Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
File: H-AtvuYsmPAfIPR3DRakf3mr4yw.mft (raw, json)
Hash identifier: tpgzEna7Q1rdNgbvMjXpBQtroZDQw0UIcYSI8v9NAXI=
Subject key identifier: E2:20:FC:89:71:AF:69:08:5C:C6:AC:BA:EC:4E:AC:7C:7A:37:B9:60
Authority key identifier: 1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
Certificate issuer: /CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Certificate serial: 019922FAD9E037AC4548E2EA5304EF761F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 07:01:28 +0000
Manifest this update: Sun 07 Sep 2025 07:01:28 +0000
Manifest next update: Mon 08 Sep 2025 07:01:28 +0000
Files and hashes: 1: B_Zgbr5zHePzPX0kzYDR02lMQd0.roa (hash: oTbqq1QauLG6/LAk+F5PPgZYsS1F6hnMzvsYBg19oqU=)
2: H-AtvuYsmPAfIPR3DRakf3mr4yw.crl (hash: mqpMr+/fc4tdmBqMWhxXyAB6zpN35cd5FFwtpNwrYDw=)
3: iB3qHj6jc-vYvyyZv2bCeRVUFSQ.roa (hash: GN+JMGlNiyjaBMnzgzzZxTHdUtxnuMF8sNkbCRGW38U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d9:e0:37:ac:45:48:e2:ea:53:04:ef:76:1f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Validity
Not Before: Sep 7 07:01:28 2025 GMT
Not After : Sep 8 07:01:28 2025 GMT
Subject: CN=e220fc8971af69085cc6acbaec4eac7c7a37b960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:7a:e9:64:93:86:09:2c:6d:28:75:44:5e:
05:53:ee:23:cf:0f:4b:89:0f:8c:19:0f:6f:f3:b8:
13:f0:77:34:5b:0f:c4:0d:e9:c1:93:18:ce:71:a5:
15:a1:59:de:99:9d:fa:f8:28:44:e3:31:2d:14:1b:
c2:49:47:eb:25:e9:b9:34:93:84:aa:63:11:1a:9f:
f6:93:ac:58:46:fb:42:42:92:4f:c3:4b:35:52:a6:
39:2d:ee:e7:9a:79:1f:07:c0:d7:a2:f6:23:c0:11:
aa:62:4c:be:d1:a5:8c:04:0e:12:92:31:4f:f7:1d:
cf:3e:79:e9:f1:f8:5d:81:38:6f:63:71:bb:58:f8:
82:d3:00:03:c2:50:8b:d2:f5:d5:ee:c2:62:dc:7b:
84:4b:11:a7:31:11:e9:9f:4d:92:82:ae:d3:d4:ee:
8c:99:75:c2:6c:d9:ef:65:5b:82:21:04:2b:44:0d:
1e:07:dd:96:62:62:6a:66:86:4d:4e:79:e8:52:3e:
4f:85:9d:2d:06:d0:35:66:e4:ac:7e:2f:2b:70:43:
94:c9:8f:e1:21:e9:1a:35:a8:86:b2:12:c7:4d:bd:
28:ec:68:a4:20:04:e3:0a:f5:b1:3d:8a:aa:18:22:
6e:5f:31:bf:d0:9f:b8:05:85:ba:ce:76:5d:8c:1d:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:20:FC:89:71:AF:69:08:5C:C6:AC:BA:EC:4E:AC:7C:7A:37:B9:60
X509v3 Authority Key Identifier:
keyid:1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:36:4f:8e:8f:bb:da:14:df:32:8c:c7:d8:dc:37:56:ec:3f:
42:e5:ff:04:e3:57:c9:c9:e3:9f:a1:a9:94:7a:5d:25:9c:c8:
a9:94:5d:49:84:ab:2b:e4:0f:46:d6:c6:00:9c:7c:5c:0d:45:
65:59:13:c2:5a:aa:f1:f1:33:a6:8d:db:0f:c0:d8:f8:d0:93:
82:f3:7c:02:c6:1b:5e:0b:73:4f:38:72:6d:3f:a8:80:85:35:
fb:69:74:a8:90:9f:32:6c:b6:40:8c:15:c1:9a:b5:7f:ff:91:
42:99:11:65:ca:74:38:85:41:7c:43:7b:ac:f9:45:2b:b0:e2:
a3:a3:40:9a:a2:8b:3a:79:9a:54:b6:b6:47:09:5a:61:19:04:
da:64:c3:f9:d4:02:b5:f3:c1:4d:8d:be:1d:62:81:de:14:aa:
b3:5b:57:4e:3a:bf:76:9a:ac:dd:fe:f5:67:59:37:25:51:f5:
40:4c:a9:35:31:0e:8a:58:01:9b:4b:6a:9c:0c:bc:27:e2:af:
17:75:bd:c6:57:b6:27:0c:c2:93:1d:57:c5:8d:c6:05:37:2d:
e9:93:05:42:92:49:1c:94:85:45:9d:3f:54:53:a5:3b:38:f5:
8f:23:74:71:83:8f:c6:57:ef:9f:4b:e9:60:16:01:c8:74:19:
14:b7:ad:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+tngN6xFSOLqUwTvdh8tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZTAyZGJlZTYyYzk4ZjAxZjIwZjQ3NzBkMTZhNDdmNzlh
YmUzMmMwHhcNMjUwOTA3MDcwMTI4WhcNMjUwOTA4MDcwMTI4WjAzMTEwLwYDVQQD
EyhlMjIwZmM4OTcxYWY2OTA4NWNjNmFjYmFlYzRlYWM3YzdhMzdiOTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH166WSThgksbSh1RF4FU+4jzw9L
iQ+MGQ9v87gT8Hc0Ww/EDenBkxjOcaUVoVnemZ36+ChE4zEtFBvCSUfrJem5NJOE
qmMRGp/2k6xYRvtCQpJPw0s1UqY5Le7nmnkfB8DXovYjwBGqYky+0aWMBA4SkjFP
9x3PPnnp8fhdgThvY3G7WPiC0wADwlCL0vXV7sJi3HuESxGnMRHpn02Sgq7T1O6M
mXXCbNnvZVuCIQQrRA0eB92WYmJqZoZNTnnoUj5PhZ0tBtA1ZuSsfi8rcEOUyY/h
IekaNaiGshLHTb0o7GikIATjCvWxPYqqGCJuXzG/0J+4BYW6znZdjB0AXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIg/Ilxr2kIXMasuuxOrHx6N7lgMB8GA1UdIwQY
MBaAFB/gLb7mLJjwHyD0dw0WpH95q+MsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC1BdHZ1WXNtUEFmSVBSM0RSYWtmM21yNHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9hMTJhMzAtZDYwZi00MDMyLTg4NjMt
MjEyNTNlYTlmM2E0LzEvSC1BdHZ1WXNtUEFmSVBSM0RSYWtmM21yNHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9hMTJhMzAtZDYwZi00MDMyLTg4NjMtMjEyNTNlYTlmM2E0
LzEvSC1BdHZ1WXNtUEFmSVBSM0RSYWtmM21yNHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTZPjo+7
2hTfMozH2Nw3Vuw/QuX/BONXycnjn6GplHpdJZzIqZRdSYSrK+QPRtbGAJx8XA1F
ZVkTwlqq8fEzpo3bD8DY+NCTgvN8AsYbXgtzTzhybT+ogIU1+2l0qJCfMmy2QIwV
wZq1f/+RQpkRZcp0OIVBfEN7rPlFK7Dio6NAmqKLOnmaVLa2RwlaYRkE2mTD+dQC
tfPBTY2+HWKB3hSqs1tXTjq/dpqs3f71Z1k3JVH1QEypNTEOilgBm0tqnAy8J+Kv
F3W9xle2JwzCkx1XxY3GBTct6ZMFQpJJHJSFRZ0/VFOlOzj1jyN0cYOPxlfvn0vp
YBYByHQZFLetLg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:09 2025 by rpki-client