Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
File: rHpOXEMf9seeT1vRtGsF-fRBEM4.mft (raw, json)
Hash identifier: YIeJ3RfdSkFVOebFaBeiQVp0K+7OBLFxEIKzg0itFi0=
Subject key identifier: DA:C3:3B:2F:24:45:9B:2A:34:2F:A3:E0:70:7D:82:34:FC:16:3A:B7
Authority key identifier: AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
Certificate issuer: /CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Certificate serial: 019872620D2988A6915E4FC7C319927162CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
Manifest number: 0CB3
Signing time: Mon 04 Aug 2025 00:01:25 +0000
Manifest this update: Mon 04 Aug 2025 00:01:25 +0000
Manifest next update: Tue 05 Aug 2025 00:01:25 +0000
Files and hashes: 1: YFU0rK0Che90IboZIqxr-FhxEZs.roa (hash: +N2ECLyQEU3So4t+LKUIhIdvw7PoPWjMAcQERFvIBbI=)
2: rHpOXEMf9seeT1vRtGsF-fRBEM4.crl (hash: zqUrbIAobfFRdaCJrynttBd7xAzZ8kHaLA1+atxtaj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:62:0d:29:88:a6:91:5e:4f:c7:c3:19:92:71:62:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Validity
Not Before: Aug 4 00:01:25 2025 GMT
Not After : Aug 5 00:01:25 2025 GMT
Subject: CN=dac33b2f24459b2a342fa3e0707d8234fc163ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1a:41:5a:26:65:90:16:0d:56:bb:ed:b1:64:
77:3c:27:42:ba:0f:74:28:c8:09:45:77:77:3c:02:
30:13:3d:9d:6f:65:99:fe:ce:69:44:5b:86:8f:96:
93:55:14:d7:34:61:00:9e:1f:bb:df:66:4c:1f:bc:
18:b1:d0:02:4f:a1:c8:fc:df:f7:01:e8:f1:a4:47:
82:7f:a1:51:8a:94:76:3d:cc:60:b7:3d:31:da:79:
41:01:4e:c4:3b:40:76:17:6b:72:24:17:ee:1c:67:
ab:7d:6c:a3:fc:99:19:4f:7a:2e:0c:55:04:8d:5a:
e0:3f:cf:9e:aa:eb:b0:5d:21:30:8c:a1:90:25:24:
6e:1f:ee:4b:15:80:13:27:81:8f:4a:e8:e2:bf:9d:
de:e4:d1:d6:7b:55:df:41:51:de:be:0b:14:89:90:
fa:f5:70:cb:27:20:fc:b8:8b:ad:15:6e:88:77:9a:
7d:07:0f:7a:63:99:30:46:45:1e:12:a6:c8:0d:dd:
5e:b8:68:d4:e9:02:27:71:3f:bf:33:96:87:e5:8c:
92:2e:48:96:4a:b3:25:44:e7:4d:6a:ad:fa:04:90:
ca:f5:3c:d8:bc:a8:b3:cf:ff:35:d2:77:45:ec:3c:
aa:df:3b:d0:64:4f:64:80:8d:34:9c:45:43:c0:46:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C3:3B:2F:24:45:9B:2A:34:2F:A3:E0:70:7D:82:34:FC:16:3A:B7
X509v3 Authority Key Identifier:
keyid:AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:94:76:e5:d2:58:30:54:c0:a0:50:5d:62:ac:a8:de:6d:55:
c4:61:b2:16:07:49:6a:0a:a1:0b:eb:ef:c8:ff:2d:d1:8d:5f:
a5:da:f6:d0:7d:55:3f:d8:d6:4b:fc:e8:51:f5:f7:2e:d3:cf:
01:32:28:74:f4:ca:cf:2f:47:1d:c9:ac:3c:f2:60:48:bc:9d:
b1:be:04:e1:4a:8f:ac:06:06:1b:cb:d2:61:45:b8:6b:86:59:
1f:94:bb:51:aa:e5:f8:68:6d:58:ca:91:aa:13:dc:c6:cb:2c:
25:ff:91:fe:51:f3:d4:7d:ce:85:d8:1d:69:0c:75:39:0d:04:
3b:89:82:62:7a:ad:8a:44:6d:0a:7e:b6:aa:fb:9a:e8:26:90:
d6:a9:a1:8c:0f:ed:cc:16:a0:30:0d:83:0e:28:3b:da:8e:88:
78:c6:ae:0a:5a:63:e5:ec:8d:77:1f:0b:5a:a8:6f:f1:21:a2:
75:d6:b3:b7:70:c7:0d:dd:56:c8:d8:65:34:b2:59:a4:af:56:
ad:b5:18:1a:dc:c7:78:cb:a8:71:e4:d8:45:98:4a:8f:da:ac:
dc:a0:37:46:6b:43:8f:3d:6e:8a:ae:f7:8e:5e:34:56:2d:6e:
65:81:9d:4d:72:33:84:a5:c0:32:7c:6b:f2:c5:f4:ce:af:11:
0d:76:0b:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyYg0piKaRXk/HwxmScWLLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjN2E0ZTVjNDMxZmY2Yzc5ZTRmNWJkMWI0NmIwNWY5ZjQ0
MTEwY2UwHhcNMjUwODA0MDAwMTI1WhcNMjUwODA1MDAwMTI1WjAzMTEwLwYDVQQD
EyhkYWMzM2IyZjI0NDU5YjJhMzQyZmEzZTA3MDdkODIzNGZjMTYzYWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghpBWiZlkBYNVrvtsWR3PCdCug90
KMgJRXd3PAIwEz2db2WZ/s5pRFuGj5aTVRTXNGEAnh+732ZMH7wYsdACT6HI/N/3
AejxpEeCf6FRipR2Pcxgtz0x2nlBAU7EO0B2F2tyJBfuHGerfWyj/JkZT3ouDFUE
jVrgP8+equuwXSEwjKGQJSRuH+5LFYATJ4GPSujiv53e5NHWe1XfQVHevgsUiZD6
9XDLJyD8uIutFW6Id5p9Bw96Y5kwRkUeEqbIDd1euGjU6QIncT+/M5aH5YySLkiW
SrMlROdNaq36BJDK9TzYvKizz/810ndF7Dyq3zvQZE9kgI00nEVDwEaa3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrDOy8kRZsqNC+j4HB9gjT8Fjq3MB8GA1UdIwQY
MBaAFKx6TlxDH/bHnk9b0bRrBfn0QRDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckhwT1hFTWY5c2VlVDF2UnRHc0YtZlJCRU00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jODhkNTAtOTIzYi00ODUzLTkwOWMt
ZjRlZmQxNzdlOWQwLzEvckhwT1hFTWY5c2VlVDF2UnRHc0YtZlJCRU00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jODhkNTAtOTIzYi00ODUzLTkwOWMtZjRlZmQxNzdlOWQw
LzEvckhwT1hFTWY5c2VlVDF2UnRHc0YtZlJCRU00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5R25dJY
MFTAoFBdYqyo3m1VxGGyFgdJagqhC+vvyP8t0Y1fpdr20H1VP9jWS/zoUfX3LtPP
ATIodPTKzy9HHcmsPPJgSLydsb4E4UqPrAYGG8vSYUW4a4ZZH5S7Uarl+GhtWMqR
qhPcxsssJf+R/lHz1H3OhdgdaQx1OQ0EO4mCYnqtikRtCn62qvua6CaQ1qmhjA/t
zBagMA2DDig72o6IeMauClpj5eyNdx8LWqhv8SGiddazt3DHDd1WyNhlNLJZpK9W
rbUYGtzHeMuoceTYRZhKj9qs3KA3RmtDjz1uiq73jl40Vi1uZYGdTXIzhKXAMnxr
8sX0zq8RDXYLhg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:06 2025 by rpki-client