Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
File: h6Tl13JcWGiqvqAluDjcwjPG_8k.mft (raw, json)
Hash identifier: co22XbNTjBLpVEZ1C8N2VO0R6Mjd1ir9DqEgTK1BDwQ=
Subject key identifier: DC:03:B1:3E:A8:FA:01:C1:72:08:44:56:3B:92:C1:02:BF:7C:30:90
Authority key identifier: 87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9
Certificate issuer: /CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9
Certificate serial: 019923310AC8BCD04100B9C52CAA5C0C4E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
Manifest number: 13A8
Signing time: Sun 07 Sep 2025 08:00:40 +0000
Manifest this update: Sun 07 Sep 2025 08:00:40 +0000
Manifest next update: Mon 08 Sep 2025 08:00:40 +0000
Files and hashes: 1: 326zxIS7flVicYpYeyjZhIJPEQc.roa (hash: 7OXoJx4K7+k1nQ/ABjRnbXIbMj5YXCBVmfp1DpVjQws=)
2: h6Tl13JcWGiqvqAluDjcwjPG_8k.crl (hash: TvoWjJxWsPI6QinwLsxosG9io+KSSN7/K0eK4zZHBVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:0a:c8:bc:d0:41:00:b9:c5:2c:aa:5c:0c:4e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9
Validity
Not Before: Sep 7 08:00:40 2025 GMT
Not After : Sep 8 08:00:40 2025 GMT
Subject: CN=dc03b13ea8fa01c1720844563b92c102bf7c3090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a4:22:79:50:2b:a7:e6:db:e5:4d:fe:25:11:
8d:cc:37:8a:a4:49:bd:0c:44:38:15:4e:4c:4e:4c:
cc:cc:79:22:d2:04:4d:0b:88:21:8b:ac:77:17:32:
3b:45:2d:ac:27:84:16:3d:2d:60:e1:00:e0:a8:aa:
06:15:56:62:82:db:89:63:24:4a:98:2b:15:d1:78:
a1:d6:ec:09:09:3e:02:c2:b0:f9:00:1f:a8:db:97:
04:0e:7e:a2:db:f9:47:05:84:1c:e4:84:18:52:e5:
1c:72:18:34:55:27:f1:7e:39:88:c9:9e:41:ca:9e:
f4:e4:e9:b1:85:01:77:f5:cc:80:38:d2:49:d4:bc:
45:13:77:a9:a3:3d:44:81:11:be:8f:1f:34:66:15:
41:d5:f4:13:f4:89:8b:2c:eb:11:14:62:69:8f:b9:
ed:cc:51:4d:59:19:e1:64:70:77:d7:ab:1b:ea:85:
86:22:cf:0e:dd:9f:e7:dc:3f:69:67:5f:b3:59:e0:
aa:f1:c0:1c:65:ef:e1:c4:4f:3b:be:4a:ec:8a:1b:
51:6f:64:cf:a6:04:d1:12:60:e2:2b:ea:1c:7c:c5:
b2:34:5b:43:1e:b5:37:48:bb:6d:4a:cc:38:56:d0:
06:f7:7e:2d:de:81:f9:c0:86:78:ee:33:c5:ce:e7:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:03:B1:3E:A8:FA:01:C1:72:08:44:56:3B:92:C1:02:BF:7C:30:90
X509v3 Authority Key Identifier:
keyid:87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:69:a9:0f:bf:48:ac:f5:ae:18:16:7b:4d:c8:14:c4:b6:ec:
a6:c3:86:bb:89:4e:20:60:db:ba:87:27:2a:12:35:47:32:45:
fa:ee:25:eb:6b:98:8f:fa:f8:7a:09:95:68:34:8c:c8:3a:c0:
04:0d:52:17:ad:d2:24:f5:d4:d5:d1:a5:c2:d4:6a:5b:aa:fa:
d6:06:59:04:ad:25:07:c4:d9:d5:4b:c5:58:b7:02:3f:bb:b2:
7b:15:93:b4:ae:ff:44:08:bf:58:46:95:e6:61:6c:7d:e3:43:
9f:97:33:c4:2a:7a:a2:e0:75:43:ec:59:f2:05:f4:1d:df:5e:
1d:1b:81:d4:64:62:28:3b:c5:04:be:2d:dd:60:8c:88:b6:ec:
c3:2f:a6:1f:dd:38:2b:62:73:d2:df:2d:a8:58:18:6c:a1:27:
2f:3b:24:d9:cf:0a:81:af:95:39:fd:0f:89:99:06:f1:f5:01:
b6:dc:86:39:73:fb:39:d7:9b:52:c9:da:a2:cd:6b:6c:7d:91:
16:fb:14:c7:0d:ac:57:ec:6a:b1:8e:e7:cf:e5:9f:0e:95:72:
a1:25:48:57:29:04:d1:5c:01:73:67:3c:4e:49:d1:69:73:cf:
ed:cb:34:28:97:3d:c7:34:14:33:65:93:fa:6d:20:24:47:b3:
e8:9c:aa:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMQrIvNBBALnFLKpcDE4nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YTRlNWQ3NzI1YzU4NjhhYWJlYTAyNWI4MzhkY2MyMzNj
NmZmYzkwHhcNMjUwOTA3MDgwMDQwWhcNMjUwOTA4MDgwMDQwWjAzMTEwLwYDVQQD
EyhkYzAzYjEzZWE4ZmEwMWMxNzIwODQ0NTYzYjkyYzEwMmJmN2MzMDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06QieVArp+bb5U3+JRGNzDeKpEm9
DEQ4FU5MTkzMzHki0gRNC4ghi6x3FzI7RS2sJ4QWPS1g4QDgqKoGFVZigtuJYyRK
mCsV0Xih1uwJCT4CwrD5AB+o25cEDn6i2/lHBYQc5IQYUuUcchg0VSfxfjmIyZ5B
yp705OmxhQF39cyAONJJ1LxFE3epoz1EgRG+jx80ZhVB1fQT9ImLLOsRFGJpj7nt
zFFNWRnhZHB316sb6oWGIs8O3Z/n3D9pZ1+zWeCq8cAcZe/hxE87vkrsihtRb2TP
pgTREmDiK+ocfMWyNFtDHrU3SLttSsw4VtAG934t3oH5wIZ47jPFzue7kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwDsT6o+gHBcghEVjuSwQK/fDCQMB8GA1UdIwQY
MBaAFIek5ddyXFhoqr6gJbg43MIzxv/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDZUbDEzSmNXR2lxdnFBbHVEamN3alBHXzhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My82NTU1YzMtMDU0Ni00ZWVmLTg2NDgt
NTA2YTIxNTk1Y2I4LzEvaDZUbDEzSmNXR2lxdnFBbHVEamN3alBHXzhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My82NTU1YzMtMDU0Ni00ZWVmLTg2NDgtNTA2YTIxNTk1Y2I4
LzEvaDZUbDEzSmNXR2lxdnFBbHVEamN3alBHXzhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmmpD79I
rPWuGBZ7TcgUxLbspsOGu4lOIGDbuocnKhI1RzJF+u4l62uYj/r4egmVaDSMyDrA
BA1SF63SJPXU1dGlwtRqW6r61gZZBK0lB8TZ1UvFWLcCP7uyexWTtK7/RAi/WEaV
5mFsfeNDn5czxCp6ouB1Q+xZ8gX0Hd9eHRuB1GRiKDvFBL4t3WCMiLbswy+mH904
K2Jz0t8tqFgYbKEnLzsk2c8Kga+VOf0PiZkG8fUBttyGOXP7OdebUsnaos1rbH2R
FvsUxw2sV+xqsY7nz+WfDpVyoSVIVykE0VwBc2c8TknRaXPP7cs0KJc9xzQUM2WT
+m0gJEez6JyqWA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:08 2025 by rpki-client