
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
File: Hw94pVpb5cAduAP0OMphG38VAwc.mft (raw, json)
Hash identifier: frs7D8wQRfbWjGj3QgeCW/6BqxaPCsk/2sJ7Nn1U4iw=
Subject key identifier: 4B:6A:BE:3B:CF:5B:83:11:EA:0E:7C:39:9B:3B:A8:C5:EC:05:37:63
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Certificate issuer: /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial: 019873E27294FA9D1F69E51054473039906D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
Manifest number: 0CF2
Signing time: Mon 04 Aug 2025 07:01:16 +0000
Manifest this update: Mon 04 Aug 2025 07:01:16 +0000
Manifest next update: Tue 05 Aug 2025 07:01:16 +0000
Files and hashes: 1: Hw94pVpb5cAduAP0OMphG38VAwc.crl (hash: NaP2hPYKGwsc6xP2HS3e04U051m5ASd+BelJwEc0ido=)
2: eCBuvHT7IMaBXPivvQ3l-YdKsf4.roa (hash: o8SV6r5/m90uv9RNHtmHfhH9wPKwfjIhitnoqSV/JH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:72:94:fa:9d:1f:69:e5:10:54:47:30:39:90:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Validity
Not Before: Aug 4 07:01:16 2025 GMT
Not After : Aug 5 07:01:16 2025 GMT
Subject: CN=4b6abe3bcf5b8311ea0e7c399b3ba8c5ec053763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:09:5c:64:a5:07:2f:ff:ea:2b:01:ef:fd:
62:6d:7a:64:9c:13:ff:d6:fc:05:65:bf:00:98:6e:
54:c1:5c:0b:7d:f8:b9:65:06:9c:23:1b:a9:88:b2:
1d:32:64:85:14:62:ac:e5:8f:a9:0e:3a:f6:25:40:
1b:03:1e:15:cf:0d:68:15:95:9e:d7:5a:e4:4a:99:
d7:bc:2c:01:12:e4:37:ab:6c:92:37:df:1b:2d:06:
3c:26:04:98:e4:68:76:79:9b:b9:1b:8e:3e:be:29:
6d:c2:21:80:51:fd:87:3e:21:83:bf:f9:03:ec:7a:
fc:7d:38:c7:cb:60:a7:a1:5d:48:6e:f5:69:ec:10:
5b:5f:14:cb:15:c0:4d:69:e7:e9:89:c8:c9:01:ca:
1e:ae:c1:fe:29:e9:6e:c2:e1:56:92:f4:cf:ee:ce:
da:46:3d:36:f6:5b:23:54:87:6a:15:5f:f5:c2:27:
0c:00:df:71:28:b6:33:21:b8:56:f1:93:20:89:0b:
5c:09:b2:e4:51:b6:d2:77:73:12:f0:0c:77:e9:1b:
1b:5b:00:50:9e:e2:ec:a7:c3:fc:ec:8d:1a:d2:18:
20:3f:71:38:3b:7a:b6:ed:52:b1:a1:9d:61:ae:4f:
e4:0e:db:c9:92:93:d3:d3:a5:f8:d7:07:2f:a2:ad:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6A:BE:3B:CF:5B:83:11:EA:0E:7C:39:9B:3B:A8:C5:EC:05:37:63
X509v3 Authority Key Identifier:
keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d2:4d:42:97:7a:3e:1d:6e:07:0d:ac:7e:8c:7d:e4:07:75:
5b:96:bb:9d:3b:6a:37:51:ea:13:9d:d0:db:5a:9f:2e:54:19:
9f:b5:57:e8:1c:31:17:0d:05:83:b4:a5:0c:8c:53:a9:2d:00:
5f:fc:3a:97:5f:61:49:64:56:b7:f3:44:48:99:df:b8:aa:bd:
dd:58:5f:6e:00:a6:81:ff:0b:a0:42:46:c1:09:0a:37:8e:8b:
4d:d0:d7:e4:69:eb:3f:e6:e4:0f:d8:eb:b0:7f:eb:e4:13:1f:
77:9b:cd:4a:2b:9a:54:d0:b1:52:0c:54:37:1f:9a:e7:0d:45:
e4:d5:1e:06:92:0f:f3:dc:13:a5:8a:8d:b7:43:b0:03:ff:84:
94:b1:21:ac:a9:17:a4:c3:77:b5:43:0d:5f:de:8f:19:0f:a3:
f4:88:ca:d3:85:7c:5b:ea:8a:a2:31:6f:23:d4:c2:f0:98:63:
e7:5a:ea:1f:3c:4b:54:65:9d:a4:76:8a:ff:74:f9:f9:a6:64:
e4:dd:79:d5:5c:33:7c:1e:ea:81:48:b2:6e:ad:d2:a9:8a:b3:
e6:a8:a0:7a:7c:ca:0e:86:48:8f:d5:1d:99:cf:fe:86:8c:80:
c5:ad:7f:60:ee:49:77:fc:01:5d:45:49:34:3d:cf:29:07:45:
e8:31:93:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4nKU+p0faeUQVEcwOZBtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMGY3OGE1NWE1YmU1YzAxZGI4MDNmNDM4Y2E2MTFiN2Yx
NTAzMDcwHhcNMjUwODA0MDcwMTE2WhcNMjUwODA1MDcwMTE2WjAzMTEwLwYDVQQD
Eyg0YjZhYmUzYmNmNWI4MzExZWEwZTdjMzk5YjNiYThjNWVjMDUzNzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0okJXGSlBy//6isB7/1ibXpknBP/
1vwFZb8AmG5UwVwLffi5ZQacIxupiLIdMmSFFGKs5Y+pDjr2JUAbAx4Vzw1oFZWe
11rkSpnXvCwBEuQ3q2ySN98bLQY8JgSY5Gh2eZu5G44+viltwiGAUf2HPiGDv/kD
7Hr8fTjHy2CnoV1IbvVp7BBbXxTLFcBNaefpicjJAcoersH+KeluwuFWkvTP7s7a
Rj029lsjVIdqFV/1wicMAN9xKLYzIbhW8ZMgiQtcCbLkUbbSd3MS8Ax36RsbWwBQ
nuLsp8P87I0a0hggP3E4O3q27VKxoZ1hrk/kDtvJkpPT06X41wcvoq1PbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtqvjvPW4MR6g58OZs7qMXsBTdjMB8GA1UdIwQY
MBaAFB8PeKVaW+XAHbgD9DjKYRt/FQMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hNTBjN2MtODc4YS00N2ZkLTgxMDct
NzlmMTA1YWVmOGQ2LzEvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hNTBjN2MtODc4YS00N2ZkLTgxMDctNzlmMTA1YWVmOGQ2
LzEvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsNJNQpd6
Ph1uBw2sfox95Ad1W5a7nTtqN1HqE53Q21qfLlQZn7VX6BwxFw0Fg7SlDIxTqS0A
X/w6l19hSWRWt/NESJnfuKq93VhfbgCmgf8LoEJGwQkKN46LTdDX5GnrP+bkD9jr
sH/r5BMfd5vNSiuaVNCxUgxUNx+a5w1F5NUeBpIP89wTpYqNt0OwA/+ElLEhrKkX
pMN3tUMNX96PGQ+j9IjK04V8W+qKojFvI9TC8Jhj51rqHzxLVGWdpHaK/3T5+aZk
5N151VwzfB7qgUiybq3SqYqz5qigenzKDoZIj9Udmc/+hoyAxa1/YO5Jd/wBXUVJ
ND3PKQdF6DGT5A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:57 2025 by rpki-client