Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier: ZNVvHcbR6vcTEfGNSVyP4p+vZQDhYGYH6v/6NlN0qEk=
Subject key identifier: F1:36:64:E3:6B:27:8B:2F:16:9A:E2:E6:AC:65:B8:83:7A:1E:1B:41
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial: 01987D1C9CBFA2F4286E7C82A8C618179909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number: 04AF
Signing time: Wed 06 Aug 2025 02:01:23 +0000
Manifest this update: Wed 06 Aug 2025 02:01:23 +0000
Manifest next update: Thu 07 Aug 2025 02:01:23 +0000
Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: U4uVUUKaiHpLfjF0cwTJEFQPQpmJU54m6kzrpyCkPSo=)
2: KnSUOMU4LVOd-681gUpAeZxW9tU.roa (hash: T8JMOCVoClcG2l35uDfqB6bKR7EcaF1TmNNZKykQwnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:9c:bf:a2:f4:28:6e:7c:82:a8:c6:18:17:99:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Validity
Not Before: Aug 6 02:01:23 2025 GMT
Not After : Aug 7 02:01:23 2025 GMT
Subject: CN=f13664e36b278b2f169ae2e6ac65b8837a1e1b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:7d:75:71:db:60:5e:fb:5d:5c:a1:c9:cd:
d3:a4:e3:5a:14:3a:c7:97:9d:78:72:2f:f7:48:b4:
5d:31:14:8e:cc:e3:f9:6b:e7:88:af:05:91:53:4c:
af:4c:76:fa:f5:58:8f:0d:e6:ce:d0:c3:fd:ab:90:
3b:54:36:8a:b8:64:d8:0c:a9:1d:99:24:cc:f3:84:
a6:b3:7b:0c:69:c0:d0:79:83:cb:a9:ec:dc:91:32:
64:bc:59:28:02:68:ee:74:d7:c4:7a:72:3a:f8:fe:
78:f5:41:79:c8:5d:bd:e2:65:9a:22:f1:01:fe:f8:
be:75:38:60:4f:ec:69:2b:ea:67:a7:c2:7c:78:59:
fb:2c:c7:92:ea:80:f9:70:da:84:4d:8e:a6:25:f5:
a0:a6:72:6a:b3:5f:90:d2:bb:56:3c:71:c7:46:88:
58:31:8a:19:48:ef:c1:23:50:d9:8a:b4:bd:21:05:
48:e8:ca:91:26:fc:3c:c4:e7:4f:25:16:1a:21:4f:
c4:ed:6f:4b:cd:b3:2b:ea:ad:c3:9c:af:b5:6c:65:
a3:a4:3e:2c:f2:ed:06:f0:52:9f:b2:1c:13:43:a0:
0d:9b:90:ce:e5:5f:58:33:fd:4a:70:05:df:da:30:
7b:c5:95:20:bc:68:5b:cd:90:0f:69:f5:88:93:a8:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:36:64:E3:6B:27:8B:2F:16:9A:E2:E6:AC:65:B8:83:7A:1E:1B:41
X509v3 Authority Key Identifier:
keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4e:85:6e:a2:d3:14:c4:37:d0:db:7d:8f:55:2d:d6:ca:08:
71:41:83:12:f0:3a:0a:d0:88:bb:a4:41:79:52:cb:b7:d4:6e:
df:ef:6e:20:e4:55:21:1a:99:24:0a:1b:26:ae:3b:07:35:7d:
d4:c9:2b:23:49:94:d1:62:10:44:9a:67:20:4a:2e:a2:dc:4b:
63:48:1e:e0:0a:53:05:97:c4:aa:3a:c5:41:47:04:f8:08:c6:
42:49:1d:e7:a6:15:84:c6:eb:b8:e2:d0:67:63:cb:95:63:46:
2f:b1:f3:26:3c:9f:0f:f1:33:81:69:18:6a:ba:13:f9:a2:15:
5d:3e:02:32:e8:fc:6e:94:49:10:25:0f:c3:1e:da:33:9b:40:
8d:83:af:50:96:88:ec:07:69:f7:9b:cd:87:51:8f:a6:1b:a0:
2d:c4:98:e3:a6:db:92:3b:e4:fe:8c:65:fb:a0:07:18:1b:87:
26:a2:ee:84:0a:91:f4:30:20:03:3b:d4:e4:56:11:58:56:6b:
56:0d:c6:79:be:74:57:c1:b8:ea:52:6d:9f:90:b6:cd:f7:b7:
b9:31:e1:20:80:f8:5b:48:94:ed:12:13:97:65:a7:55:f2:a2:
78:27:12:62:db:5f:40:2c:0d:cb:8e:71:5e:b7:ae:43:ee:be:
57:0c:30:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9HJy/ovQobnyCqMYYF5kJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjY2FhYjBiMGRlZmM5M2MzMmY4MGM0NGIwODJmYjI5MDVm
MjNjNjIwHhcNMjUwODA2MDIwMTIzWhcNMjUwODA3MDIwMTIzWjAzMTEwLwYDVQQD
EyhmMTM2NjRlMzZiMjc4YjJmMTY5YWUyZTZhYzY1Yjg4MzdhMWUxYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03J9dXHbYF77XVyhyc3TpONaFDrH
l514ci/3SLRdMRSOzOP5a+eIrwWRU0yvTHb69ViPDebO0MP9q5A7VDaKuGTYDKkd
mSTM84Sms3sMacDQeYPLqezckTJkvFkoAmjudNfEenI6+P549UF5yF294mWaIvEB
/vi+dThgT+xpK+pnp8J8eFn7LMeS6oD5cNqETY6mJfWgpnJqs1+Q0rtWPHHHRohY
MYoZSO/BI1DZirS9IQVI6MqRJvw8xOdPJRYaIU/E7W9LzbMr6q3DnK+1bGWjpD4s
8u0G8FKfshwTQ6ANm5DO5V9YM/1KcAXf2jB7xZUgvGhbzZAPafWIk6hRNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPE2ZONrJ4svFpri5qxluIN6HhtBMB8GA1UdIwQY
MBaAFBzKqwsN78k8MvgMRLCC+ykF8jxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ODdhYWUtMTEzMS00ZDljLTg1OTQt
Njk0N2YwMmFjNmFmLzEvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83ODdhYWUtMTEzMS00ZDljLTg1OTQtNjk0N2YwMmFjNmFm
LzEvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMk6FbqLT
FMQ30Nt9j1Ut1soIcUGDEvA6CtCIu6RBeVLLt9Ru3+9uIORVIRqZJAobJq47BzV9
1MkrI0mU0WIQRJpnIEouotxLY0ge4ApTBZfEqjrFQUcE+AjGQkkd56YVhMbruOLQ
Z2PLlWNGL7HzJjyfD/EzgWkYaroT+aIVXT4CMuj8bpRJECUPwx7aM5tAjYOvUJaI
7Adp95vNh1GPphugLcSY46bbkjvk/oxl+6AHGBuHJqLuhAqR9DAgAzvU5FYRWFZr
Vg3Geb50V8G46lJtn5C2zfe3uTHhIID4W0iU7RITl2WnVfKieCcSYttfQCwNy45x
XreuQ+6+VwwwlA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:37:33 2025 by rpki-client