Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
File: Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft (raw, json)
Hash identifier: jIO0Zxb/+UtLVhVhESZbDCWuGnhsvS9h60U5ylrrnsc=
Subject key identifier: 1D:66:E5:05:ED:A7:ED:96:4F:E3:DA:11:9E:3C:5C:A5:0F:59:73:28
Authority key identifier: 1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3
Certificate issuer: /CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3
Certificate serial: 019881D58E4C142C1DFE7ABD6C4F6C76CEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
Manifest number: 0C4C
Signing time: Thu 07 Aug 2025 00:01:53 +0000
Manifest this update: Thu 07 Aug 2025 00:01:53 +0000
Manifest next update: Fri 08 Aug 2025 00:01:53 +0000
Files and hashes: 1: Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl (hash: zSDNEoNmxjogwnfAP02Cvtoy7906CPlAtNkA8Hc+g30=)
2: oaQkn5zr2sFy17og-aVMkuLXdds.roa (hash: VtZ3pTO5W1yzA+ps5HMSQhypm611YNtn0vckyLuCUAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:8e:4c:14:2c:1d:fe:7a:bd:6c:4f:6c:76:ce:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3
Validity
Not Before: Aug 7 00:01:53 2025 GMT
Not After : Aug 8 00:01:53 2025 GMT
Subject: CN=1d66e505eda7ed964fe3da119e3c5ca50f597328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4c:e8:28:08:0f:90:2a:1e:de:40:87:61:8e:
6b:d6:66:d6:b5:49:08:ca:36:db:22:30:f0:85:1b:
d7:5e:bb:9d:73:cf:4d:7a:00:41:c3:17:8c:65:6c:
9d:b0:1e:9b:6f:dc:1b:29:3e:d1:a7:53:4b:6b:79:
1b:8f:28:be:d6:7e:6f:b4:47:4f:60:b2:7d:a2:b2:
5e:32:ec:d9:61:ea:bc:1f:f2:98:1d:c9:79:79:ca:
8d:0a:0b:a4:f9:49:73:fa:35:55:1c:d6:35:d5:9a:
71:58:87:6e:78:a1:3d:cb:15:e0:9e:c9:20:47:e4:
7c:88:18:fd:81:fd:87:6e:90:dd:74:0c:7f:09:33:
6f:8b:ff:84:95:ac:41:87:be:2a:95:92:2f:64:1b:
ba:7f:7f:8f:48:ee:f4:99:40:65:2e:8f:54:5d:d9:
5a:ee:43:97:24:e3:de:86:9e:79:6a:ef:de:bd:f6:
34:ef:bf:55:71:4a:ba:64:93:e3:33:28:1a:15:70:
63:cc:8f:54:7b:cb:dc:21:81:51:4d:ac:56:3e:34:
bf:29:40:31:30:d1:2e:d3:bf:e5:54:39:1d:50:6a:
77:14:21:9a:7c:f7:e7:be:f3:09:38:e4:95:de:9e:
a7:88:83:f4:f3:31:32:af:30:36:e5:b5:32:2d:ef:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:66:E5:05:ED:A7:ED:96:4F:E3:DA:11:9E:3C:5C:A5:0F:59:73:28
X509v3 Authority Key Identifier:
keyid:1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:08:58:dd:ad:b8:35:cf:8a:cb:de:56:a0:95:ac:51:9e:1f:
7f:c1:2c:37:3c:fa:e0:02:2f:8c:f4:f4:04:4c:63:11:da:dd:
03:c3:c1:ec:e3:72:9e:51:d9:c4:e7:80:4d:c6:0a:40:8a:d9:
f7:22:6c:ba:19:40:d1:d2:e8:7a:9c:ea:71:08:08:52:0e:8c:
b3:69:40:9f:f4:3d:c7:e8:d0:9e:9b:bf:27:00:02:2c:5a:6b:
c5:21:5d:6b:74:ae:c3:28:fc:6a:17:05:a8:98:64:98:12:16:
7c:e0:4c:27:5f:5d:13:31:d0:2a:24:d3:9d:03:67:d7:9b:c3:
2b:db:39:17:ee:2e:4e:e7:78:e9:76:73:e2:84:84:3c:79:71:
15:08:a2:da:5b:ec:3f:b2:37:22:b0:f6:33:7d:bb:de:8a:9b:
7f:7b:73:bb:37:e1:45:1d:6d:0a:f9:06:48:b7:c4:49:15:c7:
b1:cd:15:3b:67:e4:e7:14:30:55:2f:71:94:7b:34:d1:87:e0:
ec:ba:6b:5c:13:7d:90:09:70:fa:53:ca:0d:50:bd:28:9c:8e:
ea:46:f6:4e:97:05:45:97:8e:5a:ac:48:3a:0b:8f:f6:80:f5:
41:06:8d:b0:d3:17:c7:0d:97:a4:01:76:98:83:69:64:f7:a6:
5e:4f:f0:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiB1Y5MFCwd/nq9bE9sds63MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNDdlMmJmMzk3NDcyMWVhZmJmYjhjMzFmYzUyNzMwMzlk
NTA1ZjMwHhcNMjUwODA3MDAwMTUzWhcNMjUwODA4MDAwMTUzWjAzMTEwLwYDVQQD
EygxZDY2ZTUwNWVkYTdlZDk2NGZlM2RhMTE5ZTNjNWNhNTBmNTk3MzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUzoKAgPkCoe3kCHYY5r1mbWtUkI
yjbbIjDwhRvXXrudc89NegBBwxeMZWydsB6bb9wbKT7Rp1NLa3kbjyi+1n5vtEdP
YLJ9orJeMuzZYeq8H/KYHcl5ecqNCguk+Ulz+jVVHNY11ZpxWIdueKE9yxXgnskg
R+R8iBj9gf2HbpDddAx/CTNvi/+ElaxBh74qlZIvZBu6f3+PSO70mUBlLo9UXdla
7kOXJOPehp55au/evfY0779VcUq6ZJPjMygaFXBjzI9Ue8vcIYFRTaxWPjS/KUAx
MNEu07/lVDkdUGp3FCGafPfnvvMJOOSV3p6niIP08zEyrzA25bUyLe/26wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1m5QXtp+2WT+PaEZ48XKUPWXMoMB8GA1UdIwQY
MBaAFB5H4r85dHIer7+4wx/FJzA51QXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGtmaXZ6bDBjaDZ2djdqREg4VW5NRG5WQmZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hZmExMDYtNmFmOC00MzEwLWI0ZDQt
ZTM2OWQ2NjAyZTZmLzEvSGtmaXZ6bDBjaDZ2djdqREg4VW5NRG5WQmZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9hZmExMDYtNmFmOC00MzEwLWI0ZDQtZTM2OWQ2NjAyZTZm
LzEvSGtmaXZ6bDBjaDZ2djdqREg4VW5NRG5WQmZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwhY3a24
Nc+Ky95WoJWsUZ4ff8EsNzz64AIvjPT0BExjEdrdA8PB7ONynlHZxOeATcYKQIrZ
9yJsuhlA0dLoepzqcQgIUg6Ms2lAn/Q9x+jQnpu/JwACLFprxSFda3Suwyj8ahcF
qJhkmBIWfOBMJ19dEzHQKiTTnQNn15vDK9s5F+4uTud46XZz4oSEPHlxFQii2lvs
P7I3IrD2M3273oqbf3tzuzfhRR1tCvkGSLfESRXHsc0VO2fk5xQwVS9xlHs00Yfg
7LprXBN9kAlw+lPKDVC9KJyO6kb2TpcFRZeOWqxIOguP9oD1QQaNsNMXxw2XpAF2
mINpZPemXk/w6A==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:46 2025 by rpki-client