Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
File: h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft (raw, json)
Hash identifier: ft0J7BeffSKwuySnd+2JH/ICxhPP9K3WnZEPa1tljhs=
Subject key identifier: 56:2B:C2:70:48:BE:24:20:85:72:B8:4C:77:90:78:FA:89:8D:1E:B7
Authority key identifier: 87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
Certificate issuer: /CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Certificate serial: 019880C1D03651096457FAD573B0C529411D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
Manifest number: 01F9
Signing time: Wed 06 Aug 2025 19:00:41 +0000
Manifest this update: Wed 06 Aug 2025 19:00:41 +0000
Manifest next update: Thu 07 Aug 2025 19:00:41 +0000
Files and hashes: 1: JY1Ry82sD4kNWhz4gQuDnSIFpN8.roa (hash: 8elrrlaE2J0H4bGnc8sBg7PwEFKBgdvohUzIrvCFh2E=)
2: h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl (hash: C87ui5pDNEv1oEVfqC11cwpJ8vO0koF0ikRBnKi3yS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c1:d0:36:51:09:64:57:fa:d5:73:b0:c5:29:41:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Validity
Not Before: Aug 6 19:00:41 2025 GMT
Not After : Aug 7 19:00:41 2025 GMT
Subject: CN=562bc27048be24208572b84c779078fa898d1eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:df:ed:c0:a4:31:c3:93:8b:ca:98:2c:fb:
6b:6b:f1:c0:be:89:70:63:8c:73:81:bb:7a:48:26:
9a:60:ac:2c:60:b0:7f:e6:1b:f9:2b:27:16:57:85:
69:38:cd:37:6d:fa:23:1c:1e:19:1d:d0:2c:4a:ba:
c7:34:d5:e7:42:87:50:45:f6:75:93:be:79:39:b8:
ce:02:6f:66:85:6c:a8:e7:49:43:de:00:6f:d7:6f:
ce:36:33:5e:35:56:32:f8:fa:67:8b:55:c0:02:44:
19:49:4a:e9:c4:5f:f4:09:f8:36:00:56:ba:6c:52:
45:11:89:3a:f6:52:55:4c:a9:1d:60:55:be:7d:3b:
3f:bd:25:1f:68:e8:e4:af:8a:ea:04:ea:1e:19:27:
c6:b0:97:78:8c:4c:e7:5f:e0:9a:53:33:2d:7e:17:
92:84:c5:09:ac:f2:de:63:b4:ee:b1:32:04:39:72:
03:81:09:8c:ed:87:8a:b5:b3:ac:21:52:14:92:0c:
7f:ac:5b:fc:de:5d:96:73:3b:8d:58:c1:21:d5:8f:
1c:26:5c:e7:7f:af:27:3b:16:ff:be:a6:1a:9a:a9:
0e:8f:42:35:2c:4d:44:c4:dc:a3:a2:d6:be:d8:ff:
2f:aa:06:4b:2d:00:9f:ce:57:17:1d:46:fd:34:d6:
93:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2B:C2:70:48:BE:24:20:85:72:B8:4C:77:90:78:FA:89:8D:1E:B7
X509v3 Authority Key Identifier:
keyid:87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6a:09:ae:0f:60:73:99:ca:77:70:24:d1:44:65:7a:ba:15:
33:33:dc:dc:c6:67:93:f9:2f:9d:f5:b5:a1:48:7d:c8:2d:d6:
f1:e8:2c:b1:06:e7:ad:d4:a3:79:42:64:ca:e9:0e:07:b7:d2:
dc:9d:db:3f:95:8c:74:75:ed:c8:e4:87:cb:0b:a4:db:61:c4:
8f:27:38:47:b6:d0:d0:52:8b:16:9c:fd:a7:05:e7:d0:24:c7:
0d:98:f9:0c:8c:57:8e:c5:71:76:40:c3:c9:b4:de:28:2f:e2:
d2:5a:d8:0e:8f:fa:a9:43:52:dd:64:11:99:39:cd:2f:64:c1:
e0:ff:1a:da:3b:54:6b:92:81:41:8c:42:4e:50:c8:b8:aa:20:
b8:e6:86:d5:16:fd:d5:47:8d:97:cd:00:0a:ae:65:09:81:47:
dc:e6:38:28:c2:cf:00:5f:52:20:14:29:d1:b3:1c:58:ae:e0:
28:c0:7b:3b:ec:c5:82:0f:6c:9b:97:25:8d:9d:bd:41:28:d1:
72:cc:32:61:55:2e:7d:ee:27:79:99:e9:d5:a1:18:11:36:ce:
3c:54:ae:96:e3:6a:1d:80:fb:d8:e8:ae:a2:51:9e:8e:50:eb:
a5:5f:2b:22:23:3b:5f:26:08:5f:b6:4f:71:26:97:66:af:22:
6a:8f:c7:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwdA2UQlkV/rVc7DFKUEdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzVlNjQwOGI4ZTA1YWE5MTRiODc0NjM1YTQ3YjdiODIw
YzZjMzIwHhcNMjUwODA2MTkwMDQxWhcNMjUwODA3MTkwMDQxWjAzMTEwLwYDVQQD
Eyg1NjJiYzI3MDQ4YmUyNDIwODU3MmI4NGM3NzkwNzhmYTg5OGQxZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWTf7cCkMcOTi8qYLPtra/HAvolw
Y4xzgbt6SCaaYKwsYLB/5hv5KycWV4VpOM03bfojHB4ZHdAsSrrHNNXnQodQRfZ1
k755ObjOAm9mhWyo50lD3gBv12/ONjNeNVYy+Ppni1XAAkQZSUrpxF/0Cfg2AFa6
bFJFEYk69lJVTKkdYFW+fTs/vSUfaOjkr4rqBOoeGSfGsJd4jEznX+CaUzMtfheS
hMUJrPLeY7TusTIEOXIDgQmM7YeKtbOsIVIUkgx/rFv83l2WczuNWMEh1Y8cJlzn
f68nOxb/vqYamqkOj0I1LE1ExNyjota+2P8vqgZLLQCfzlcXHUb9NNaTbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYrwnBIviQghXK4THeQePqJjR63MB8GA1UdIwQY
MBaAFId15kCLjgWqkUuHRjWke3uCDGwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDct
NjFlNTRjZmMyYWJjLzEvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDctNjFlNTRjZmMyYWJj
LzEvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2oJrg9g
c5nKd3Ak0URleroVMzPc3MZnk/kvnfW1oUh9yC3W8egssQbnrdSjeUJkyukOB7fS
3J3bP5WMdHXtyOSHywuk22HEjyc4R7bQ0FKLFpz9pwXn0CTHDZj5DIxXjsVxdkDD
ybTeKC/i0lrYDo/6qUNS3WQRmTnNL2TB4P8a2jtUa5KBQYxCTlDIuKoguOaG1Rb9
1UeNl80ACq5lCYFH3OY4KMLPAF9SIBQp0bMcWK7gKMB7O+zFgg9sm5cljZ29QSjR
cswyYVUufe4neZnp1aEYETbOPFSuluNqHYD72OiuolGejlDrpV8rIiM7XyYIX7ZP
cSaXZq8iao/HHw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:58 2025 by rpki-client