
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
File: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft (raw, json)
Hash identifier: rMGOCYZlfltsu29Wrsj65DcghTtxFBTZ8I7YQ//UklE=
Subject key identifier: 63:1A:B7:F5:26:CD:48:60:07:D3:DD:F5:5A:10:CE:3C:85:E6:8D:E6
Authority key identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
Certificate issuer: /CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Certificate serial: 01987374819D5DA347DBB6B01B332776C1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
Manifest number: 161C
Signing time: Mon 04 Aug 2025 05:01:11 +0000
Manifest this update: Mon 04 Aug 2025 05:01:11 +0000
Manifest next update: Tue 05 Aug 2025 05:01:11 +0000
Files and hashes: 1: SJWhB7kWgTlTbR2flWrmQ2wlKOY.roa (hash: p8++Hz/3lRer+jzGUuklhwrO6NIeyYEbaz4oXToL4+U=)
2: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl (hash: dPUYlwzA81pnQCx8eaQVbu145SuFTVWYAG5TYtVpO10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:81:9d:5d:a3:47:db:b6:b0:1b:33:27:76:c1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Validity
Not Before: Aug 4 05:01:11 2025 GMT
Not After : Aug 5 05:01:11 2025 GMT
Subject: CN=631ab7f526cd486007d3ddf55a10ce3c85e68de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:3f:28:df:10:72:80:96:92:69:53:c1:0f:
a6:ee:ca:c2:95:37:24:93:a2:0e:3b:63:35:fd:61:
fa:cb:ef:bd:7a:69:93:2d:a8:d5:89:73:89:84:10:
6f:b5:62:f5:88:16:c6:82:8d:e4:50:5e:80:c5:60:
79:0f:4f:3f:36:32:c1:a2:f4:0a:f0:1d:a7:7b:73:
69:40:7f:e0:86:eb:57:b3:b0:ec:be:17:ab:d4:a7:
10:19:2e:b7:76:c7:7f:e2:c4:7a:bf:8f:94:49:8b:
58:37:44:1a:db:4d:be:ab:15:0b:91:5a:95:07:da:
eb:1f:4a:2b:0e:67:c2:53:5c:b8:78:7d:65:c5:3a:
e5:18:5e:82:ef:40:66:fd:36:c6:9f:9d:8e:0d:cc:
a9:51:31:eb:5f:1a:eb:fe:71:3f:63:45:73:f8:29:
dd:91:6f:fa:eb:a3:a6:6b:bc:09:a2:3f:5c:2f:4d:
9d:7b:b1:f1:06:d4:bd:5f:5d:9c:6c:b0:80:d7:25:
13:c7:f2:4d:40:b7:54:3e:2e:c5:81:54:52:5c:20:
3c:6b:4d:f9:76:23:dd:f5:f9:05:d8:5e:15:17:b3:
21:cb:7f:47:81:1e:bb:75:b9:42:49:2b:ec:00:14:
e7:21:f6:61:d8:90:a9:f7:2c:96:b6:ef:75:df:e3:
93:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1A:B7:F5:26:CD:48:60:07:D3:DD:F5:5A:10:CE:3C:85:E6:8D:E6
X509v3 Authority Key Identifier:
keyid:85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:71:01:55:07:2a:a2:29:53:18:c1:ae:f0:ac:9e:2d:5c:ae:
63:12:74:24:7b:21:81:62:4a:4f:12:5b:05:d7:e6:98:c7:82:
ac:52:97:ed:fd:aa:0c:a4:df:33:62:fc:06:66:99:02:77:8d:
5f:b7:88:72:73:7b:39:3d:3f:8d:ad:04:7d:33:ed:fe:05:26:
1d:59:a9:34:6a:54:60:fe:ca:f3:60:d3:94:3f:82:26:dd:e6:
b1:29:34:f0:f7:fb:78:17:1d:bc:0c:86:03:01:12:5d:27:ec:
0c:f3:04:a9:a0:7c:d9:38:96:10:49:5e:2d:59:71:a8:1f:38:
26:a7:0c:b7:66:9c:b3:84:ab:7b:5e:76:d8:52:c5:ae:3f:1d:
7c:3d:79:37:6b:48:61:2a:56:ee:b0:eb:53:e7:af:fe:19:a7:
7a:d0:4d:0d:6a:47:90:fe:be:1f:ba:f3:1f:a8:72:55:bb:1f:
24:9e:c0:0b:e0:51:53:db:6b:1a:0a:18:23:81:01:23:a4:aa:
ce:ce:8b:e8:54:0d:ba:47:1c:c5:1f:b7:a4:c6:1f:b8:d0:f8:
74:84:e6:7a:fe:23:83:45:2f:51:11:32:e3:bc:28:bd:f0:61:
8f:38:9c:9a:79:c2:6d:28:cf:79:dd:94:69:08:cc:4f:ac:cc:
64:09:07:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdIGdXaNH27awGzMndsGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OTE2YmU3ZTYzY2ZkOGM4Yjc3YzA1ODhkMTI2OTRmMTZi
MTRjZGEwHhcNMjUwODA0MDUwMTExWhcNMjUwODA1MDUwMTExWjAzMTEwLwYDVQQD
Eyg2MzFhYjdmNTI2Y2Q0ODYwMDdkM2RkZjU1YTEwY2UzYzg1ZTY4ZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7A/KN8QcoCWkmlTwQ+m7srClTck
k6IOO2M1/WH6y++9emmTLajViXOJhBBvtWL1iBbGgo3kUF6AxWB5D08/NjLBovQK
8B2ne3NpQH/ghutXs7Dsvher1KcQGS63dsd/4sR6v4+USYtYN0Qa202+qxULkVqV
B9rrH0orDmfCU1y4eH1lxTrlGF6C70Bm/TbGn52ODcypUTHrXxrr/nE/Y0Vz+Cnd
kW/666Oma7wJoj9cL02de7HxBtS9X12cbLCA1yUTx/JNQLdUPi7FgVRSXCA8a035
diPd9fkF2F4VF7Mhy39HgR67dblCSSvsABTnIfZh2JCp9yyWtu913+OTtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMat/UmzUhgB9Pd9VoQzjyF5o3mMB8GA1UdIwQY
MBaAFIWRa+fmPP2Mi3fAWI0SaU8WsUzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81N2ZiMTQtZDcwNS00MDU1LTgwNDUt
YmNhMjM0ODI5ZjQ4LzEvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81N2ZiMTQtZDcwNS00MDU1LTgwNDUtYmNhMjM0ODI5ZjQ4
LzEvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXEBVQcq
oilTGMGu8KyeLVyuYxJ0JHshgWJKTxJbBdfmmMeCrFKX7f2qDKTfM2L8BmaZAneN
X7eIcnN7OT0/ja0EfTPt/gUmHVmpNGpUYP7K82DTlD+CJt3msSk08Pf7eBcdvAyG
AwESXSfsDPMEqaB82TiWEEleLVlxqB84JqcMt2acs4Sre1522FLFrj8dfD15N2tI
YSpW7rDrU+ev/hmnetBNDWpHkP6+H7rzH6hyVbsfJJ7AC+BRU9trGgoYI4EBI6Sq
zs6L6FQNukccxR+3pMYfuND4dITmev4jg0UvUREy47wovfBhjzicmnnCbSjPed2U
aQjMT6zMZAkHQA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:07 2025 by rpki-client