Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
File: h497ckDFitfp7vUFdPYIjpuQsC0.mft (raw, json)
Hash identifier: xUg/GsFp/+PhzPWi8yZteocXurdLuW8U0XoVZuTfs5Q=
Subject key identifier: 8B:85:FC:F9:7C:00:ED:F0:95:DB:1B:D0:E5:90:43:36:32:05:C7:0E
Authority key identifier: 87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
Certificate issuer: /CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Certificate serial: 019873743D2EB303E9AE187B283EAC9E3FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
Manifest number: 15A8
Signing time: Mon 04 Aug 2025 05:00:54 +0000
Manifest this update: Mon 04 Aug 2025 05:00:54 +0000
Manifest next update: Tue 05 Aug 2025 05:00:54 +0000
Files and hashes: 1: 6mTYkUzvhb-Htm6lfZWXyJFAe3g.roa (hash: wl2jbKj60gngwVW2ZgUBMEJL1S5Obo/uhCmKyt9SPvM=)
2: h497ckDFitfp7vUFdPYIjpuQsC0.crl (hash: ch/DimK5HNcQVx1DKoOg8YYWL18GSwJdOfG0l8mrYaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:3d:2e:b3:03:e9:ae:18:7b:28:3e:ac:9e:3f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Validity
Not Before: Aug 4 05:00:54 2025 GMT
Not After : Aug 5 05:00:54 2025 GMT
Subject: CN=8b85fcf97c00edf095db1bd0e59043363205c70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:df:a2:f6:27:20:3b:5c:dd:61:4e:bf:ad:
ec:83:d0:16:51:1c:2b:26:39:c4:7d:88:49:aa:de:
0e:9f:27:53:c1:30:02:23:f7:c8:20:51:68:34:35:
f9:90:40:09:5c:a6:9d:f2:e6:4b:82:eb:98:1c:70:
4f:21:20:50:dc:a7:b0:60:51:b6:09:e9:ac:16:f5:
d9:f7:3a:97:88:d0:3e:5d:92:a3:67:2f:2e:79:ec:
43:88:3b:ff:3b:16:f1:89:a0:29:45:b5:fc:2b:f7:
48:cd:29:3d:d5:9a:cb:0d:16:b1:be:2d:0d:74:79:
9a:1a:5d:0d:c8:ab:6a:92:b0:12:91:79:c2:02:68:
14:48:e2:03:0e:32:15:3b:d0:bd:6d:49:f9:03:92:
df:6f:a4:b3:56:2d:49:57:80:04:45:a4:64:27:de:
1c:28:3e:61:ee:85:53:7c:6f:d8:60:2a:a0:1c:c1:
1e:49:99:d6:14:a2:ca:d2:56:36:2b:46:de:d0:8e:
3e:ff:17:c0:94:e1:f1:22:b3:74:18:ec:99:fe:97:
69:67:6b:44:00:28:4c:a0:7a:6f:3e:be:4f:15:bc:
5b:11:c8:db:42:7c:32:6e:44:bd:e0:16:ae:21:dd:
a2:9d:ed:04:5c:53:09:03:88:b1:19:3d:4a:9d:3f:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:85:FC:F9:7C:00:ED:F0:95:DB:1B:D0:E5:90:43:36:32:05:C7:0E
X509v3 Authority Key Identifier:
keyid:87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2b:1d:c7:83:38:5d:5e:0a:0b:67:40:7c:52:cb:c3:8a:02:
f6:97:18:b5:2a:af:c6:66:fb:1c:74:b2:d5:1c:ac:d4:62:f7:
8e:f8:35:8e:68:bf:43:90:ef:79:50:3d:2a:f4:aa:36:4a:87:
f2:e1:7e:62:b2:cb:3c:51:5e:8e:4d:ce:3b:a2:18:a3:c7:c6:
aa:32:19:a1:f9:c7:9e:c0:10:eb:78:b9:f2:1b:dd:96:01:ab:
83:c3:ab:2f:68:b1:d9:98:c6:41:e0:45:61:fd:db:30:4b:79:
83:0b:c1:d4:6a:3a:f1:46:8d:4b:5e:bc:9b:91:d0:0d:24:f0:
9b:ef:27:ab:d2:c1:1d:dd:5a:7e:45:2f:bd:86:49:a7:aa:2a:
51:b7:d9:68:2e:25:8a:f0:4d:50:db:bb:a7:0e:b3:b4:af:43:
73:ba:1d:c5:be:ac:7b:a2:49:2b:88:6e:0d:d7:5c:4d:05:74:
10:aa:ba:1d:79:8b:92:43:ee:df:91:b4:cc:d9:41:a1:23:cb:
63:ad:26:f9:1e:f5:cf:5c:f1:b9:bb:5e:b0:c2:84:1b:f2:17:
23:1b:4a:de:fd:2f:b1:8b:81:56:e2:39:8f:f6:51:45:2a:f6:
05:15:47:77:25:9b:34:54:7b:5c:22:61:9c:5c:7d:ac:27:2d:
0c:b1:7e:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdD0uswPprhh7KD6snj+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OGY3YjcyNDBjNThhZDdlOWVlZjUwNTc0ZjYwODhlOWI5
MGIwMmQwHhcNMjUwODA0MDUwMDU0WhcNMjUwODA1MDUwMDU0WjAzMTEwLwYDVQQD
Eyg4Yjg1ZmNmOTdjMDBlZGYwOTVkYjFiZDBlNTkwNDMzNjMyMDVjNzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKXfovYnIDtc3WFOv63sg9AWURwr
JjnEfYhJqt4OnydTwTACI/fIIFFoNDX5kEAJXKad8uZLguuYHHBPISBQ3KewYFG2
CemsFvXZ9zqXiNA+XZKjZy8ueexDiDv/OxbxiaApRbX8K/dIzSk91ZrLDRaxvi0N
dHmaGl0NyKtqkrASkXnCAmgUSOIDDjIVO9C9bUn5A5Lfb6SzVi1JV4AERaRkJ94c
KD5h7oVTfG/YYCqgHMEeSZnWFKLK0lY2K0be0I4+/xfAlOHxIrN0GOyZ/pdpZ2tE
AChMoHpvPr5PFbxbEcjbQnwybkS94BauId2ine0EXFMJA4ixGT1KnT+rZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuF/Pl8AO3wldsb0OWQQzYyBccOMB8GA1UdIwQY
MBaAFIePe3JAxYrX6e71BXT2CI6bkLAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDQ5N2NrREZpdGZwN3ZVRmRQWUlqcHVRc0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mYzE1OWUtOGQ1Ni00YzNhLWFlNDIt
MGNiZGQ5NWExNmRkLzEvaDQ5N2NrREZpdGZwN3ZVRmRQWUlqcHVRc0MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mYzE1OWUtOGQ1Ni00YzNhLWFlNDItMGNiZGQ5NWExNmRk
LzEvaDQ5N2NrREZpdGZwN3ZVRmRQWUlqcHVRc0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCsdx4M4
XV4KC2dAfFLLw4oC9pcYtSqvxmb7HHSy1Rys1GL3jvg1jmi/Q5DveVA9KvSqNkqH
8uF+YrLLPFFejk3OO6IYo8fGqjIZofnHnsAQ63i58hvdlgGrg8OrL2ix2ZjGQeBF
Yf3bMEt5gwvB1Go68UaNS168m5HQDSTwm+8nq9LBHd1afkUvvYZJp6oqUbfZaC4l
ivBNUNu7pw6ztK9Dc7odxb6se6JJK4huDddcTQV0EKq6HXmLkkPu35G0zNlBoSPL
Y60m+R71z1zxubtesMKEG/IXIxtK3v0vsYuBVuI5j/ZRRSr2BRVHdyWbNFR7XCJh
nFx9rCctDLF+JA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:15 2025 by rpki-client