Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: 0E/x/F+BnfvHS2kVuhc0bhAhAlD6MNCY1nJ2jLTXrM4=
Subject key identifier: 0A:55:73:A5:90:0E:B7:44:71:86:A5:9E:F8:B7:7A:AD:D5:6F:4A:E2
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 0199D1A484E25FFA10D951EAA880C689E54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 066E
Signing time: Sat 11 Oct 2025 05:00:44 +0000
Manifest this update: Sat 11 Oct 2025 05:00:44 +0000
Manifest next update: Sun 12 Oct 2025 05:00:44 +0000
Files and hashes: 1: 39yFNcs_aiMECPSY8yer3c7rqfs.roa (hash: kt8DxoHHJV7b65racNqYI0+ZGEt7nNXcd8uoIQ2X++s=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: UAuO38KK3Yio1mHeYyWJED4HekHwEyDPy+dW7naN+o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d1:a4:84:e2:5f:fa:10:d9:51:ea:a8:80:c6:89:e5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Oct 11 05:00:44 2025 GMT
Not After : Oct 12 05:00:44 2025 GMT
Subject: CN=0a5573a5900eb7447186a59ef8b77aadd56f4ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:f3:b0:cc:6b:e8:ac:1c:a8:12:11:31:9d:
c2:23:c8:b2:4b:7e:0e:3b:cf:c7:22:d2:6c:ec:07:
0e:6f:37:b2:c9:03:b8:69:6f:73:94:6e:e2:3c:40:
aa:15:4f:b3:a9:43:25:65:45:91:b9:3b:da:1a:fa:
b9:f1:ec:76:d0:af:38:4b:c0:06:5f:04:6d:1e:79:
c6:dd:e7:4c:b4:18:44:83:e4:c9:96:ff:0a:24:3b:
ad:44:e3:b7:77:66:77:40:98:e0:fb:3b:5d:69:c8:
4c:7e:5f:7a:0a:69:44:b2:ed:f8:0e:1a:59:55:d5:
61:8d:54:9c:90:08:18:37:db:21:e9:e9:d9:b2:21:
b6:28:f0:b0:29:77:f0:7f:17:32:06:a4:9f:c0:c5:
92:50:ae:75:57:ab:97:58:3f:01:09:39:4f:15:b5:
bc:33:d0:f4:6a:8c:7e:d8:ae:02:92:9f:de:f9:c9:
25:e4:8b:35:22:d0:b3:b7:2d:52:26:c3:4a:e5:f4:
d5:4d:28:b6:c3:17:c5:63:8d:c9:ec:b2:86:86:7b:
95:57:55:ff:c6:41:bb:27:63:ee:49:79:43:cd:16:
94:f8:4a:00:4c:73:b5:8f:a1:97:95:fd:3e:bd:20:
7f:58:9b:b0:fd:5b:d2:06:e0:e9:97:31:97:6d:0d:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:55:73:A5:90:0E:B7:44:71:86:A5:9E:F8:B7:7A:AD:D5:6F:4A:E2
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:77:da:eb:35:90:de:24:62:89:f3:94:50:a8:b0:a9:23:6f:
09:82:0f:98:43:c6:99:2f:9a:ad:00:af:f7:f6:72:2e:da:42:
57:99:b3:de:3d:ce:db:cc:83:72:ba:e8:99:ee:58:6e:4a:26:
5f:b5:36:af:77:43:6a:c8:dd:74:47:f2:fd:e5:fe:c7:3b:c1:
a9:b4:0b:45:3b:44:51:7c:af:a4:5d:c8:e7:97:12:e3:d3:42:
41:0f:05:8e:04:90:e5:b8:a3:d9:b0:38:9e:d1:02:ef:ce:83:
73:c6:92:c3:47:7d:48:5d:af:7a:a4:1b:38:7e:8a:bd:b0:6f:
83:b1:ed:70:57:3f:cd:ea:57:46:6a:cb:68:43:aa:06:14:3c:
08:92:11:28:52:c2:18:b0:34:2f:f3:a0:22:26:6f:ce:d5:5a:
43:cf:92:d4:66:c3:94:90:bc:42:65:8f:b9:1d:67:96:43:df:
9e:0b:c5:3a:1a:18:0f:79:5b:86:87:ed:40:5b:3e:e3:b4:51:
0d:c9:01:84:f1:ef:12:e1:5e:87:d8:cc:be:9f:52:9e:06:2a:
7c:09:bc:8e:33:1f:f6:e9:06:90:e9:30:52:86:91:dc:f7:45:
fd:3d:64:aa:52:df:22:6c:9b:a2:16:bf:e2:82:0b:d4:60:c1:
23:01:61:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnRpITiX/oQ2VHqqIDGieVLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNjdjZjFjYTJkZWEzMmZjZDk3MDJkZDI1MTBlYjZiZjJi
Njg2MTAwHhcNMjUxMDExMDUwMDQ0WhcNMjUxMDEyMDUwMDQ0WjAzMTEwLwYDVQQD
EygwYTU1NzNhNTkwMGViNzQ0NzE4NmE1OWVmOGI3N2FhZGQ1NmY0YWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYjzsMxr6KwcqBIRMZ3CI8iyS34O
O8/HItJs7AcObzeyyQO4aW9zlG7iPECqFU+zqUMlZUWRuTvaGvq58ex20K84S8AG
XwRtHnnG3edMtBhEg+TJlv8KJDutROO3d2Z3QJjg+ztdachMfl96CmlEsu34DhpZ
VdVhjVSckAgYN9sh6enZsiG2KPCwKXfwfxcyBqSfwMWSUK51V6uXWD8BCTlPFbW8
M9D0aox+2K4Ckp/e+ckl5Is1ItCzty1SJsNK5fTVTSi2wxfFY43J7LKGhnuVV1X/
xkG7J2PuSXlDzRaU+EoATHO1j6GXlf0+vSB/WJuw/VvSBuDplzGXbQ3D+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApVc6WQDrdEcYalnvi3eq3Vb0riMB8GA1UdIwQY
MBaAFB9nzxyi3qMvzZcC3SUQ62vytoYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDJmUEhLTGVveV9ObHdMZEpSRHJhX0syaGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zY2I0ZDYtZjMyYy00MTMwLWFlMGUt
YmFkYmU4NDA5NzdlLzEvSDJmUEhLTGVveV9ObHdMZEpSRHJhX0syaGhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zY2I0ZDYtZjMyYy00MTMwLWFlMGUtYmFkYmU4NDA5Nzdl
LzEvSDJmUEhLTGVveV9ObHdMZEpSRHJhX0syaGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHfa6zWQ
3iRiifOUUKiwqSNvCYIPmEPGmS+arQCv9/ZyLtpCV5mz3j3O28yDcrrome5Ybkom
X7U2r3dDasjddEfy/eX+xzvBqbQLRTtEUXyvpF3I55cS49NCQQ8FjgSQ5bij2bA4
ntEC786Dc8aSw0d9SF2veqQbOH6KvbBvg7HtcFc/zepXRmrLaEOqBhQ8CJIRKFLC
GLA0L/OgIiZvztVaQ8+S1GbDlJC8QmWPuR1nlkPfngvFOhoYD3lbhoftQFs+47RR
DckBhPHvEuFeh9jMvp9SngYqfAm8jjMf9ukGkOkwUoaR3PdF/T1kqlLfImyboha/
4oIL1GDBIwFhBQ==
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:28:57 2025 by rpki-client