Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier: Pi+gmsPlAqP4+NZdJKbMHBRDFpyAd01oVe3KNb+eh7M=
Subject key identifier: 3A:46:6B:11:57:F0:12:3D:91:4D:FE:8A:9A:C9:4A:AA:F9:62:8F:74
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 01984A41226417821D45D1647CA2A25F9E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 05:00:39 +0000
Manifest this update: Sun 27 Jul 2025 05:00:39 +0000
Manifest next update: Mon 28 Jul 2025 05:00:39 +0000
Files and hashes: 1: DLMTOoacedomtvAfOo_wUgsg7ZM.roa (hash: CuMafo/kjG1kejlU1ti10/bQ5ADJP+5OLOjwOYxRNqo=)
2: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: M78ifEo9e55MRj0k00Y/gJwNJfZXGlnWzG5CXvXHPBY=)
3: KySbiR-MGliV0HnEusiYoVPq_Tw.roa (hash: Tom90ESsjuLbQCudFU+oOzUxWbGr9ZgqEwEe4qv+gmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:22:64:17:82:1d:45:d1:64:7c:a2:a2:5f:9e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: Jul 27 05:00:39 2025 GMT
Not After : Jul 28 05:00:39 2025 GMT
Subject: CN=3a466b1157f0123d914dfe8a9ac94aaaf9628f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:25:06:1d:5e:ea:5d:f5:2c:2c:3b:0a:5a:
4e:af:54:88:55:5e:a2:12:28:b6:ab:26:72:f3:0f:
cb:18:71:96:41:af:a3:23:b3:85:e1:6a:c7:8a:7a:
54:4f:80:c4:bf:b1:19:f6:96:8e:53:f2:ec:51:e7:
fa:99:3d:ae:ae:db:88:46:99:cb:b3:74:7a:9f:fa:
fb:9c:1b:79:66:e1:2b:f8:3f:7e:14:a4:37:37:f3:
ab:f4:c0:c5:ee:46:ab:cf:08:02:05:91:5c:a5:71:
79:b5:24:ea:c6:39:97:17:f2:22:05:52:76:93:65:
6f:83:5e:6c:fa:34:be:4c:2c:2b:26:6a:f2:20:db:
ae:e5:ad:01:de:52:a1:71:10:09:be:3b:ca:e4:da:
43:d7:e9:96:2a:06:c7:5a:d6:e6:bd:00:b4:38:ab:
b2:77:5a:95:3d:ab:71:08:be:ea:aa:37:fc:68:85:
c2:45:bb:a3:4a:4b:55:84:b5:67:65:c3:53:a0:aa:
db:42:53:3e:a3:2e:19:7b:43:a2:c6:87:4d:1b:91:
c4:3d:fd:8f:bc:48:65:3d:7b:d5:38:1c:e7:76:1e:
9f:07:7b:01:ea:b2:06:3e:d8:91:82:96:bf:1d:cf:
39:07:9a:63:08:ec:37:1b:6d:af:7a:9b:07:de:fa:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:46:6B:11:57:F0:12:3D:91:4D:FE:8A:9A:C9:4A:AA:F9:62:8F:74
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:45:b9:8c:75:3f:92:c9:82:17:fb:e1:90:83:68:4b:c6:fd:
71:02:10:02:69:b6:67:97:92:81:de:22:04:c8:f8:df:97:48:
71:37:2e:69:e2:18:90:c7:d9:b7:2b:6d:72:a0:bc:39:d4:25:
c5:c8:3a:b5:0d:c1:f6:ae:43:b6:c8:b7:a4:90:1b:86:7e:5e:
49:26:fc:c1:47:be:29:47:ad:3f:85:93:d2:89:8c:22:e2:08:
eb:40:48:c3:f1:81:81:fb:2c:0b:e8:79:5c:73:df:f3:48:9c:
f6:e9:0f:fc:d8:e3:fd:87:8c:d6:74:a6:25:a6:a8:85:bb:57:
e2:6e:59:b7:a1:96:46:37:79:11:84:d1:81:ad:bc:1f:0e:b2:
aa:9e:25:1c:c3:c2:18:d2:f2:34:7e:a4:c6:55:6c:03:3f:9c:
35:5c:31:ba:37:1b:f1:bc:a3:27:14:0d:aa:24:85:97:b1:3e:
1b:e2:ca:2d:3e:f4:3e:65:c6:59:0a:49:b5:6b:c9:da:e8:30:
fc:d3:6e:ec:56:02:b3:3e:c7:6a:6e:2b:ac:d9:4a:08:d2:9c:
72:38:89:ec:f9:26:95:10:02:2d:94:ff:53:32:79:33:e4:94:
7a:08:60:33:15:5d:db:41:72:61:e7:80:20:3e:a8:ec:89:54:
e0:25:e0:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQSJkF4IdRdFkfKKiX56XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZDVmZWY2OTJiNGMyZDIyYmRkMDMxZmFiZmE3MTEwYjdi
MzZlODEwHhcNMjUwNzI3MDUwMDM5WhcNMjUwNzI4MDUwMDM5WjAzMTEwLwYDVQQD
EygzYTQ2NmIxMTU3ZjAxMjNkOTE0ZGZlOGE5YWM5NGFhYWY5NjI4Zjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlQlBh1e6l31LCw7ClpOr1SIVV6i
Eii2qyZy8w/LGHGWQa+jI7OF4WrHinpUT4DEv7EZ9paOU/LsUef6mT2urtuIRpnL
s3R6n/r7nBt5ZuEr+D9+FKQ3N/Or9MDF7karzwgCBZFcpXF5tSTqxjmXF/IiBVJ2
k2Vvg15s+jS+TCwrJmryINuu5a0B3lKhcRAJvjvK5NpD1+mWKgbHWtbmvQC0OKuy
d1qVPatxCL7qqjf8aIXCRbujSktVhLVnZcNToKrbQlM+oy4Ze0OixodNG5HEPf2P
vEhlPXvVOBzndh6fB3sB6rIGPtiRgpa/Hc85B5pjCOw3G22vepsH3vpDSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpGaxFX8BI9kU3+iprJSqr5Yo90MB8GA1UdIwQY
MBaAFB/V/vaStMLSK90DH6v6cRC3s26BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80OGUxYWUtOTBlOC00ZTQyLWFmM2Qt
NTEwMWJlNWRkNjE1LzEvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80OGUxYWUtOTBlOC00ZTQyLWFmM2QtNTEwMWJlNWRkNjE1
LzEvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkW5jHU/
ksmCF/vhkINoS8b9cQIQAmm2Z5eSgd4iBMj435dIcTcuaeIYkMfZtyttcqC8OdQl
xcg6tQ3B9q5Dtsi3pJAbhn5eSSb8wUe+KUetP4WT0omMIuII60BIw/GBgfssC+h5
XHPf80ic9ukP/Njj/YeM1nSmJaaohbtX4m5Zt6GWRjd5EYTRga28Hw6yqp4lHMPC
GNLyNH6kxlVsAz+cNVwxujcb8byjJxQNqiSFl7E+G+LKLT70PmXGWQpJtWvJ2ugw
/NNu7FYCsz7Ham4rrNlKCNKccjiJ7PkmlRACLZT/UzJ5M+SUeghgMxVd20FyYeeA
ID6o7IlU4CXgCw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:26:22 2025 by rpki-client