Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier: umRXZupRcwocazwBiMvpcCYqSZR/0UxEc65yX93F1HE=
Subject key identifier: 79:97:61:8C:F8:9F:CC:20:F8:BF:A2:DC:17:9E:24:E4:12:83:02:BD
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial: 019A1496FECE0ED3205237BAD94E303B1B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number: 0DF8
Signing time: Fri 24 Oct 2025 05:00:31 +0000
Manifest this update: Fri 24 Oct 2025 05:00:31 +0000
Manifest next update: Sat 25 Oct 2025 05:00:31 +0000
Files and hashes: 1: 9LtCAwdvQTxrsgjAgJBXTY-dexQ.roa (hash: YbPa7xrFRquA6rkXPn/4oW9xs5SCR/ZWuuJuhONwhvc=)
2: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: vwZ0YAXahSdCzoh6FGRLzNYVESZC83pAs20XL6e+QvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:96:fe:ce:0e:d3:20:52:37:ba:d9:4e:30:3b:1b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
Validity
Not Before: Oct 24 05:00:31 2025 GMT
Not After : Oct 25 05:00:31 2025 GMT
Subject: CN=7997618cf89fcc20f8bfa2dc179e24e4128302bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9b:85:15:84:87:47:ff:75:9c:22:7f:08:a2:
91:dd:f4:10:d7:30:26:a5:fb:bf:65:b1:41:af:c8:
31:e9:a5:1f:da:cc:1d:18:68:f2:22:65:8a:e3:ef:
e9:33:b9:0a:83:62:0e:0c:79:08:21:d0:2c:71:8a:
ab:30:46:7e:9b:7f:dc:54:28:0a:21:35:70:c1:4a:
e6:91:9f:e2:90:9c:4f:43:1a:08:23:0b:9a:99:b0:
19:db:8b:cd:9d:85:3f:5e:51:02:10:20:4c:bc:78:
c5:67:dd:68:3d:39:1e:bf:d2:d0:6e:72:6b:f1:5a:
6c:17:76:69:5b:fa:cc:eb:7f:0c:73:fd:71:e9:07:
d3:9c:53:e8:2a:d7:27:26:92:d4:95:44:ea:e3:76:
2d:b8:49:68:f3:ac:d1:0a:e6:62:8f:9e:21:a8:2a:
27:77:59:f8:d7:e1:5d:f2:4e:28:ae:bf:2d:3b:60:
f0:91:39:b3:64:fa:66:0b:f9:67:f2:7f:d3:cb:38:
2a:83:1b:75:f2:01:ae:1e:47:74:8b:69:3a:6e:52:
f7:ff:c4:d5:28:c1:47:3b:11:5f:64:eb:16:d7:8f:
ba:2f:8c:a1:6f:2b:df:66:dc:cd:aa:8d:33:f1:55:
41:ab:3f:b6:2b:73:f7:2c:93:87:46:a6:50:db:0f:
cf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:97:61:8C:F8:9F:CC:20:F8:BF:A2:DC:17:9E:24:E4:12:83:02:BD
X509v3 Authority Key Identifier:
keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e0:a3:53:54:11:b4:89:d7:0a:97:a8:42:ff:7f:16:a3:1d:
6e:92:b4:6c:72:ae:99:cf:ec:8a:0c:e4:e8:0b:1f:92:61:be:
6e:34:d9:85:65:82:61:73:89:35:00:0a:7e:a6:1d:69:36:f5:
4a:21:34:ee:79:dc:79:59:02:11:62:d6:e9:37:4f:49:b3:cf:
48:06:8c:b3:02:5d:35:91:d1:2b:6e:e4:fe:46:07:e8:4f:0e:
80:de:e9:96:9e:3d:26:33:6e:f0:e5:9b:28:e3:7c:f1:b9:7b:
b2:5a:ad:0d:ca:14:36:09:e0:6f:b9:43:e0:b3:67:8f:86:e3:
cf:39:17:d1:b8:1b:f2:db:3e:32:b7:af:7f:ef:cb:50:c8:ea:
84:39:2f:a4:9b:f2:86:e0:84:6a:09:4a:f6:d6:eb:66:5e:38:
9c:ee:cf:cd:15:34:9b:e9:10:f8:a5:5f:dd:81:83:8a:c0:48:
7c:93:f9:1c:e6:a4:8c:d7:a1:d3:e1:43:01:ab:d0:6e:e2:b6:
41:27:21:ea:9a:61:7b:02:2d:52:d3:f3:e9:20:ae:da:ff:90:
09:bb:4b:1b:25:61:81:5a:d1:d6:0b:5c:8c:70:e7:83:43:c1:
08:69:42:71:16:60:b1:8a:ae:36:12:fe:c8:a6:94:03:f0:9d:
c8:3e:62:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoUlv7ODtMgUje62U4wOxtBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOTc1OTlmNjNkNzg3YzY1YjJlZjlmZjcwZGQ2MzY1Mjc0
MDQ0NjYwHhcNMjUxMDI0MDUwMDMxWhcNMjUxMDI1MDUwMDMxWjAzMTEwLwYDVQQD
Eyg3OTk3NjE4Y2Y4OWZjYzIwZjhiZmEyZGMxNzllMjRlNDEyODMwMmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJuFFYSHR/91nCJ/CKKR3fQQ1zAm
pfu/ZbFBr8gx6aUf2swdGGjyImWK4+/pM7kKg2IODHkIIdAscYqrMEZ+m3/cVCgK
ITVwwUrmkZ/ikJxPQxoIIwuambAZ24vNnYU/XlECECBMvHjFZ91oPTkev9LQbnJr
8VpsF3ZpW/rM638Mc/1x6QfTnFPoKtcnJpLUlUTq43YtuElo86zRCuZij54hqCon
d1n41+Fd8k4orr8tO2DwkTmzZPpmC/ln8n/Tyzgqgxt18gGuHkd0i2k6blL3/8TV
KMFHOxFfZOsW14+6L4yhbyvfZtzNqo0z8VVBqz+2K3P3LJOHRqZQ2w/PqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmXYYz4n8wg+L+i3BeeJOQSgwK9MB8GA1UdIwQY
MBaAFB+XWZ9j14fGWy75/3DdY2UnQERmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMWE5NWItNGJlOS00OTdlLWJkZjct
N2VjZTdkMDczNjUxLzEvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMWE5NWItNGJlOS00OTdlLWJkZjctN2VjZTdkMDczNjUx
LzEvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+CjU1QR
tInXCpeoQv9/FqMdbpK0bHKumc/sigzk6AsfkmG+bjTZhWWCYXOJNQAKfqYdaTb1
SiE07nnceVkCEWLW6TdPSbPPSAaMswJdNZHRK27k/kYH6E8OgN7plp49JjNu8OWb
KON88bl7slqtDcoUNgngb7lD4LNnj4bjzzkX0bgb8ts+Mrevf+/LUMjqhDkvpJvy
huCEaglK9tbrZl44nO7PzRU0m+kQ+KVf3YGDisBIfJP5HOakjNeh0+FDAavQbuK2
QSch6pphewItUtPz6SCu2v+QCbtLGyVhgVrR1gtcjHDng0PBCGlCcRZgsYquNhL+
yKaUA/CdyD5ifg==
-----END CERTIFICATE-----
Generated at Fri Oct 24 11:34:39 2025 by rpki-client