Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
File: HpUuiDc295y9nFZHBL88NmIbjso.mft (raw, json)
Hash identifier: G9M10zHUxmgQkaDVFGVTyctyg/ddjCg+8gxNfka70QE=
Subject key identifier: 3D:4E:57:87:6D:14:71:E8:40:AD:A3:B7:9B:9B:4D:93:C4:F4:A1:58
Authority key identifier: 1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
Certificate issuer: /CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Certificate serial: 01976997E6AC9BFC2886F28941B9327BEE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 14:00:52 +0000
Manifest this update: Fri 13 Jun 2025 14:00:52 +0000
Manifest next update: Sat 14 Jun 2025 14:00:52 +0000
Files and hashes: 1: HpUuiDc295y9nFZHBL88NmIbjso.crl (hash: reWxsudWGPkiskADqETUwI8Llv1mQsNdCmBote2FhWc=)
2: nfcB4W3-frcdsttLFxfqKvUAYPA.roa (hash: LSLZu1kedUT6p6v50vQ31LG0ikk6bjLybjbis0FT+ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:e6:ac:9b:fc:28:86:f2:89:41:b9:32:7b:ee:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Validity
Not Before: Jun 13 14:00:52 2025 GMT
Not After : Jun 14 14:00:52 2025 GMT
Subject: CN=3d4e57876d1471e840ada3b79b9b4d93c4f4a158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:97:5c:3b:64:a1:a7:1d:58:e3:7c:32:44:a0:
e2:4a:83:40:81:8e:4e:f8:9b:a4:68:17:5c:b5:b6:
4e:4f:1d:0d:d8:21:3a:52:94:0c:12:3f:be:ce:b5:
ef:59:73:ec:0b:cb:26:7d:f1:6a:59:80:3e:17:40:
33:bc:2e:7c:3c:ff:14:19:be:46:4e:c6:09:8d:4d:
67:f5:14:98:35:fe:af:25:a2:a6:0c:af:22:df:d1:
21:bc:6a:f2:16:8d:d3:85:1c:89:0c:3a:bc:36:aa:
8e:a8:40:dc:98:2a:97:e3:9b:f1:d1:68:4a:57:f6:
c5:a8:a3:29:ae:40:f9:2b:8d:79:80:e9:19:69:59:
77:0c:da:3e:3e:e4:08:01:15:bf:82:9d:85:85:40:
ff:31:98:34:1b:dd:d2:49:0c:e5:a1:a7:1d:90:b4:
6b:f6:9e:4f:47:4a:0d:c0:5c:8f:20:19:aa:ee:1b:
21:a6:d9:73:f6:1e:92:88:50:94:33:cf:b0:ba:c8:
23:5b:d4:ea:c9:8c:a2:83:04:ea:b2:78:92:87:d8:
24:dc:70:fb:60:9d:36:95:04:c2:79:15:de:03:bf:
3a:c0:52:23:e2:2a:41:d6:cf:62:c1:06:0e:af:db:
9a:b3:5e:08:d1:79:ee:74:63:18:f2:74:a6:03:18:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4E:57:87:6D:14:71:E8:40:AD:A3:B7:9B:9B:4D:93:C4:F4:A1:58
X509v3 Authority Key Identifier:
keyid:1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:13:c9:77:90:60:0d:91:ba:e7:4f:78:27:4f:41:1a:32:3e:
7b:59:08:3d:ca:a3:ac:f7:d0:80:2f:af:cc:e6:4d:98:76:6d:
3a:f3:a7:57:94:6e:a5:57:1d:a1:4d:38:09:83:00:be:b0:01:
5e:bc:1f:5c:f8:bd:dc:8b:37:30:b2:23:f9:d1:ac:4d:6e:2e:
38:66:6b:08:9e:b1:67:0e:2c:d7:74:56:19:ee:9c:bc:ff:39:
ca:b3:77:8d:c2:ea:ff:82:87:48:97:5c:3c:8c:17:cf:d5:08:
af:b4:24:71:1c:73:2f:89:4e:85:fb:36:7c:05:11:da:c3:d0:
5d:5b:50:a7:e2:16:67:71:e3:6b:0a:48:0e:33:e8:a3:9b:83:
86:0e:a6:85:d4:a7:a8:09:35:7d:35:5b:06:97:fd:99:c1:33:
2f:62:81:3c:cf:ec:69:c1:98:39:d8:15:04:a5:14:2d:3d:47:
93:5d:2b:b1:6b:d8:b4:50:5c:80:b4:45:7f:2a:e6:c6:c5:52:
cd:0a:c0:bb:13:9f:79:13:5c:f2:5b:ea:48:f7:33:6e:74:b1:
e5:b7:ba:b8:92:14:12:96:4e:1a:7d:de:55:8f:0c:cb:47:92:
61:73:66:50:41:d2:68:36:2d:09:7e:d1:a7:3f:dc:e8:1f:80:
57:e9:c3:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl+asm/wohvKJQbkye+5+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOTUyZTg4MzczNmY3OWNiZDljNTY0NzA0YmYzYzM2NjIx
YjhlY2EwHhcNMjUwNjEzMTQwMDUyWhcNMjUwNjE0MTQwMDUyWjAzMTEwLwYDVQQD
EygzZDRlNTc4NzZkMTQ3MWU4NDBhZGEzYjc5YjliNGQ5M2M0ZjRhMTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35dcO2Shpx1Y43wyRKDiSoNAgY5O
+JukaBdctbZOTx0N2CE6UpQMEj++zrXvWXPsC8smffFqWYA+F0AzvC58PP8UGb5G
TsYJjU1n9RSYNf6vJaKmDK8i39EhvGryFo3ThRyJDDq8NqqOqEDcmCqX45vx0WhK
V/bFqKMprkD5K415gOkZaVl3DNo+PuQIARW/gp2FhUD/MZg0G93SSQzloacdkLRr
9p5PR0oNwFyPIBmq7hshptlz9h6SiFCUM8+wusgjW9TqyYyigwTqsniSh9gk3HD7
YJ02lQTCeRXeA786wFIj4ipB1s9iwQYOr9uas14I0XnudGMY8nSmAxggYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1OV4dtFHHoQK2jt5ubTZPE9KFYMB8GA1UdIwQY
MBaAFB6VLog3NvecvZxWRwS/PDZiG47KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBVdWlEYzI5NXk5bkZaSEJMODhObUlianNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iMTQwYWUtYzA0Ny00ZmY2LTg2NGYt
MzU2MDM1NjU3MWE3LzEvSHBVdWlEYzI5NXk5bkZaSEJMODhObUlianNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iMTQwYWUtYzA0Ny00ZmY2LTg2NGYtMzU2MDM1NjU3MWE3
LzEvSHBVdWlEYzI5NXk5bkZaSEJMODhObUlianNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRPJd5Bg
DZG65094J09BGjI+e1kIPcqjrPfQgC+vzOZNmHZtOvOnV5RupVcdoU04CYMAvrAB
XrwfXPi93Is3MLIj+dGsTW4uOGZrCJ6xZw4s13RWGe6cvP85yrN3jcLq/4KHSJdc
PIwXz9UIr7QkcRxzL4lOhfs2fAUR2sPQXVtQp+IWZ3HjawpIDjPoo5uDhg6mhdSn
qAk1fTVbBpf9mcEzL2KBPM/sacGYOdgVBKUULT1Hk10rsWvYtFBcgLRFfyrmxsVS
zQrAuxOfeRNc8lvqSPczbnSx5be6uJIUEpZOGn3eVY8My0eSYXNmUEHSaDYtCX7R
pz/c6B+AV+nDcA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:35:16 2025 by rpki-client