Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
File: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft (raw, json)
Hash identifier: PiF9SIAnZGvMYBeOAWNlk07mJUcsVv3UuoBiAjUM3z8=
Subject key identifier: 61:09:5E:74:BB:E1:67:70:EA:1F:38:60:95:69:C3:7F:30:68:1E:EC
Authority key identifier: 1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
Certificate issuer: /CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Certificate serial: 01987450CBF86336B276EAF3BABAA0CFC430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
Manifest number: 06A8
Signing time: Mon 04 Aug 2025 09:01:48 +0000
Manifest this update: Mon 04 Aug 2025 09:01:48 +0000
Manifest next update: Tue 05 Aug 2025 09:01:48 +0000
Files and hashes: 1: 2kfAKgS6rtPxOokQdgiQcFW0Sbc.roa (hash: midqdd826AD6+dmyiJS8kWbnJkkjvvshmNXqoFoo9/0=)
2: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl (hash: kAeypU1aeKY7TIWrF6QQoSli9Tw54BOJYbBMebrGzJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:cb:f8:63:36:b2:76:ea:f3:ba:ba:a0:cf:c4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Validity
Not Before: Aug 4 09:01:48 2025 GMT
Not After : Aug 5 09:01:48 2025 GMT
Subject: CN=61095e74bbe16770ea1f38609569c37f30681eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:c9:55:19:3b:1f:03:8c:10:96:58:94:fb:
98:47:46:c2:09:6e:57:f3:a6:79:73:f2:d4:25:ee:
c4:bb:75:a4:62:94:a4:d7:92:83:60:e3:ac:fc:b1:
0f:60:39:c7:43:36:3e:7a:19:6a:04:ee:5f:f4:fc:
88:01:d1:6e:82:90:30:b6:46:e1:92:52:d4:35:9c:
61:80:1c:f3:28:91:5a:20:ca:49:2f:68:4e:37:d0:
24:e6:17:ef:16:20:7a:33:48:bd:e7:dc:57:47:5c:
7e:21:a7:1d:0d:51:99:d0:7c:ea:63:4c:cd:df:91:
5d:ce:d8:47:9e:fc:c8:88:6b:5d:e5:bb:d5:69:ab:
b6:b4:21:9a:06:87:82:0f:cb:75:6c:bf:c9:56:b8:
a9:2e:bf:7e:81:4c:2a:5c:d9:73:01:45:05:6e:f2:
11:72:8a:82:65:ac:1b:ff:9b:a8:7f:f3:62:30:ad:
61:7b:92:4d:17:44:9e:87:fc:ea:8c:73:10:78:87:
49:15:ae:f0:8c:fd:ce:1d:9a:96:28:e0:29:c8:34:
e2:da:b9:83:a5:9d:54:be:38:49:cc:43:86:ef:b4:
ca:2d:22:fc:36:ac:dd:e0:d3:fc:cc:a4:43:aa:b5:
20:68:2c:ef:08:e4:e1:e2:11:1c:74:cb:50:e9:c7:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:09:5E:74:BB:E1:67:70:EA:1F:38:60:95:69:C3:7F:30:68:1E:EC
X509v3 Authority Key Identifier:
keyid:1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e4:c6:84:ab:6b:ca:ba:ef:a0:88:2d:e5:68:91:91:09:78:
23:aa:8d:86:e2:ba:b1:60:7d:e8:47:ae:47:9f:bb:f2:f2:a0:
5a:6c:b2:01:2b:e9:da:90:9c:31:c2:e2:d7:25:fc:0a:05:07:
58:35:d4:e3:a3:13:7f:fe:5d:61:a0:60:94:64:22:50:1f:05:
e3:af:72:09:4d:c2:4e:d6:6c:40:9a:b7:af:6a:2d:2b:01:15:
19:21:58:67:79:22:a8:83:34:89:f7:1d:1a:e1:35:80:36:10:
cc:4c:ff:36:01:2c:2e:2d:c1:83:f1:64:aa:f2:27:7e:65:c9:
36:29:3b:5f:aa:67:6f:e6:99:4b:b3:3c:0d:eb:28:29:94:52:
2f:30:a2:54:b5:f3:21:b5:cc:6b:23:78:ec:8b:a5:2f:85:4e:
22:db:ae:9f:b1:8c:06:6d:fd:5d:29:e2:b7:b5:e0:f5:d6:59:
32:2a:84:75:1e:70:ee:ae:15:b0:72:8b:36:05:32:f8:7e:70:
30:eb:17:82:ac:8d:2b:5a:fe:3a:a9:38:80:e7:83:31:8d:73:
4f:d1:ff:30:be:8f:63:b2:51:57:29:30:9b:40:cb:77:05:af:
cb:b1:3f:ad:20:8e:34:c0:84:58:89:57:d5:74:51:72:03:91:
50:6e:1d:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UMv4Yzaydurzurqgz8QwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlN2UwOGQ1NjQ3NWJhZTQwN2E0ZjJiY2E4ZTg5YTA5OTc2
ODVhM2EwHhcNMjUwODA0MDkwMTQ4WhcNMjUwODA1MDkwMTQ4WjAzMTEwLwYDVQQD
Eyg2MTA5NWU3NGJiZTE2NzcwZWExZjM4NjA5NTY5YzM3ZjMwNjgxZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYvJVRk7HwOMEJZYlPuYR0bCCW5X
86Z5c/LUJe7Eu3WkYpSk15KDYOOs/LEPYDnHQzY+ehlqBO5f9PyIAdFugpAwtkbh
klLUNZxhgBzzKJFaIMpJL2hON9Ak5hfvFiB6M0i959xXR1x+IacdDVGZ0HzqY0zN
35FdzthHnvzIiGtd5bvVaau2tCGaBoeCD8t1bL/JVripLr9+gUwqXNlzAUUFbvIR
coqCZawb/5uof/NiMK1he5JNF0Seh/zqjHMQeIdJFa7wjP3OHZqWKOApyDTi2rmD
pZ1UvjhJzEOG77TKLSL8Nqzd4NP8zKRDqrUgaCzvCOTh4hEcdMtQ6ceMUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEJXnS74Wdw6h84YJVpw38waB7sMB8GA1UdIwQY
MBaAFB5+CNVkdbrkB6TyvKjomgmXaFo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG40STFXUjF1dVFIcFBLOHFPaWFDWmRvV2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kMjc1NjctNzEwYy00OGNkLTllNWQt
MzAwMmRmODI1ZDVkLzEvSG40STFXUjF1dVFIcFBLOHFPaWFDWmRvV2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kMjc1NjctNzEwYy00OGNkLTllNWQtMzAwMmRmODI1ZDVk
LzEvSG40STFXUjF1dVFIcFBLOHFPaWFDWmRvV2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOTGhKtr
yrrvoIgt5WiRkQl4I6qNhuK6sWB96EeuR5+78vKgWmyyASvp2pCcMcLi1yX8CgUH
WDXU46MTf/5dYaBglGQiUB8F469yCU3CTtZsQJq3r2otKwEVGSFYZ3kiqIM0ifcd
GuE1gDYQzEz/NgEsLi3Bg/FkqvInfmXJNik7X6pnb+aZS7M8DesoKZRSLzCiVLXz
IbXMayN47IulL4VOItuun7GMBm39XSnit7Xg9dZZMiqEdR5w7q4VsHKLNgUy+H5w
MOsXgqyNK1r+Oqk4gOeDMY1zT9H/ML6PY7JRVykwm0DLdwWvy7E/rSCONMCEWIlX
1XRRcgORUG4dDg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:14 2025 by rpki-client