Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
File: HxKTy74vaSVA08xaboI2YElMQGM.mft (raw, json)
Hash identifier: Lnp9JrY4PxImoIA7D9d0AcW5qhrfzwB0L0ryQAsfNC0=
Subject key identifier: B2:FF:A8:D6:E0:7C:3E:D2:6A:9A:87:02:69:89:7A:40:5B:5C:8D:4D
Authority key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
Certificate issuer: /CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Certificate serial: 019771BFBCC6ED5D9DE24075B55B5D96FB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
Manifest number: 0D14
Signing time: Sun 15 Jun 2025 04:01:20 +0000
Manifest this update: Sun 15 Jun 2025 04:01:20 +0000
Manifest next update: Mon 16 Jun 2025 04:01:20 +0000
Files and hashes: 1: HxKTy74vaSVA08xaboI2YElMQGM.crl (hash: FBG7k8pl+hVz5/oTvGPy5Hrk/IU4qpKSgBar5akab30=)
2: qBbXPlomssD9zrP_xFljqdR0LbI.roa (hash: Gow+NF8w68xqHQfvdIHVUtAvsOi+ZzLSZN8/SeU/9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:bc:c6:ed:5d:9d:e2:40:75:b5:5b:5d:96:fb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Validity
Not Before: Jun 15 04:01:20 2025 GMT
Not After : Jun 16 04:01:20 2025 GMT
Subject: CN=b2ffa8d6e07c3ed26a9a870269897a405b5c8d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:63:ac:84:80:48:2e:d6:c7:de:c3:ff:c3:
de:e3:ab:47:23:69:99:34:10:4f:a8:70:80:86:7d:
7e:6f:a5:e4:1b:73:08:80:9a:f0:90:cd:a5:3f:3a:
a6:df:95:7a:14:ac:29:c7:06:49:9a:c5:95:f5:b4:
fa:ac:18:0e:53:d5:6b:16:51:c3:ae:ce:70:94:09:
b4:a8:28:d3:98:b0:8f:92:cd:fe:d4:f5:4f:1d:00:
19:27:c3:89:14:ef:18:29:bd:c5:07:62:15:a6:93:
d6:b4:ce:b6:6b:5a:f0:9e:26:17:f7:3e:57:ab:c6:
4a:9c:73:25:1a:17:47:a2:73:76:fd:ef:db:65:4c:
32:73:97:f3:ad:b6:01:dd:e0:b2:70:12:af:d8:c5:
4b:95:d3:70:5e:88:f6:b1:2f:0f:de:c1:b7:3e:d5:
76:e8:33:1c:10:bb:d1:e8:8e:de:24:0e:e8:31:32:
80:51:88:33:0e:92:d8:03:c8:74:60:01:72:21:9f:
4a:60:ea:1d:19:bc:06:c0:41:c1:fc:0a:84:bf:00:
fa:ad:c0:11:0f:25:89:b6:2b:71:cf:d0:8f:7d:e7:
63:b2:dc:47:6f:6e:f1:aa:4b:72:36:f9:e2:13:44:
99:18:70:7c:9b:79:49:d9:c7:a5:9c:c6:f3:eb:ac:
41:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FF:A8:D6:E0:7C:3E:D2:6A:9A:87:02:69:89:7A:40:5B:5C:8D:4D
X509v3 Authority Key Identifier:
keyid:1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cb:ea:70:0f:66:29:d7:f0:b4:b8:1c:69:aa:34:b1:54:30:
48:bc:74:fd:52:7d:f3:77:ed:6f:fd:65:52:a4:17:53:3b:0b:
1a:38:b1:4d:38:72:70:c3:ac:da:a7:31:ff:fb:05:c9:31:0a:
63:c0:e7:21:fa:14:db:95:43:39:68:11:9b:78:8a:e8:e4:02:
36:2e:57:75:8e:58:c1:6a:38:6c:dc:c0:a1:da:de:76:bf:e7:
65:1e:15:36:2c:37:4b:ca:cf:56:5d:6f:4d:a5:5f:b8:d9:50:
a4:d0:77:4b:b1:75:4e:bb:8a:cd:1c:c1:2c:33:0a:b9:aa:10:
a0:7d:55:a3:9b:32:98:0f:2d:37:0b:0f:d0:ee:fb:41:ec:fd:
be:69:4b:c1:dd:fc:95:4b:c5:a2:f1:95:49:aa:53:49:7b:89:
d6:bf:80:0a:02:a3:bf:df:18:e9:4b:06:3a:3b:41:01:8f:3b:
e9:fe:b6:c5:36:7b:4e:b1:74:7f:3c:1e:dc:37:ab:92:79:da:
7c:1b:99:fb:ba:d4:2a:1c:d4:94:ac:b1:e1:eb:ea:1d:cb:28:
fb:c2:5b:81:b1:ed:18:b9:4c:ae:ea:e3:6e:8d:4d:d7:31:fa:
19:b4:20:5d:27:ff:69:69:57:5c:3d:7d:8a:98:10:a3:63:1f:
16:48:07:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxv7zG7V2d4kB1tVtdlvuCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTI5M2NiYmUyZjY5MjU0MGQzY2M1YTZlODIzNjYwNDk0
YzQwNjMwHhcNMjUwNjE1MDQwMTIwWhcNMjUwNjE2MDQwMTIwWjAzMTEwLwYDVQQD
EyhiMmZmYThkNmUwN2MzZWQyNmE5YTg3MDI2OTg5N2E0MDViNWM4ZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3ljrISASC7Wx97D/8Pe46tHI2mZ
NBBPqHCAhn1+b6XkG3MIgJrwkM2lPzqm35V6FKwpxwZJmsWV9bT6rBgOU9VrFlHD
rs5wlAm0qCjTmLCPks3+1PVPHQAZJ8OJFO8YKb3FB2IVppPWtM62a1rwniYX9z5X
q8ZKnHMlGhdHonN2/e/bZUwyc5fzrbYB3eCycBKv2MVLldNwXoj2sS8P3sG3PtV2
6DMcELvR6I7eJA7oMTKAUYgzDpLYA8h0YAFyIZ9KYOodGbwGwEHB/AqEvwD6rcAR
DyWJtitxz9CPfedjstxHb27xqktyNvniE0SZGHB8m3lJ2celnMbz66xB3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLL/qNbgfD7SapqHAmmJekBbXI1NMB8GA1UdIwQY
MBaAFB8Sk8u+L2klQNPMWm6CNmBJTEBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQt
MjY5NzE1OTlhNTU0LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQtMjY5NzE1OTlhNTU0
LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8vqcA9m
KdfwtLgcaao0sVQwSLx0/VJ983ftb/1lUqQXUzsLGjixTThycMOs2qcx//sFyTEK
Y8DnIfoU25VDOWgRm3iK6OQCNi5XdY5YwWo4bNzAodredr/nZR4VNiw3S8rPVl1v
TaVfuNlQpNB3S7F1TruKzRzBLDMKuaoQoH1Vo5symA8tNwsP0O77Qez9vmlLwd38
lUvFovGVSapTSXuJ1r+ACgKjv98Y6UsGOjtBAY876f62xTZ7TrF0fzwe3Derknna
fBuZ+7rUKhzUlKyx4evqHcso+8JbgbHtGLlMrurjbo1N1zH6GbQgXSf/aWlXXD19
ipgQo2MfFkgHbg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:49 2025 by rpki-client