Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
File: H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft (raw, json)
Hash identifier: EWgYMKG1JYCzTwpg0sMWYwm/UFqO18o7Viji4rBCGiA=
Subject key identifier: D6:88:57:62:C5:9C:84:08:8A:1E:61:C0:53:3D:A1:0B:C8:73:3A:E8
Authority key identifier: 1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32
Certificate issuer: /CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32
Certificate serial: 0198752B94B50F726FA8CABC4B9BE7D8615C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
Manifest number: 0386
Signing time: Mon 04 Aug 2025 13:00:47 +0000
Manifest this update: Mon 04 Aug 2025 13:00:47 +0000
Manifest next update: Tue 05 Aug 2025 13:00:47 +0000
Files and hashes: 1: H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl (hash: JhyuEebfIwxBaE8/T9qHYb50OkXP9O73AivgRglsJpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:94:b5:0f:72:6f:a8:ca:bc:4b:9b:e7:d8:61:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32
Validity
Not Before: Aug 4 13:00:47 2025 GMT
Not After : Aug 5 13:00:47 2025 GMT
Subject: CN=d6885762c59c84088a1e61c0533da10bc8733ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:c2:e0:e3:a8:f5:a0:bd:04:bf:ae:0a:a4:
5c:91:d0:91:1f:db:31:56:15:40:a1:af:fb:ab:5d:
13:48:99:d6:98:95:96:97:fd:bf:d1:30:87:5b:5f:
69:95:bc:7b:15:65:5d:54:7b:55:d1:f9:e3:9f:1c:
e9:2d:64:6d:d7:86:e5:50:bf:df:5e:6b:e8:67:19:
45:85:3e:75:87:b7:3f:f3:2a:3b:25:d4:cb:de:50:
95:81:c0:78:5a:02:fe:b0:9a:2c:8c:b2:e2:27:24:
ae:8a:00:a5:a2:92:0c:44:6f:b1:b1:e1:7c:c7:5b:
cc:ee:19:6f:77:df:74:a1:7b:c2:5e:64:d1:d4:53:
8c:fe:bd:5f:52:ea:0d:f6:52:dc:12:83:c8:4d:fb:
5d:5b:8a:8c:07:98:33:14:17:bc:48:9e:b4:b8:1e:
55:0e:6f:c4:dc:da:24:63:68:7b:fc:c0:d8:f7:d2:
ce:c4:24:75:df:0a:26:27:ec:53:05:f9:7f:4a:25:
49:85:03:f4:8f:ca:10:99:b9:1a:ab:c9:6e:86:c9:
36:41:64:93:d2:9b:0c:4e:96:7d:07:05:ed:bb:44:
e8:60:00:b6:8c:12:01:f1:23:fb:69:06:8b:33:8b:
cd:a4:ca:b1:cb:b8:f7:a6:32:7b:de:7f:8c:8f:c5:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:88:57:62:C5:9C:84:08:8A:1E:61:C0:53:3D:A1:0B:C8:73:3A:E8
X509v3 Authority Key Identifier:
keyid:1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:54:26:9a:cc:17:cb:59:67:af:f2:37:7c:e3:54:0c:ea:62:
65:fb:66:62:40:51:2c:f8:de:24:12:df:4b:33:88:b5:42:ed:
73:7d:e2:75:47:e8:3b:0c:81:1f:6f:69:1e:25:6d:b2:ba:cd:
56:c6:6d:d3:fb:7c:2f:b3:5c:9d:81:61:99:f9:4b:22:b6:b1:
3a:da:ea:39:8a:75:25:90:77:08:2a:0d:59:57:19:53:bd:35:
16:6c:51:11:36:22:57:d9:eb:1d:7b:10:46:ba:8c:31:08:6d:
86:eb:e7:5b:c7:da:83:bc:06:f2:4c:9a:07:b0:1a:b3:f1:f9:
3b:74:f2:b5:8e:6a:e6:ba:35:92:ef:4c:d7:69:1d:f3:ce:de:
5d:05:b0:d6:58:4b:f1:61:96:e8:f0:40:f0:eb:93:d4:27:93:
2a:c1:c3:c8:04:b5:a9:14:e5:4a:02:93:1b:46:68:ae:54:72:
50:37:85:dc:d3:f3:bc:c4:de:42:70:30:6c:b3:d8:9d:c2:25:
64:8a:ce:3d:85:d0:99:4d:49:63:36:2d:8f:77:ae:69:10:25:
d7:ff:c3:df:f4:12:11:bd:bf:a6:d8:9c:65:95:7e:0f:0f:73:
a0:8c:8d:c2:85:83:1e:7e:4d:5e:eb:e4:f5:6d:8e:f7:1b:b5:
2c:9c:50:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1K5S1D3JvqMq8S5vn2GFcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmODk3ZGJmZjAxYWZkOWQxZTc3YjZmOWZlMDhkOTc3NDJm
NTZkMzIwHhcNMjUwODA0MTMwMDQ3WhcNMjUwODA1MTMwMDQ3WjAzMTEwLwYDVQQD
EyhkNjg4NTc2MmM1OWM4NDA4OGExZTYxYzA1MzNkYTEwYmM4NzMzYWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFLC4OOo9aC9BL+uCqRckdCRH9sx
VhVAoa/7q10TSJnWmJWWl/2/0TCHW19plbx7FWVdVHtV0fnjnxzpLWRt14blUL/f
XmvoZxlFhT51h7c/8yo7JdTL3lCVgcB4WgL+sJosjLLiJySuigClopIMRG+xseF8
x1vM7hlvd990oXvCXmTR1FOM/r1fUuoN9lLcEoPITftdW4qMB5gzFBe8SJ60uB5V
Dm/E3NokY2h7/MDY99LOxCR13womJ+xTBfl/SiVJhQP0j8oQmbkaq8luhsk2QWST
0psMTpZ9BwXtu0ToYAC2jBIB8SP7aQaLM4vNpMqxy7j3pjJ73n+Mj8W2tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaIV2LFnIQIih5hwFM9oQvIczroMB8GA1UdIwQY
MBaAFB+Jfb/wGv2dHne2+f4I2XdC9W0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDRsOXZfQWFfWjBlZDdiNV9nalpkMEwxYlRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lNDAxZDAtNjlmZS00MzI2LWEwNDIt
NDExYzNkMmQwNjllLzEvSDRsOXZfQWFfWjBlZDdiNV9nalpkMEwxYlRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9lNDAxZDAtNjlmZS00MzI2LWEwNDItNDExYzNkMmQwNjll
LzEvSDRsOXZfQWFfWjBlZDdiNV9nalpkMEwxYlRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVQmmswX
y1lnr/I3fONUDOpiZftmYkBRLPjeJBLfSzOItULtc33idUfoOwyBH29pHiVtsrrN
VsZt0/t8L7NcnYFhmflLIraxOtrqOYp1JZB3CCoNWVcZU701FmxRETYiV9nrHXsQ
RrqMMQhthuvnW8fag7wG8kyaB7Aas/H5O3TytY5q5ro1ku9M12kd887eXQWw1lhL
8WGW6PBA8OuT1CeTKsHDyAS1qRTlSgKTG0ZorlRyUDeF3NPzvMTeQnAwbLPYncIl
ZIrOPYXQmU1JYzYtj3euaRAl1//D3/QSEb2/pticZZV+Dw9zoIyNwoWDHn5NXuvk
9W2O9xu1LJxQEQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:19 2025 by rpki-client