Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: EBvBDWcyHb2zanGDCxPv0+Bm70nfUqB09KN3fyoMyM8=
Subject key identifier: BE:5A:94:50:BB:35:8F:75:4B:F2:3F:2F:DC:ED:CF:68:84:D9:85:FB
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 01987A88EEF689D80D19CAA30AF48630EF6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 1534
Signing time: Tue 05 Aug 2025 14:00:51 +0000
Manifest this update: Tue 05 Aug 2025 14:00:51 +0000
Manifest next update: Wed 06 Aug 2025 14:00:51 +0000
Files and hashes: 1: 7oQLFindjFNNwT1EI5HtopJVATk.roa (hash: QW4atGbHZ6zg8XYnhlFNaNdtw1KZFCjwMGSD43vyWYs=)
2: 7p3bshSBfl7JZFvo3V1B0hB4k14.roa (hash: cbZ+dbslEUIQt31Sa26Aju1jHZ6F6X9W/yVOC5Hx/IY=)
3: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: hHsK7MIJdqXANuXg05/LKMNMZ0KZt3AXhCYj9R9OXjI=)
4: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (hash: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:88:ee:f6:89:d8:0d:19:ca:a3:0a:f4:86:30:ef:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Aug 5 14:00:51 2025 GMT
Not After : Aug 6 14:00:51 2025 GMT
Subject: CN=be5a9450bb358f754bf23f2fdcedcf6884d985fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2d:e5:57:0a:17:ed:fa:cf:7e:0b:43:ed:6b:
91:a3:9b:5f:99:29:43:af:23:b9:ad:56:fe:4d:fc:
92:a0:37:20:2c:61:56:3d:bc:2f:ff:0d:db:6b:7c:
14:1e:73:ef:b2:1d:44:49:76:2b:fc:c0:86:bc:1d:
f2:cb:d1:42:7d:9d:3b:f1:1b:54:ea:48:67:65:e2:
87:bb:6b:c7:98:da:fc:ee:79:6e:85:fb:45:0b:02:
39:60:8e:85:84:7e:7d:21:2a:b1:bb:a9:10:5b:7d:
6a:a1:9d:76:93:23:a5:23:4e:47:17:4e:7e:80:4b:
d0:7c:9e:bf:31:5f:81:41:8f:ae:38:a8:e3:95:e4:
8e:44:62:43:6a:d3:57:2a:c5:bc:f3:e5:76:f4:36:
7a:87:ed:91:f6:6c:0a:db:16:16:fe:94:fb:2f:35:
5c:3b:c6:a9:98:57:42:c0:f7:7d:42:14:b4:c7:10:
8b:dc:47:f7:0a:e7:07:b2:00:d6:3b:7e:03:0e:79:
8e:a4:7f:22:55:64:0b:e6:1e:3f:d3:8a:06:99:2d:
fd:a1:cc:7f:3f:f6:37:9d:db:ba:e4:31:9f:61:81:
61:ea:78:1a:a4:f0:c7:23:22:c7:d6:1e:26:85:0a:
04:17:dd:1f:4f:79:03:31:8b:e9:3e:b5:a8:7e:7c:
49:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5A:94:50:BB:35:8F:75:4B:F2:3F:2F:DC:ED:CF:68:84:D9:85:FB
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cd:a1:4c:2e:2c:65:f2:e6:62:6a:f2:f1:7a:39:62:26:3a:
da:b7:e7:91:17:fb:37:0a:ab:97:20:ad:e0:d2:9e:c6:23:11:
b0:1c:f8:88:6d:9d:a2:69:44:c2:7c:47:d0:b7:99:8b:f8:20:
00:7f:f2:0a:d6:fc:98:6a:a0:a7:69:f9:1c:96:84:0f:f2:03:
5b:b5:80:79:a1:5e:02:19:cb:75:0f:58:9e:e6:bf:f6:24:8f:
7b:dc:2b:31:5b:51:0a:f3:a1:26:f0:bf:52:44:d2:d8:d2:ef:
b4:46:a2:b4:83:8a:d4:f7:69:b5:1e:6b:21:3e:c2:4e:a9:d8:
e2:9f:b5:36:1a:e8:d1:e7:40:5e:f2:b0:a5:3f:64:a0:38:6b:
58:23:d8:69:da:a5:d2:ce:87:b1:6b:d3:73:44:5a:d0:eb:09:
53:77:5d:5e:6d:9e:d7:8e:5e:fd:c1:cd:9e:88:cb:5d:83:ef:
0b:03:b0:d8:6b:fa:2c:af:3b:5d:43:98:1e:08:7a:07:ad:d0:
da:6d:6a:7f:59:5c:b7:3d:70:b7:6d:84:b3:a5:a7:f5:5b:67:
5a:be:e3:c9:2e:99:ba:e8:59:39:ee:9f:d1:40:b9:a2:84:43:
9f:33:d8:a2:7c:dd:0f:f6:b2:67:27:25:5b:9c:cd:34:5c:53:
d8:31:1b:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6iO72idgNGcqjCvSGMO9vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNjVlZGUzYjZhYWU3NDc1YzM1NGIxZTliODRkNmE3ODMy
YjA3N2IwHhcNMjUwODA1MTQwMDUxWhcNMjUwODA2MTQwMDUxWjAzMTEwLwYDVQQD
EyhiZTVhOTQ1MGJiMzU4Zjc1NGJmMjNmMmZkY2VkY2Y2ODg0ZDk4NWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S3lVwoX7frPfgtD7WuRo5tfmSlD
ryO5rVb+TfySoDcgLGFWPbwv/w3ba3wUHnPvsh1ESXYr/MCGvB3yy9FCfZ078RtU
6khnZeKHu2vHmNr87nluhftFCwI5YI6FhH59ISqxu6kQW31qoZ12kyOlI05HF05+
gEvQfJ6/MV+BQY+uOKjjleSORGJDatNXKsW88+V29DZ6h+2R9mwK2xYW/pT7LzVc
O8apmFdCwPd9QhS0xxCL3Ef3CucHsgDWO34DDnmOpH8iVWQL5h4/04oGmS39ocx/
P/Y3ndu65DGfYYFh6ngapPDHIyLH1h4mhQoEF90fT3kDMYvpPrWofnxJTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5alFC7NY91S/I/L9ztz2iE2YX7MB8GA1UdIwQY
MBaAFB5l7eO2qudHXDVLHpuE1qeDKwd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYt
NWNlNGQ4ZGJkMTU5LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYtNWNlNGQ4ZGJkMTU5
LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACc2hTC4s
ZfLmYmry8Xo5YiY62rfnkRf7NwqrlyCt4NKexiMRsBz4iG2domlEwnxH0LeZi/gg
AH/yCtb8mGqgp2n5HJaED/IDW7WAeaFeAhnLdQ9Ynua/9iSPe9wrMVtRCvOhJvC/
UkTS2NLvtEaitIOK1PdptR5rIT7CTqnY4p+1Nhro0edAXvKwpT9koDhrWCPYadql
0s6HsWvTc0Ra0OsJU3ddXm2e145e/cHNnojLXYPvCwOw2Gv6LK87XUOYHgh6B63Q
2m1qf1lctz1wt22Es6Wn9VtnWr7jyS6ZuuhZOe6f0UC5ooRDnzPYonzdD/ayZycl
W5zNNFxT2DEb8Q==
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:38:35 2025 by rpki-client