Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: xZEYGYAH6DM9lRpKAHxEShMyMVVtEQ+wqLzVPTWfqNY=
Subject key identifier: 0C:20:24:95:5A:32:5A:0A:47:65:7B:ED:D4:C4:56:F9:80:20:D0:90
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 01987E9CB1CB1C47BBC8A33111792815637E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 066B
Signing time: Wed 06 Aug 2025 09:00:55 +0000
Manifest this update: Wed 06 Aug 2025 09:00:55 +0000
Manifest next update: Thu 07 Aug 2025 09:00:55 +0000
Files and hashes: 1: XOOVHbvdi1PyG7OFqAlrThvaXr0.roa (hash: FXkyjiQc3j4OAi/BA8pdWLXnVuKz/SxHMWNuTxG6YRs=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: Js/1VFA09rvPEj9VAhhjJXmmQ3e9FD8LENWnWXCePC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:b1:cb:1c:47:bb:c8:a3:31:11:79:28:15:63:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Aug 6 09:00:55 2025 GMT
Not After : Aug 7 09:00:55 2025 GMT
Subject: CN=0c2024955a325a0a47657bedd4c456f98020d090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:31:fc:88:f7:13:09:9c:c2:61:eb:72:00:
18:03:7f:e2:6f:eb:54:62:ce:1a:5a:c9:65:32:88:
30:48:24:3d:f3:1a:e6:05:2b:06:c5:83:e0:c9:20:
d5:be:06:5d:77:e8:86:31:a3:65:05:a7:00:52:c7:
f3:13:32:0c:ac:a0:c5:50:4e:ba:05:8f:02:fc:00:
65:44:32:f1:57:1f:83:0a:27:11:3e:c9:5f:d8:47:
c1:84:50:ba:88:a7:19:de:c4:bc:43:a6:80:97:7d:
5d:f0:73:35:32:bd:eb:f5:59:61:9f:59:ed:44:97:
55:b7:ad:e8:fc:45:bd:48:ac:a2:96:5d:94:0d:07:
34:08:58:b6:aa:39:7b:39:f0:f7:93:d4:af:70:71:
59:cd:dd:2c:85:5f:d5:03:4f:20:5e:42:84:64:df:
bb:27:4e:f5:12:86:72:80:38:3f:d2:3e:37:ab:39:
5c:40:d1:43:ac:a7:9e:b7:9f:fd:27:b9:e2:88:8d:
60:ed:5b:83:66:9a:51:a4:8f:ab:44:e5:39:2e:ab:
4d:fa:85:74:97:42:29:c6:7a:73:08:21:7d:44:6c:
23:a2:ba:a0:71:b9:b5:75:4a:44:45:e5:3a:25:c9:
27:24:f8:ba:17:4d:a6:d6:f3:81:5c:a8:a9:bf:f0:
f1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:20:24:95:5A:32:5A:0A:47:65:7B:ED:D4:C4:56:F9:80:20:D0:90
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f9:2e:3f:f3:58:8e:85:bf:c5:2a:e1:ff:31:55:3d:90:05:
ff:4a:71:3d:9d:08:08:bd:30:57:a1:9b:e2:74:48:dc:bc:42:
1b:b6:15:d1:dd:3d:a8:00:73:cf:15:a5:2e:22:ec:0c:70:8a:
67:3d:67:ad:9b:00:ea:29:7b:07:77:36:4f:a6:a3:94:2d:ad:
46:94:99:93:55:32:4a:62:a1:3d:f4:a1:38:15:d7:dc:38:09:
16:15:ef:b5:ae:47:f1:46:32:49:98:d6:b4:e1:9e:36:e1:7c:
ab:5c:ff:b5:ff:31:bc:2f:39:4d:6b:47:c8:46:38:8e:22:d3:
33:f4:de:00:78:74:f3:57:48:16:01:21:cb:78:ca:d5:ec:46:
15:99:a2:51:2f:1b:9d:db:78:41:26:6e:fc:3b:bd:c1:a9:89:
36:54:22:24:ea:4c:c1:78:b7:d9:03:93:0b:e2:5d:10:4b:0c:
3a:e3:a2:43:8c:60:30:b6:f2:f0:8c:99:20:51:83:4b:6e:9f:
82:e6:ba:74:9f:0f:88:3f:13:a2:f3:fc:5f:40:5b:1a:64:be:
63:4a:e7:6f:44:9b:f0:e4:2e:ec:7d:65:10:c1:09:99:18:88:
c8:ba:fb:bc:8c:f3:cc:8d:a5:a3:16:5f:09:08:89:8d:c3:75:
b8:05:a5:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+nLHLHEe7yKMxEXkoFWN+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OThjYmM0ZThkZmYxODUyNDA0YTk5Mjc1ZDIzMGE1NjEx
MTA1NWYwHhcNMjUwODA2MDkwMDU1WhcNMjUwODA3MDkwMDU1WjAzMTEwLwYDVQQD
EygwYzIwMjQ5NTVhMzI1YTBhNDc2NTdiZWRkNGM0NTZmOTgwMjBkMDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoYx/Ij3EwmcwmHrcgAYA3/ib+tU
Ys4aWsllMogwSCQ98xrmBSsGxYPgySDVvgZdd+iGMaNlBacAUsfzEzIMrKDFUE66
BY8C/ABlRDLxVx+DCicRPslf2EfBhFC6iKcZ3sS8Q6aAl31d8HM1Mr3r9Vlhn1nt
RJdVt63o/EW9SKyill2UDQc0CFi2qjl7OfD3k9SvcHFZzd0shV/VA08gXkKEZN+7
J071EoZygDg/0j43qzlcQNFDrKeet5/9J7niiI1g7VuDZppRpI+rROU5LqtN+oV0
l0IpxnpzCCF9RGwjorqgcbm1dUpEReU6JcknJPi6F02m1vOBXKipv/DxUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwgJJVaMloKR2V77dTEVvmAINCQMB8GA1UdIwQY
MBaAFIWYy8To3/GFJASpknXSMKVhEQVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEt
NTFlNGE1ZWFmYzhlLzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEtNTFlNGE1ZWFmYzhl
LzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPkuP/NY
joW/xSrh/zFVPZAF/0pxPZ0ICL0wV6Gb4nRI3LxCG7YV0d09qABzzxWlLiLsDHCK
Zz1nrZsA6il7B3c2T6ajlC2tRpSZk1UySmKhPfShOBXX3DgJFhXvta5H8UYySZjW
tOGeNuF8q1z/tf8xvC85TWtHyEY4jiLTM/TeAHh081dIFgEhy3jK1exGFZmiUS8b
ndt4QSZu/Du9wamJNlQiJOpMwXi32QOTC+JdEEsMOuOiQ4xgMLby8IyZIFGDS26f
gua6dJ8PiD8TovP8X0BbGmS+Y0rnb0Sb8OQu7H1lEMEJmRiIyLr7vIzzzI2loxZf
CQiJjcN1uAWlug==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:15:10 2025 by rpki-client