Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
File: hIJ9422jg4AexCqAQ8eHJTd2A34.mft (raw, json)
Hash identifier: XurtV16RenZMwuj5TEk9rsRMIpkoW/Vp0kdUrCkZmAY=
Subject key identifier: 8B:BB:88:B5:8A:76:BF:20:73:88:55:79:77:B1:18:56:98:FD:C5:32
Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e
Certificate serial: 019936EE66BF8D7989CF722A48E400BEDE89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
Manifest number: 0ABE
Signing time: Thu 11 Sep 2025 04:00:17 +0000
Manifest this update: Thu 11 Sep 2025 04:00:17 +0000
Manifest next update: Fri 12 Sep 2025 04:00:17 +0000
Files and hashes: 1: d4QzmUrPPbJQxMw96G7I8wKAY_8.roa (hash: kCIIAo6mIinxOh21iDNSoj9jRYqWTcCgtvPqYHHPUqY=)
2: hIJ9422jg4AexCqAQ8eHJTd2A34.crl (hash: mJX/bNoiJleLNtEK3be3vbzbD6qnd0MCPXfnM0fTUao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ee:66:bf:8d:79:89:cf:72:2a:48:e4:00:be:de:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84827de36da383801ec42a8043c787253776037e
Validity
Not Before: Sep 11 04:00:17 2025 GMT
Not After : Sep 12 04:00:17 2025 GMT
Subject: CN=8bbb88b58a76bf207388557977b1185698fdc532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fb:62:3d:05:43:2e:50:9b:34:83:7a:15:82:
89:94:01:cf:a7:93:a4:7c:4d:51:30:fc:f9:c6:66:
1a:51:2b:1b:5f:a5:18:ed:7d:d8:1b:b9:25:70:61:
2f:31:2b:63:a8:79:aa:87:10:08:3f:eb:16:fb:74:
14:56:81:5c:aa:ac:c8:a8:40:90:0e:3d:d1:1d:d4:
23:5d:93:5c:19:aa:e0:f9:4a:80:f1:52:8e:5b:ad:
5e:f1:ab:a6:1c:6f:67:07:e3:3d:6f:e8:29:de:07:
3a:1d:eb:f1:8f:fb:e2:2b:e2:15:84:54:6f:97:33:
52:54:01:c7:0f:a8:1d:bd:25:aa:cd:b6:35:a1:d6:
5e:f4:e1:c7:bc:bd:8c:bf:02:14:c3:6f:b5:62:e4:
f6:7f:1e:f9:11:57:f2:1a:b3:b2:37:45:27:70:95:
75:2d:19:42:e4:37:6d:86:36:8f:85:b9:e2:0e:22:
d8:48:b5:78:c4:3b:de:5b:10:ea:76:e5:9a:a0:51:
70:d8:7d:fe:e5:10:7d:20:f4:a9:87:6c:f2:f9:b6:
e3:23:bb:9d:c6:dc:d6:c8:1e:8c:e5:f5:ea:d3:bf:
4a:86:b3:5a:85:1c:35:bb:25:3b:72:96:41:2f:97:
d4:17:71:7d:b1:ba:26:d6:8c:8c:7b:3e:e1:0d:a0:
24:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BB:88:B5:8A:76:BF:20:73:88:55:79:77:B1:18:56:98:FD:C5:32
X509v3 Authority Key Identifier:
keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:98:1c:12:07:a1:56:66:23:a7:24:04:8a:01:7e:37:6e:3c:
57:2b:14:63:d8:01:b4:57:ca:1d:1e:c1:cc:de:1c:05:b9:0a:
fd:5a:aa:52:16:2c:73:87:a8:7b:f8:73:9a:da:f9:15:87:c3:
cb:3a:25:f0:b4:b4:f1:02:dc:ed:2b:fa:09:34:23:23:65:59:
f6:e8:5e:27:9c:42:31:7f:1c:de:9f:a0:70:ec:6a:b0:f2:4d:
d5:8b:bd:e8:da:77:ab:da:7e:20:4c:b3:ec:7a:5d:24:26:db:
71:08:28:0d:80:92:b9:96:7d:e4:c2:5a:87:5d:d8:c0:4a:34:
f6:4e:c6:c7:23:ac:be:68:df:42:f0:0f:2a:cb:61:b6:68:b6:
6c:8f:e5:71:2d:f0:36:c8:ff:47:32:53:42:b1:5c:64:c7:37:
9c:3d:2b:60:93:e8:b8:17:d0:11:62:67:cc:bc:61:d7:e5:3e:
67:c8:25:90:d9:8f:1e:71:70:cf:2e:95:4a:18:75:44:79:34:
cf:ff:48:47:72:ea:51:19:40:8b:db:1e:a9:4d:0f:ff:3c:57:
16:cf:90:36:40:e5:88:7c:01:5b:2a:b6:e8:35:65:e7:d2:3f:
4b:57:56:0b:a8:02:a8:98:67:b2:40:6b:87:fc:27:7b:33:f5:
e7:c8:83:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk27ma/jXmJz3IqSOQAvt6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ODI3ZGUzNmRhMzgzODAxZWM0MmE4MDQzYzc4NzI1Mzc3
NjAzN2UwHhcNMjUwOTExMDQwMDE3WhcNMjUwOTEyMDQwMDE3WjAzMTEwLwYDVQQD
Eyg4YmJiODhiNThhNzZiZjIwNzM4ODU1Nzk3N2IxMTg1Njk4ZmRjNTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ftiPQVDLlCbNIN6FYKJlAHPp5Ok
fE1RMPz5xmYaUSsbX6UY7X3YG7klcGEvMStjqHmqhxAIP+sW+3QUVoFcqqzIqECQ
Dj3RHdQjXZNcGarg+UqA8VKOW61e8aumHG9nB+M9b+gp3gc6Hevxj/viK+IVhFRv
lzNSVAHHD6gdvSWqzbY1odZe9OHHvL2MvwIUw2+1YuT2fx75EVfyGrOyN0UncJV1
LRlC5DdthjaPhbniDiLYSLV4xDveWxDqduWaoFFw2H3+5RB9IPSph2zy+bbjI7ud
xtzWyB6M5fXq079KhrNahRw1uyU7cpZBL5fUF3F9sbom1oyMez7hDaAk0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIu7iLWKdr8gc4hVeXexGFaY/cUyMB8GA1UdIwQY
MBaAFISCfeNto4OAHsQqgEPHhyU3dgN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaElKOTQyMmpnNEFleENxQVE4ZUhKVGQyQTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYzg0ZDctZWQzZS00YWRhLWJlYjkt
MThlNjVlNjRkZjcxLzEvaElKOTQyMmpnNEFleENxQVE4ZUhKVGQyQTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lYzg0ZDctZWQzZS00YWRhLWJlYjktMThlNjVlNjRkZjcx
LzEvaElKOTQyMmpnNEFleENxQVE4ZUhKVGQyQTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZgcEgeh
VmYjpyQEigF+N248VysUY9gBtFfKHR7BzN4cBbkK/VqqUhYsc4eoe/hzmtr5FYfD
yzol8LS08QLc7Sv6CTQjI2VZ9uheJ5xCMX8c3p+gcOxqsPJN1Yu96Np3q9p+IEyz
7HpdJCbbcQgoDYCSuZZ95MJah13YwEo09k7GxyOsvmjfQvAPKsthtmi2bI/lcS3w
Nsj/RzJTQrFcZMc3nD0rYJPouBfQEWJnzLxh1+U+Z8glkNmPHnFwzy6VShh1RHk0
z/9IR3LqURlAi9seqU0P/zxXFs+QNkDliHwBWyq26DVl59I/S1dWC6gCqJhnskBr
h/wnezP158iDsA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 09:48:37 2025 by rpki-client