Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: 4IWgnXsTVmApQgMZmkYg04p2z3dg1pmzM5WBTE4uJl0=
Subject key identifier: 38:AD:EA:4E:88:B4:23:51:FC:D6:3C:99:23:4A:80:BF:52:C3:3A:73
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 01987D52B8CEE4EE175D9EC0BB834337F009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 049F
Signing time: Wed 06 Aug 2025 03:00:29 +0000
Manifest this update: Wed 06 Aug 2025 03:00:29 +0000
Manifest next update: Thu 07 Aug 2025 03:00:29 +0000
Files and hashes: 1: KOsVP5bePK5N3aNgh_Mf2tcpMMI.roa (hash: 7uBjlY68CN9kyBrkClnf/o/c0vAf129ok+umjgiD7ws=)
2: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: QGjS/WJxPzi2TrZSdsAzybFKAyJvXO4SHOvgMeMd6FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:52:b8:ce:e4:ee:17:5d:9e:c0:bb:83:43:37:f0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Aug 6 03:00:29 2025 GMT
Not After : Aug 7 03:00:29 2025 GMT
Subject: CN=38adea4e88b42351fcd63c99234a80bf52c33a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:22:93:57:dd:19:df:cf:f4:c2:d0:61:6a:92:
6c:04:71:87:83:d8:1e:35:b2:f7:75:55:25:01:3f:
c6:81:f3:b1:25:86:98:4d:77:f2:89:06:e5:78:98:
f3:f5:89:f4:09:ec:e4:f8:22:7f:55:8a:d0:1d:30:
9f:43:c6:b8:67:24:45:a3:de:27:62:26:64:24:cb:
41:87:8f:a6:40:33:db:e3:ef:85:79:cf:fc:62:f6:
b7:2d:41:36:8c:f4:79:17:74:68:ba:9a:d5:8a:02:
3a:bb:df:18:ec:d9:e7:ea:a6:a6:bd:a3:03:fc:e6:
c5:57:7f:71:5b:81:44:78:3a:d0:fc:e3:ad:2e:c5:
c0:69:6d:c0:9a:15:68:d1:58:ab:f9:f4:f4:a1:ba:
f0:1d:2a:cc:24:30:13:6e:5c:c0:ef:d1:39:41:9d:
fe:5c:03:19:53:79:df:ef:b8:57:3f:b5:9b:76:a8:
87:6a:f0:4a:ad:d9:39:eb:34:e9:24:73:3c:7f:99:
52:d7:a4:39:59:9c:ec:a6:8c:ca:1c:55:94:74:b8:
3a:ec:74:c6:19:57:c8:b0:25:9a:52:01:a7:15:47:
c5:ab:24:7f:b9:87:77:c1:3c:93:5a:2a:49:64:e8:
a1:94:67:cd:b3:fa:d8:4a:44:66:0c:e4:2a:31:38:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AD:EA:4E:88:B4:23:51:FC:D6:3C:99:23:4A:80:BF:52:C3:3A:73
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:67:4c:f2:f8:5b:cd:13:3e:52:62:84:11:e4:fa:4f:90:c5:
41:92:3b:15:65:44:4f:6a:73:a3:63:37:66:5f:10:9e:2e:75:
8a:8a:d8:b9:ce:6a:58:dc:17:e3:e0:fa:b7:5c:df:e0:a6:57:
54:26:e9:ac:eb:e4:75:bd:f8:da:9b:65:69:5a:2d:ef:de:70:
a5:1d:e3:e3:33:c3:81:e2:c4:04:f1:5a:56:90:02:cb:67:b9:
8d:d9:b9:11:cb:d9:3f:1b:c5:71:10:61:85:f3:6e:91:dc:29:
40:c5:40:17:14:1a:fc:82:a6:e7:43:2a:84:15:cf:03:af:99:
cf:ff:a0:9f:7d:61:1e:62:08:70:f9:f1:b8:37:5e:e4:38:31:
36:67:50:f4:a0:d1:5b:5c:bb:f2:44:4d:6a:12:a6:b2:21:b0:
58:7f:e8:8b:8a:d6:a2:04:fe:8c:21:99:b1:40:c5:19:7d:90:
0c:6f:db:8b:5b:90:19:06:4f:a9:a7:6c:0b:8e:bf:4e:5f:72:
35:c1:c7:54:4b:d8:45:c7:30:71:a4:b0:16:00:bb:8f:85:dd:
f1:42:8e:88:74:d1:f7:51:9d:fb:8b:6d:1d:e3:92:b5:c2:cc:
f5:4a:28:84:ed:5f:16:40:8c:54:b6:a1:e2:40:9b:74:49:b5:
64:98:9d:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9UrjO5O4XXZ7Au4NDN/AJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZTk5MTM0MTcxYjU4NjNmNjJmMjJiN2Q3YWJmNzQwMzQ5
NTI4ZWMwHhcNMjUwODA2MDMwMDI5WhcNMjUwODA3MDMwMDI5WjAzMTEwLwYDVQQD
EygzOGFkZWE0ZTg4YjQyMzUxZmNkNjNjOTkyMzRhODBiZjUyYzMzYTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSKTV90Z38/0wtBhapJsBHGHg9ge
NbL3dVUlAT/GgfOxJYaYTXfyiQbleJjz9Yn0Cezk+CJ/VYrQHTCfQ8a4ZyRFo94n
YiZkJMtBh4+mQDPb4++Fec/8Yva3LUE2jPR5F3RouprVigI6u98Y7Nnn6qamvaMD
/ObFV39xW4FEeDrQ/OOtLsXAaW3AmhVo0Vir+fT0obrwHSrMJDATblzA79E5QZ3+
XAMZU3nf77hXP7WbdqiHavBKrdk56zTpJHM8f5lS16Q5WZzspozKHFWUdLg67HTG
GVfIsCWaUgGnFUfFqyR/uYd3wTyTWipJZOihlGfNs/rYSkRmDOQqMTiTGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDit6k6ItCNR/NY8mSNKgL9SwzpzMB8GA1UdIwQY
MBaAFIbpkTQXG1hj9i8it9er90A0lSjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQt
ZGE5NTgwOGJhMmMxLzEvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQtZGE5NTgwOGJhMmMx
LzEvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWdM8vhb
zRM+UmKEEeT6T5DFQZI7FWVET2pzo2M3Zl8Qni51iorYuc5qWNwX4+D6t1zf4KZX
VCbprOvkdb342ptlaVot795wpR3j4zPDgeLEBPFaVpACy2e5jdm5EcvZPxvFcRBh
hfNukdwpQMVAFxQa/IKm50MqhBXPA6+Zz/+gn31hHmIIcPnxuDde5DgxNmdQ9KDR
W1y78kRNahKmsiGwWH/oi4rWogT+jCGZsUDFGX2QDG/bi1uQGQZPqadsC46/Tl9y
NcHHVEvYRccwcaSwFgC7j4Xd8UKOiHTR91Gd+4ttHeOStcLM9UoohO1fFkCMVLah
4kCbdEm1ZJid6A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:00:57 2025 by rpki-client