Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json)
Hash identifier: 95Hh0FuCexnUNN0GpQ82B3d3nRvNEOVQ2wkUL5Wybl0=
Subject key identifier: 81:F1:99:92:92:36:E7:99:8E:81:5F:F9:5E:84:1B:52:8F:86:C5:44
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial: 0198733D7C4D52FDD351C925A26AA59644B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
Manifest number: 15AC
Signing time: Mon 04 Aug 2025 04:01:06 +0000
Manifest this update: Mon 04 Aug 2025 04:01:06 +0000
Manifest next update: Tue 05 Aug 2025 04:01:06 +0000
Files and hashes: 1: TpP1ghqsvudxwpVNjEnVhO4RWww.roa (hash: 4+AlZPeiYc4qPwqWqByXnBYBTrZOMTJuwqjVuo2TCds=)
2: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: bvslKIvYxJ4Kh8PuXliHJBVb9SPFM1JpgyXahu0GRgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:7c:4d:52:fd:d3:51:c9:25:a2:6a:a5:96:44:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
Validity
Not Before: Aug 4 04:01:06 2025 GMT
Not After : Aug 5 04:01:06 2025 GMT
Subject: CN=81f199929236e7998e815ff95e841b528f86c544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:7e:a7:8b:23:18:80:1a:2e:d5:c6:49:26:
2a:74:e2:b9:5b:8c:65:f2:34:56:df:fc:20:16:b8:
4e:5c:5a:d9:f9:82:8d:bb:80:ec:1b:67:99:e8:d7:
3e:56:07:fe:bd:52:1a:ac:c5:9c:e0:70:f4:43:bf:
30:26:6b:ce:98:6c:41:f2:51:ae:12:7a:0c:e0:70:
d8:11:79:43:46:49:86:e9:ac:18:d2:00:1b:d7:2c:
a1:36:04:89:9d:18:c1:2d:d1:17:07:3d:5b:18:15:
aa:06:f9:1c:0b:8e:02:ff:97:a1:63:eb:ca:db:70:
a6:ba:9a:f4:98:0d:76:62:84:45:10:d0:4f:ca:36:
c5:98:26:f7:7b:20:ce:8e:04:65:4f:0a:2a:54:e4:
d1:f4:4b:cb:0e:73:47:18:a1:10:b3:8a:27:be:72:
4d:72:91:94:dd:ae:83:00:ef:84:37:cd:21:d3:ed:
12:e3:18:83:2a:15:41:c6:3d:11:3a:a6:76:1c:4c:
f9:4c:56:eb:e0:d5:98:8d:4d:a6:8f:93:7f:ab:26:
d7:db:1c:32:bf:a4:9b:61:c9:50:f3:5b:39:e3:50:
57:9c:dd:ad:60:b3:80:eb:08:79:b1:8c:2d:60:37:
fd:d0:b0:98:84:0e:42:44:b8:ca:dc:eb:13:ae:2c:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F1:99:92:92:36:E7:99:8E:81:5F:F9:5E:84:1B:52:8F:86:C5:44
X509v3 Authority Key Identifier:
keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:53:89:db:3b:02:5f:eb:dd:d2:06:7c:51:cb:80:8d:a0:77:
50:00:e4:ec:03:b7:a6:fd:d6:96:7b:b0:fc:75:7e:7e:7a:01:
e0:23:ab:ac:d1:ed:ab:c7:01:02:bb:14:05:1f:c2:93:0a:8f:
cc:6c:d9:ad:38:40:d5:a7:d0:11:4e:e2:e1:1d:c5:2b:5d:cc:
ae:08:17:93:3a:2e:94:ec:df:f4:51:e8:8f:ee:4d:d6:69:5e:
2d:60:43:6b:6f:4c:28:33:1d:2e:d2:27:cf:ab:8c:98:d1:5c:
93:39:7f:c8:c7:25:f6:a2:07:c5:a4:ca:01:b4:43:0b:f7:fb:
27:60:bb:8c:91:89:08:d7:a9:e3:97:b2:2e:b7:19:55:91:05:
42:12:ae:54:01:6d:c3:09:ba:28:06:6f:c4:ec:05:57:57:cf:
bc:da:48:da:29:c6:7f:ea:af:ee:d1:97:90:c9:f4:b6:ed:5c:
4c:04:7c:36:21:32:e7:c9:0e:17:cb:d6:06:da:b6:37:8b:8f:
e0:84:04:f6:28:d2:74:18:54:b6:ca:d1:43:9a:20:26:e8:a6:
fc:79:de:47:07:81:fa:85:c5:09:28:e5:70:95:bd:59:a7:ea:
cd:aa:7e:60:a3:44:1f:92:71:60:92:89:2b:a3:32:10:a3:78:
da:fa:15:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPXxNUv3TUcklomqllkS5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGU4MzgzZTgyMDg5MzY4MDIzNjJhMDlmMzYwODVhNTBm
Y2Q4NWEwHhcNMjUwODA0MDQwMTA2WhcNMjUwODA1MDQwMTA2WjAzMTEwLwYDVQQD
Eyg4MWYxOTk5MjkyMzZlNzk5OGU4MTVmZjk1ZTg0MWI1MjhmODZjNTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4Z+p4sjGIAaLtXGSSYqdOK5W4xl
8jRW3/wgFrhOXFrZ+YKNu4DsG2eZ6Nc+Vgf+vVIarMWc4HD0Q78wJmvOmGxB8lGu
EnoM4HDYEXlDRkmG6awY0gAb1yyhNgSJnRjBLdEXBz1bGBWqBvkcC44C/5ehY+vK
23Cmupr0mA12YoRFENBPyjbFmCb3eyDOjgRlTwoqVOTR9EvLDnNHGKEQs4onvnJN
cpGU3a6DAO+EN80h0+0S4xiDKhVBxj0ROqZ2HEz5TFbr4NWYjU2mj5N/qybX2xwy
v6SbYclQ81s541BXnN2tYLOA6wh5sYwtYDf90LCYhA5CRLjK3OsTriwliQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHxmZKSNueZjoFf+V6EG1KPhsVEMB8GA1UdIwQY
MBaAFIVOg4PoIIk2gCNioJ82CFpQ/NhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMt
ZTZmZjdjYTNlY2VmLzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMtZTZmZjdjYTNlY2Vm
LzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVOJ2zsC
X+vd0gZ8UcuAjaB3UADk7AO3pv3Wlnuw/HV+fnoB4COrrNHtq8cBArsUBR/CkwqP
zGzZrThA1afQEU7i4R3FK13MrggXkzoulOzf9FHoj+5N1mleLWBDa29MKDMdLtIn
z6uMmNFckzl/yMcl9qIHxaTKAbRDC/f7J2C7jJGJCNep45eyLrcZVZEFQhKuVAFt
wwm6KAZvxOwFV1fPvNpI2inGf+qv7tGXkMn0tu1cTAR8NiEy58kOF8vWBtq2N4uP
4IQE9ijSdBhUtsrRQ5ogJuim/HneRweB+oXFCSjlcJW9Wafqzap+YKNEH5JxYJKJ
K6MyEKN42voVLw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:26 2025 by rpki-client