Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
File: hX9MEi5PjGAfIcXIaHFtRgidheE.mft (raw, json)
Hash identifier: DKfmulNfMENrlY22ZZ/duh/dCb9VGLjeQXfEF7BsuJ4=
Subject key identifier: 8C:5C:9C:5D:4D:FF:C1:53:1C:11:E2:D1:0E:54:DE:B0:9E:76:62:B3
Authority key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
Certificate issuer: /CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Certificate serial: 019893DAAA6D09C4404785D076AE178BB4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
Manifest number: 0AEF
Signing time: Sun 10 Aug 2025 12:00:37 +0000
Manifest this update: Sun 10 Aug 2025 12:00:37 +0000
Manifest next update: Mon 11 Aug 2025 12:00:37 +0000
Files and hashes: 1: hX9MEi5PjGAfIcXIaHFtRgidheE.crl (hash: 3iQUU8zLEhVHf04QgVZ5IOMpalZgpQER3OByYL64SK8=)
2: wypxlBc1J8Bpx8wsCukzLkT7CzM.roa (hash: VSR04yRc8P3tg6W5nBtOO4BrNXPIDW2s4T0F9VJBzcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:aa:6d:09:c4:40:47:85:d0:76:ae:17:8b:b4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Validity
Not Before: Aug 10 12:00:37 2025 GMT
Not After : Aug 11 12:00:37 2025 GMT
Subject: CN=8c5c9c5d4dffc1531c11e2d10e54deb09e7662b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:02:10:95:e2:22:e4:41:b5:dc:ac:41:f2:75:
e9:1f:23:53:a5:68:2b:1a:e4:98:fc:ce:69:06:63:
92:b8:4a:f3:18:fd:83:21:0c:f0:f2:58:3a:19:33:
b4:d0:80:7a:3a:63:6f:4b:b9:da:fd:25:4c:42:b6:
df:21:7a:fb:46:cf:67:c9:c5:7f:11:a0:3f:89:af:
0f:82:b5:51:46:1d:71:0b:17:bf:fc:97:39:16:eb:
78:0e:0c:10:78:6b:0f:35:3e:2b:51:09:93:53:3f:
fe:5d:fa:f7:e2:5b:1a:56:d7:ca:37:ed:b6:db:c9:
79:dc:07:ed:a8:82:15:2a:35:7d:44:02:ee:30:79:
a0:32:54:dd:26:65:5c:1f:0b:36:ee:44:02:53:b7:
b0:bc:b3:3d:a8:9b:ab:7f:e1:bb:92:24:88:04:9e:
b7:00:1f:86:c2:db:7c:a6:fa:8e:34:8e:2b:47:04:
9b:4a:7f:e7:9e:71:6c:ca:af:12:ab:42:70:df:9e:
6c:bf:4b:5c:e9:f9:cf:66:05:20:b2:6a:b1:c2:15:
0d:b3:e8:43:b7:9e:eb:ba:90:d7:04:84:d7:22:d2:
7b:7d:83:fc:89:75:2c:0d:ab:36:4b:8d:f5:3d:6a:
70:15:fa:02:55:c0:b8:fa:f3:00:e3:e3:fe:91:7e:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5C:9C:5D:4D:FF:C1:53:1C:11:E2:D1:0E:54:DE:B0:9E:76:62:B3
X509v3 Authority Key Identifier:
keyid:85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5e:cc:d3:ef:ff:cd:7a:f5:92:12:79:f5:fe:c5:40:a8:81:
c1:fd:d5:e7:c1:72:3c:6d:8b:74:4b:56:a2:0c:30:24:b3:39:
aa:95:61:eb:db:b3:4c:ae:e4:72:2a:06:0c:1b:05:39:3d:90:
ad:82:29:39:0f:92:70:14:57:10:92:fa:e3:93:58:70:db:fc:
2a:4a:e2:b9:4e:a0:30:b2:40:3f:38:56:fe:e6:60:5b:2b:f8:
f1:c8:45:9e:c1:a3:3f:72:d2:be:83:d0:1e:4e:b7:2d:2d:e8:
a4:e1:91:93:a6:cc:85:ff:4d:8b:80:cf:db:f2:1e:f2:21:99:
97:a0:9d:1a:c5:2c:a5:0f:d4:60:50:e1:e3:79:d3:36:7e:27:
5a:ed:c4:04:f4:fd:6f:7f:34:5c:81:07:63:78:71:7e:6c:2f:
32:20:6d:6e:16:11:59:42:20:81:c9:b5:9f:09:68:47:d5:87:
3b:d8:65:c4:a5:0f:b4:7a:b1:e0:24:b0:1a:4d:13:f8:50:7e:
7c:1d:8f:e9:a8:7e:42:48:cb:b1:a3:78:98:22:50:c4:93:68:
29:aa:45:c4:f4:ff:d6:e9:99:59:60:6a:3d:c9:f5:d9:91:02:
cb:54:48:26:f4:78:78:bc:99:6b:c0:94:bc:9e:4e:4e:2e:8c:
f7:da:d2:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiT2qptCcRAR4XQdq4Xi7T1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1N2Y0YzEyMmU0ZjhjNjAxZjIxYzVjODY4NzE2ZDQ2MDg5
ZDg1ZTEwHhcNMjUwODEwMTIwMDM3WhcNMjUwODExMTIwMDM3WjAzMTEwLwYDVQQD
Eyg4YzVjOWM1ZDRkZmZjMTUzMWMxMWUyZDEwZTU0ZGViMDllNzY2MmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QIQleIi5EG13KxB8nXpHyNTpWgr
GuSY/M5pBmOSuErzGP2DIQzw8lg6GTO00IB6OmNvS7na/SVMQrbfIXr7Rs9nycV/
EaA/ia8PgrVRRh1xCxe//Jc5Fut4DgwQeGsPNT4rUQmTUz/+Xfr34lsaVtfKN+22
28l53AftqIIVKjV9RALuMHmgMlTdJmVcHws27kQCU7ewvLM9qJurf+G7kiSIBJ63
AB+Gwtt8pvqONI4rRwSbSn/nnnFsyq8Sq0Jw355sv0tc6fnPZgUgsmqxwhUNs+hD
t57rupDXBITXItJ7fYP8iXUsDas2S431PWpwFfoCVcC4+vMA4+P+kX5ybwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxcnF1N/8FTHBHi0Q5U3rCedmKzMB8GA1UdIwQY
MBaAFIV/TBIuT4xgHyHFyGhxbUYInYXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85NjE5MzktYWM4ZS00ZDEyLWIxMmYt
ZGE1Y2IwZmIxOWU3LzEvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85NjE5MzktYWM4ZS00ZDEyLWIxMmYtZGE1Y2IwZmIxOWU3
LzEvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAll7M0+//
zXr1khJ59f7FQKiBwf3V58FyPG2LdEtWogwwJLM5qpVh69uzTK7kcioGDBsFOT2Q
rYIpOQ+ScBRXEJL645NYcNv8KkriuU6gMLJAPzhW/uZgWyv48chFnsGjP3LSvoPQ
Hk63LS3opOGRk6bMhf9Ni4DP2/Ie8iGZl6CdGsUspQ/UYFDh43nTNn4nWu3EBPT9
b380XIEHY3hxfmwvMiBtbhYRWUIggcm1nwloR9WHO9hlxKUPtHqx4CSwGk0T+FB+
fB2P6ah+QkjLsaN4mCJQxJNoKapFxPT/1umZWWBqPcn12ZECy1RIJvR4eLyZa8CU
vJ5OTi6M99rSLw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:12 2025 by rpki-client