Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
File: h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft (raw, json)
Hash identifier: dv+snsCakAR9l8Toypq5+EFdIHklb9dBXwfeKWUTVPo=
Subject key identifier: 54:54:E1:76:F5:C1:F6:38:1C:49:CF:C4:E4:8E:0F:29:83:62:F2:2B
Authority key identifier: 87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D
Certificate issuer: /CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d
Certificate serial: 019897139A90044158FF2F5FA8E98C558E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
Manifest number: 0849
Signing time: Mon 11 Aug 2025 03:01:40 +0000
Manifest this update: Mon 11 Aug 2025 03:01:40 +0000
Manifest next update: Tue 12 Aug 2025 03:01:40 +0000
Files and hashes: 1: AO9S5FPNyFUFF8sl00iZG2uj63o.roa (hash: dj/tZS47oYr7HP4aHIaoRYk9wXqksDBdwIFty9clVxk=)
2: h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl (hash: 64G5497ovM+hdP1yhXBpzgpVizK1xTAjszmpEvFH2eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:9a:90:04:41:58:ff:2f:5f:a8:e9:8c:55:8e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d
Validity
Not Before: Aug 11 03:01:40 2025 GMT
Not After : Aug 12 03:01:40 2025 GMT
Subject: CN=5454e176f5c1f6381c49cfc4e48e0f298362f22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:b7:da:9b:57:c6:84:03:e9:7f:42:e8:ce:
8e:9c:d1:78:13:55:6d:2b:99:2a:02:17:f6:95:d3:
99:33:8e:29:4c:28:6f:61:06:6b:5a:9c:ae:62:70:
d0:11:86:38:ea:5b:db:5a:3d:9f:a8:96:b1:8b:03:
53:44:1a:91:f5:5d:cc:54:bd:35:fd:d2:2e:8e:48:
ab:1f:5a:ec:91:3e:22:90:46:f7:ed:4a:06:ed:d6:
83:61:e2:16:05:00:8c:a3:17:3c:ea:41:d9:6b:de:
b1:4f:1c:cf:59:37:34:83:09:4f:b8:be:36:3d:3e:
6d:cb:10:01:80:5c:5c:6e:89:8a:2e:bd:1f:cc:78:
07:e6:71:dc:45:38:11:64:f6:95:01:77:c0:0e:7b:
c3:5d:ed:32:a1:32:78:21:03:12:41:96:4f:1e:42:
60:b9:d8:97:0b:64:64:52:9a:32:90:4f:39:60:82:
61:f3:b6:01:21:92:9f:94:69:c8:df:fe:11:45:1a:
7b:3a:2b:33:a0:ec:60:9a:05:cc:94:ff:5c:50:d8:
f4:81:18:69:6e:ed:ac:e5:37:02:e0:2b:c5:5b:29:
07:ed:46:34:43:6e:2e:49:b7:f0:a7:79:16:a9:6f:
1d:b0:9c:2b:68:75:2e:1c:43:12:a5:4e:16:4a:c7:
01:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:54:E1:76:F5:C1:F6:38:1C:49:CF:C4:E4:8E:0F:29:83:62:F2:2B
X509v3 Authority Key Identifier:
keyid:87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e3:47:ad:7d:6b:d3:e2:e4:f4:ad:08:7a:86:c5:2b:4d:12:
c3:ca:4e:0f:4b:ef:a4:b8:61:43:f7:50:57:35:18:87:00:27:
f3:fe:0f:af:8d:93:c8:37:19:62:f6:03:f8:4a:86:47:30:40:
54:58:fe:fd:9c:f4:d0:ec:6c:01:17:15:e7:9e:c3:5c:60:f8:
f5:52:81:4c:6b:77:9b:4d:e5:55:a4:a7:01:d1:a0:b6:d7:e9:
a7:7a:1f:8d:95:d3:fc:fb:e2:28:97:0a:b5:7e:49:5d:85:cb:
43:77:dd:92:83:ba:50:20:6f:85:47:7e:35:11:f8:5d:12:e4:
af:76:f0:54:3f:21:ba:43:7c:47:ca:63:bf:9a:45:e4:6d:d0:
88:49:16:18:1d:04:ae:bc:64:14:ec:07:da:12:b5:a3:17:dc:
b5:0b:03:e0:26:d3:69:76:c8:12:e1:ef:4e:bb:02:18:10:cb:
fa:f0:0d:3d:06:ab:05:3b:3d:a2:ca:2e:d7:a1:fc:9f:53:7d:
fd:8c:21:69:8e:ab:6b:31:73:0b:8f:9c:32:d9:16:80:60:47:
aa:46:ee:7e:e6:93:61:d5:2f:c1:f4:1c:01:f7:5a:ad:b0:0b:
47:71:26:cc:d8:29:58:38:1b:b4:a4:fc:d8:5c:ca:1d:c3:9e:
44:18:44:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXE5qQBEFY/y9fqOmMVY6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YzNiODVhN2JlZmJiNDQ5MGQ3YWM4NTJlYjhiZTg0YmY5
MzhiNGQwHhcNMjUwODExMDMwMTQwWhcNMjUwODEyMDMwMTQwWjAzMTEwLwYDVQQD
Eyg1NDU0ZTE3NmY1YzFmNjM4MWM0OWNmYzRlNDhlMGYyOTgzNjJmMjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqm32ptXxoQD6X9C6M6OnNF4E1Vt
K5kqAhf2ldOZM44pTChvYQZrWpyuYnDQEYY46lvbWj2fqJaxiwNTRBqR9V3MVL01
/dIujkirH1rskT4ikEb37UoG7daDYeIWBQCMoxc86kHZa96xTxzPWTc0gwlPuL42
PT5tyxABgFxcbomKLr0fzHgH5nHcRTgRZPaVAXfADnvDXe0yoTJ4IQMSQZZPHkJg
udiXC2RkUpoykE85YIJh87YBIZKflGnI3/4RRRp7OiszoOxgmgXMlP9cUNj0gRhp
bu2s5TcC4CvFWykH7UY0Q24uSbfwp3kWqW8dsJwraHUuHEMSpU4WSscB/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRU4Xb1wfY4HEnPxOSODymDYvIrMB8GA1UdIwQY
MBaAFIfDuFp777tEkNeshS64voS/k4tNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDhPNFdudnZ1MFNRMTZ5RkxyaS1oTC1UaTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzVjYzgtYjNlZi00MGZjLWFlNDAt
NzhlYzgwMjMwNjhmLzEvaDhPNFdudnZ1MFNRMTZ5RkxyaS1oTC1UaTAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iYzVjYzgtYjNlZi00MGZjLWFlNDAtNzhlYzgwMjMwNjhm
LzEvaDhPNFdudnZ1MFNRMTZ5RkxyaS1oTC1UaTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+NHrX1r
0+Lk9K0IeobFK00Sw8pOD0vvpLhhQ/dQVzUYhwAn8/4Pr42TyDcZYvYD+EqGRzBA
VFj+/Zz00OxsARcV557DXGD49VKBTGt3m03lVaSnAdGgttfpp3ofjZXT/PviKJcK
tX5JXYXLQ3fdkoO6UCBvhUd+NRH4XRLkr3bwVD8hukN8R8pjv5pF5G3QiEkWGB0E
rrxkFOwH2hK1oxfctQsD4CbTaXbIEuHvTrsCGBDL+vANPQarBTs9osou16H8n1N9
/YwhaY6razFzC4+cMtkWgGBHqkbufuaTYdUvwfQcAfdarbALR3EmzNgpWDgbtKT8
2FzKHcOeRBhEIA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:14 2025 by rpki-client