Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
File: h9qWV60f35jec4uxmnPv0NsLOio.mft (raw, json)
Hash identifier: zeiZNI3uv5hOJpNDccIlHFOcz/QgbJ78mn/PtezhRio=
Subject key identifier: EF:1C:AB:81:D6:B8:99:9A:76:AF:71:C1:2F:E7:7E:5A:ED:09:67:21
Authority key identifier: 87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
Certificate issuer: /CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Certificate serial: 019873E29FC63261AA630D78E79F3A969A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
Manifest number: B6
Signing time: Mon 04 Aug 2025 07:01:28 +0000
Manifest this update: Mon 04 Aug 2025 07:01:28 +0000
Manifest next update: Tue 05 Aug 2025 07:01:28 +0000
Files and hashes: 1: 2GTFPZ68uVkX8Ryfbx92fDQ9upI.roa (hash: lvp+RlxYyEIMygF5MN9RWgH0GLslbYAMM+G4pVyVmkU=)
2: h9qWV60f35jec4uxmnPv0NsLOio.crl (hash: uyrQPwUt10Bo+NypJVv5ZOSXDkvzlsZjb/pByvhsvWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:9f:c6:32:61:aa:63:0d:78:e7:9f:3a:96:9a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Validity
Not Before: Aug 4 07:01:28 2025 GMT
Not After : Aug 5 07:01:28 2025 GMT
Subject: CN=ef1cab81d6b8999a76af71c12fe77e5aed096721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:46:44:93:47:3c:d2:4a:3b:4a:0a:f7:5c:0f:
fa:2c:a8:0a:11:e2:33:30:cb:a5:71:1a:8a:2b:75:
11:f4:d6:84:e0:86:fb:22:be:ef:c1:e8:5a:0f:50:
fe:a9:a6:a5:63:13:0e:eb:aa:96:9e:f6:99:01:99:
ce:dc:f7:87:be:99:70:f9:bf:fa:4d:bf:76:de:e0:
b9:ae:d2:f9:2f:ea:f4:b4:62:ac:33:3d:27:6c:71:
2e:c7:05:10:e0:7d:65:70:ed:13:04:21:cc:8e:6c:
75:e6:9f:30:c1:e1:66:3d:f5:14:72:6b:18:40:02:
6a:1f:60:7f:35:1e:a3:3c:39:c6:1d:9e:16:11:77:
10:bd:96:b5:90:2f:82:3e:ab:a1:2d:48:17:7e:f6:
3b:dc:5d:e7:72:1f:63:26:67:be:35:8c:d6:7c:0e:
84:75:74:ea:b1:91:72:b6:b9:f7:5f:1f:56:29:f4:
6a:ff:ea:d6:03:3a:91:ae:b1:41:d5:f8:1e:8e:2a:
86:89:9b:60:89:6f:ad:ca:91:de:7c:8d:80:77:72:
5d:79:2a:cd:d6:91:36:e4:eb:8b:3e:25:95:09:46:
cc:69:c8:2b:75:86:b4:59:88:f1:4a:65:1c:2c:3b:
0a:0c:fc:f9:06:89:6f:c9:d7:0f:0f:79:0f:04:f7:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1C:AB:81:D6:B8:99:9A:76:AF:71:C1:2F:E7:7E:5A:ED:09:67:21
X509v3 Authority Key Identifier:
keyid:87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e7:5d:34:e8:a5:d3:82:b5:4f:fe:62:e9:f4:56:d2:2d:2e:
3e:c2:02:c9:bb:b1:9a:2e:2b:90:de:61:a6:35:03:3b:06:aa:
28:f4:fc:88:dc:bc:e0:74:e8:21:8a:38:d8:c4:86:56:ec:cc:
87:83:42:45:0f:2b:16:32:a2:20:f6:83:9d:88:b8:1d:d1:42:
9f:80:95:04:e6:3a:57:6c:b1:49:d2:3f:f5:51:fe:a0:68:f0:
a6:c3:a1:f4:54:f6:5d:dc:8b:1e:07:f5:53:fd:84:38:6c:47:
fc:5d:ab:69:9e:a1:1f:d1:eb:c9:bd:df:3e:10:b0:e5:88:b1:
32:2c:8e:c4:3b:fa:1d:d3:e0:33:2e:60:0c:32:d6:11:1b:97:
8d:d2:00:ec:ff:41:f2:95:0a:15:e6:88:df:78:48:a4:fa:e8:
3b:e9:73:f0:54:cd:5f:12:65:d3:a9:d7:f2:d5:de:98:26:f3:
29:4e:a5:06:d9:2e:cd:76:ba:96:25:85:67:43:78:a1:61:ad:
3b:da:d5:9b:42:42:98:3c:61:d1:c0:fb:61:ce:1a:0b:d9:13:
6e:9f:68:23:01:80:3a:3f:01:4c:30:bd:47:be:91:ba:c1:d4:
46:67:c5:79:29:da:a8:b8:85:19:cd:5b:b7:9e:29:d7:8c:3a:
4a:5f:0c:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4p/GMmGqYw145586lppPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZGE5NjU3YWQxZmRmOThkZTczOGJiMTlhNzNlZmQwZGIw
YjNhMmEwHhcNMjUwODA0MDcwMTI4WhcNMjUwODA1MDcwMTI4WjAzMTEwLwYDVQQD
EyhlZjFjYWI4MWQ2Yjg5OTlhNzZhZjcxYzEyZmU3N2U1YWVkMDk2NzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0ZEk0c80ko7Sgr3XA/6LKgKEeIz
MMulcRqKK3UR9NaE4Ib7Ir7vwehaD1D+qaalYxMO66qWnvaZAZnO3PeHvplw+b/6
Tb923uC5rtL5L+r0tGKsMz0nbHEuxwUQ4H1lcO0TBCHMjmx15p8wweFmPfUUcmsY
QAJqH2B/NR6jPDnGHZ4WEXcQvZa1kC+CPquhLUgXfvY73F3nch9jJme+NYzWfA6E
dXTqsZFytrn3Xx9WKfRq/+rWAzqRrrFB1fgejiqGiZtgiW+typHefI2Ad3JdeSrN
1pE25OuLPiWVCUbMacgrdYa0WYjxSmUcLDsKDPz5BolvydcPD3kPBPecRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8cq4HWuJmadq9xwS/nflrtCWchMB8GA1UdIwQY
MBaAFIfalletH9+Y3nOLsZpz79DbCzoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDlxV1Y2MGYzNWplYzR1eG1uUHYwTnNMT2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iYmVlNWUtZGRiZC00Yjg1LWI0Y2Et
MmFlNDQwYTVjY2IwLzEvaDlxV1Y2MGYzNWplYzR1eG1uUHYwTnNMT2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iYmVlNWUtZGRiZC00Yjg1LWI0Y2EtMmFlNDQwYTVjY2Iw
LzEvaDlxV1Y2MGYzNWplYzR1eG1uUHYwTnNMT2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReddNOil
04K1T/5i6fRW0i0uPsICybuxmi4rkN5hpjUDOwaqKPT8iNy84HToIYo42MSGVuzM
h4NCRQ8rFjKiIPaDnYi4HdFCn4CVBOY6V2yxSdI/9VH+oGjwpsOh9FT2XdyLHgf1
U/2EOGxH/F2raZ6hH9Hryb3fPhCw5YixMiyOxDv6HdPgMy5gDDLWERuXjdIA7P9B
8pUKFeaI33hIpProO+lz8FTNXxJl06nX8tXemCbzKU6lBtkuzXa6liWFZ0N4oWGt
O9rVm0JCmDxh0cD7Yc4aC9kTbp9oIwGAOj8BTDC9R76RusHURmfFeSnaqLiFGc1b
t54p14w6Sl8M6A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:50 2025 by rpki-client