
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json)
Hash identifier: VJNZMhS7PUy+QPhSutHvskUNHpShhCS3UbNluI7Raec=
Subject key identifier: B6:16:A0:B6:0B:9C:B7:82:A6:62:3C:34:7A:E8:7F:2D:68:EA:45:1F
Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Certificate serial: 01988B0EEB19BF9200CC67C95FD459F51D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
Manifest number: 0F97
Signing time: Fri 08 Aug 2025 19:01:07 +0000
Manifest this update: Fri 08 Aug 2025 19:01:07 +0000
Manifest next update: Sat 09 Aug 2025 19:01:07 +0000
Files and hashes: 1: TwlfNDSczGUl34rteJgSuHXTO94.roa (hash: gBwK3ZQY+snmvfWIA0VgAvr4/MBSK9FpiTLSXZrUgpg=)
2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: 9+wdFM+ticDTp4JUmAJc955EciFoeRVaYorrSa1SxGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:eb:19:bf:92:00:cc:67:c9:5f:d4:59:f5:1d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Validity
Not Before: Aug 8 19:01:07 2025 GMT
Not After : Aug 9 19:01:07 2025 GMT
Subject: CN=b616a0b60b9cb782a6623c347ae87f2d68ea451f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:48:df:d2:e5:8b:1a:68:a2:1e:e8:c8:52:
a2:73:8e:29:dc:77:61:af:e3:49:69:08:5a:83:52:
0f:7b:8c:46:8e:20:48:e8:57:9d:b7:5b:7b:a7:52:
e3:db:2d:34:0c:56:ec:9d:a7:e6:b8:52:82:21:90:
38:9b:36:e4:e5:c3:ba:8a:ae:d4:6c:5b:10:90:01:
78:d9:18:3a:28:64:9b:14:84:c7:0b:0b:9e:f1:40:
8a:67:e3:cc:a6:1b:b1:43:4c:e0:d9:41:42:7f:2b:
b8:28:13:8a:26:bf:5a:11:e8:4c:f9:d9:0c:ac:f1:
00:cb:8f:e0:84:c4:e5:24:3a:ff:14:8b:c4:12:0d:
c6:d8:4b:3e:94:4c:9f:89:96:09:2c:92:27:4a:c2:
9f:7b:a6:ca:95:e5:a2:ad:f7:f3:e6:85:1a:18:3b:
b1:ab:69:91:e4:99:1b:5e:f3:34:4a:16:a5:b2:8b:
da:76:48:97:23:e9:a9:7a:71:fb:9a:52:6e:52:f0:
60:1e:11:48:44:bc:f7:51:53:12:ea:11:cb:da:7a:
bc:b3:9d:9c:21:24:9b:65:b0:93:9b:29:d3:cc:ee:
5a:ab:8c:d3:84:9d:4f:3e:37:57:a1:27:49:2d:c3:
bd:b3:ac:48:9d:21:9f:2f:3f:20:08:fb:18:70:82:
83:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:16:A0:B6:0B:9C:B7:82:A6:62:3C:34:7A:E8:7F:2D:68:EA:45:1F
X509v3 Authority Key Identifier:
keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:79:70:15:7c:38:5a:1e:b0:bd:98:a4:1b:7a:b9:be:38:d7:
5a:5d:2e:73:7b:c5:71:8c:de:e1:4a:e7:6b:f9:77:cf:83:0a:
0e:36:f7:0b:0f:e6:97:57:63:7e:79:22:09:64:07:48:87:7c:
09:be:e6:82:b6:c1:5d:8f:8c:e7:4b:cf:bf:e7:57:38:5b:cf:
44:09:01:6d:fb:78:89:5a:76:45:12:57:09:ff:39:33:21:b7:
a0:13:ba:1b:b3:0a:89:14:80:92:f5:36:30:39:e7:a9:8f:46:
6c:24:5e:3d:e0:9c:fd:66:da:7f:90:00:83:37:00:b5:24:4f:
2b:82:ac:b5:2d:06:12:12:c7:85:68:49:79:c3:ea:aa:bb:8c:
0f:6a:36:e8:7e:66:48:d1:55:16:1a:4d:6b:51:f9:cd:65:bf:
93:d0:3c:fe:99:d6:60:bb:f6:b1:97:ea:7b:a8:61:f4:cb:bb:
6c:0f:6f:6c:19:e5:a7:c6:9c:fa:6a:78:8c:dd:94:d1:90:83:
5b:e6:47:94:a1:67:96:f7:1f:a6:67:ba:a3:ec:ca:27:97:f0:
24:3b:80:79:77:ce:6e:68:73:25:fd:6d:2f:4c:e5:ed:b4:fd:
a3:4d:c6:80:04:ed:13:47:11:81:0a:b5:79:80:9a:40:be:99:
3f:a2:63:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLDusZv5IAzGfJX9RZ9R2KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGFhMTZmZDJhMmM5MzZjMGFhNGZiNTYyNGY2MmJjNTZh
NTRkZjgwHhcNMjUwODA4MTkwMTA3WhcNMjUwODA5MTkwMTA3WjAzMTEwLwYDVQQD
EyhiNjE2YTBiNjBiOWNiNzgyYTY2MjNjMzQ3YWU4N2YyZDY4ZWE0NTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaVI39Llixpooh7oyFKic44p3Hdh
r+NJaQhag1IPe4xGjiBI6Fedt1t7p1Lj2y00DFbsnafmuFKCIZA4mzbk5cO6iq7U
bFsQkAF42Rg6KGSbFITHCwue8UCKZ+PMphuxQ0zg2UFCfyu4KBOKJr9aEehM+dkM
rPEAy4/ghMTlJDr/FIvEEg3G2Es+lEyfiZYJLJInSsKfe6bKleWirffz5oUaGDux
q2mR5JkbXvM0ShalsovadkiXI+mpenH7mlJuUvBgHhFIRLz3UVMS6hHL2nq8s52c
ISSbZbCTmynTzO5aq4zThJ1PPjdXoSdJLcO9s6xInSGfLz8gCPsYcIKD/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYWoLYLnLeCpmI8NHrofy1o6kUfMB8GA1UdIwQY
MBaAFIdKoW/Sosk2wKpPtWJPYrxWpU34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTct
ZmRiYzdjNGNmNDllLzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTctZmRiYzdjNGNmNDll
LzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnlwFXw4
Wh6wvZikG3q5vjjXWl0uc3vFcYze4Urna/l3z4MKDjb3Cw/ml1djfnkiCWQHSId8
Cb7mgrbBXY+M50vPv+dXOFvPRAkBbft4iVp2RRJXCf85MyG3oBO6G7MKiRSAkvU2
MDnnqY9GbCRePeCc/Wbaf5AAgzcAtSRPK4KstS0GEhLHhWhJecPqqruMD2o26H5m
SNFVFhpNa1H5zWW/k9A8/pnWYLv2sZfqe6hh9Mu7bA9vbBnlp8ac+mp4jN2U0ZCD
W+ZHlKFnlvcfpme6o+zKJ5fwJDuAeXfObmhzJf1tL0zl7bT9o03GgATtE0cRgQq1
eYCaQL6ZP6Jj6g==
-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:26 2025 by rpki-client