb8tv8KCVsaSoHjdu23uyhT6xLP6YiWwOJ5E1DcFAk/zFqogL3T9lPgEpUITv
izEadxUUxE0p57Wzl73HXK3S8TofUR3peoJtINUWsBZ5uLB31Vwa8iuw2uOgIUei
qEy9S5pGNvU88LzrGIby4PkF8hzdoFfJ7RYpRPzMCB1w/saKpNLKTcMJlJ2Xbhpu
qhdwSisYgZDeKACPnNPCIO+Cf6HLiQzR6ipBgoRchgXEgCPc/RiPIO247TovHOaK
aT+vRhOLE+eXuvpj/HUzqHMtkmJNd5RSGYri5hQFUvcW81muQrbY+ETbUHwrcrzi
5+qrM1YPyUFNaw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:49 2025 by rpki-client