Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: O9pg3TT6cQT5DNJsn8XG9ivOH9rolNF0YqJMU0ZyFM8=
Subject key identifier: 8C:91:D8:F0:BF:85:33:B0:BB:9E:DC:E1:D6:BD:0C:08:A0:D2:6C:81
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 019932367C963AB78E45DC482890DC21AAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 1103
Signing time: Wed 10 Sep 2025 06:00:55 +0000
Manifest this update: Wed 10 Sep 2025 06:00:55 +0000
Manifest next update: Thu 11 Sep 2025 06:00:55 +0000
Files and hashes: 1: 7q0WrWMejy7wbR787YAaoWGbJFQ.roa (hash: wvukoKMYamTKrvVMIAVFKbPLx57mG8Vi2Twko2h+BGA=)
2: 9N4nOv3tg3sEbPyzZf0it1Hq25E.roa (hash: IJnSS5a9u+7nIpL38LijT/DvQkKhhTmKcLRcnn9ZFq4=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: 6gbWOIlZvjD1v+qAMbMrPwJKWFybKyyPwbJmjLcI8iI=)
4: HFw-x8czfBceHHrxWFsisFaU53k.roa (hash: cYh9OngZxsihRjHnYd3zU3o4mbQkOgFi9+M2bbApN3k=)
5: X8AY7TE63_MLYw5qzgUDNFtz5p0.roa (hash: X2a5upeXUq+OfzrT3NEfhOg+ntOWBbajp/Ueexg9I2s=)
6: lZMuhPvtZ2azCXBKPog94p3v2Xw.roa (hash: xEuRWjb3WfY9qNirTUGj3ZWp2yVhhUygTy4CswJMg3c=)
7: uIXD9TM7mcGL2h8D_v3d0KyzT9E.roa (hash: N8tk1k3ctTBw3mBa+DDHR+60L2fh+aJO68VY7R3S2T4=)
8: vlexF02dkqJLD0WdrTxwGKUdE4I.roa (hash: cuDkI790X0jMiu+jzLtuqyGyt6ox4BybHkrBEnZriww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:7c:96:3a:b7:8e:45:dc:48:28:90:dc:21:aa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Sep 10 06:00:55 2025 GMT
Not After : Sep 11 06:00:55 2025 GMT
Subject: CN=8c91d8f0bf8533b0bb9edce1d6bd0c08a0d26c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:22:9c:3f:05:16:fd:cf:1d:b6:3d:0d:0d:
2f:1d:d2:3f:ab:a3:5e:08:ff:c5:d8:45:25:91:1d:
18:b8:4f:1f:8e:67:1e:13:1f:a2:52:ea:50:b2:65:
1c:2c:7c:01:86:fb:44:7b:50:45:b9:f4:b7:15:f9:
3e:44:b7:1b:17:c4:4f:85:ca:5a:10:c9:a0:c1:73:
fc:96:ad:e7:f7:e2:62:7c:09:d9:ff:24:01:04:2a:
1a:d3:9e:e8:ba:8e:16:a6:22:5b:bc:c3:b3:c6:17:
e5:9e:68:cc:da:b5:d9:81:88:a6:17:91:06:5a:e5:
62:74:99:c5:94:64:11:ed:f8:3c:4f:73:55:e9:59:
54:d0:0b:2f:92:f1:ec:8d:74:c3:a7:5d:c2:09:79:
34:ff:e4:85:2d:b8:02:95:76:f5:61:68:d8:49:61:
46:9e:2a:ad:71:f0:5c:92:b9:7e:85:c8:86:4b:21:
94:5c:cc:2d:9f:6c:59:cf:ac:62:7f:e1:b2:41:1e:
fb:c4:fe:a8:73:b8:c5:30:84:7b:b8:1b:9c:b6:c5:
3b:f1:f4:e2:ef:96:77:c3:ed:b5:19:bb:df:9b:b8:
63:6d:3a:62:47:af:c1:8a:53:3c:dc:67:8b:bc:33:
3d:6e:76:72:f2:4a:04:a6:27:73:21:01:b5:b2:33:
f3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:91:D8:F0:BF:85:33:B0:BB:9E:DC:E1:D6:BD:0C:08:A0:D2:6C:81
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2b:c7:f8:b9:61:ea:0e:aa:2f:9c:04:c1:3d:14:96:fe:71:
bb:35:e1:87:30:a0:cd:2a:71:d4:41:81:9c:04:7e:02:ed:ee:
b0:47:f5:1d:ff:f7:0b:83:1f:ea:32:2a:90:3e:27:54:18:29:
fc:d7:64:79:da:5b:4f:1c:0a:52:2c:89:39:0c:89:75:a4:6d:
0f:04:8b:b3:68:0c:08:8c:74:15:8a:94:ab:ad:a7:41:af:61:
c4:96:f1:82:92:eb:e2:ad:be:96:73:1d:62:52:95:cc:d7:31:
4e:8a:09:20:c2:6f:46:19:b0:f2:d4:e6:8d:90:87:e9:81:63:
e3:18:6d:10:50:fc:6f:e5:0e:34:3b:fa:d0:ce:d2:e2:77:0d:
34:39:80:2e:48:36:17:79:f8:af:17:be:6f:d2:31:d3:2c:86:
37:ea:ba:29:c8:5d:93:95:1d:c3:96:c7:89:84:f2:96:dd:9f:
f9:0c:ed:2a:0b:9f:a2:81:20:e4:51:e5:52:55:7f:84:e1:47:
3d:ee:8d:51:f1:d4:73:ca:1e:37:eb:6d:c3:79:cd:a8:c0:cc:
dd:61:9c:6c:46:f6:a1:31:75:a4:04:8b:8a:b7:51:3d:b7:df:
47:7d:58:84:cf:d6:87:ac:d0:49:21:31:cd:c9:15:a9:f4:d0:
b7:65:27:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkyNnyWOreORdxIKJDcIar6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYzQ5MjdhYjE5NGFlMTIzN2ZkZTJkM2JlZjY5MDM4ODkz
ZjBkYzUwHhcNMjUwOTEwMDYwMDU1WhcNMjUwOTExMDYwMDU1WjAzMTEwLwYDVQQD
Eyg4YzkxZDhmMGJmODUzM2IwYmI5ZWRjZTFkNmJkMGMwOGEwZDI2YzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpYinD8FFv3PHbY9DQ0vHdI/q6Ne
CP/F2EUlkR0YuE8fjmceEx+iUupQsmUcLHwBhvtEe1BFufS3Ffk+RLcbF8RPhcpa
EMmgwXP8lq3n9+JifAnZ/yQBBCoa057ouo4WpiJbvMOzxhflnmjM2rXZgYimF5EG
WuVidJnFlGQR7fg8T3NV6VlU0AsvkvHsjXTDp13CCXk0/+SFLbgClXb1YWjYSWFG
niqtcfBckrl+hciGSyGUXMwtn2xZz6xif+GyQR77xP6oc7jFMIR7uBuctsU78fTi
75Z3w+21Gbvfm7hjbTpiR6/BilM83GeLvDM9bnZy8koEpidzIQG1sjPz/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyR2PC/hTOwu57c4da9DAig0myBMB8GA1UdIwQY
MBaAFB/EknqxlK4SN/3i0772kDiJPw3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODIt
OGI4YTAxYmQ3NDE0LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODItOGI4YTAxYmQ3NDE0
LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcivH+Llh
6g6qL5wEwT0Ulv5xuzXhhzCgzSpx1EGBnAR+Au3usEf1Hf/3C4Mf6jIqkD4nVBgp
/NdkedpbTxwKUiyJOQyJdaRtDwSLs2gMCIx0FYqUq62nQa9hxJbxgpLr4q2+lnMd
YlKVzNcxTooJIMJvRhmw8tTmjZCH6YFj4xhtEFD8b+UONDv60M7S4ncNNDmALkg2
F3n4rxe+b9Ix0yyGN+q6Kchdk5Udw5bHiYTylt2f+QztKgufooEg5FHlUlV/hOFH
Pe6NUfHUc8oeN+ttw3nNqMDM3WGcbEb2oTF1pASLirdRPbffR31YhM/Wh6zQSSEx
zckVqfTQt2Unkg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 12:16:34 2025 by rpki-client