Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier: fuZqXeUL1DBsS5nHNDdCAdaqJ3V63qlo48PjkzBa10Q=
Subject key identifier: 82:FA:B9:3F:82:47:D1:0B:30:8F:E6:65:CA:23:5F:41:08:B4:09:A8
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial: 0198793FA73EF74F845E8E0B23DF867D3D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number: 15AD
Signing time: Tue 05 Aug 2025 08:01:11 +0000
Manifest this update: Tue 05 Aug 2025 08:01:11 +0000
Manifest next update: Wed 06 Aug 2025 08:01:11 +0000
Files and hashes: 1: GYb1F3991igV-Xs-ZoTKTm-Vg7M.roa (hash: oDfsrWpPRTbFkqWOBaawHb+IseXIbMKYHakcvEvzdXQ=)
2: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: 2Dm2M1Rp7qnSlKYo3Kr0EzcgWsiX8yavjmwhsYfoB6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:3f:a7:3e:f7:4f:84:5e:8e:0b:23:df:86:7d:3d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Validity
Not Before: Aug 5 08:01:11 2025 GMT
Not After : Aug 6 08:01:11 2025 GMT
Subject: CN=82fab93f8247d10b308fe665ca235f4108b409a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:50:42:0a:0d:8d:9e:c9:90:ba:db:d6:a7:d5:
dc:08:61:2a:01:28:25:21:f0:eb:ab:7d:ce:a4:61:
fb:aa:50:2d:ed:2b:6e:c6:7e:01:c4:0e:cb:db:eb:
c5:39:a1:fb:af:44:45:4c:ed:b9:80:b5:98:98:02:
c8:7d:fe:ca:3f:11:5a:b3:b2:e6:37:24:66:db:5e:
7b:89:d9:f4:18:84:6c:f5:3f:31:36:20:2b:8b:2d:
ea:91:9c:c7:e7:6d:7a:cd:ea:2c:5f:3e:ea:b5:d4:
9f:34:11:36:c5:a6:a9:37:68:70:8c:0f:d5:7c:9a:
fa:51:cb:e6:04:f2:0c:b5:a8:6d:97:a9:77:73:8b:
c3:5c:b9:45:df:ad:f9:20:6c:95:a3:4f:b6:80:3f:
25:d1:af:7e:65:47:25:ca:95:ec:bb:fc:05:b0:24:
20:34:aa:68:03:33:c7:3d:59:6e:d8:6f:17:f1:63:
a4:1d:92:03:4d:8f:23:30:a3:64:31:6e:3b:d4:2e:
52:6c:24:dd:01:ca:94:1b:8e:c4:ec:9d:8c:35:6e:
9e:9b:77:df:70:88:51:35:d1:38:27:f4:74:3f:82:
81:41:c6:5a:44:e9:ff:2b:f0:90:83:55:4c:8a:16:
08:09:9e:f6:39:34:c7:7e:d9:6b:a9:db:9c:b0:0a:
d0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FA:B9:3F:82:47:D1:0B:30:8F:E6:65:CA:23:5F:41:08:B4:09:A8
X509v3 Authority Key Identifier:
keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:95:a3:ad:37:f3:5b:0a:8b:f1:de:d9:8a:1a:bf:ff:30:c7:
3b:62:92:e4:81:3a:0c:8e:4a:c9:70:e7:e9:7e:57:d1:db:2c:
a0:b9:ca:c4:03:d9:74:c2:1c:d0:ce:57:13:96:96:36:14:d8:
94:ab:53:9b:77:d8:46:91:71:44:ff:46:7a:8b:60:f8:a5:e2:
6c:78:ca:47:43:e9:3a:73:9a:97:d2:8f:c9:e3:99:1e:12:08:
ca:93:0d:45:06:25:96:c0:97:5e:8b:01:46:23:08:24:1e:4f:
b5:dd:78:25:24:9f:56:4e:37:eb:66:b9:48:33:b0:b4:2a:66:
8c:37:0f:6b:f0:f2:6f:5a:54:16:91:ac:f0:89:8b:b8:a4:e3:
7a:39:7a:78:81:d4:29:dc:16:ae:5c:d9:d6:c2:3d:7b:06:9d:
d8:04:ff:26:cc:97:e7:76:20:0a:80:d2:45:63:59:0f:b9:71:
28:f7:55:0f:63:3f:b9:e8:5e:d9:7b:1b:35:58:6b:0a:91:64:
35:89:a0:6e:9c:d2:ab:77:85:10:9f:54:2f:44:aa:39:54:b8:
9b:ed:66:32:a7:30:3b:38:ba:c5:86:5f:18:bb:f1:88:c7:a0:
2f:2d:8e:fb:8e:1c:4e:08:fb:c0:f6:c4:23:66:2a:ab:d5:1c:
1f:42:d4:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5P6c+90+EXo4LI9+GfT2DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOWZmZDhlZTMyYjNlMzU3OTc4ZDljYjk5MjE2Y2NlODEz
N2EzMjQwHhcNMjUwODA1MDgwMTExWhcNMjUwODA2MDgwMTExWjAzMTEwLwYDVQQD
Eyg4MmZhYjkzZjgyNDdkMTBiMzA4ZmU2NjVjYTIzNWY0MTA4YjQwOWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lBCCg2NnsmQutvWp9XcCGEqASgl
IfDrq33OpGH7qlAt7Stuxn4BxA7L2+vFOaH7r0RFTO25gLWYmALIff7KPxFas7Lm
NyRm2157idn0GIRs9T8xNiAriy3qkZzH5216zeosXz7qtdSfNBE2xaapN2hwjA/V
fJr6UcvmBPIMtahtl6l3c4vDXLlF3635IGyVo0+2gD8l0a9+ZUclypXsu/wFsCQg
NKpoAzPHPVlu2G8X8WOkHZIDTY8jMKNkMW471C5SbCTdAcqUG47E7J2MNW6em3ff
cIhRNdE4J/R0P4KBQcZaROn/K/CQg1VMihYICZ72OTTHftlrqducsArQEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIL6uT+CR9ELMI/mZcojX0EItAmoMB8GA1UdIwQY
MBaAFB+f/Y7jKz41eXjZy5khbM6BN6MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUt
YWFlNjM4ZGJiMWMxLzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUtYWFlNjM4ZGJiMWMx
LzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJWjrTfz
WwqL8d7Zihq//zDHO2KS5IE6DI5KyXDn6X5X0dssoLnKxAPZdMIc0M5XE5aWNhTY
lKtTm3fYRpFxRP9Geotg+KXibHjKR0PpOnOal9KPyeOZHhIIypMNRQYllsCXXosB
RiMIJB5Ptd14JSSfVk4362a5SDOwtCpmjDcPa/Dyb1pUFpGs8ImLuKTjejl6eIHU
KdwWrlzZ1sI9ewad2AT/JsyX53YgCoDSRWNZD7lxKPdVD2M/uehe2XsbNVhrCpFk
NYmgbpzSq3eFEJ9UL0SqOVS4m+1mMqcwOzi6xYZfGLvxiMegLy2O+44cTgj7wPbE
I2Yqq9UcH0LUTQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:17:09 2025 by rpki-client