Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
File: hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json)
Hash identifier: 5ty4mMvNRUhUonj00A5yZ+JNxVYIZuqHA6ff2CnqsJU=
Subject key identifier: F4:17:57:2E:04:20:77:42:2B:AB:4A:26:C3:20:BE:D3:B8:DF:6B:09
Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134
Certificate serial: 0199239F15C0FF916E18426A7F33617CB2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
Manifest number: 0756
Signing time: Sun 07 Sep 2025 10:00:52 +0000
Manifest this update: Sun 07 Sep 2025 10:00:52 +0000
Manifest next update: Mon 08 Sep 2025 10:00:52 +0000
Files and hashes: 1: VVQWLUW0daB7T4jiaSXgxXCl4ZE.roa (hash: RAYdTMRTLrvbEHCokIXafnM5optXUCpT7i2/x7+Zbyk=)
2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: oU3C3Hw82kxgYkrdILfEs0pfm5fdaZfCi+/KuH8oJoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:15:c0:ff:91:6e:18:42:6a:7f:33:61:7c:b2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134
Validity
Not Before: Sep 7 10:00:52 2025 GMT
Not After : Sep 8 10:00:52 2025 GMT
Subject: CN=f417572e042077422bab4a26c320bed3b8df6b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:1a:22:a0:8b:7c:b9:10:9a:c6:57:1e:d4:
5c:0b:58:ef:fb:52:f5:12:18:5a:c5:9f:2a:69:48:
e3:3e:87:57:a0:0c:71:8b:0e:d0:76:2a:8d:4d:4d:
a9:69:63:99:b4:22:c5:aa:3c:e9:ae:75:3c:d5:a9:
b4:37:50:5b:7e:e7:d3:bd:86:29:b9:86:b1:77:0b:
a2:e8:68:78:a3:13:e7:1f:4e:f3:84:24:85:55:5b:
2b:48:97:bc:30:df:4c:0e:69:0e:db:a7:79:04:35:
84:53:13:66:e6:59:1c:dc:2a:92:0b:c1:a8:6a:43:
1a:4b:e9:5c:7a:fc:07:41:43:aa:6a:33:26:ff:7a:
03:56:b8:a8:30:f8:6a:03:40:89:4c:96:4b:c4:83:
9c:7a:70:a4:94:10:cd:39:9a:be:28:15:64:ec:c0:
b5:89:ec:c6:7e:4a:7c:90:88:1f:bb:81:cb:e6:7a:
08:17:94:bf:0b:05:bb:b0:ea:f7:79:78:a0:fa:09:
27:77:d6:fc:0b:96:b4:87:a6:a3:75:25:b5:3f:a1:
d5:9e:1a:71:da:5f:ef:3b:9f:ea:12:cf:7e:a2:80:
7e:a5:b3:ec:30:6e:41:57:45:25:b7:49:45:12:5a:
d0:42:81:dd:68:15:78:56:83:3c:23:82:78:da:ac:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:17:57:2E:04:20:77:42:2B:AB:4A:26:C3:20:BE:D3:B8:DF:6B:09
X509v3 Authority Key Identifier:
keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7a:a7:28:05:e8:5d:f1:a1:f3:de:aa:7d:16:3f:6f:33:fd:
dc:b8:ef:b0:aa:28:ad:01:95:21:90:4d:d2:d2:be:3b:c8:ac:
7c:7f:b4:83:77:38:d5:32:e6:98:6f:9d:a7:a7:15:c7:4b:f7:
2f:4e:be:1d:3f:a9:29:53:4d:04:f1:35:c2:4b:eb:c1:00:26:
cd:3b:b4:4a:0a:97:4c:66:f2:4f:73:13:3b:05:ea:96:7d:fd:
1a:db:f6:a4:23:58:e7:ee:8b:ee:a5:ce:71:ba:55:23:4c:fc:
15:c4:b7:b9:1d:4f:92:07:17:f9:89:28:73:3f:72:14:46:44:
95:f1:39:3f:fe:a7:94:f2:5e:29:bb:83:bb:54:06:7d:9f:f6:
82:99:f2:83:5c:b0:ed:c4:82:7d:bb:39:9b:1e:13:92:42:c0:
fc:08:3d:94:5a:d4:ed:e7:af:0e:42:df:9e:d7:40:0f:1a:44:
7d:7f:1d:08:0f:90:79:61:b0:ba:62:ee:d2:a7:00:a2:5b:11:
34:3d:b9:6a:de:04:e2:77:5a:3f:66:f1:71:35:e3:5a:58:e4:
62:d1:cb:50:07:6c:37:b6:9b:3e:ef:d2:0e:77:6a:0a:e4:81:
75:33:6a:cf:6d:dd:50:70:7c:57:2c:65:36:44:86:18:40:fc:
17:0f:44:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnxXA/5FuGEJqfzNhfLLMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NGY3ZTY2OTk1Yzk5NGEzMGQwODY4NzExMGJmZDZhOWEw
NTYxMzQwHhcNMjUwOTA3MTAwMDUyWhcNMjUwOTA4MTAwMDUyWjAzMTEwLwYDVQQD
EyhmNDE3NTcyZTA0MjA3NzQyMmJhYjRhMjZjMzIwYmVkM2I4ZGY2YjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrsaIqCLfLkQmsZXHtRcC1jv+1L1
EhhaxZ8qaUjjPodXoAxxiw7QdiqNTU2paWOZtCLFqjzprnU81am0N1BbfufTvYYp
uYaxdwui6Gh4oxPnH07zhCSFVVsrSJe8MN9MDmkO26d5BDWEUxNm5lkc3CqSC8Go
akMaS+lcevwHQUOqajMm/3oDVrioMPhqA0CJTJZLxIOcenCklBDNOZq+KBVk7MC1
iezGfkp8kIgfu4HL5noIF5S/CwW7sOr3eXig+gknd9b8C5a0h6ajdSW1P6HVnhpx
2l/vO5/qEs9+ooB+pbPsMG5BV0Ult0lFElrQQoHdaBV4VoM8I4J42qyH4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQXVy4EIHdCK6tKJsMgvtO432sJMB8GA1UdIwQY
MBaAFIRPfmaZXJlKMNCGhxEL/WqaBWE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NDM4MjAtZGVhYy00YTBhLWJmMzIt
OTMxOTBkM2UxZDk4LzEvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My84NDM4MjAtZGVhYy00YTBhLWJmMzItOTMxOTBkM2UxZDk4
LzEvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnqnKAXo
XfGh896qfRY/bzP93LjvsKoorQGVIZBN0tK+O8isfH+0g3c41TLmmG+dp6cVx0v3
L06+HT+pKVNNBPE1wkvrwQAmzTu0SgqXTGbyT3MTOwXqln39Gtv2pCNY5+6L7qXO
cbpVI0z8FcS3uR1PkgcX+Ykocz9yFEZElfE5P/6nlPJeKbuDu1QGfZ/2gpnyg1yw
7cSCfbs5mx4TkkLA/Ag9lFrU7eevDkLfntdADxpEfX8dCA+QeWGwumLu0qcAolsR
ND25at4E4ndaP2bxcTXjWljkYtHLUAdsN7abPu/SDndqCuSBdTNqz23dUHB8Vyxl
NkSGGED8Fw9ECQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:31 2025 by rpki-client