Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
File: RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft (raw, json)
Hash identifier: Rkh9gYNXcjUpHpKYnJtDyMLMIDo64Vtq9PJj03Tpj+E=
Subject key identifier: E6:7B:BC:6B:BC:42:F7:D8:67:9C:A2:23:15:D8:81:8E:18:35:5B:22
Authority key identifier: 44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD
Certificate issuer: /CN=447f9143ea55358fbd62fa5644547460172e1afd
Certificate serial: 0199228D2E1D24FFC84331411494DCE007BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
Manifest number: 0447
Signing time: Sun 07 Sep 2025 05:01:41 +0000
Manifest this update: Sun 07 Sep 2025 05:01:41 +0000
Manifest next update: Mon 08 Sep 2025 05:01:41 +0000
Files and hashes: 1: RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl (hash: 24ndhHjC4ux+6MBFDab9Fw3RhaN9cQjo/nla6x/VqPg=)
2: XJeFszxemC7e9u-8mZLkEs6aHFs.roa (hash: OiP4xwhS3dePGm/ma2M64C+nfCdXfnndrH2qcjsO/X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:2e:1d:24:ff:c8:43:31:41:14:94:dc:e0:07:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447f9143ea55358fbd62fa5644547460172e1afd
Validity
Not Before: Sep 7 05:01:41 2025 GMT
Not After : Sep 8 05:01:41 2025 GMT
Subject: CN=e67bbc6bbc42f7d8679ca22315d8818e18355b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:4e:b6:76:2e:dc:c5:db:69:96:af:50:d0:
73:d8:d0:80:e5:ed:93:63:55:60:7b:55:28:67:67:
5d:6a:4c:78:76:96:d4:03:f9:90:a9:6b:95:17:1b:
b5:ca:7f:97:7f:be:ba:8a:6b:b6:40:6b:31:d4:6e:
4d:5d:91:13:59:0f:e0:bd:bb:f5:e2:6f:44:56:4f:
8f:67:75:93:1b:e1:19:b4:ea:7d:23:1c:bb:74:56:
08:9d:b9:b6:5e:ca:d3:d2:ec:36:e8:b9:0f:c4:82:
2d:bd:16:e9:65:e8:2a:1c:d2:b6:c4:b4:87:eb:12:
67:54:c2:bc:10:ca:6b:dd:c7:18:68:aa:c6:85:90:
48:5f:58:e0:00:e2:0a:3b:94:af:db:d4:26:9b:a1:
a2:ed:d6:fb:4c:fb:6c:74:cd:f5:f7:d1:09:ee:9e:
9d:fd:94:3f:2a:e8:de:7a:b3:38:00:41:e6:29:ca:
08:ed:04:9b:de:4e:22:8f:c1:37:d5:3e:cd:60:cb:
19:1f:4d:0c:88:48:c5:9e:2d:61:55:a7:b5:5d:45:
34:a7:e3:e8:63:38:8a:ff:ec:45:ae:1b:83:45:87:
71:33:c6:a1:e1:77:c2:a0:5c:82:33:30:f8:25:b7:
f5:3e:98:73:67:07:c9:36:82:65:1f:79:4d:15:1a:
37:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7B:BC:6B:BC:42:F7:D8:67:9C:A2:23:15:D8:81:8E:18:35:5B:22
X509v3 Authority Key Identifier:
keyid:44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1d:b0:04:9b:cb:fe:da:fd:70:42:02:d8:c4:1d:d2:ce:b1:
aa:1e:c3:11:cd:a3:4a:1b:2c:6f:b9:f6:7d:65:cf:de:97:7f:
1b:1e:7e:48:95:22:ff:8f:e6:a9:09:b3:33:ec:bf:af:f9:e9:
bf:2c:6c:61:e3:9a:21:09:ab:e1:80:a6:3a:ad:b7:6e:04:1f:
1e:6d:c1:7f:09:89:19:a9:e2:2b:58:7b:c1:7d:b7:50:d7:36:
0b:62:3f:79:7f:82:db:f4:21:14:d0:47:cb:58:e0:fc:b1:34:
ac:0a:0f:d2:89:6e:8d:1c:aa:1b:cf:58:2d:d6:3a:37:b4:a6:
25:1b:e5:70:03:81:42:9d:73:24:7f:44:b7:51:b3:83:b1:05:
be:51:06:07:ca:bd:c5:e9:6c:d6:99:87:42:f0:70:ed:64:80:
5d:d1:9f:f1:dc:25:e5:2e:b4:29:d5:93:8f:15:f1:fe:47:ab:
15:13:ed:b0:97:03:a2:04:43:7b:63:49:05:60:4f:c4:3b:6f:
97:96:f2:0f:ec:b2:f4:42:05:0b:86:73:35:f5:70:72:15:25:
ac:76:7a:da:86:d2:46:2d:69:65:b3:b5:61:a3:47:37:2a:d1:
1b:b2:ff:6e:67:c2:f8:ff:90:d7:a0:9a:36:47:62:82:35:bb:
07:50:fa:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijS4dJP/IQzFBFJTc4Ae+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0N2Y5MTQzZWE1NTM1OGZiZDYyZmE1NjQ0NTQ3NDYwMTcy
ZTFhZmQwHhcNMjUwOTA3MDUwMTQxWhcNMjUwOTA4MDUwMTQxWjAzMTEwLwYDVQQD
EyhlNjdiYmM2YmJjNDJmN2Q4Njc5Y2EyMjMxNWQ4ODE4ZTE4MzU1YjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurROtnYu3MXbaZavUNBz2NCA5e2T
Y1Vge1UoZ2ddakx4dpbUA/mQqWuVFxu1yn+Xf766imu2QGsx1G5NXZETWQ/gvbv1
4m9EVk+PZ3WTG+EZtOp9Ixy7dFYInbm2XsrT0uw26LkPxIItvRbpZegqHNK2xLSH
6xJnVMK8EMpr3ccYaKrGhZBIX1jgAOIKO5Sv29Qmm6Gi7db7TPtsdM3199EJ7p6d
/ZQ/KujeerM4AEHmKcoI7QSb3k4ij8E31T7NYMsZH00MiEjFni1hVae1XUU0p+Po
YziK/+xFrhuDRYdxM8ah4XfCoFyCMzD4Jbf1PphzZwfJNoJlH3lNFRo3oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZ7vGu8QvfYZ5yiIxXYgY4YNVsiMB8GA1UdIwQY
MBaAFER/kUPqVTWPvWL6VkRUdGAXLhr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkgtUlEtcFZOWS05WXZwV1JGUjBZQmN1R3YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85ZWEzNjktYTI4Yy00YzdlLTlhMTUt
YzQyOTJmYWM5YmU4LzEvUkgtUlEtcFZOWS05WXZwV1JGUjBZQmN1R3YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS85ZWEzNjktYTI4Yy00YzdlLTlhMTUtYzQyOTJmYWM5YmU4
LzEvUkgtUlEtcFZOWS05WXZwV1JGUjBZQmN1R3YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhR2wBJvL
/tr9cEIC2MQd0s6xqh7DEc2jShssb7n2fWXP3pd/Gx5+SJUi/4/mqQmzM+y/r/np
vyxsYeOaIQmr4YCmOq23bgQfHm3BfwmJGaniK1h7wX23UNc2C2I/eX+C2/QhFNBH
y1jg/LE0rAoP0olujRyqG89YLdY6N7SmJRvlcAOBQp1zJH9Et1Gzg7EFvlEGB8q9
xels1pmHQvBw7WSAXdGf8dwl5S60KdWTjxXx/kerFRPtsJcDogRDe2NJBWBPxDtv
l5byD+yy9EIFC4ZzNfVwchUlrHZ62obSRi1pZbO1YaNHNyrRG7L/bmfC+P+Q16Ca
NkdigjW7B1D64Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:13 2025 by rpki-client