Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json)
Hash identifier: qDCB28/SufYCCRYJ5Fg+hFI54H0i6CYGM5BH+T+MNU4=
Subject key identifier: 46:8A:3F:9C:2B:1B:93:74:4D:54:EA:21:17:84:0D:6C:18:F4:1A:08
Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Certificate serial: 01993312FAA269237B2864C0B9F0ED27D229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
Manifest number: 0FEE
Signing time: Wed 10 Sep 2025 10:01:45 +0000
Manifest this update: Wed 10 Sep 2025 10:01:45 +0000
Manifest next update: Thu 11 Sep 2025 10:01:45 +0000
Files and hashes: 1: TwlfNDSczGUl34rteJgSuHXTO94.roa (hash: gBwK3ZQY+snmvfWIA0VgAvr4/MBSK9FpiTLSXZrUgpg=)
2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: EcovJsHB/yqiU+HWZI9crj9diQ7BQZm9meDWwIZV9Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:fa:a2:69:23:7b:28:64:c0:b9:f0:ed:27:d2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Validity
Not Before: Sep 10 10:01:45 2025 GMT
Not After : Sep 11 10:01:45 2025 GMT
Subject: CN=468a3f9c2b1b93744d54ea2117840d6c18f41a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:2d:c1:da:d9:e4:34:bd:29:2a:a5:1f:26:
5c:6b:e7:f3:08:40:a5:d1:c9:1f:f5:7a:b3:a6:95:
a9:95:43:32:f5:18:00:96:a5:4c:97:a9:82:24:1d:
4e:01:be:18:80:68:2c:22:7e:c1:12:c6:63:14:85:
88:fb:2e:c5:30:c1:89:b9:a4:67:2a:62:4e:f5:5e:
60:a4:a0:c4:45:17:97:4f:cf:42:49:d8:11:40:15:
85:57:c8:5a:3a:3c:e1:19:79:0c:1c:e0:b5:03:e2:
7f:16:dd:27:cb:95:71:55:5e:56:2c:72:e9:57:da:
50:8b:12:47:ea:fc:43:34:97:f7:0b:d4:58:7d:e7:
f7:0c:25:95:2e:a6:e0:c7:34:f9:13:ff:cf:28:28:
f4:41:7f:14:58:43:d3:df:70:3b:cf:93:3a:f3:27:
83:71:c4:6c:70:17:8c:87:60:d8:b5:ee:d8:be:61:
97:5d:13:05:27:d9:87:f6:89:ad:51:5f:24:de:8f:
17:34:f4:7f:aa:60:d3:7f:32:a0:bf:26:b7:42:af:
25:1c:01:ce:44:4f:b1:fe:93:53:4d:76:7a:f8:cd:
fa:fc:1f:f7:8c:44:81:cb:ab:89:87:86:bf:52:1f:
e1:50:5f:9c:3a:69:70:c7:2e:45:de:96:3e:57:cd:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8A:3F:9C:2B:1B:93:74:4D:54:EA:21:17:84:0D:6C:18:F4:1A:08
X509v3 Authority Key Identifier:
keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9b:e6:90:f8:30:1e:a6:96:44:6e:68:fe:d4:92:44:3f:1b:
98:db:40:f3:6b:f3:74:ea:93:30:6f:ad:99:45:e2:ad:63:17:
b8:c6:9e:15:0e:70:8f:a7:ec:8a:89:75:1d:d6:a6:8e:8c:01:
04:52:c3:4b:09:15:53:c0:da:92:1f:d0:74:a6:c0:43:e7:c2:
00:70:98:5a:35:59:4b:09:84:80:31:a8:50:6b:88:a5:d1:7b:
d3:cc:69:7e:ef:10:43:d3:a8:5e:8e:06:f6:b1:70:8d:f0:a3:
e9:63:9a:d4:5f:8d:02:b4:21:67:b5:69:6d:87:ec:0a:ea:93:
41:a8:b3:7b:33:d5:e9:b8:10:ff:23:9e:ce:4b:05:87:b1:cf:
1f:5f:46:f7:bf:a8:b0:67:d1:8f:54:5b:d9:26:8c:2f:b9:12:
9a:cb:55:58:41:93:09:27:51:f4:50:db:26:3c:ec:5f:76:7f:
dd:f1:d1:aa:52:fd:74:c0:16:c0:55:2b:85:8e:90:14:c2:b6:
2a:9d:87:11:00:94:bd:8e:43:64:b4:64:fa:4b:1e:f1:b3:0c:
2f:35:9f:9c:1e:6c:ec:3d:0d:0c:89:55:a3:20:83:6b:3f:e2:
28:24:75:99:ba:f5:8f:04:1a:43:ea:fd:fd:79:25:9a:88:da:
a1:8e:04:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzEvqiaSN7KGTAufDtJ9IpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGFhMTZmZDJhMmM5MzZjMGFhNGZiNTYyNGY2MmJjNTZh
NTRkZjgwHhcNMjUwOTEwMTAwMTQ1WhcNMjUwOTExMTAwMTQ1WjAzMTEwLwYDVQQD
Eyg0NjhhM2Y5YzJiMWI5Mzc0NGQ1NGVhMjExNzg0MGQ2YzE4ZjQxYTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwctwdrZ5DS9KSqlHyZca+fzCECl
0ckf9XqzppWplUMy9RgAlqVMl6mCJB1OAb4YgGgsIn7BEsZjFIWI+y7FMMGJuaRn
KmJO9V5gpKDERReXT89CSdgRQBWFV8haOjzhGXkMHOC1A+J/Ft0ny5VxVV5WLHLp
V9pQixJH6vxDNJf3C9RYfef3DCWVLqbgxzT5E//PKCj0QX8UWEPT33A7z5M68yeD
ccRscBeMh2DYte7YvmGXXRMFJ9mH9omtUV8k3o8XNPR/qmDTfzKgvya3Qq8lHAHO
RE+x/pNTTXZ6+M36/B/3jESBy6uJh4a/Uh/hUF+cOmlwxy5F3pY+V80fwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaKP5wrG5N0TVTqIReEDWwY9BoIMB8GA1UdIwQY
MBaAFIdKoW/Sosk2wKpPtWJPYrxWpU34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTct
ZmRiYzdjNGNmNDllLzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTctZmRiYzdjNGNmNDll
LzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5vmkPgw
HqaWRG5o/tSSRD8bmNtA82vzdOqTMG+tmUXirWMXuMaeFQ5wj6fsiol1HdamjowB
BFLDSwkVU8Dakh/QdKbAQ+fCAHCYWjVZSwmEgDGoUGuIpdF708xpfu8QQ9OoXo4G
9rFwjfCj6WOa1F+NArQhZ7VpbYfsCuqTQaizezPV6bgQ/yOezksFh7HPH19G97+o
sGfRj1Rb2SaML7kSmstVWEGTCSdR9FDbJjzsX3Z/3fHRqlL9dMAWwFUrhY6QFMK2
Kp2HEQCUvY5DZLRk+kse8bMMLzWfnB5s7D0NDIlVoyCDaz/iKCR1mbr1jwQaQ+r9
/XklmojaoY4E/g==
-----END CERTIFICATE-----
Generated at Wed Sep 10 12:20:42 2025 by rpki-client