
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File: hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier: Wzf2N8YqHhW8iIrgr/nVP+R1MarKCqUtnN4mOCmf5Dg=
Subject key identifier: 6A:0F:C1:6C:21:BA:FB:44:75:D5:76:BD:C6:12:BF:86:FC:76:4E:59
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial: 0198745006CC084B84AD9D0D1503726DAED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number: 10B8
Signing time: Mon 04 Aug 2025 09:00:58 +0000
Manifest this update: Mon 04 Aug 2025 09:00:58 +0000
Manifest next update: Tue 05 Aug 2025 09:00:58 +0000
Files and hashes: 1: bbcA4RxlQmcQjNn0rG4goHNMuOU.roa (hash: R2hOoSIVcz11ndb2ZPvvYv6Kv8fgZfMkny+ajnRe2GQ=)
2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: 8f9ty5OEOPUszky2m8VLlnmh/pMsMzJ6P+ganNC7Ef8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:06:cc:08:4b:84:ad:9d:0d:15:03:72:6d:ae:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Validity
Not Before: Aug 4 09:00:58 2025 GMT
Not After : Aug 5 09:00:58 2025 GMT
Subject: CN=6a0fc16c21bafb4475d576bdc612bf86fc764e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:42:a7:4d:a8:c4:e3:6b:66:ff:f9:bf:01:
73:76:7d:85:2f:14:b2:6f:4b:47:dc:f6:4a:c3:a4:
25:ef:4c:14:0b:c4:e9:79:1b:e2:3a:e3:0c:95:fa:
6d:06:dd:1d:a5:71:00:3f:09:91:48:d5:a4:32:4e:
e6:6f:30:cb:33:6e:df:5e:e5:1a:a2:57:48:6f:55:
e7:f3:79:80:30:bd:0a:94:8e:55:71:b5:8f:a3:5a:
71:2b:a7:1c:18:eb:36:9f:1f:df:49:d4:08:f1:75:
f0:73:d8:7d:b0:fd:65:94:8b:9e:c3:89:49:b0:b1:
d3:7b:41:0c:92:9d:ff:c4:53:0b:4a:c6:8d:0f:52:
e9:3b:96:de:26:c1:26:8f:46:27:7b:c8:d8:1c:ae:
a8:80:90:dd:e3:fc:c3:ee:4d:b4:e1:c6:df:ec:cd:
6f:44:35:f1:db:88:23:f0:1d:83:88:97:72:5a:21:
73:0f:3b:17:91:ef:8f:3d:c1:9c:57:4b:a8:3a:43:
7b:fe:35:45:a8:b9:7f:97:b8:6e:ae:ca:94:58:fb:
c1:82:d2:bb:8a:ce:86:85:2b:50:74:a2:3e:7f:51:
2e:32:a0:1a:2c:d5:47:96:e4:86:43:41:ae:f3:da:
ee:40:cd:1b:56:f3:42:27:13:97:d9:d9:42:15:76:
cb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0F:C1:6C:21:BA:FB:44:75:D5:76:BD:C6:12:BF:86:FC:76:4E:59
X509v3 Authority Key Identifier:
keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:12:2f:1d:ec:2c:2c:16:93:a2:06:78:da:f5:16:e5:ac:a1:
e3:15:75:d0:45:63:68:03:84:06:0d:a3:f7:92:da:cc:00:d8:
27:38:a4:16:cb:7e:e0:9b:76:5b:68:a3:5f:6a:34:e1:17:2a:
cf:c9:33:8c:e1:27:7f:b6:7f:c1:fc:20:7a:04:5a:2b:d1:a3:
8d:32:d1:1b:d1:78:0a:a5:66:f1:a6:7d:cb:3f:d6:d4:81:82:
8d:29:30:cf:1d:b3:a8:15:ba:57:4b:3f:23:a4:5b:75:25:71:
8e:bb:df:c3:35:41:45:de:e4:7c:f0:e2:71:7c:4f:62:04:8c:
3b:99:f6:a6:63:8f:ad:9c:8c:35:12:f1:c8:0c:a2:85:70:a8:
1b:c5:12:8a:47:ff:55:cc:2a:08:c2:21:da:e6:d8:2e:20:fc:
7f:2f:29:a1:bf:ca:99:31:de:12:e2:89:20:56:77:8d:57:3e:
ac:d0:1b:31:00:e6:ab:a9:ec:7b:a5:f3:2a:49:86:ae:01:86:
75:d6:43:2c:24:d2:63:18:df:46:1c:49:c6:58:98:32:55:2f:
4e:0b:b9:75:01:b2:9e:24:cd:9d:c3:66:c6:39:44:1f:4d:6f:
f1:57:e3:a0:2d:22:1d:f6:af:83:28:47:9c:77:a8:97:03:8e:
7f:9a:09:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UAbMCEuErZ0NFQNyba7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NjZlOTE3NDJkYWQxYjlmNGM3OTZiMjNiMzdlYjdhY2Q4
NTgxNjEwHhcNMjUwODA0MDkwMDU4WhcNMjUwODA1MDkwMDU4WjAzMTEwLwYDVQQD
Eyg2YTBmYzE2YzIxYmFmYjQ0NzVkNTc2YmRjNjEyYmY4NmZjNzY0ZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH9Cp02oxONrZv/5vwFzdn2FLxSy
b0tH3PZKw6Ql70wUC8TpeRviOuMMlfptBt0dpXEAPwmRSNWkMk7mbzDLM27fXuUa
oldIb1Xn83mAML0KlI5VcbWPo1pxK6ccGOs2nx/fSdQI8XXwc9h9sP1llIuew4lJ
sLHTe0EMkp3/xFMLSsaND1LpO5beJsEmj0Yne8jYHK6ogJDd4/zD7k204cbf7M1v
RDXx24gj8B2DiJdyWiFzDzsXke+PPcGcV0uoOkN7/jVFqLl/l7hursqUWPvBgtK7
is6GhStQdKI+f1EuMqAaLNVHluSGQ0Gu89ruQM0bVvNCJxOX2dlCFXbLnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoPwWwhuvtEddV2vcYSv4b8dk5ZMB8GA1UdIwQY
MBaAFIRm6RdC2tG59MeWsjs363rNhYFhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNjY5YjctMDc3OS00NTlhLTkyMjAt
NGUzMmM4YjhlZTM2LzEvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hNjY5YjctMDc3OS00NTlhLTkyMjAtNGUzMmM4YjhlZTM2
LzEvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexIvHews
LBaTogZ42vUW5ayh4xV10EVjaAOEBg2j95LazADYJzikFst+4Jt2W2ijX2o04Rcq
z8kzjOEnf7Z/wfwgegRaK9GjjTLRG9F4CqVm8aZ9yz/W1IGCjSkwzx2zqBW6V0s/
I6RbdSVxjrvfwzVBRd7kfPDicXxPYgSMO5n2pmOPrZyMNRLxyAyihXCoG8USikf/
VcwqCMIh2ubYLiD8fy8pob/KmTHeEuKJIFZ3jVc+rNAbMQDmq6nse6XzKkmGrgGG
ddZDLCTSYxjfRhxJxliYMlUvTgu5dQGyniTNncNmxjlEH01v8VfjoC0iHfavgyhH
nHeolwOOf5oJzQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:10 2025 by rpki-client