Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
File: dHIvFqh8_9eP15BQVoobTJWbEiQ.mft (raw, json)
Hash identifier: MWfY150OgbZw5a2U9cH5Mf0QN33rQZDfhguTp1etmos=
Subject key identifier: 85:16:EA:7C:7A:54:8C:65:EE:81:12:7A:F9:D8:86:2E:C6:BD:83:AA
Authority key identifier: 74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
Certificate issuer: /CN=74722f16a87cffd78fd79050568a1b4c959b1224
Certificate serial: 01992330E14DAB597B5F03E37B0FE84740CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
Manifest number: 0617
Signing time: Sun 07 Sep 2025 08:00:29 +0000
Manifest this update: Sun 07 Sep 2025 08:00:29 +0000
Manifest next update: Mon 08 Sep 2025 08:00:29 +0000
Files and hashes: 1: 7ZY1Q8mS5q8z2UfLPJc5K6uKZQo.roa (hash: jj4WM2xy5po+h+orIYLAd72AyCd84wAZcTm4AiOOtow=)
2: dHIvFqh8_9eP15BQVoobTJWbEiQ.crl (hash: f+i3o7HXfCFZAJiW6/3w2N/3AtwPDqxVmSU3rhR9Yf4=)
3: umqBfoDDAK3jbRiLn4CC-iVGvHg.roa (hash: XnoyZYelLC2MdNI+4AYsdN08BX8Cvr0ms42chjRPStA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:e1:4d:ab:59:7b:5f:03:e3:7b:0f:e8:47:40:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74722f16a87cffd78fd79050568a1b4c959b1224
Validity
Not Before: Sep 7 08:00:29 2025 GMT
Not After : Sep 8 08:00:29 2025 GMT
Subject: CN=8516ea7c7a548c65ee81127af9d8862ec6bd83aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b7:35:cd:b5:11:70:59:b6:3c:09:1a:47:46:
de:eb:eb:d4:aa:81:80:ea:96:d0:a3:f6:da:3a:9a:
d3:0c:df:71:ab:63:06:00:18:71:89:ae:da:ed:57:
a7:70:6f:4f:33:78:67:5c:f8:b9:3a:bc:b7:44:d6:
14:d5:35:39:b0:55:41:22:fe:a2:9c:9a:f3:be:af:
85:73:9c:2e:1e:58:05:fd:01:37:8f:18:22:2f:86:
b7:4b:8a:ab:83:e5:33:fd:d3:e2:ca:a0:a8:15:21:
ff:a0:1e:2e:aa:09:8d:fc:8c:46:b9:00:fc:fd:c1:
21:ff:8f:38:6e:c2:6f:c7:a9:09:24:16:17:66:c9:
e0:a3:d0:c5:e5:ac:48:9f:4f:08:3f:75:77:f6:c5:
ba:8d:cd:26:bc:39:2e:d1:14:56:c7:78:21:40:ac:
1b:cf:8f:58:89:34:ac:ad:3f:df:b4:f4:bf:82:a5:
b2:32:c1:27:e9:3c:22:67:51:9c:9a:f8:db:06:91:
80:04:42:0b:7a:b1:76:9a:95:8a:77:76:69:d8:23:
46:f4:4d:b9:01:00:7d:6a:7f:a5:00:6e:fb:c5:01:
3d:5e:e9:14:91:bd:91:56:22:94:29:44:4e:6c:4e:
94:43:d4:0b:1c:8b:02:3c:44:3a:8c:67:f5:61:61:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:16:EA:7C:7A:54:8C:65:EE:81:12:7A:F9:D8:86:2E:C6:BD:83:AA
X509v3 Authority Key Identifier:
keyid:74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f4:15:de:bc:46:68:a7:27:db:71:ea:4b:8e:74:4a:05:63:
19:9f:ee:cf:99:d6:12:7d:21:4e:60:0c:43:ce:b9:e3:09:f5:
25:40:63:d9:fe:ee:75:bc:ee:b0:84:f6:9b:6d:92:96:80:ce:
6d:1c:52:a5:b7:e2:59:73:cb:53:ec:b5:4e:a2:c8:ba:42:44:
26:d7:87:0b:f1:69:32:d2:2b:38:e8:0e:26:4c:f4:3a:3e:2d:
f5:3e:ad:66:06:bb:ec:a7:a5:d0:33:54:08:c1:a7:4f:97:24:
db:37:e3:a1:79:e7:b4:f0:aa:fe:f8:df:df:2c:4a:8c:4b:af:
35:15:08:04:96:34:c4:53:5f:8c:07:41:ff:e7:05:9c:e3:e9:
0d:0a:cf:24:0c:4c:79:ce:fc:09:9c:85:fc:88:1e:64:a5:f0:
30:8f:d9:34:83:a6:fc:42:95:b9:2e:2a:8d:23:4a:33:90:9e:
3d:93:f0:8f:b1:f7:20:48:0c:a6:32:7b:f9:84:05:21:cd:4f:
e9:af:b3:b1:9d:43:00:be:63:0e:06:21:1d:e0:3e:bf:df:ab:
2b:e6:8b:b9:f1:cc:3e:4f:01:63:d9:a8:d9:ae:59:22:72:5c:
f0:9c:1b:df:ac:a7:6d:b4:62:89:db:88:34:6e:3d:5d:b6:79:
4c:ae:b1:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMOFNq1l7XwPjew/oR0DLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NzIyZjE2YTg3Y2ZmZDc4ZmQ3OTA1MDU2OGExYjRjOTU5
YjEyMjQwHhcNMjUwOTA3MDgwMDI5WhcNMjUwOTA4MDgwMDI5WjAzMTEwLwYDVQQD
Eyg4NTE2ZWE3YzdhNTQ4YzY1ZWU4MTEyN2FmOWQ4ODYyZWM2YmQ4M2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbc1zbURcFm2PAkaR0be6+vUqoGA
6pbQo/baOprTDN9xq2MGABhxia7a7VencG9PM3hnXPi5Ory3RNYU1TU5sFVBIv6i
nJrzvq+Fc5wuHlgF/QE3jxgiL4a3S4qrg+Uz/dPiyqCoFSH/oB4uqgmN/IxGuQD8
/cEh/484bsJvx6kJJBYXZsngo9DF5axIn08IP3V39sW6jc0mvDku0RRWx3ghQKwb
z49YiTSsrT/ftPS/gqWyMsEn6TwiZ1GcmvjbBpGABEILerF2mpWKd3Zp2CNG9E25
AQB9an+lAG77xQE9XukUkb2RViKUKURObE6UQ9QLHIsCPEQ6jGf1YWGkxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUW6nx6VIxl7oESevnYhi7GvYOqMB8GA1UdIwQY
MBaAFHRyLxaofP/Xj9eQUFaKG0yVmxIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhJdkZxaDhfOWVQMTVCUVZvb2JUSldiRWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mOWU5YTEtZmU1Mi00NTFhLWExNTQt
MzNmNzNkOWZkZGI1LzEvZEhJdkZxaDhfOWVQMTVCUVZvb2JUSldiRWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mOWU5YTEtZmU1Mi00NTFhLWExNTQtMzNmNzNkOWZkZGI1
LzEvZEhJdkZxaDhfOWVQMTVCUVZvb2JUSldiRWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPQV3rxG
aKcn23HqS450SgVjGZ/uz5nWEn0hTmAMQ8654wn1JUBj2f7udbzusIT2m22SloDO
bRxSpbfiWXPLU+y1TqLIukJEJteHC/FpMtIrOOgOJkz0Oj4t9T6tZga77Kel0DNU
CMGnT5ck2zfjoXnntPCq/vjf3yxKjEuvNRUIBJY0xFNfjAdB/+cFnOPpDQrPJAxM
ec78CZyF/IgeZKXwMI/ZNIOm/EKVuS4qjSNKM5CePZPwj7H3IEgMpjJ7+YQFIc1P
6a+zsZ1DAL5jDgYhHeA+v9+rK+aLufHMPk8BY9mo2a5ZInJc8Jwb36ynbbRiiduI
NG49XbZ5TK6xuw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:52 2025 by rpki-client