Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
File: HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft (raw, json)
Hash identifier: k5ntCWxV9H1WbckP01Ff+BgE7g2i/4+Hx3saYnTobRw=
Subject key identifier: 4C:F1:3B:94:2E:D1:5A:70:1D:82:45:F4:FD:DA:D0:A0:69:93:B4:B9
Authority key identifier: 1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
Certificate issuer: /CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Certificate serial: 0197733F8BDB944E0F6F734D78C7117271CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
Manifest number: 1595
Signing time: Sun 15 Jun 2025 11:00:33 +0000
Manifest this update: Sun 15 Jun 2025 11:00:33 +0000
Manifest next update: Mon 16 Jun 2025 11:00:33 +0000
Files and hashes: 1: HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl (hash: 3qz3HYWHDW5H34t7Q7bzYJvM8SnJlSnYbxhhUXyMSGc=)
2: S8E-qbm1BXEqIdetmmA1nZNgj7U.roa (hash: 3uwA4cyu+agvPaXd967UOebPOsNVk53AsWpnmfz8XsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:3f:8b:db:94:4e:0f:6f:73:4d:78:c7:11:72:71:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Validity
Not Before: Jun 15 11:00:33 2025 GMT
Not After : Jun 16 11:00:33 2025 GMT
Subject: CN=4cf13b942ed15a701d8245f4fddad0a06993b4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:20:60:6e:d5:0d:a7:92:0e:85:c2:2c:00:
1f:c8:74:4d:22:55:d5:04:97:72:51:a9:f5:4b:bc:
50:19:86:47:35:1d:49:76:d1:60:da:50:63:73:5d:
e6:3c:8c:d2:9e:86:29:1b:c5:cf:14:4c:81:b9:e8:
a7:45:78:45:b1:d8:85:d7:ae:d4:b5:74:75:0d:97:
fd:9b:70:37:bb:04:14:a6:df:e3:d6:85:a2:4d:91:
cf:8e:98:d0:6c:56:1b:a1:88:f5:49:33:fa:28:66:
c7:2b:a4:df:a4:e8:cf:69:c1:82:e1:90:28:58:7c:
2e:e1:cd:c5:1b:fa:22:7d:b3:6f:f9:6c:72:f3:05:
dd:61:f0:63:92:9b:90:5b:66:35:65:9b:f8:53:95:
ee:51:7b:fb:23:6b:bd:51:cf:b3:85:e0:22:86:ed:
6e:96:f8:8e:8a:22:f4:28:44:b9:d7:b0:68:03:b3:
be:38:58:96:cc:e1:82:6a:3a:2e:57:ab:ea:bd:79:
a3:d4:5f:6a:53:96:1d:e1:6c:07:e0:0b:4d:6d:5a:
c2:32:20:d4:80:bf:88:da:fc:d9:ca:9f:c6:71:bb:
fe:a0:66:33:61:40:b5:0e:69:91:cb:a6:5d:64:8f:
9b:c4:b0:ab:56:57:89:33:d1:0b:20:10:61:1a:6a:
59:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F1:3B:94:2E:D1:5A:70:1D:82:45:F4:FD:DA:D0:A0:69:93:B4:B9
X509v3 Authority Key Identifier:
keyid:1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5e:cc:4b:1c:4d:02:e5:7f:03:22:be:da:dc:43:d6:d6:73:
64:00:09:41:8a:0a:cd:ba:a0:81:8c:64:72:ed:14:f5:f0:27:
1e:c6:5a:a6:47:dc:76:db:92:8f:a9:06:80:6a:16:97:0a:f5:
19:da:27:69:3c:27:76:f5:08:c8:8b:bf:6b:f5:7f:d4:89:cc:
5f:fc:6e:ec:ea:38:c4:fa:15:2b:a4:27:72:c0:ba:53:08:c9:
01:84:6e:47:5e:4d:77:60:54:97:cd:89:83:1d:3c:56:87:ec:
d0:93:5d:1b:60:3c:07:5e:d0:69:76:f6:1b:2a:e7:e0:51:a4:
07:a0:cf:bb:0b:99:86:80:dc:57:fa:06:3f:56:1c:be:7a:4f:
55:ac:13:02:48:50:74:18:51:d8:1a:76:1d:2a:0d:67:eb:87:
04:a9:0c:bc:85:9e:33:5d:a7:91:0d:fc:c2:4f:4d:3d:d8:f2:
1e:43:0a:a1:28:2a:d7:83:8a:41:30:f6:be:a2:35:09:ff:33:
0b:ae:d8:47:19:01:f0:12:43:75:ae:d7:e4:8d:f9:b0:0d:00:
25:2d:30:dc:1b:1a:47:62:f1:11:db:33:bc:3b:46:48:95:59:
16:89:80:dc:56:0a:3e:89:73:58:ff:a7:a8:70:de:43:43:79:
f5:f3:e5:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdzP4vblE4Pb3NNeMcRcnHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMzlkNTc5MzZkZDJkMTUyMTQ0M2U2OGRhZGQ5ZDA5NDlj
ZGUzM2YwHhcNMjUwNjE1MTEwMDMzWhcNMjUwNjE2MTEwMDMzWjAzMTEwLwYDVQQD
Eyg0Y2YxM2I5NDJlZDE1YTcwMWQ4MjQ1ZjRmZGRhZDBhMDY5OTNiNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpYgYG7VDaeSDoXCLAAfyHRNIlXV
BJdyUan1S7xQGYZHNR1JdtFg2lBjc13mPIzSnoYpG8XPFEyBueinRXhFsdiF167U
tXR1DZf9m3A3uwQUpt/j1oWiTZHPjpjQbFYboYj1STP6KGbHK6TfpOjPacGC4ZAo
WHwu4c3FG/oifbNv+Wxy8wXdYfBjkpuQW2Y1ZZv4U5XuUXv7I2u9Uc+zheAihu1u
lviOiiL0KES517BoA7O+OFiWzOGCajouV6vqvXmj1F9qU5Yd4WwH4AtNbVrCMiDU
gL+I2vzZyp/Gcbv+oGYzYUC1DmmRy6ZdZI+bxLCrVleJM9ELIBBhGmpZPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzxO5Qu0VpwHYJF9P3a0KBpk7S5MB8GA1UdIwQY
MBaAFBw51Xk23S0VIUQ+aNrdnQlJzeM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSERuVmVUYmRMUlVoUkQ1bzJ0MmRDVW5ONHo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kMzg1NmYtMDI5Yy00NDZhLWFlN2Qt
ZDdjNWRhN2MxNjc2LzEvSERuVmVUYmRMUlVoUkQ1bzJ0MmRDVW5ONHo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kMzg1NmYtMDI5Yy00NDZhLWFlN2QtZDdjNWRhN2MxNjc2
LzEvSERuVmVUYmRMUlVoUkQ1bzJ0MmRDVW5ONHo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUV7MSxxN
AuV/AyK+2txD1tZzZAAJQYoKzbqggYxkcu0U9fAnHsZapkfcdtuSj6kGgGoWlwr1
GdonaTwndvUIyIu/a/V/1InMX/xu7Oo4xPoVK6QncsC6UwjJAYRuR15Nd2BUl82J
gx08Vofs0JNdG2A8B17QaXb2Gyrn4FGkB6DPuwuZhoDcV/oGP1YcvnpPVawTAkhQ
dBhR2Bp2HSoNZ+uHBKkMvIWeM12nkQ38wk9NPdjyHkMKoSgq14OKQTD2vqI1Cf8z
C67YRxkB8BJDda7X5I35sA0AJS0w3BsaR2LxEdszvDtGSJVZFomA3FYKPolzWP+n
qHDeQ0N59fPluw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:24:34 2025 by rpki-client