Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
File: H3t8DW97NGCOskz6GoiL8zsbYVM.mft (raw, json)
Hash identifier: kThb1nr6Di9Q/iWLBonyBtcCf8mP2wuCenb2aIpQNyQ=
Subject key identifier: D7:0D:6D:8C:74:45:34:30:82:74:BA:56:1C:FC:5A:97:E0:D8:F8:B8
Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
Certificate issuer: /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Certificate serial: 019A1F51A43E7D87ED5F4231A2EA0B686499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
Manifest number: 0B2B
Signing time: Sun 26 Oct 2025 07:00:35 +0000
Manifest this update: Sun 26 Oct 2025 07:00:35 +0000
Manifest next update: Mon 27 Oct 2025 07:00:35 +0000
Files and hashes: 1: H3t8DW97NGCOskz6GoiL8zsbYVM.crl (hash: ZErG2ae7ObgROy/ayb0UnBldv250ccPlDT8tancBAjY=)
2: VUf_eExQI714X29LkFd3HNL5qOc.roa (hash: qlXkcSYlvviPgCfxmngZKQMwauhcQqJeFXxSq0WXurQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:a4:3e:7d:87:ed:5f:42:31:a2:ea:0b:68:64:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Validity
Not Before: Oct 26 07:00:35 2025 GMT
Not After : Oct 27 07:00:35 2025 GMT
Subject: CN=d70d6d8c744534308274ba561cfc5a97e0d8f8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:ee:81:a5:aa:62:1c:40:90:2f:4e:e9:fc:
38:b1:32:3f:52:52:b3:d1:42:5c:bc:83:a4:4e:fb:
fc:ac:2d:3c:9b:22:52:38:fe:39:3c:61:13:78:f8:
51:f5:1c:37:b0:88:19:73:fa:7a:e9:33:fe:a9:56:
a0:f8:f3:8f:24:a6:88:13:72:71:a6:74:ad:1c:6d:
df:19:63:b7:4a:06:b0:00:92:31:11:d2:64:b3:cc:
31:fb:6e:65:84:b7:ec:f6:c5:55:a9:eb:3f:fc:3b:
a6:76:48:46:d1:69:a8:36:12:3b:bf:9a:e8:b8:cb:
9d:23:a9:12:9f:d7:bf:b3:d3:3a:df:d0:08:86:e9:
2b:75:ec:40:58:7e:b7:6f:3b:35:f8:1f:46:5f:5a:
71:34:38:ba:c4:41:61:95:59:ab:8b:31:03:2a:e0:
81:b5:f6:2a:d1:54:83:93:5f:c5:6c:a8:e8:b9:d0:
d2:6c:26:0a:f6:aa:0f:ce:49:4f:ac:7a:6e:56:8d:
6c:70:0b:d2:ed:a6:c7:32:f0:b6:52:9b:d2:10:59:
d0:2a:f1:9d:11:00:05:f7:53:34:f9:79:38:40:a6:
82:71:5f:af:a2:89:7f:ec:8a:5a:c2:67:1e:49:2f:
39:a8:53:b7:95:e9:fc:61:76:86:5b:a1:19:85:5e:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0D:6D:8C:74:45:34:30:82:74:BA:56:1C:FC:5A:97:E0:D8:F8:B8
X509v3 Authority Key Identifier:
keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:10:a7:e2:02:db:be:27:3d:a2:8a:20:e7:59:66:97:e9:ba:
e9:74:0e:f9:bb:28:bd:33:2f:8d:3d:78:0c:ef:bb:a5:c1:ef:
3a:e3:2d:0f:dc:48:fe:17:cf:7a:e5:0d:f1:8a:f0:86:26:91:
2e:9c:52:37:25:7d:27:7e:4b:13:3e:36:75:80:e7:b0:c9:5f:
82:65:d9:b8:05:4d:af:10:68:bb:97:33:14:c3:05:69:ec:b5:
4b:cf:cc:a1:0a:ed:5c:b7:96:c5:09:be:ef:41:ea:fe:68:45:
be:df:fe:eb:88:19:1a:53:74:93:4e:ed:55:65:37:70:09:0b:
51:46:e7:11:46:8e:0b:53:b3:ac:39:da:22:ee:66:90:79:87:
5f:d5:70:41:47:a1:b8:70:2a:f0:ce:94:7e:c9:12:06:4f:d8:
d4:cc:16:b5:f8:84:3f:df:16:20:49:de:ac:3f:c2:93:56:1e:
0c:96:09:06:18:a0:2f:8c:ee:7b:ed:30:ee:4c:29:87:2f:b3:
6f:3c:c0:0b:3b:8c:fd:c2:68:21:f3:05:69:c9:1a:04:27:4d:
ac:d0:ca:53:41:cf:38:7f:31:96:f1:aa:7f:58:a0:cb:db:bd:
24:58:ac:93:75:ba:97:45:4d:fc:13:1b:cc:6b:90:f0:98:bc:
f5:7a:f7:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofUaQ+fYftX0IxouoLaGSZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmN2I3YzBkNmY3YjM0NjA4ZWIyNGNmYTFhODg4YmYzM2Ix
YjYxNTMwHhcNMjUxMDI2MDcwMDM1WhcNMjUxMDI3MDcwMDM1WjAzMTEwLwYDVQQD
EyhkNzBkNmQ4Yzc0NDUzNDMwODI3NGJhNTYxY2ZjNWE5N2UwZDhmOGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmDugaWqYhxAkC9O6fw4sTI/UlKz
0UJcvIOkTvv8rC08myJSOP45PGETePhR9Rw3sIgZc/p66TP+qVag+POPJKaIE3Jx
pnStHG3fGWO3SgawAJIxEdJks8wx+25lhLfs9sVVqes//DumdkhG0WmoNhI7v5ro
uMudI6kSn9e/s9M639AIhukrdexAWH63bzs1+B9GX1pxNDi6xEFhlVmrizEDKuCB
tfYq0VSDk1/FbKjoudDSbCYK9qoPzklPrHpuVo1scAvS7abHMvC2UpvSEFnQKvGd
EQAF91M0+Xk4QKaCcV+vool/7IpawmceSS85qFO3len8YXaGW6EZhV7REQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcNbYx0RTQwgnS6Vhz8Wpfg2Pi4MB8GA1UdIwQY
MBaAFB97fA1vezRgjrJM+hqIi/M7G2FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDN0OERXOTdOR0NPc2t6NkdvaUw4enNiWVZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zZTYwYWQtZDZiYi00NWEzLWFlZjMt
MmI5MzJlNjgyM2FkLzEvSDN0OERXOTdOR0NPc2t6NkdvaUw4enNiWVZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zZTYwYWQtZDZiYi00NWEzLWFlZjMtMmI5MzJlNjgyM2Fk
LzEvSDN0OERXOTdOR0NPc2t6NkdvaUw4enNiWVZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRCn4gLb
vic9ooog51lml+m66XQO+bsovTMvjT14DO+7pcHvOuMtD9xI/hfPeuUN8YrwhiaR
LpxSNyV9J35LEz42dYDnsMlfgmXZuAVNrxBou5czFMMFaey1S8/MoQrtXLeWxQm+
70Hq/mhFvt/+64gZGlN0k07tVWU3cAkLUUbnEUaOC1OzrDnaIu5mkHmHX9VwQUeh
uHAq8M6UfskSBk/Y1MwWtfiEP98WIEnerD/Ck1YeDJYJBhigL4zue+0w7kwphy+z
bzzACzuM/cJoIfMFackaBCdNrNDKU0HPOH8xlvGqf1igy9u9JFisk3W6l0VN/BMb
zGuQ8Ji89Xr3iQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 14:03:23 2025 by rpki-client