Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
File: R_hjAUxgM_HYkkKz5elWFIn5wmo.mft (raw, json)
Hash identifier: eIci9MRlaAbB7Z3JllDNLg/XNo8r1WlU5asZzv+gbAw=
Subject key identifier: F1:4D:88:56:D1:28:DC:C5:8C:7D:FC:CE:B7:B9:FC:AF:13:C0:91:95
Authority key identifier: 47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
Certificate issuer: /CN=47f863014c6033f1d89242b3e5e9561489f9c26a
Certificate serial: 019922559CC5FC03431B914ECE5137FB315B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
Manifest number: 54
Signing time: Sun 07 Sep 2025 04:00:59 +0000
Manifest this update: Sun 07 Sep 2025 04:00:59 +0000
Manifest next update: Mon 08 Sep 2025 04:00:59 +0000
Files and hashes: 1: B9bjJc5Oae9PEKPXIiXsKsSs9WQ.roa (hash: KKshRszJ3ZpgC0vij+vjmzbzFw7agfxG++MlKjyF07Y=)
2: R_hjAUxgM_HYkkKz5elWFIn5wmo.crl (hash: divV9gmrcjS6eUvm5JhsuSdkhTgTelNHha36SvSRJu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:9c:c5:fc:03:43:1b:91:4e:ce:51:37:fb:31:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f863014c6033f1d89242b3e5e9561489f9c26a
Validity
Not Before: Sep 7 04:00:59 2025 GMT
Not After : Sep 8 04:00:59 2025 GMT
Subject: CN=f14d8856d128dcc58c7dfcceb7b9fcaf13c09195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:91:b3:3e:af:4b:a0:eb:0e:5f:fc:0c:ea:a9:
c8:91:c6:fb:ee:7e:95:89:96:47:6e:4c:aa:75:68:
7d:5f:97:97:b4:ac:39:33:91:09:00:6e:07:ff:41:
ec:a4:b2:1b:cb:52:5b:27:d1:d2:41:01:26:9d:cc:
83:c5:9b:45:81:00:55:77:cb:d7:db:0f:9f:ef:ee:
a5:9e:0d:78:26:27:a8:b0:93:3d:4b:43:92:2b:34:
44:2d:fd:51:5a:05:45:01:0e:d3:23:f8:42:e9:46:
c6:4d:b5:09:70:51:d1:05:b9:76:c3:b1:bf:07:ac:
60:c0:2e:7e:bd:77:ce:90:c0:f6:db:6f:e9:96:0e:
ff:d3:ce:4f:8d:1d:56:f8:1f:18:b2:c6:05:5d:87:
12:c6:ef:7b:03:cd:13:a0:62:bb:8d:ac:5e:23:ff:
77:fc:4d:45:db:ae:58:0e:4f:52:36:b9:45:4b:cc:
2e:9c:dc:1b:ed:0a:07:ac:cb:17:c6:c9:2e:f9:d6:
e8:cd:2f:f9:1a:e3:de:84:e4:08:4d:81:b9:4b:50:
5e:99:10:64:8f:6a:57:6d:41:87:81:17:cb:75:1a:
24:65:4d:bc:70:f3:41:f5:9f:02:8b:3f:2c:9a:4b:
46:9a:94:01:0b:65:5c:b8:d0:06:9d:d5:ab:f9:87:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4D:88:56:D1:28:DC:C5:8C:7D:FC:CE:B7:B9:FC:AF:13:C0:91:95
X509v3 Authority Key Identifier:
keyid:47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9e:7c:74:2f:f5:a7:7a:ae:a2:51:dc:28:f2:78:dd:80:26:
8b:98:94:a5:3d:84:bb:17:74:8a:e4:3e:26:60:78:f0:53:7e:
80:47:f1:62:37:54:e3:15:7c:61:d4:58:93:34:fe:0e:b2:77:
37:17:1e:77:8c:9c:f8:36:79:a1:6d:a6:2f:f3:47:0f:ba:dd:
d5:73:a2:47:8f:27:75:be:15:48:ba:98:01:66:17:f8:85:a3:
0a:93:f0:13:3e:66:b1:d3:f9:46:f0:00:86:25:a7:3a:f4:50:
3f:47:76:7d:35:25:01:08:69:ba:91:bb:ff:89:4a:e2:52:43:
01:94:42:9b:e5:fd:46:b7:ea:26:ef:d2:79:45:d1:9b:e9:04:
b9:7f:53:d2:23:35:66:d9:a7:c2:85:67:6f:31:8b:13:b6:2e:
6a:73:cc:f4:1a:d2:04:a9:a7:66:27:ec:f8:71:e1:5e:75:13:
39:25:a1:76:34:82:4c:9b:dc:c5:0b:d3:6a:43:24:05:62:79:
7c:e2:5b:65:4c:0d:43:89:98:c4:ed:f8:68:e0:6a:d0:b1:48:
f3:31:8e:76:59:6e:87:93:0c:32:56:ac:a6:45:5a:a6:43:0d:
41:fe:5b:c2:f4:fc:3f:e0:62:47:a1:9f:5e:18:d8:f5:6a:ce:
2f:83:49:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVZzF/ANDG5FOzlE3+zFbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Zjg2MzAxNGM2MDMzZjFkODkyNDJiM2U1ZTk1NjE0ODlm
OWMyNmEwHhcNMjUwOTA3MDQwMDU5WhcNMjUwOTA4MDQwMDU5WjAzMTEwLwYDVQQD
EyhmMTRkODg1NmQxMjhkY2M1OGM3ZGZjY2ViN2I5ZmNhZjEzYzA5MTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJGzPq9LoOsOX/wM6qnIkcb77n6V
iZZHbkyqdWh9X5eXtKw5M5EJAG4H/0HspLIby1JbJ9HSQQEmncyDxZtFgQBVd8vX
2w+f7+6lng14JieosJM9S0OSKzRELf1RWgVFAQ7TI/hC6UbGTbUJcFHRBbl2w7G/
B6xgwC5+vXfOkMD222/plg7/085PjR1W+B8YssYFXYcSxu97A80ToGK7jaxeI/93
/E1F265YDk9SNrlFS8wunNwb7QoHrMsXxsku+dbozS/5GuPehOQITYG5S1BemRBk
j2pXbUGHgRfLdRokZU28cPNB9Z8Ciz8smktGmpQBC2VcuNAGndWr+Yd5sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFNiFbRKNzFjH38zre5/K8TwJGVMB8GA1UdIwQY
MBaAFEf4YwFMYDPx2JJCs+XpVhSJ+cJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUl9oakFVeGdNX0hZa2tLejVlbFdGSW41d21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83OGVjODktYmJkNy00NDAzLTgzMjUt
OTgzZGVjMzRiZTRiLzEvUl9oakFVeGdNX0hZa2tLejVlbFdGSW41d21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83OGVjODktYmJkNy00NDAzLTgzMjUtOTgzZGVjMzRiZTRi
LzEvUl9oakFVeGdNX0hZa2tLejVlbFdGSW41d21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAep58dC/1
p3quolHcKPJ43YAmi5iUpT2Euxd0iuQ+JmB48FN+gEfxYjdU4xV8YdRYkzT+DrJ3
Nxced4yc+DZ5oW2mL/NHD7rd1XOiR48ndb4VSLqYAWYX+IWjCpPwEz5msdP5RvAA
hiWnOvRQP0d2fTUlAQhpupG7/4lK4lJDAZRCm+X9RrfqJu/SeUXRm+kEuX9T0iM1
ZtmnwoVnbzGLE7YuanPM9BrSBKmnZifs+HHhXnUTOSWhdjSCTJvcxQvTakMkBWJ5
fOJbZUwNQ4mYxO34aOBq0LFI8zGOdlluh5MMMlaspkVapkMNQf5bwvT8P+BiR6Gf
XhjY9WrOL4NJ4w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:51 2025 by rpki-client