Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
File: h497ckDFitfp7vUFdPYIjpuQsC0.mft (raw, json)
Hash identifier: TrXp3vaOT4SRfBN1OL5IH8nrm5wRbCBlpy1oKJ8u6ts=
Subject key identifier: B7:C9:6D:45:C5:AD:41:D2:57:64:8C:B5:68:85:1B:32:93:2E:FD:68
Authority key identifier: 87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
Certificate issuer: /CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Certificate serial: 0199C9469F278D18F8E613045E40101E8A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
Manifest number: 1659
Signing time: Thu 09 Oct 2025 14:01:12 +0000
Manifest this update: Thu 09 Oct 2025 14:01:12 +0000
Manifest next update: Fri 10 Oct 2025 14:01:12 +0000
Files and hashes: 1: 6mTYkUzvhb-Htm6lfZWXyJFAe3g.roa (hash: wl2jbKj60gngwVW2ZgUBMEJL1S5Obo/uhCmKyt9SPvM=)
2: h497ckDFitfp7vUFdPYIjpuQsC0.crl (hash: pPPhFciImQAGpLo5xBwtpoe0YE1mby/8AHvQ4AoEGcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c9:46:9f:27:8d:18:f8:e6:13:04:5e:40:10:1e:8a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Validity
Not Before: Oct 9 14:01:12 2025 GMT
Not After : Oct 10 14:01:12 2025 GMT
Subject: CN=b7c96d45c5ad41d257648cb568851b32932efd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:d5:9b:fc:43:bc:32:77:04:de:55:06:55:
59:cd:35:0b:05:ea:7b:bc:c2:8c:cc:90:98:c3:ed:
dc:1b:75:1d:87:27:11:17:1f:93:06:f2:8d:c4:b3:
a5:ec:ea:e8:7b:9d:da:b1:73:4f:34:5a:e9:13:ad:
8b:bc:33:2e:bc:80:eb:52:aa:c6:2f:d8:2c:81:cc:
a3:95:16:9a:ce:b7:48:8c:b0:5d:68:e3:68:32:d8:
8f:e2:52:38:e3:46:39:10:15:ba:e6:4a:66:9c:4d:
c3:ae:51:ba:be:06:2b:97:26:6c:86:21:78:43:b5:
33:b9:6e:e3:2f:6c:e2:1c:13:77:c0:d4:aa:cb:e5:
09:c2:ab:90:a3:b7:7f:fc:42:00:70:c6:a7:97:bd:
e2:bd:b4:63:ce:be:f5:38:3e:3d:20:35:fd:09:8e:
34:b4:c0:57:05:78:02:47:2d:04:02:c0:ad:c4:db:
80:17:31:86:c1:15:8b:09:27:03:87:bf:51:52:76:
6b:02:67:9f:84:67:28:fb:01:08:c7:6b:d1:46:c8:
19:af:e9:c5:c1:19:fc:5e:d7:51:4f:35:bb:9e:69:
99:90:b1:b3:c1:96:b6:38:80:d0:cd:74:a7:53:11:
c9:65:61:1c:74:2c:44:c6:db:56:b7:5b:19:db:aa:
84:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C9:6D:45:C5:AD:41:D2:57:64:8C:B5:68:85:1B:32:93:2E:FD:68
X509v3 Authority Key Identifier:
keyid:87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b4:96:cc:b1:01:2b:17:ad:c5:55:46:a9:fe:ff:59:7d:47:
90:cb:37:f5:fc:cb:3d:6d:5d:8c:b6:11:04:e1:99:a0:ad:93:
fd:6c:29:0c:4e:ab:0b:73:c1:23:d1:23:68:bc:fe:c3:8b:79:
5c:ec:42:95:04:4c:33:b2:f1:5b:2d:44:25:2a:f4:18:b4:5a:
c4:c8:d9:0e:bd:f9:f0:69:19:92:85:4f:e9:95:0e:7c:65:a5:
85:61:a6:30:e4:a3:ff:9b:5d:96:05:27:4d:bf:7a:b6:12:f7:
24:01:2b:a9:18:d1:92:11:1a:01:ff:7a:cc:e9:63:e1:18:a3:
66:df:4f:4b:0d:48:57:5c:f1:9e:11:64:7d:14:6d:d5:fc:f7:
c8:ac:fa:ac:fa:36:3d:c8:4f:d1:5e:6f:3e:59:03:fe:30:63:
8f:e6:3d:83:98:1e:e5:a7:cb:9f:50:b9:59:76:3f:5f:8c:d0:
b1:12:16:fb:3e:87:0d:4a:30:4f:84:bd:3c:d3:b0:36:b7:61:
20:87:b1:49:16:eb:14:f4:8f:24:5a:6e:d3:5c:54:2c:c2:1c:
e0:b8:db:1b:68:14:80:f0:a2:18:ac:f8:88:b3:8f:8f:50:e5:
dd:8b:47:36:a2:1c:82:cf:70:a8:f1:d9:b4:fd:eb:ea:4e:c0:
de:df:af:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnJRp8njRj45hMEXkAQHop3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OGY3YjcyNDBjNThhZDdlOWVlZjUwNTc0ZjYwODhlOWI5
MGIwMmQwHhcNMjUxMDA5MTQwMTEyWhcNMjUxMDEwMTQwMTEyWjAzMTEwLwYDVQQD
EyhiN2M5NmQ0NWM1YWQ0MWQyNTc2NDhjYjU2ODg1MWIzMjkzMmVmZDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGbVm/xDvDJ3BN5VBlVZzTULBep7
vMKMzJCYw+3cG3UdhycRFx+TBvKNxLOl7Oroe53asXNPNFrpE62LvDMuvIDrUqrG
L9gsgcyjlRaazrdIjLBdaONoMtiP4lI440Y5EBW65kpmnE3DrlG6vgYrlyZshiF4
Q7UzuW7jL2ziHBN3wNSqy+UJwquQo7d//EIAcManl73ivbRjzr71OD49IDX9CY40
tMBXBXgCRy0EAsCtxNuAFzGGwRWLCScDh79RUnZrAmefhGco+wEIx2vRRsgZr+nF
wRn8XtdRTzW7nmmZkLGzwZa2OIDQzXSnUxHJZWEcdCxExttWt1sZ26qEhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfJbUXFrUHSV2SMtWiFGzKTLv1oMB8GA1UdIwQY
MBaAFIePe3JAxYrX6e71BXT2CI6bkLAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDQ5N2NrREZpdGZwN3ZVRmRQWUlqcHVRc0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mYzE1OWUtOGQ1Ni00YzNhLWFlNDIt
MGNiZGQ5NWExNmRkLzEvaDQ5N2NrREZpdGZwN3ZVRmRQWUlqcHVRc0MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mYzE1OWUtOGQ1Ni00YzNhLWFlNDItMGNiZGQ5NWExNmRk
LzEvaDQ5N2NrREZpdGZwN3ZVRmRQWUlqcHVRc0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLSWzLEB
KxetxVVGqf7/WX1HkMs39fzLPW1djLYRBOGZoK2T/WwpDE6rC3PBI9EjaLz+w4t5
XOxClQRMM7LxWy1EJSr0GLRaxMjZDr358GkZkoVP6ZUOfGWlhWGmMOSj/5tdlgUn
Tb96thL3JAErqRjRkhEaAf96zOlj4RijZt9PSw1IV1zxnhFkfRRt1fz3yKz6rPo2
PchP0V5vPlkD/jBjj+Y9g5ge5afLn1C5WXY/X4zQsRIW+z6HDUowT4S9PNOwNrdh
IIexSRbrFPSPJFpu01xULMIc4LjbG2gUgPCiGKz4iLOPj1Dl3YtHNqIcgs9wqPHZ
tP3r6k7A3t+vIQ==
-----END CERTIFICATE-----
Generated at Thu Oct 9 20:08:35 2025 by rpki-client