Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
File: H7XBu67UTItq4_K1ZtAcwljfws4.mft (raw, json)
Hash identifier: 15q1F3ipNmFIrNkf4sCROi1f/k0km6xVY9A9w75NmNU=
Subject key identifier: 47:E3:40:79:3E:9E:BB:49:9E:31:52:AD:AF:FF:1E:0B:5F:94:1A:16
Authority key identifier: 1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
Certificate issuer: /CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Certificate serial: 019897816658648FE1F745B06413DB5A9AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
Manifest number: 11B0
Signing time: Mon 11 Aug 2025 05:01:36 +0000
Manifest this update: Mon 11 Aug 2025 05:01:36 +0000
Manifest next update: Tue 12 Aug 2025 05:01:36 +0000
Files and hashes: 1: H7XBu67UTItq4_K1ZtAcwljfws4.crl (hash: pph5w2QCM2DjpmEFKfk3Ghq5KFIM7ZkdiCQsBCFYzUo=)
2: MEWWY0epwShfEJbfHo9y4r51GYY.roa (hash: SGRcwmohz12gMReH4Cn9V8oKzsRQ7LvpKURqTZBMtCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:81:66:58:64:8f:e1:f7:45:b0:64:13:db:5a:9a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Validity
Not Before: Aug 11 05:01:36 2025 GMT
Not After : Aug 12 05:01:36 2025 GMT
Subject: CN=47e340793e9ebb499e3152adafff1e0b5f941a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:44:fa:d4:b5:ed:0d:96:a7:4e:f1:90:2e:d1:
6d:4c:f1:f2:c5:9d:c1:31:7e:ca:54:2e:1c:3b:03:
1f:de:de:a9:72:38:82:9b:44:9c:b5:66:4b:0a:55:
85:fb:f3:41:d4:58:95:3b:b6:6c:88:f2:1a:b9:79:
a8:bc:e8:29:6a:46:15:d6:64:84:de:48:4f:c0:d5:
2e:97:07:e3:92:98:aa:13:91:ab:68:88:05:c4:4e:
22:0e:47:c4:a8:99:e1:f8:8b:a6:0f:4d:52:bf:23:
00:96:d6:25:26:83:29:26:4a:0e:02:63:8a:c2:c9:
10:ed:ac:e9:47:c5:4d:b1:f7:3a:47:6b:e9:be:b4:
4a:dc:5d:fc:ba:03:df:f1:7a:44:f7:8a:2a:56:d4:
e4:09:b5:dd:2d:69:a8:bb:e1:fd:ae:a7:40:ad:98:
91:45:63:9a:a6:db:cb:7a:37:a2:b6:81:f2:41:2f:
62:ec:ee:d2:77:44:f3:2a:69:e6:72:54:14:94:17:
d3:b3:72:fb:dd:62:3a:c5:55:3e:6e:2c:13:17:28:
89:db:16:1c:f3:9e:4a:97:09:dc:2c:84:80:47:36:
18:fd:b1:ef:6c:53:3e:53:6f:63:69:1f:2a:b9:f6:
97:75:9a:8c:74:6f:a5:cc:9c:39:4c:51:19:23:70:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E3:40:79:3E:9E:BB:49:9E:31:52:AD:AF:FF:1E:0B:5F:94:1A:16
X509v3 Authority Key Identifier:
keyid:1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6f:e3:27:26:ff:ee:c2:20:a1:5b:df:f1:ca:08:1a:a7:bb:
4e:1e:d8:00:34:8e:4f:74:3f:07:44:02:36:68:4e:73:e8:2a:
26:4d:95:36:c5:98:22:e4:d6:36:37:07:61:b7:37:19:72:85:
c2:94:b0:7e:53:65:62:cd:cc:22:ef:4b:c3:37:e9:32:8a:d8:
80:13:3c:ab:fb:7f:c2:3a:87:e1:58:52:e2:7c:0a:a4:50:bb:
93:a6:d7:bb:4d:e0:d9:25:0a:e0:ad:37:fa:00:a9:bc:dc:32:
26:be:17:58:38:fc:03:ec:c9:ad:3c:86:a9:23:02:3c:12:4d:
02:83:b5:0a:14:94:0e:1a:8a:37:71:cf:12:e4:ba:e9:1b:e6:
0e:07:f3:f8:68:1d:9f:d3:ee:d0:67:9a:00:79:06:7d:92:87:
61:7c:0f:57:a0:50:25:18:04:c9:af:24:e6:49:92:17:94:ff:
ce:1f:0c:a9:a8:b4:4e:31:a8:aa:87:b1:51:f5:b4:fc:b4:05:
c7:4c:6c:87:3e:e5:16:4b:86:19:42:f2:79:d5:e6:50:c1:9b:
00:5b:af:7f:be:db:df:4f:99:33:d3:87:e8:69:dc:72:9f:9a:
af:cc:39:58:bd:a8:cc:2b:d4:67:e0:61:70:1b:6c:9e:d1:12:
3f:68:27:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXgWZYZI/h90WwZBPbWprUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYjVjMWJiYWVkNDRjOGI2YWUzZjJiNTY2ZDAxY2MyNThk
ZmMyY2UwHhcNMjUwODExMDUwMTM2WhcNMjUwODEyMDUwMTM2WjAzMTEwLwYDVQQD
Eyg0N2UzNDA3OTNlOWViYjQ5OWUzMTUyYWRhZmZmMWUwYjVmOTQxYTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUT61LXtDZanTvGQLtFtTPHyxZ3B
MX7KVC4cOwMf3t6pcjiCm0SctWZLClWF+/NB1FiVO7ZsiPIauXmovOgpakYV1mSE
3khPwNUulwfjkpiqE5GraIgFxE4iDkfEqJnh+IumD01SvyMAltYlJoMpJkoOAmOK
wskQ7azpR8VNsfc6R2vpvrRK3F38ugPf8XpE94oqVtTkCbXdLWmou+H9rqdArZiR
RWOaptvLejeitoHyQS9i7O7Sd0TzKmnmclQUlBfTs3L73WI6xVU+biwTFyiJ2xYc
855KlwncLISARzYY/bHvbFM+U29jaR8qufaXdZqMdG+lzJw5TFEZI3AjqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfjQHk+nrtJnjFSra//HgtflBoWMB8GA1UdIwQY
MBaAFB+1wbuu1EyLauPytWbQHMJY38LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDdYQnU2N1VUSXRxNF9LMVp0QWN3bGpmd3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zYzRiNTMtZWNhMy00NTk5LTlkOTQt
ZDcxZmM5MGM3YjE2LzEvSDdYQnU2N1VUSXRxNF9LMVp0QWN3bGpmd3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8zYzRiNTMtZWNhMy00NTk5LTlkOTQtZDcxZmM5MGM3YjE2
LzEvSDdYQnU2N1VUSXRxNF9LMVp0QWN3bGpmd3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABW/jJyb/
7sIgoVvf8coIGqe7Th7YADSOT3Q/B0QCNmhOc+gqJk2VNsWYIuTWNjcHYbc3GXKF
wpSwflNlYs3MIu9LwzfpMorYgBM8q/t/wjqH4VhS4nwKpFC7k6bXu03g2SUK4K03
+gCpvNwyJr4XWDj8A+zJrTyGqSMCPBJNAoO1ChSUDhqKN3HPEuS66RvmDgfz+Ggd
n9Pu0GeaAHkGfZKHYXwPV6BQJRgEya8k5kmSF5T/zh8Mqai0TjGoqoexUfW0/LQF
x0xshz7lFkuGGULyedXmUMGbAFuvf77b30+ZM9OH6Gnccp+ar8w5WL2ozCvUZ+Bh
cBtsntESP2gn7A==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:47:01 2025 by rpki-client