Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
File: hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json)
Hash identifier: A76JrPtcoyku8BhSD5pvdMRg/RKMCDwwVrpy9R8o7Dw=
Subject key identifier: 88:85:9D:FC:3E:80:D9:FA:D1:90:A1:12:C9:AD:3B:53:17:15:A8:C5
Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134
Certificate serial: 01989E5E3F3CF55537F7BA992414691F16A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
Manifest number: 0711
Signing time: Tue 12 Aug 2025 13:00:33 +0000
Manifest this update: Tue 12 Aug 2025 13:00:33 +0000
Manifest next update: Wed 13 Aug 2025 13:00:33 +0000
Files and hashes: 1: VVQWLUW0daB7T4jiaSXgxXCl4ZE.roa (hash: RAYdTMRTLrvbEHCokIXafnM5optXUCpT7i2/x7+Zbyk=)
2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: iuV1mv6wUvKKwe6MoLPkRHmimQntqvx3W5dRQlgf5Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:3f:3c:f5:55:37:f7:ba:99:24:14:69:1f:16:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134
Validity
Not Before: Aug 12 13:00:33 2025 GMT
Not After : Aug 13 13:00:33 2025 GMT
Subject: CN=88859dfc3e80d9fad190a112c9ad3b531715a8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:7e:b3:a5:53:a5:55:1c:f8:cc:f6:05:42:
59:fb:93:75:e6:4b:8b:66:95:b7:d2:e4:a1:23:48:
a6:b6:89:04:c2:f7:45:ec:23:f5:50:12:dd:02:2c:
12:ac:07:73:29:f7:4e:a7:79:64:37:35:10:bb:56:
22:84:0a:65:0a:59:6d:e0:2f:b5:79:d0:ad:0d:38:
6a:56:b0:b4:32:13:d5:99:d0:73:1c:4a:7b:a2:06:
c1:38:37:b3:1e:b5:1b:49:92:a5:24:46:9f:d8:fd:
f7:8c:db:a0:56:71:a3:de:d8:ee:e4:e8:4a:85:13:
41:15:bd:8e:74:7d:07:8d:fb:55:9f:69:4a:61:a3:
d1:c6:41:3b:92:ad:23:58:cd:3d:a8:0f:51:b6:a0:
5c:4b:fa:01:b8:e5:d8:1e:ea:6f:7f:29:79:08:9e:
55:42:e9:61:28:08:30:ec:e5:d6:1b:61:e2:75:fa:
fb:c8:c6:6c:f6:bd:4e:b1:85:cb:5d:3e:12:aa:83:
11:2a:f7:06:c2:38:73:d5:69:55:85:5c:19:24:4d:
36:55:f9:fd:33:8a:52:1e:74:3d:db:a5:c4:54:47:
51:e5:00:a3:b5:87:87:59:da:ba:5b:f2:90:71:ae:
51:f4:8d:1c:9e:b6:fa:b1:e1:70:d3:22:67:25:00:
7e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:85:9D:FC:3E:80:D9:FA:D1:90:A1:12:C9:AD:3B:53:17:15:A8:C5
X509v3 Authority Key Identifier:
keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e1:25:30:4f:14:e4:24:5c:26:7b:78:30:fc:af:10:f0:71:
a9:61:91:c0:91:e8:67:12:45:39:55:1b:fb:6a:23:89:7d:76:
b3:99:6f:59:e2:a7:ca:be:06:aa:8a:55:e1:84:13:3c:85:db:
e2:c6:6f:8d:ad:42:31:21:54:89:bd:a6:46:a4:64:2b:71:6d:
da:30:9c:bb:c7:14:1b:00:c0:47:51:48:57:07:6f:f4:ee:de:
cc:4f:8b:1e:e1:51:f3:9a:62:d0:99:b3:f4:ee:db:80:50:9a:
36:10:73:81:65:d3:5c:e9:0c:58:2c:18:64:3b:f2:be:7e:61:
11:ec:e5:ec:32:02:bf:d5:18:67:e4:e6:fa:fd:8d:51:fb:f1:
40:29:45:8e:10:eb:8b:9d:70:d4:c0:f3:44:3d:88:35:83:ab:
ea:5f:f1:45:df:60:99:89:4f:f4:ee:8c:50:27:f2:0b:0a:6d:
a0:62:e3:64:77:68:8e:ee:b5:24:67:14:41:6c:db:45:0f:04:
22:e0:bb:44:88:06:3e:7d:50:7e:cd:9c:f8:0e:16:b8:95:90:
e4:1c:f8:91:5f:45:01:b7:f7:ed:51:3f:25:8f:55:d4:23:ae:
2d:59:6f:43:bc:e1:dd:a0:fd:13:5c:8b:c5:d8:4f:94:bd:4d:
93:54:c7:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZieXj889VU397qZJBRpHxaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NGY3ZTY2OTk1Yzk5NGEzMGQwODY4NzExMGJmZDZhOWEw
NTYxMzQwHhcNMjUwODEyMTMwMDMzWhcNMjUwODEzMTMwMDMzWjAzMTEwLwYDVQQD
Eyg4ODg1OWRmYzNlODBkOWZhZDE5MGExMTJjOWFkM2I1MzE3MTVhOGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPN+s6VTpVUc+Mz2BUJZ+5N15kuL
ZpW30uShI0imtokEwvdF7CP1UBLdAiwSrAdzKfdOp3lkNzUQu1YihAplCllt4C+1
edCtDThqVrC0MhPVmdBzHEp7ogbBODezHrUbSZKlJEaf2P33jNugVnGj3tju5OhK
hRNBFb2OdH0HjftVn2lKYaPRxkE7kq0jWM09qA9RtqBcS/oBuOXYHupvfyl5CJ5V
QulhKAgw7OXWG2Hidfr7yMZs9r1OsYXLXT4SqoMRKvcGwjhz1WlVhVwZJE02Vfn9
M4pSHnQ926XEVEdR5QCjtYeHWdq6W/KQca5R9I0cnrb6seFw0yJnJQB+hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiFnfw+gNn60ZChEsmtO1MXFajFMB8GA1UdIwQY
MBaAFIRPfmaZXJlKMNCGhxEL/WqaBWE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NDM4MjAtZGVhYy00YTBhLWJmMzIt
OTMxOTBkM2UxZDk4LzEvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My84NDM4MjAtZGVhYy00YTBhLWJmMzItOTMxOTBkM2UxZDk4
LzEvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeElME8U
5CRcJnt4MPyvEPBxqWGRwJHoZxJFOVUb+2ojiX12s5lvWeKnyr4GqopV4YQTPIXb
4sZvja1CMSFUib2mRqRkK3Ft2jCcu8cUGwDAR1FIVwdv9O7ezE+LHuFR85pi0Jmz
9O7bgFCaNhBzgWXTXOkMWCwYZDvyvn5hEezl7DICv9UYZ+Tm+v2NUfvxQClFjhDr
i51w1MDzRD2INYOr6l/xRd9gmYlP9O6MUCfyCwptoGLjZHdoju61JGcUQWzbRQ8E
IuC7RIgGPn1Qfs2c+A4WuJWQ5Bz4kV9FAbf37VE/JY9V1COuLVlvQ7zh3aD9E1yL
xdhPlL1Nk1THig==
-----END CERTIFICATE-----
Generated at Tue Aug 12 22:48:26 2025 by rpki-client