Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier: iZ7T2OnxyQ+zxrhP/biOOx2j7HuBNm7BFKjoJtWvXFE=
Subject key identifier: 55:05:8A:BB:88:C4:8B:B6:A0:9E:0B:3B:C3:05:98:BB:DB:6F:E5:D0
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 01984475AF37530D6B110CF6ACC00E274E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number: 0F0B
Signing time: Sat 26 Jul 2025 02:00:19 +0000
Manifest this update: Sat 26 Jul 2025 02:00:19 +0000
Manifest next update: Sun 27 Jul 2025 02:00:19 +0000
Files and hashes: 1: 1-TKHNCKbZE8g4XJcuPLU9wUNwXw.roa (hash: 4YE3N5IWvrJIb1gbK5UKUvbBqNqAEHWjC5reIu6mjb8=)
2: KPSPKR5CERt24RgHkaAIVOQ-_3Y.roa (hash: /B2g+d8SvUFH1wq4gYFhblNg4apBCw0hfFmzBcRbekw=)
3: bFD1sjNrlT8-Exv5RMapq_1KPJ0.roa (hash: dms0tmgxNyDbB9rboVPonFSAfotpbIdMya/cvQRCIY0=)
4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: qMTlMqKssVaT+VRFoTrxCy5Vbf80wVkLHDWDHl3yPDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:af:37:53:0d:6b:11:0c:f6:ac:c0:0e:27:4e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Jul 26 02:00:19 2025 GMT
Not After : Jul 27 02:00:19 2025 GMT
Subject: CN=55058abb88c48bb6a09e0b3bc30598bbdb6fe5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:f6:9a:e1:9c:7c:04:e7:36:05:45:d7:9f:
9b:ca:bf:b0:58:75:5c:32:63:f7:b2:ae:ed:75:a6:
1a:45:7b:fa:d3:fb:5b:ce:9c:07:1e:0c:1f:c6:a8:
21:82:c5:61:b7:65:84:3c:e5:10:48:d8:44:de:ef:
84:41:dd:11:29:eb:0e:0f:0a:23:6a:c0:fc:6e:f4:
7a:ac:a3:42:4f:82:88:9e:27:ab:e4:4d:f7:c4:70:
b2:d2:5e:0c:51:60:17:f8:a9:19:14:af:8a:c6:0c:
a2:28:da:d5:cb:df:84:58:93:6d:81:dd:09:6d:f2:
23:82:ef:10:7e:93:51:4e:62:88:72:5a:d8:8a:25:
0c:a2:f9:dc:82:bd:8d:4f:94:45:db:a2:16:6f:91:
84:51:ae:e7:c7:2b:07:f9:83:8a:a5:39:24:16:7c:
da:66:eb:f0:f5:0c:24:3c:29:7c:42:39:da:75:95:
24:b2:f1:f9:d3:88:cc:ae:b2:af:57:a3:02:f7:fc:
b9:f3:ff:39:30:d2:bd:34:83:5d:be:f9:cb:8a:9a:
c5:d3:71:77:27:df:9a:2a:e8:33:76:8d:de:38:64:
04:28:c2:ee:78:ef:5a:b5:fc:2e:24:66:6c:b2:06:
59:9a:bc:7e:55:b5:d2:93:8a:bc:71:89:f0:e2:63:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:05:8A:BB:88:C4:8B:B6:A0:9E:0B:3B:C3:05:98:BB:DB:6F:E5:D0
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b8:fe:1e:a8:cb:44:7a:bc:9f:5b:2f:d5:68:ee:70:6f:02:
78:95:24:20:4c:c2:cf:49:b5:44:9c:45:bd:8c:49:0f:78:78:
fe:70:1d:82:f9:91:cf:68:1c:9c:5c:0c:5e:fe:ac:f6:b5:a4:
90:ad:82:57:90:24:da:b0:35:62:9c:f4:fb:e2:f9:b0:1b:cc:
a8:27:14:d6:48:bc:de:f4:6e:fe:75:19:d5:a3:4a:1f:f0:2f:
99:66:da:83:0a:e1:61:59:12:dc:08:9f:26:20:ef:84:f0:ee:
b8:f1:44:5d:30:03:df:30:13:d5:06:26:fb:12:74:ef:03:00:
b3:5f:65:4d:95:22:d4:27:80:63:a6:8d:66:a8:e5:b6:09:3d:
9a:0a:18:de:08:27:61:af:8f:a7:9f:51:9a:c8:1b:50:5e:8e:
63:57:50:12:a6:f9:6c:cb:57:cc:cf:d8:70:da:6c:b4:bc:25:
b3:e0:d2:07:5a:2c:76:af:67:9b:e4:8d:7d:a2:b6:ad:04:26:
4e:19:35:8d:b8:ef:b4:04:c5:12:67:cb:76:2d:ed:a7:9b:f9:
fb:5c:a6:8a:81:bc:fc:7d:d3:0a:9a:87:ab:94:e9:e4:65:f5:
bd:af:44:54:03:bf:f8:dd:81:c0:a3:86:c1:27:9b:7f:cb:27:
00:74:32:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhEda83Uw1rEQz2rMAOJ05XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2I3NDJhMDNiYzljODU1MDcyMTdhMjUyMDRkZmZmODJm
Y2NkZjkwHhcNMjUwNzI2MDIwMDE5WhcNMjUwNzI3MDIwMDE5WjAzMTEwLwYDVQQD
Eyg1NTA1OGFiYjg4YzQ4YmI2YTA5ZTBiM2JjMzA1OThiYmRiNmZlNWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEz2muGcfATnNgVF15+byr+wWHVc
MmP3sq7tdaYaRXv60/tbzpwHHgwfxqghgsVht2WEPOUQSNhE3u+EQd0RKesODwoj
asD8bvR6rKNCT4KInier5E33xHCy0l4MUWAX+KkZFK+KxgyiKNrVy9+EWJNtgd0J
bfIjgu8QfpNRTmKIclrYiiUMovncgr2NT5RF26IWb5GEUa7nxysH+YOKpTkkFnza
Zuvw9QwkPCl8QjnadZUksvH504jMrrKvV6MC9/y58/85MNK9NINdvvnLiprF03F3
J9+aKugzdo3eOGQEKMLueO9atfwuJGZssgZZmrx+VbXSk4q8cYnw4mNeKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUFiruIxIu2oJ4LO8MFmLvbb+XQMB8GA1UdIwQY
MBaAFIbLdCoDvJyFUHIXolIE3/+C/M35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgt
MDVmMThmYzIxMmE3LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgtMDVmMThmYzIxMmE3
LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbj+HqjL
RHq8n1sv1WjucG8CeJUkIEzCz0m1RJxFvYxJD3h4/nAdgvmRz2gcnFwMXv6s9rWk
kK2CV5Ak2rA1Ypz0++L5sBvMqCcU1ki83vRu/nUZ1aNKH/AvmWbagwrhYVkS3Aif
JiDvhPDuuPFEXTAD3zAT1QYm+xJ07wMAs19lTZUi1CeAY6aNZqjltgk9mgoY3ggn
Ya+Pp59RmsgbUF6OY1dQEqb5bMtXzM/YcNpstLwls+DSB1osdq9nm+SNfaK2rQQm
Thk1jbjvtATFEmfLdi3tp5v5+1ymioG8/H3TCpqHq5Tp5GX1va9EVAO/+N2BwKOG
wSebf8snAHQy2A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:44:18 2025 by rpki-client