Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier: e5EWIT8U1bWNCi43zxTY+tRUahE/+/BN74Vp1HdRiXg=
Subject key identifier: 82:98:6A:7A:CC:9B:D1:9B:78:5B:A0:BD:DC:C0:4B:A4:E9:B6:2F:33
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial: 019923317480EF082E02B2F8C8696E1F4148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number: 13DA
Signing time: Sun 07 Sep 2025 08:01:07 +0000
Manifest this update: Sun 07 Sep 2025 08:01:07 +0000
Manifest next update: Mon 08 Sep 2025 08:01:07 +0000
Files and hashes: 1: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: z19KBvv9o8KJmuc4O6os8ziKD32rEtLvy4EaSVDZbzw=)
2: pd4NfQq1m5q0gJRIY8-JV63L0Ug.roa (hash: 2jDsm0ha9EaVCILusmCVnInYpOVbfVEOKEtxwwvPFb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:74:80:ef:08:2e:02:b2:f8:c8:69:6e:1f:41:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Validity
Not Before: Sep 7 08:01:07 2025 GMT
Not After : Sep 8 08:01:07 2025 GMT
Subject: CN=82986a7acc9bd19b785ba0bddcc04ba4e9b62f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:03:69:1a:f8:67:1b:8b:28:b4:92:e2:55:
a5:c4:9c:12:07:42:64:6e:b1:f5:98:29:2b:8e:44:
a6:49:3f:14:0b:12:d6:04:c8:a4:ad:a7:6a:8a:2d:
5a:3c:80:6d:25:0b:b9:6d:47:97:65:4f:ca:d9:92:
bb:ed:6c:54:d4:5e:74:af:a8:b0:43:ce:a1:a2:f4:
43:72:1d:88:e4:09:22:fd:79:f4:60:bf:e4:ec:ac:
ad:1a:d6:96:4a:45:9d:c7:9a:70:af:5f:5c:ac:53:
3c:27:87:ed:b6:7a:f2:39:2c:ac:53:de:2e:71:3f:
5f:e0:35:62:76:b8:56:5e:28:2a:c3:16:e4:a8:be:
68:2a:cb:77:f0:95:e9:f5:db:bf:8e:1f:d4:32:9e:
51:ea:ef:7f:c1:93:b6:ba:90:bb:5a:12:09:62:04:
81:53:ae:bc:c4:2d:7f:db:b8:80:6e:3a:ac:dc:0b:
16:69:01:64:6f:26:af:d5:33:f1:a2:e0:81:f4:6b:
eb:e3:71:5b:8f:ba:ea:ed:41:94:4d:43:59:ec:2b:
ca:3f:d1:08:8d:93:e3:cb:2f:e8:93:05:ba:c1:41:
f9:f5:34:5a:2e:15:1a:92:9d:2d:e9:f8:e7:1f:fe:
db:60:68:15:b9:de:25:ec:32:a6:9e:ba:49:23:e9:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:98:6A:7A:CC:9B:D1:9B:78:5B:A0:BD:DC:C0:4B:A4:E9:B6:2F:33
X509v3 Authority Key Identifier:
keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:53:6a:83:30:19:20:6f:e7:db:f1:6e:10:03:3b:1b:65:3e:
50:33:fb:0e:d6:86:f1:8d:2b:88:48:7e:67:f2:ea:87:c7:74:
f2:65:3b:de:0e:a4:1d:47:3a:59:af:e0:bc:ca:5e:a1:68:5b:
f9:ea:08:23:a8:41:3d:b3:c1:b2:fc:f4:d4:5e:e3:41:d6:07:
db:9d:fe:03:b8:47:2a:c3:db:73:49:64:42:fa:65:8f:de:bd:
8c:10:b9:90:95:13:9b:2c:5c:74:d9:a7:53:fd:f9:ce:a4:2f:
73:f7:f7:33:b1:57:25:cd:8e:69:40:f8:6a:3e:03:b3:6a:a7:
39:1f:32:24:f3:af:ea:2e:9c:50:19:da:63:0d:63:e2:3c:c0:
1a:d3:f9:a6:d1:8d:38:8b:6e:67:f3:c4:6a:c3:e6:fa:c1:fa:
18:f9:5c:71:3a:e0:f1:57:07:1a:e0:73:7d:5d:40:54:2f:e0:
ec:6e:05:ec:c8:30:83:b3:fe:4d:1c:ee:ac:a8:8e:45:53:fc:
4a:ac:a5:df:d0:a6:2e:a0:dc:5d:55:56:ef:74:73:51:94:65:
43:7e:94:35:c3:ae:e7:a5:b0:9d:14:e6:4d:a6:8b:9c:5a:ee:
83:cb:45:16:c8:c1:d5:4f:32:8f:e0:1c:fa:6c:d5:4f:ff:13:
24:75:a9:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMXSA7wguArL4yGluH0FIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZDdmN2QyZmMxMzQ4OTE0YzAwNmI1NWFiOTNmMmQyZTMz
OTBkZTYwHhcNMjUwOTA3MDgwMTA3WhcNMjUwOTA4MDgwMTA3WjAzMTEwLwYDVQQD
Eyg4Mjk4NmE3YWNjOWJkMTliNzg1YmEwYmRkY2MwNGJhNGU5YjYyZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4IDaRr4ZxuLKLSS4lWlxJwSB0Jk
brH1mCkrjkSmST8UCxLWBMikradqii1aPIBtJQu5bUeXZU/K2ZK77WxU1F50r6iw
Q86hovRDch2I5Aki/Xn0YL/k7KytGtaWSkWdx5pwr19crFM8J4fttnryOSysU94u
cT9f4DVidrhWXigqwxbkqL5oKst38JXp9du/jh/UMp5R6u9/wZO2upC7WhIJYgSB
U668xC1/27iAbjqs3AsWaQFkbyav1TPxouCB9Gvr43Fbj7rq7UGUTUNZ7CvKP9EI
jZPjyy/okwW6wUH59TRaLhUakp0t6fjnH/7bYGgVud4l7DKmnrpJI+kxbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKYanrMm9GbeFugvdzAS6Tpti8zMB8GA1UdIwQY
MBaAFIfX99L8E0iRTABrVauT8tLjOQ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQt
MzAxZGYyNzIxNTJlLzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQtMzAxZGYyNzIxNTJl
LzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1NqgzAZ
IG/n2/FuEAM7G2U+UDP7DtaG8Y0riEh+Z/Lqh8d08mU73g6kHUc6Wa/gvMpeoWhb
+eoII6hBPbPBsvz01F7jQdYH253+A7hHKsPbc0lkQvplj969jBC5kJUTmyxcdNmn
U/35zqQvc/f3M7FXJc2OaUD4aj4Ds2qnOR8yJPOv6i6cUBnaYw1j4jzAGtP5ptGN
OItuZ/PEasPm+sH6GPlccTrg8VcHGuBzfV1AVC/g7G4F7Mgwg7P+TRzurKiORVP8
Sqyl39CmLqDcXVVW73RzUZRlQ36UNcOu56WwnRTmTaaLnFrug8tFFsjB1U8yj+Ac
+mzVT/8TJHWpUg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:15 2025 by rpki-client