Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
File: H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json)
Hash identifier: JOWM1oRj21CYKp5q23j8jWIz0D7ge/OQxOXnrF9qdWU=
Subject key identifier: EA:43:BA:03:90:70:AA:FD:B1:48:35:27:14:7B:D9:F5:AA:00:6E:4A
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial: 01987E9D0393986C5817AEE4A3AB8259AEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 09:01:15 +0000
Manifest this update: Wed 06 Aug 2025 09:01:15 +0000
Manifest next update: Thu 07 Aug 2025 09:01:15 +0000
Files and hashes: 1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: 6iYQK02l4kuX4ViAkB+lkr6kn0rMXtBNBErTPibKatQ=)
2: I-qnYe3pCJJC6GLKlhRXNSOnj7Q.roa (hash: MvvvcuaQB3Ptunhg27MnEt55o6So5bq1V197PASnWPY=)
3: mMhmcSnBtPYU48zDanAOHPsakbk.roa (hash: Q7SwxYVQV3nbpcnCiOpdRYrjGyoIJC6VBvUMsqX3OXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9d:03:93:98:6c:58:17:ae:e4:a3:ab:82:59:ae:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Validity
Not Before: Aug 6 09:01:15 2025 GMT
Not After : Aug 7 09:01:15 2025 GMT
Subject: CN=ea43ba039070aafdb1483527147bd9f5aa006e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:56:2a:d1:0f:b9:4c:6a:f9:79:7d:8e:11:
ef:e1:97:1c:71:c8:34:6b:21:76:94:b1:0a:f3:08:
71:ef:ec:58:ea:ab:cb:c6:a3:63:cd:12:45:eb:c8:
65:3a:8c:e5:b0:fc:bd:3e:fe:9d:fa:2c:82:7c:09:
07:e3:5e:70:0a:df:10:88:ec:c0:8c:b0:b0:8c:47:
a9:a9:2a:da:02:78:75:53:d3:1d:1d:bd:59:fc:30:
17:63:4b:18:82:21:41:2b:b5:82:3f:f2:31:aa:d3:
85:b2:ff:69:03:72:5f:76:55:c6:35:30:20:99:bf:
95:e1:6d:df:f1:ee:e9:1b:57:63:84:08:20:f5:34:
17:95:53:fc:a1:69:2a:9e:bd:28:bd:d9:b6:2b:9c:
82:ce:d7:63:c9:66:6b:26:97:50:9c:10:ee:57:9a:
54:9e:fb:fe:0b:a8:b5:67:4e:86:cb:c8:92:57:7e:
bc:9d:0c:db:e2:a8:93:75:c4:2c:a2:6a:4e:78:51:
76:8b:78:53:fd:5f:7e:72:d8:11:4e:43:74:a9:f5:
b6:e5:b5:f9:8c:29:34:0f:4d:3b:96:ee:ea:d6:5e:
15:1b:c1:87:f0:7e:cd:59:98:30:23:39:77:8c:90:
3a:c8:4e:98:45:38:63:fe:b1:8c:d4:02:b2:cb:1a:
48:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:43:BA:03:90:70:AA:FD:B1:48:35:27:14:7B:D9:F5:AA:00:6E:4A
X509v3 Authority Key Identifier:
keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:50:27:dd:2a:a7:d4:32:0d:d7:15:80:73:ff:31:2b:0d:2d:
95:f2:62:07:fc:43:fa:6c:36:c8:3b:82:6d:72:f5:c1:7a:99:
31:8f:a5:6d:4e:cf:84:bd:32:f0:7b:73:f6:7a:74:08:b5:5c:
6f:7e:c3:f5:83:e1:29:82:8a:17:27:0c:f7:54:3a:19:21:05:
90:d9:5e:0a:1e:c9:eb:30:ed:49:c8:f3:df:bf:cf:de:0c:f1:
77:d4:d2:30:10:01:45:5a:74:87:79:b0:41:76:a4:f3:ad:3c:
66:32:66:a8:47:14:c0:a0:da:af:34:e7:85:92:f3:d9:b9:95:
e0:15:1b:4c:bc:06:a9:bd:5e:a8:72:40:6a:87:73:d9:3a:ca:
9a:10:c2:ad:0a:2f:4f:94:2a:43:f4:69:fc:46:03:77:ed:a3:
64:f8:d1:e4:3e:fa:a3:0a:88:8b:6e:c0:81:0b:b4:1c:ff:29:
10:bd:91:3a:64:38:68:af:54:60:0c:08:0e:55:80:98:3c:ba:
ef:f3:8c:36:55:0c:c6:41:a0:7b:fb:19:e3:0a:cd:d8:7c:a6:
57:2d:81:ed:bc:8c:65:16:2c:45:5c:00:3b:b0:30:e8:2c:ce:
85:a5:73:c9:21:bd:7b:a0:27:0d:58:3a:cb:1e:1b:1a:e6:4a:
13:16:ac:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+nQOTmGxYF67ko6uCWa7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYzU5NTU5NDBiYmQ3NTU1ZGYwYTJlNDE3Mzc5ZmM0NDdl
ZjBjZGMwHhcNMjUwODA2MDkwMTE1WhcNMjUwODA3MDkwMTE1WjAzMTEwLwYDVQQD
EyhlYTQzYmEwMzkwNzBhYWZkYjE0ODM1MjcxNDdiZDlmNWFhMDA2ZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO5WKtEPuUxq+Xl9jhHv4Zccccg0
ayF2lLEK8whx7+xY6qvLxqNjzRJF68hlOozlsPy9Pv6d+iyCfAkH415wCt8QiOzA
jLCwjEepqSraAnh1U9MdHb1Z/DAXY0sYgiFBK7WCP/IxqtOFsv9pA3JfdlXGNTAg
mb+V4W3f8e7pG1djhAgg9TQXlVP8oWkqnr0ovdm2K5yCztdjyWZrJpdQnBDuV5pU
nvv+C6i1Z06Gy8iSV368nQzb4qiTdcQsompOeFF2i3hT/V9+ctgRTkN0qfW25bX5
jCk0D007lu7q1l4VG8GH8H7NWZgwIzl3jJA6yE6YRThj/rGM1AKyyxpITQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpDugOQcKr9sUg1JxR72fWqAG5KMB8GA1UdIwQY
MBaAFB/FlVlAu9dVXfCi5Bc3n8RH7wzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDhXVldVQzcxMVZkOEtMa0Z6ZWZ4RWZ2RE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xYzg4OTYtN2JlMi00MmNkLTkxMWYt
MmZkYjdhYjY1ZDUyLzEvSDhXVldVQzcxMVZkOEtMa0Z6ZWZ4RWZ2RE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xYzg4OTYtN2JlMi00MmNkLTkxMWYtMmZkYjdhYjY1ZDUy
LzEvSDhXVldVQzcxMVZkOEtMa0Z6ZWZ4RWZ2RE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu1An3Sqn
1DIN1xWAc/8xKw0tlfJiB/xD+mw2yDuCbXL1wXqZMY+lbU7PhL0y8Htz9np0CLVc
b37D9YPhKYKKFycM91Q6GSEFkNleCh7J6zDtScjz37/P3gzxd9TSMBABRVp0h3mw
QXak8608ZjJmqEcUwKDarzTnhZLz2bmV4BUbTLwGqb1eqHJAaodz2TrKmhDCrQov
T5QqQ/Rp/EYDd+2jZPjR5D76owqIi27AgQu0HP8pEL2ROmQ4aK9UYAwIDlWAmDy6
7/OMNlUMxkGge/sZ4wrN2HymVy2B7byMZRYsRVwAO7Aw6CzOhaVzySG9e6AnDVg6
yx4bGuZKExasug==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:18:55 2025 by rpki-client