Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier: gog9e708WPlMtdmUza/xofxQnl1KkGL34DJRSQErelQ=
Subject key identifier: 6E:D5:75:7A:7F:39:D8:0C:07:CB:D4:86:16:A2:1D:2F:A5:7F:E2:3B
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 019935DBD8F2FA649025585BD6383745F01E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number: 167E
Signing time: Wed 10 Sep 2025 23:00:24 +0000
Manifest this update: Wed 10 Sep 2025 23:00:24 +0000
Manifest next update: Thu 11 Sep 2025 23:00:24 +0000
Files and hashes: 1: DLMTOoacedomtvAfOo_wUgsg7ZM.roa (hash: CuMafo/kjG1kejlU1ti10/bQ5ADJP+5OLOjwOYxRNqo=)
2: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: Uw97Fphwutgbx+aMfZtW734JUg4EyxUCDS8EsZQSgjw=)
3: KySbiR-MGliV0HnEusiYoVPq_Tw.roa (hash: Tom90ESsjuLbQCudFU+oOzUxWbGr9ZgqEwEe4qv+gmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:db:d8:f2:fa:64:90:25:58:5b:d6:38:37:45:f0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: Sep 10 23:00:24 2025 GMT
Not After : Sep 11 23:00:24 2025 GMT
Subject: CN=6ed5757a7f39d80c07cbd48616a21d2fa57fe23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:90:c3:93:ae:95:46:1f:00:4c:5b:af:3a:
df:55:b7:e0:c7:ed:34:d8:3d:1d:c8:44:ff:f6:4f:
89:af:e2:04:4d:dd:67:9e:06:f2:b2:08:35:71:e4:
f9:91:14:22:c6:1d:98:0e:6a:d0:22:f3:11:64:7e:
f5:31:50:dc:d5:dd:da:42:7b:5f:c5:96:1d:5a:61:
09:b1:b4:a5:57:1a:ee:f6:61:2e:fb:e5:5c:34:dd:
9e:42:f6:7b:e7:b0:40:1e:80:e8:bd:97:4f:3b:43:
5a:b1:60:d1:ae:cb:9c:e6:2d:dc:cb:59:b1:03:1c:
51:17:5a:90:76:86:ef:4f:c3:44:77:12:f0:ef:89:
aa:c3:8f:25:5f:20:26:37:b1:54:c2:8a:1d:80:83:
70:c8:3c:7a:a7:c2:90:ad:c9:b3:d7:b4:65:b3:2f:
bf:71:c7:83:46:f6:40:23:53:e2:ec:d0:05:9f:eb:
31:ab:d9:47:6e:d2:a4:3a:b2:9a:72:9b:03:02:b6:
b6:b0:9e:47:86:61:b5:de:f2:69:f9:62:f9:22:ac:
20:6b:95:f7:49:5c:dc:92:b0:75:f7:9f:cb:8c:02:
79:7b:06:cf:de:c2:59:d5:fa:2c:c2:17:66:1c:e6:
02:60:7f:32:59:db:e6:b8:1e:db:82:6a:b8:1c:e2:
c7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D5:75:7A:7F:39:D8:0C:07:CB:D4:86:16:A2:1D:2F:A5:7F:E2:3B
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:dc:d6:14:2a:c8:36:06:a3:03:24:b4:7f:bb:61:3d:ed:e0:
ea:9d:6b:c9:24:2e:b2:ce:cd:f4:b6:cc:59:2c:f4:4c:8c:e1:
c5:e0:f1:b4:50:a4:7e:14:66:be:a2:a6:01:3d:dc:13:d0:f0:
5d:59:28:71:fc:95:03:10:0d:51:0c:70:3d:6c:a6:07:48:7c:
0b:1f:3c:ba:d9:3d:23:e7:41:b4:2f:18:8c:2a:a4:7f:ab:fc:
62:10:b8:6e:12:c1:38:61:30:4a:f4:35:f8:20:46:b7:6a:25:
ba:51:60:5e:37:b4:36:73:7c:11:c0:82:bc:39:bd:8f:8a:d2:
f1:3e:1d:66:47:ba:b1:65:d8:71:db:ac:81:21:99:f5:ce:62:
b4:bb:e6:9b:64:f8:57:f8:35:3f:9d:c8:1f:d6:62:a1:65:a9:
cc:0f:9e:86:b1:fa:68:3b:97:91:6b:d2:01:e4:c3:44:c7:2b:
57:f5:fb:a0:aa:33:cf:ef:19:f0:5a:01:b4:90:fe:6f:ec:88:
06:8f:db:9b:69:db:24:dd:57:c1:c4:b4:f5:c1:52:71:e6:e2:
26:c5:d5:23:85:5d:1f:c1:cd:4f:e0:4c:bc:b5:95:53:98:9b:
dc:90:63:74:58:d0:78:68:ab:e8:49:13:e4:82:25:36:88:78:
5d:20:3a:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk129jy+mSQJVhb1jg3RfAeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZDVmZWY2OTJiNGMyZDIyYmRkMDMxZmFiZmE3MTEwYjdi
MzZlODEwHhcNMjUwOTEwMjMwMDI0WhcNMjUwOTExMjMwMDI0WjAzMTEwLwYDVQQD
Eyg2ZWQ1NzU3YTdmMzlkODBjMDdjYmQ0ODYxNmEyMWQyZmE1N2ZlMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyOQw5OulUYfAExbrzrfVbfgx+00
2D0dyET/9k+Jr+IETd1nngbysgg1ceT5kRQixh2YDmrQIvMRZH71MVDc1d3aQntf
xZYdWmEJsbSlVxru9mEu++VcNN2eQvZ757BAHoDovZdPO0NasWDRrsuc5i3cy1mx
AxxRF1qQdobvT8NEdxLw74mqw48lXyAmN7FUwoodgINwyDx6p8KQrcmz17Rlsy+/
cceDRvZAI1Pi7NAFn+sxq9lHbtKkOrKacpsDAra2sJ5HhmG13vJp+WL5Iqwga5X3
SVzckrB195/LjAJ5ewbP3sJZ1foswhdmHOYCYH8yWdvmuB7bgmq4HOLHIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7VdXp/OdgMB8vUhhaiHS+lf+I7MB8GA1UdIwQY
MBaAFB/V/vaStMLSK90DH6v6cRC3s26BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80OGUxYWUtOTBlOC00ZTQyLWFmM2Qt
NTEwMWJlNWRkNjE1LzEvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80OGUxYWUtOTBlOC00ZTQyLWFmM2QtNTEwMWJlNWRkNjE1
LzEvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdzWFCrI
NgajAyS0f7thPe3g6p1rySQuss7N9LbMWSz0TIzhxeDxtFCkfhRmvqKmAT3cE9Dw
XVkocfyVAxANUQxwPWymB0h8Cx88utk9I+dBtC8YjCqkf6v8YhC4bhLBOGEwSvQ1
+CBGt2olulFgXje0NnN8EcCCvDm9j4rS8T4dZke6sWXYcdusgSGZ9c5itLvmm2T4
V/g1P53IH9ZioWWpzA+ehrH6aDuXkWvSAeTDRMcrV/X7oKozz+8Z8FoBtJD+b+yI
Bo/bm2nbJN1XwcS09cFScebiJsXVI4VdH8HNT+BMvLWVU5ib3JBjdFjQeGir6EkT
5IIlNoh4XSA6CQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 01:53:37 2025 by rpki-client