Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
File: h338-RVp2BViJvwnkOZ5BnY6KwM.mft (raw, json)
Hash identifier: hgzOQX/c5A0aRtiAIXs2MnEVRXqGnu6ocWAeNEr9BYk=
Subject key identifier: 83:AF:AF:00:75:16:48:47:25:DB:45:88:52:46:5F:2B:B3:9A:4A:CA
Authority key identifier: 87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
Certificate issuer: /CN=877dfcf91569d8156226fc2790e67906763a2b03
Certificate serial: 019A70A4F0C57704EA85CFDCC0AF4266EAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 02:00:48 +0000
Manifest this update: Tue 11 Nov 2025 02:00:48 +0000
Manifest next update: Wed 12 Nov 2025 02:00:48 +0000
Files and hashes: 1: h338-RVp2BViJvwnkOZ5BnY6KwM.crl (hash: qVIzWsOcTJrqpt9WVIICwvC6O0xaYF1sHtjbs2TQK+w=)
2: hw2W04D1is42TOmflaN39hcxH9E.roa (hash: fNZHjDeAyo42LcaysmyiDifSO0kt6UxDpr+XhWr9MzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:f0:c5:77:04:ea:85:cf:dc:c0:af:42:66:ea:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877dfcf91569d8156226fc2790e67906763a2b03
Validity
Not Before: Nov 11 02:00:48 2025 GMT
Not After : Nov 12 02:00:48 2025 GMT
Subject: CN=83afaf007516484725db458852465f2bb39a4aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:5c:6b:39:3f:ea:2f:7c:9d:54:4d:f0:de:
78:8d:d1:9e:2c:f5:53:80:b5:a8:94:11:f8:15:e7:
85:c5:b6:b5:ff:44:31:6d:c0:bd:95:9c:e4:4e:9d:
21:70:21:c6:19:26:67:99:03:7f:29:a7:40:52:8a:
b8:98:e8:44:0c:a3:45:c4:8f:16:76:33:2b:35:09:
89:24:b8:a7:78:61:c3:22:35:a4:cd:f9:c0:8d:81:
d0:80:45:ef:88:57:0a:73:72:33:3d:92:c4:97:31:
de:3c:da:1d:8c:cb:00:63:02:44:27:68:c8:0f:06:
7d:e6:af:c5:77:56:02:8d:dd:f1:a4:5e:61:12:e2:
95:e7:33:d2:76:fb:89:57:fc:96:ef:27:eb:98:0f:
69:3f:20:48:0f:e9:1d:a4:f9:c6:51:e6:15:1c:e1:
59:d0:5c:d0:23:b3:79:8b:0e:61:61:4a:9f:1a:9b:
fc:f6:8a:8a:fb:9f:34:7a:73:86:44:62:88:73:33:
6e:04:ca:fb:70:57:72:98:28:62:7e:bd:92:d3:6e:
bb:ad:54:3e:88:25:1d:4c:b0:bf:1b:00:1d:3e:f8:
71:6f:19:8f:fa:46:82:cc:e4:5f:d4:3f:b9:03:d3:
50:11:e0:b5:eb:4f:26:c6:84:54:3a:c2:e8:26:b8:
9d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AF:AF:00:75:16:48:47:25:DB:45:88:52:46:5F:2B:B3:9A:4A:CA
X509v3 Authority Key Identifier:
keyid:87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b2:d1:04:1b:ef:46:34:32:07:06:71:8c:72:0c:74:22:30:
9e:9e:41:d9:9d:99:5b:97:2f:4b:f4:35:54:6f:f1:24:ea:d2:
e7:bb:be:55:e5:ba:8f:17:bf:5a:18:d4:60:85:45:c3:53:01:
f1:a1:d7:76:da:64:b7:d8:79:f7:80:76:cc:37:10:55:72:cd:
a6:25:c8:5b:65:6c:2f:9b:00:67:8c:a2:01:ba:fb:cb:98:64:
65:be:d8:9f:97:b7:51:0f:d6:5e:73:41:ab:64:a1:af:67:c2:
b5:2a:ba:ef:e7:9f:ed:13:39:7d:6e:7d:b4:9e:0d:ad:a5:42:
40:9c:50:0d:2a:2e:64:cb:52:4d:09:17:f9:56:76:e0:b2:01:
c4:1b:a0:30:df:15:44:e9:88:5f:83:5c:85:91:6f:a8:51:8b:
88:95:30:8e:85:ad:64:3c:de:54:fe:e5:9b:c9:bd:1c:09:29:
4d:b5:7b:57:59:bc:3b:84:80:b1:0a:ce:ac:77:fb:14:d8:a3:
34:3a:7b:75:da:d3:da:51:12:f1:63:b4:7b:4a:2f:75:f2:dd:
0f:d0:a9:05:34:87:77:23:36:5f:35:40:c5:11:70:90:5d:c5:
ae:24:6f:c3:79:d3:e7:ca:9f:f9:c3:82:0d:b6:2d:8f:9c:0d:
ba:ca:f1:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpPDFdwTqhc/cwK9CZurzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3N2RmY2Y5MTU2OWQ4MTU2MjI2ZmMyNzkwZTY3OTA2NzYz
YTJiMDMwHhcNMjUxMTExMDIwMDQ4WhcNMjUxMTEyMDIwMDQ4WjAzMTEwLwYDVQQD
Eyg4M2FmYWYwMDc1MTY0ODQ3MjVkYjQ1ODg1MjQ2NWYyYmIzOWE0YWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw55cazk/6i98nVRN8N54jdGeLPVT
gLWolBH4FeeFxba1/0QxbcC9lZzkTp0hcCHGGSZnmQN/KadAUoq4mOhEDKNFxI8W
djMrNQmJJLineGHDIjWkzfnAjYHQgEXviFcKc3IzPZLElzHePNodjMsAYwJEJ2jI
DwZ95q/Fd1YCjd3xpF5hEuKV5zPSdvuJV/yW7yfrmA9pPyBID+kdpPnGUeYVHOFZ
0FzQI7N5iw5hYUqfGpv89oqK+580enOGRGKIczNuBMr7cFdymChifr2S0267rVQ+
iCUdTLC/GwAdPvhxbxmP+kaCzORf1D+5A9NQEeC1608mxoRUOsLoJridlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOvrwB1FkhHJdtFiFJGXyuzmkrKMB8GA1UdIwQY
MBaAFId9/PkVadgVYib8J5DmeQZ2OisDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDMzOC1SVnAyQlZpSnZ3bmtPWjVCblk2S3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMmJkYzgtNzllNy00OGNkLWE5OTQt
YWQ0OTU4NThiMzJjLzEvaDMzOC1SVnAyQlZpSnZ3bmtPWjVCblk2S3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mMmJkYzgtNzllNy00OGNkLWE5OTQtYWQ0OTU4NThiMzJj
LzEvaDMzOC1SVnAyQlZpSnZ3bmtPWjVCblk2S3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarLRBBvv
RjQyBwZxjHIMdCIwnp5B2Z2ZW5cvS/Q1VG/xJOrS57u+VeW6jxe/WhjUYIVFw1MB
8aHXdtpkt9h594B2zDcQVXLNpiXIW2VsL5sAZ4yiAbr7y5hkZb7Yn5e3UQ/WXnNB
q2Shr2fCtSq67+ef7RM5fW59tJ4NraVCQJxQDSouZMtSTQkX+VZ24LIBxBugMN8V
ROmIX4NchZFvqFGLiJUwjoWtZDzeVP7lm8m9HAkpTbV7V1m8O4SAsQrOrHf7FNij
NDp7ddrT2lES8WO0e0ovdfLdD9CpBTSHdyM2XzVAxRFwkF3FriRvw3nT58qf+cOC
DbYtj5wNusrxkw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:32 2025 by rpki-client