Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: +fbwzi6WNfKTEz8qb7IdjC5bMYqa0VyFi1/9pLKodf0=
Subject key identifier: 83:C7:B4:0B:A5:1D:93:2A:10:83:B2:C0:61:CD:7F:AB:ED:15:DB:06
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 01983804A874C52F2D309BE60638D296AEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 117D
Signing time: Wed 23 Jul 2025 16:01:25 +0000
Manifest this update: Wed 23 Jul 2025 16:01:25 +0000
Manifest next update: Thu 24 Jul 2025 16:01:25 +0000
Files and hashes: 1: N2KDrXsXfLoSK2ut42Tlf6Gqknk.roa (hash: o+7zLi+nAqreLIrK7jetd34lwzrF5To+yT8AikGoh0g=)
2: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: vDza98A530wnLDXyWeVALqspBZd6V6CKZmEmtmfxQL0=)
3: pBDB5dEoNoGI5z6b0bPqttsFG_4.roa (hash: 5Z8Z9vYKFLWRSaHZB0Lf5gl087k9mD/pQXqsfiZQPco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:04:a8:74:c5:2f:2d:30:9b:e6:06:38:d2:96:ae:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Jul 23 16:01:25 2025 GMT
Not After : Jul 24 16:01:25 2025 GMT
Subject: CN=83c7b40ba51d932a1083b2c061cd7fabed15db06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:7e:00:3d:ea:8d:69:a5:03:f5:1a:95:f4:
61:89:00:9a:cf:ff:d3:ef:9b:f1:e2:14:bb:ed:a1:
09:5c:d7:34:07:c2:11:45:aa:9a:75:64:68:16:e5:
4c:58:cd:6e:2b:a5:d2:4d:b4:28:98:5a:92:a4:01:
79:3d:6e:c1:5d:89:8a:2a:84:aa:ab:7c:f6:6d:d1:
e2:7a:92:b7:2b:53:23:14:64:4d:a2:ac:eb:a7:c0:
12:d2:1e:ca:48:26:b6:36:67:1e:0b:9e:5f:a3:c5:
6a:1c:60:15:85:a0:dc:bc:c1:ec:eb:92:fc:95:8c:
83:0f:54:07:c7:95:6e:6d:ed:6c:90:14:6e:40:d4:
4f:da:22:15:61:2e:02:f2:44:16:71:ba:2b:6a:92:
a4:c1:44:21:33:10:53:e4:1f:bc:62:a2:78:75:f2:
f8:d1:94:bc:a6:fd:e9:02:5c:7e:16:d5:5d:b0:b9:
40:97:f3:e1:78:bf:95:04:8a:f3:1d:dd:14:01:7e:
f7:ae:71:42:83:e3:ca:eb:e5:a3:0f:e7:07:db:d6:
61:c3:ac:1d:b1:cd:c5:db:ac:c3:c8:97:d4:47:a4:
dc:d4:86:ff:36:af:b6:22:97:26:10:e3:f1:c1:9f:
57:4c:13:fd:74:e8:e8:fb:b1:50:1f:4b:bf:22:82:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C7:B4:0B:A5:1D:93:2A:10:83:B2:C0:61:CD:7F:AB:ED:15:DB:06
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9f:84:ab:c7:60:08:6a:4f:aa:0b:9f:b9:ec:d4:97:c2:60:
d6:c6:80:ff:4d:b1:7d:62:ac:27:76:27:7c:83:d7:4c:f1:3a:
cd:ca:4d:3e:97:b1:f1:e5:f4:df:66:97:60:3f:d0:0f:e9:c6:
f0:f1:a9:d6:0c:64:cc:fd:f9:24:2f:c2:4f:21:23:83:f2:80:
b0:fc:b9:93:d1:45:c8:2a:bc:07:bf:57:07:23:54:1a:95:af:
3e:ad:a3:c9:51:a6:19:e1:82:3c:4d:89:12:68:9d:46:05:91:
6e:84:b7:da:22:9c:2a:94:af:59:3a:fb:6f:20:2a:11:66:74:
85:1c:fc:2c:cf:08:79:74:3e:1b:6c:03:80:20:34:85:e2:89:
fd:35:66:3f:5a:6a:06:33:29:31:bd:6a:c4:ad:2e:48:99:79:
5e:6d:c8:5e:7b:9c:5b:e1:67:38:37:cf:ec:bd:cc:7d:44:a1:
c0:e4:86:a9:e8:ee:9c:0f:16:52:5f:c5:5f:9e:ba:65:52:81:
a2:e2:da:24:88:e1:ea:56:64:3f:34:05:5a:65:0a:49:e6:50:
c4:4e:64:5d:55:29:16:0c:fe:30:35:c8:f8:5b:5a:34:d6:4c:
36:98:74:ab:b4:4e:56:a4:7a:ac:78:75:e1:1a:4f:ca:a9:df:
3f:f9:1c:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg4BKh0xS8tMJvmBjjSlq68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YWYyYzcxNjZiYjM0YTY5NmZkZTJmYmFjZWY0MDAxYjBh
OGU3ZTIwHhcNMjUwNzIzMTYwMTI1WhcNMjUwNzI0MTYwMTI1WjAzMTEwLwYDVQQD
Eyg4M2M3YjQwYmE1MWQ5MzJhMTA4M2IyYzA2MWNkN2ZhYmVkMTVkYjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9V+AD3qjWmlA/UalfRhiQCaz//T
75vx4hS77aEJXNc0B8IRRaqadWRoFuVMWM1uK6XSTbQomFqSpAF5PW7BXYmKKoSq
q3z2bdHiepK3K1MjFGRNoqzrp8AS0h7KSCa2NmceC55fo8VqHGAVhaDcvMHs65L8
lYyDD1QHx5Vube1skBRuQNRP2iIVYS4C8kQWcborapKkwUQhMxBT5B+8YqJ4dfL4
0ZS8pv3pAlx+FtVdsLlAl/PheL+VBIrzHd0UAX73rnFCg+PK6+WjD+cH29Zhw6wd
sc3F26zDyJfUR6Tc1Ib/Nq+2IpcmEOPxwZ9XTBP9dOjo+7FQH0u/IoLU6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPHtAulHZMqEIOywGHNf6vtFdsGMB8GA1UdIwQY
MBaAFIavLHFmuzSmlv3i+6zvQAGwqOfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEt
ZTRmNTg3MDQ4MDRlLzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEtZTRmNTg3MDQ4MDRl
LzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmp+Eq8dg
CGpPqgufuezUl8Jg1saA/02xfWKsJ3YnfIPXTPE6zcpNPpex8eX032aXYD/QD+nG
8PGp1gxkzP35JC/CTyEjg/KAsPy5k9FFyCq8B79XByNUGpWvPq2jyVGmGeGCPE2J
EmidRgWRboS32iKcKpSvWTr7byAqEWZ0hRz8LM8IeXQ+G2wDgCA0heKJ/TVmP1pq
BjMpMb1qxK0uSJl5Xm3IXnucW+FnODfP7L3MfUShwOSGqejunA8WUl/FX566ZVKB
ouLaJIjh6lZkPzQFWmUKSeZQxE5kXVUpFgz+MDXI+FtaNNZMNph0q7ROVqR6rHh1
4RpPyqnfP/kc/g==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:28:59 2025 by rpki-client