Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: 9vuC//9uXT9WkDu1Gw5/e4/rQ3cPBagouEFNmdNqO0E=
Subject key identifier: 47:BF:7F:56:AB:EC:AF:E3:20:AA:52:26:84:84:64:A1:7F:07:0D:67
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 019A533F170756E2A576A2B62DBC40C4810C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: 02DA
Signing time: Wed 05 Nov 2025 09:00:34 +0000
Manifest this update: Wed 05 Nov 2025 09:00:34 +0000
Manifest next update: Thu 06 Nov 2025 09:00:34 +0000
Files and hashes: 1: f87u7kBdxRsndUbHafpkZkro0IU.roa (hash: zdIYsmtX/Gy6oFoVgbZrLwhX3d3gff2hTbpByuS7zVc=)
2: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: c1XtrPSPp+EjXa9iAL7OiZTO7WevVxN5jAL7kObMulI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:17:07:56:e2:a5:76:a2:b6:2d:bc:40:c4:81:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: Nov 5 09:00:34 2025 GMT
Not After : Nov 6 09:00:34 2025 GMT
Subject: CN=47bf7f56abecafe320aa5226848464a17f070d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:00:1a:30:a0:e1:b2:3a:01:36:d1:11:ea:
6f:fd:cf:e5:43:4e:52:9c:0d:a5:6e:b6:c7:53:ee:
19:f8:63:63:5a:4f:dd:c8:c8:50:4a:ee:3f:83:e5:
8a:10:c7:01:94:08:e4:15:ef:fa:b3:cf:5e:30:16:
e8:9f:29:53:2e:5f:68:bb:94:28:60:16:29:46:8e:
53:71:e0:67:9f:46:06:20:fa:a8:cb:ca:3e:69:f8:
6a:b8:4d:14:b5:bc:bf:0f:77:53:7c:51:70:b9:63:
21:c2:59:7a:fa:b0:a3:06:49:b4:7d:c7:a0:f9:d3:
4b:88:8a:3b:47:76:f0:fe:71:12:4e:48:f3:7a:16:
97:09:69:50:8e:56:95:54:2d:14:49:bb:8b:bf:2e:
df:4e:b6:2c:a7:e2:43:00:26:d1:8e:41:c6:c9:0f:
05:e3:ca:9b:c6:c5:79:29:c8:b5:5a:28:06:32:17:
b7:66:01:d7:3b:d0:78:9f:52:12:a1:3a:bb:e3:61:
55:25:7a:20:05:ae:d4:59:af:79:ca:7c:c6:b4:91:
26:5b:6a:a3:91:08:74:cf:a6:a7:92:5a:07:12:2d:
05:98:34:ab:28:ac:c5:d2:64:62:ef:db:ef:ae:bb:
33:97:5c:65:67:4b:a3:6f:9e:e8:48:6c:c7:b3:42:
01:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BF:7F:56:AB:EC:AF:E3:20:AA:52:26:84:84:64:A1:7F:07:0D:67
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:af:fc:7d:cb:e2:5f:55:cf:0f:65:f8:0a:bd:84:6d:c0:4e:
2c:4c:20:49:93:27:04:81:8f:ef:6f:1c:cb:0b:b7:d2:55:4b:
56:bf:20:02:d1:10:37:35:3b:33:de:7c:65:1f:8f:29:62:d3:
bc:cd:07:6a:1d:e4:67:af:97:f0:62:bc:3b:75:f5:69:ec:cc:
5f:d6:0b:20:9e:e4:74:42:93:d9:46:7a:ba:05:a5:98:8f:84:
ad:76:f7:5f:51:20:23:8d:a7:99:55:1a:99:b1:ac:f2:5d:63:
52:5f:30:c2:4d:53:87:d3:eb:1a:21:39:ae:11:35:1d:93:1e:
c0:2a:91:b7:cc:65:7a:a4:63:de:4e:c0:86:a0:c7:99:31:ee:
a6:63:1c:58:02:0e:7b:ca:db:c3:d6:98:15:ab:e8:87:c3:c9:
d6:e5:d9:85:cf:4c:ea:de:20:ff:28:50:c9:74:6a:e2:b3:73:
29:83:f2:36:44:d6:76:8b:66:4c:8d:91:2c:87:5f:42:61:cf:
78:de:6f:ed:ae:19:46:12:dc:d2:ec:08:83:f5:72:28:f9:f1:
61:d0:87:02:9d:b8:59:96:e0:02:de:14:d4:b6:4d:4e:1f:3f:
21:10:ad:bb:9a:a7:a2:30:bf:d4:2c:a4:a0:8d:47:11:7f:7a:
c9:0c:61:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTPxcHVuKldqK2LbxAxIEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZWI5N2Y5OGM4ODJlZjQyNmIzNjY2MzQxMWQ0MDgxNDMw
YWM0MjEwHhcNMjUxMTA1MDkwMDM0WhcNMjUxMTA2MDkwMDM0WjAzMTEwLwYDVQQD
Eyg0N2JmN2Y1NmFiZWNhZmUzMjBhYTUyMjY4NDg0NjRhMTdmMDcwZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSAAGjCg4bI6ATbREepv/c/lQ05S
nA2lbrbHU+4Z+GNjWk/dyMhQSu4/g+WKEMcBlAjkFe/6s89eMBbonylTLl9ou5Qo
YBYpRo5TceBnn0YGIPqoy8o+afhquE0Utby/D3dTfFFwuWMhwll6+rCjBkm0fceg
+dNLiIo7R3bw/nESTkjzehaXCWlQjlaVVC0USbuLvy7fTrYsp+JDACbRjkHGyQ8F
48qbxsV5Kci1WigGMhe3ZgHXO9B4n1ISoTq742FVJXogBa7UWa95ynzGtJEmW2qj
kQh0z6ankloHEi0FmDSrKKzF0mRi79vvrrszl1xlZ0ujb57oSGzHs0IBkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEe/f1ar7K/jIKpSJoSEZKF/Bw1nMB8GA1UdIwQY
MBaAFIfrl/mMiC70JrNmY0EdQIFDCsQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjkt
M2Y2ZDdkN2VhMWIwLzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjktM2Y2ZDdkN2VhMWIw
LzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoa/8fcvi
X1XPD2X4Cr2EbcBOLEwgSZMnBIGP728cywu30lVLVr8gAtEQNzU7M958ZR+PKWLT
vM0Hah3kZ6+X8GK8O3X1aezMX9YLIJ7kdEKT2UZ6ugWlmI+ErXb3X1EgI42nmVUa
mbGs8l1jUl8wwk1Th9PrGiE5rhE1HZMewCqRt8xleqRj3k7AhqDHmTHupmMcWAIO
e8rbw9aYFavoh8PJ1uXZhc9M6t4g/yhQyXRq4rNzKYPyNkTWdotmTI2RLIdfQmHP
eN5v7a4ZRhLc0uwIg/VyKPnxYdCHAp24WZbgAt4U1LZNTh8/IRCtu5qnojC/1Cyk
oI1HEX96yQxhmg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:34:37 2025 by rpki-client