Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
File: h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft (raw, json)
Hash identifier: VUuzBv2juVYHlDJTeqXRzKApwEcI11Qa8mv+pgtiZeM=
Subject key identifier: FD:C8:42:A9:B7:9A:3A:F6:93:29:54:4D:1C:E9:00:EE:89:10:E0:58
Authority key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
Certificate issuer: /CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Certificate serial: 019A714A0112C4660CA5B496502DC504D5A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
Manifest number: 0817
Signing time: Tue 11 Nov 2025 05:01:06 +0000
Manifest this update: Tue 11 Nov 2025 05:01:06 +0000
Manifest next update: Wed 12 Nov 2025 05:01:06 +0000
Files and hashes: 1: h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl (hash: qHA5WKn1nuaJX7yLZv4CUyNBVQsuYRBQEAG84KwoLhc=)
2: hlby1xXJUtbaqPmELmi7xbziBY8.roa (hash: QsHPEqttrfF2zMx3M7sZxcReCt1hljy1sF+KTN49S3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:01:12:c4:66:0c:a5:b4:96:50:2d:c5:04:d5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Validity
Not Before: Nov 11 05:01:06 2025 GMT
Not After : Nov 12 05:01:06 2025 GMT
Subject: CN=fdc842a9b79a3af69329544d1ce900ee8910e058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fd:6f:a6:ed:78:97:09:ae:b9:ae:3b:ba:90:
86:9f:92:a7:d8:49:e1:55:aa:48:81:dc:3f:df:55:
c9:4d:90:8b:06:20:bd:b1:3a:6a:7f:f0:35:31:35:
72:f9:3c:63:53:f5:82:4c:12:e2:a7:43:78:96:42:
f9:01:fa:be:46:39:b3:98:68:d2:e4:e8:ae:6f:3f:
a8:59:ea:95:ac:14:6f:36:87:51:7b:1a:a4:1f:f2:
25:fe:38:42:d6:a2:ce:b6:0f:2f:bb:73:0f:30:93:
a6:d0:d3:39:66:07:b2:d8:be:91:67:1f:33:fa:c7:
b5:17:89:b3:51:96:9f:d1:ee:1b:90:b0:a5:e8:f0:
f5:4f:fa:9b:35:4e:bd:8b:9d:f7:ad:68:2d:b9:16:
21:0f:10:51:0d:10:f9:e8:05:d2:1b:9a:40:c1:03:
d2:ce:c0:1c:02:3a:0a:52:52:9e:d8:d5:84:b6:f3:
62:ba:00:6c:5b:b3:7a:be:c5:a0:c8:54:02:83:d6:
8d:11:58:f4:71:33:5d:bb:54:e0:d8:f9:d1:b3:13:
ae:c7:27:d3:63:c0:16:62:c4:d9:c3:87:8e:1b:1a:
12:54:43:60:85:68:25:b3:c7:ef:96:3b:3b:53:14:
43:43:6c:f7:7f:ab:c2:77:2e:84:84:90:e0:f5:32:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C8:42:A9:B7:9A:3A:F6:93:29:54:4D:1C:E9:00:EE:89:10:E0:58
X509v3 Authority Key Identifier:
keyid:87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3a:86:81:4d:c9:05:4d:35:ea:da:cf:87:61:ce:a6:12:6c:
02:97:79:f1:25:1d:a9:10:cc:35:f9:84:a7:a0:d0:aa:30:50:
db:f4:f5:26:d6:f9:2b:9e:d6:e6:e7:6c:8e:dd:83:b2:1f:74:
a5:5e:ef:02:31:90:96:8e:77:5a:f1:32:06:13:56:8a:60:3c:
02:8b:91:39:cb:eb:4d:00:f3:73:0c:2c:e6:e9:81:23:65:57:
f6:92:3d:49:1a:b3:82:4e:b8:e1:f2:52:65:d4:8f:57:0f:ff:
1e:41:48:97:91:35:af:25:80:26:0a:a9:cd:ae:c2:18:31:18:
d8:5e:4f:d7:94:0f:80:28:57:47:b2:d2:8c:58:3d:98:61:5e:
17:e5:ec:fe:72:67:52:7e:ee:49:0d:8d:a8:91:0b:41:1a:fb:
30:ff:71:61:9b:67:28:c2:e1:3b:74:37:52:36:6c:50:d9:35:
76:d1:30:22:bf:8d:44:4d:80:d3:1c:af:e2:b9:8f:f7:fd:4b:
2b:a0:49:d8:af:c9:05:b3:da:05:4a:e1:5f:5d:d2:0f:7b:40:
14:4e:da:2a:95:ac:e9:95:5e:db:be:0a:2f:95:d1:2f:6e:b0:
fe:45:22:93:9a:29:ca:02:80:d1:b8:57:db:ce:ac:0f:bf:87:
76:b8:83:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSgESxGYMpbSWUC3FBNWpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGMzZGNjY2JmMDJiYTg1MDFhYjFjNzA2ZDMxZTEzN2Zk
ZGY0MWQwHhcNMjUxMTExMDUwMTA2WhcNMjUxMTEyMDUwMTA2WjAzMTEwLwYDVQQD
EyhmZGM4NDJhOWI3OWEzYWY2OTMyOTU0NGQxY2U5MDBlZTg5MTBlMDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P1vpu14lwmuua47upCGn5Kn2Enh
VapIgdw/31XJTZCLBiC9sTpqf/A1MTVy+TxjU/WCTBLip0N4lkL5Afq+RjmzmGjS
5Oiubz+oWeqVrBRvNodRexqkH/Il/jhC1qLOtg8vu3MPMJOm0NM5Zgey2L6RZx8z
+se1F4mzUZaf0e4bkLCl6PD1T/qbNU69i533rWgtuRYhDxBRDRD56AXSG5pAwQPS
zsAcAjoKUlKe2NWEtvNiugBsW7N6vsWgyFQCg9aNEVj0cTNdu1Tg2PnRsxOuxyfT
Y8AWYsTZw4eOGxoSVENghWgls8fvljs7UxRDQ2z3f6vCdy6EhJDg9TJlDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3IQqm3mjr2kylUTRzpAO6JEOBYMB8GA1UdIwQY
MBaAFIdMPczL8CuoUBqxxwbTHhN/3fQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OTNkMzgtMjE4OC00YTdiLWJjMzct
YTA0NzYyMDk1ZWU2LzEvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85OTNkMzgtMjE4OC00YTdiLWJjMzctYTA0NzYyMDk1ZWU2
LzEvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjqGgU3J
BU016trPh2HOphJsApd58SUdqRDMNfmEp6DQqjBQ2/T1Jtb5K57W5udsjt2Dsh90
pV7vAjGQlo53WvEyBhNWimA8AouROcvrTQDzcwws5umBI2VX9pI9SRqzgk644fJS
ZdSPVw//HkFIl5E1ryWAJgqpza7CGDEY2F5P15QPgChXR7LSjFg9mGFeF+Xs/nJn
Un7uSQ2NqJELQRr7MP9xYZtnKMLhO3Q3UjZsUNk1dtEwIr+NRE2A0xyv4rmP9/1L
K6BJ2K/JBbPaBUrhX13SD3tAFE7aKpWs6ZVe274KL5XRL26w/kUik5opygKA0bhX
286sD7+HdriDXA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:02 2025 by rpki-client