Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
File: H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft (raw, json)
Hash identifier: Urv2b8GONC73cwV+9sAHgT/vJCtBIdwFPSC6PEPdqI0=
Subject key identifier: 42:E3:70:83:32:B5:44:B3:E5:B4:75:77:A6:2E:91:44:E5:B8:65:92
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial: 01989412287FA5DAE51944B4421B9199E1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
Manifest number: 0636
Signing time: Sun 10 Aug 2025 13:01:14 +0000
Manifest this update: Sun 10 Aug 2025 13:01:14 +0000
Manifest next update: Mon 11 Aug 2025 13:01:14 +0000
Files and hashes: 1: H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl (hash: WWNgDkZnd96//0Pwe4Bx2p3gZkUCiZb0srjMdxrMTDI=)
2: ZA-Fsp1hu16PQ0R45Lc7chwtPNU.roa (hash: x0oSuNUvGAEiCqtY/b9NTmD39yaJZU6JXSSkrtRMv7c=)
3: mh0Jg1BQZQFxE7soBuLLkUSUg7s.roa (hash: 3hdKu/KUGUvmqdrOu9SEX01+RMAxxDpDoIMPSPl7lAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:28:7f:a5:da:e5:19:44:b4:42:1b:91:99:e1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
Validity
Not Before: Aug 10 13:01:14 2025 GMT
Not After : Aug 11 13:01:14 2025 GMT
Subject: CN=42e3708332b544b3e5b47577a62e9144e5b86592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:ae:3f:50:f6:04:5d:f1:19:e1:92:12:6b:
bf:e0:af:77:a1:38:d8:b1:7c:55:27:3a:9e:2f:4c:
0f:55:c6:51:b8:44:d3:46:8f:4e:34:fc:0b:17:06:
6a:00:7a:5d:f5:eb:27:07:1f:9e:20:90:70:90:56:
c0:f8:71:d3:df:ab:d8:65:3d:6b:8e:16:1f:97:21:
4a:7b:05:4b:49:e3:58:02:c4:7f:0e:c9:0b:38:f2:
f2:56:f8:88:a8:28:48:3b:96:f0:33:0e:0c:47:bb:
3c:46:9e:ca:97:d2:f8:09:6f:f3:81:27:5c:b7:18:
3a:40:c7:41:0e:b5:87:86:17:6a:2e:58:b2:0a:94:
ed:5f:27:c2:84:7b:0a:64:73:ce:d2:0b:e9:96:c7:
92:cc:38:cb:16:7f:f9:b1:80:6a:d2:42:5c:20:44:
1b:55:ad:b8:ee:a9:68:05:28:c3:f7:24:2c:19:aa:
b5:c2:64:af:34:8b:0a:f8:be:7b:61:c7:ad:dc:30:
e4:35:44:06:30:1a:dd:c8:ba:7f:30:98:b1:29:96:
4c:80:1e:40:91:28:f2:dc:cf:3c:bf:91:35:79:68:
4d:2e:f5:49:4c:03:ed:d3:a8:77:30:6b:1a:bd:b0:
99:49:a6:9e:8b:28:97:3f:c6:6c:13:b6:94:21:f1:
e0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E3:70:83:32:B5:44:B3:E5:B4:75:77:A6:2E:91:44:E5:B8:65:92
X509v3 Authority Key Identifier:
keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:30:3b:1f:31:d6:47:5e:bc:53:2b:1a:46:d7:f5:cb:ad:21:
3b:02:ab:4c:c1:80:a1:e9:ab:2a:37:b4:79:52:9d:ab:4b:e7:
e5:5c:b9:e1:6e:6e:21:fb:ab:4b:19:f2:67:54:23:4c:2d:93:
60:88:37:0c:68:0f:c8:c3:46:5c:64:07:ff:2f:e8:5f:c1:ff:
14:ee:2f:47:bc:1c:d1:02:0a:5b:26:3d:18:de:f8:40:61:a5:
c8:21:d1:b8:c1:ad:92:89:c7:5b:ec:59:ad:63:8b:d9:db:88:
e0:84:cf:58:93:3b:05:4d:60:76:5b:a8:f5:48:a4:95:0f:b9:
1a:88:ec:81:06:39:51:da:87:da:28:ad:d9:76:97:a2:15:e1:
56:e3:ad:7c:2a:13:9e:a6:34:0f:7d:0e:05:22:b5:0b:57:0e:
31:51:83:c0:0a:a8:9e:c4:92:15:46:d6:23:14:43:c8:36:97:
21:e0:d0:80:d7:3f:cc:5c:0b:05:08:b1:c2:60:a4:80:4c:8e:
61:70:4a:fa:d5:75:48:6a:79:92:a1:1f:6f:f2:fb:4e:09:f3:
21:f4:92:38:6e:54:ed:91:05:26:02:43:5e:9c:a6:72:2a:ec:
45:cf:43:c0:ef:4e:93:a6:dc:74:ec:0a:d8:65:cb:d2:de:5b:
d3:56:3c:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUEih/pdrlGUS0QhuRmeGjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmODhiNWU5MzUyMmI4OThlNzZmNDVmNDc4NDQzYzM0OGY1
N2I5MTYwHhcNMjUwODEwMTMwMTE0WhcNMjUwODExMTMwMTE0WjAzMTEwLwYDVQQD
Eyg0MmUzNzA4MzMyYjU0NGIzZTViNDc1NzdhNjJlOTE0NGU1Yjg2NTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxeuP1D2BF3xGeGSEmu/4K93oTjY
sXxVJzqeL0wPVcZRuETTRo9ONPwLFwZqAHpd9esnBx+eIJBwkFbA+HHT36vYZT1r
jhYflyFKewVLSeNYAsR/DskLOPLyVviIqChIO5bwMw4MR7s8Rp7Kl9L4CW/zgSdc
txg6QMdBDrWHhhdqLliyCpTtXyfChHsKZHPO0gvplseSzDjLFn/5sYBq0kJcIEQb
Va247qloBSjD9yQsGaq1wmSvNIsK+L57Ycet3DDkNUQGMBrdyLp/MJixKZZMgB5A
kSjy3M88v5E1eWhNLvVJTAPt06h3MGsavbCZSaaeiyiXP8ZsE7aUIfHgCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELjcIMytUSz5bR1d6YukUTluGWSMB8GA1UdIwQY
MBaAFB+Itek1IriY529F9HhEPDSPV7kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDRpMTZUVWl1SmpuYjBYMGVFUThOSTlYdVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82YTAxYjctYTRlZC00YjcxLTgwYjYt
Y2QzOTJiMGRlZGNmLzEvSDRpMTZUVWl1SmpuYjBYMGVFUThOSTlYdVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82YTAxYjctYTRlZC00YjcxLTgwYjYtY2QzOTJiMGRlZGNm
LzEvSDRpMTZUVWl1SmpuYjBYMGVFUThOSTlYdVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzA7HzHW
R168UysaRtf1y60hOwKrTMGAoemrKje0eVKdq0vn5Vy54W5uIfurSxnyZ1QjTC2T
YIg3DGgPyMNGXGQH/y/oX8H/FO4vR7wc0QIKWyY9GN74QGGlyCHRuMGtkonHW+xZ
rWOL2duI4ITPWJM7BU1gdluo9UiklQ+5GojsgQY5UdqH2iit2XaXohXhVuOtfCoT
nqY0D30OBSK1C1cOMVGDwAqonsSSFUbWIxRDyDaXIeDQgNc/zFwLBQixwmCkgEyO
YXBK+tV1SGp5kqEfb/L7TgnzIfSSOG5U7ZEFJgJDXpymcirsRc9DwO9Ok6bcdOwK
2GXL0t5b01Y8Lw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:31 2025 by rpki-client