Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
File: H1BLG7cWjmgLGVQvj3MDhhRMil8.mft (raw, json)
Hash identifier: hmKYVj/PRNH7vQSSVi4gK1NrmEDKCmfa0ER2vkwseyA=
Subject key identifier: 99:85:83:B6:2D:DB:3C:DE:C7:5F:36:A5:4A:E7:79:51:65:F7:A3:53
Authority key identifier: 1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
Certificate issuer: /CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Certificate serial: 0198A0BB8A97AD1A4FC19927F0C7457F1CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
Manifest number: 162E
Signing time: Wed 13 Aug 2025 00:01:41 +0000
Manifest this update: Wed 13 Aug 2025 00:01:41 +0000
Manifest next update: Thu 14 Aug 2025 00:01:41 +0000
Files and hashes: 1: 1YHm_89mdmO3B6rQNuElV51RHnc.roa (hash: MnfHwqRrOYbX1ON7yZ7M8gI0u2brRrZRizU4+uQlZVo=)
2: H1BLG7cWjmgLGVQvj3MDhhRMil8.crl (hash: fXT/3a8I2xayAIoAogTs/JoUibZzHydSvz/jfY4EgRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:bb:8a:97:ad:1a:4f:c1:99:27:f0:c7:45:7f:1c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Validity
Not Before: Aug 13 00:01:41 2025 GMT
Not After : Aug 14 00:01:41 2025 GMT
Subject: CN=998583b62ddb3cdec75f36a54ae7795165f7a353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d7:34:f0:09:36:2a:ea:7e:90:56:75:15:18:
cd:e2:ff:3d:8c:42:17:4d:af:6b:f9:fa:ee:e9:7b:
d4:29:c6:5b:05:81:6b:5c:70:77:35:b5:ad:63:fa:
18:55:80:3c:67:b1:51:5c:10:02:6f:17:4d:02:aa:
eb:f2:52:8f:70:67:b5:a5:fc:a8:77:3c:15:c4:37:
97:48:74:07:03:21:73:db:63:43:11:cf:cf:90:7e:
3e:6a:54:2a:5e:9f:db:0b:2b:cf:7a:af:b2:c2:5f:
d4:35:5c:5f:86:ea:23:7d:03:cd:4b:bf:04:a1:df:
a0:2c:c6:42:52:74:24:af:4d:50:f9:06:a3:c2:48:
08:d0:ed:40:72:39:c3:09:b4:21:7b:94:46:07:75:
9e:45:a8:4f:5a:45:ad:c0:03:9a:18:4e:8a:e1:96:
12:07:b4:7c:2b:a8:c8:4f:43:4a:99:d3:80:c4:28:
08:77:90:ac:83:69:f8:07:41:e2:ba:7e:04:f4:21:
6d:8f:f1:3f:61:c5:92:97:e2:4a:d3:92:ce:76:c0:
9e:b0:e8:1f:6f:50:cf:04:71:ae:57:ff:e4:c1:56:
ea:77:7d:03:c3:78:b9:ad:61:c9:ab:29:07:90:96:
e1:78:12:67:af:4e:46:78:b1:af:49:11:09:f4:cc:
1a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:85:83:B6:2D:DB:3C:DE:C7:5F:36:A5:4A:E7:79:51:65:F7:A3:53
X509v3 Authority Key Identifier:
keyid:1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:bf:c0:34:4a:67:54:d5:33:a1:7b:62:18:3e:22:64:f4:8a:
74:e1:da:5e:00:09:a6:4e:5d:02:17:40:09:b4:ad:d1:58:a7:
a0:b7:e6:ed:01:d5:09:aa:e4:74:31:12:f7:df:49:c6:51:28:
37:c2:90:07:fd:19:e0:d2:16:e5:c8:a5:a7:b2:49:ad:32:18:
4a:28:53:91:87:51:e8:3a:01:42:75:18:13:1c:82:44:df:4a:
ed:26:af:57:9d:f2:94:41:2f:90:5f:c3:ff:3b:ca:c1:da:c7:
ab:be:c4:b0:b8:da:78:9b:86:40:ce:4f:10:88:59:01:65:9f:
1f:2c:58:52:fc:d7:a4:89:1d:f2:08:df:0d:fe:07:10:60:4b:
bd:b9:65:b2:dc:47:9f:32:ec:85:8f:12:26:27:d8:8b:40:56:
eb:32:3d:57:70:87:f1:e3:e8:6e:62:01:ad:98:da:2f:43:27:
36:86:aa:0b:16:f3:a8:42:f5:21:36:74:21:1b:dc:5e:e0:d5:
ea:2c:9c:2c:66:64:4c:74:83:27:cd:d1:fe:13:88:10:e1:2d:
33:22:6c:90:a2:11:c3:6c:bb:09:c0:74:77:60:97:68:3e:66:
15:56:2a:84:9f:bf:6a:91:2a:9e:1c:b3:38:db:0e:cf:d8:df:
ae:ab:aa:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigu4qXrRpPwZkn8MdFfxz3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNTA0YjFiYjcxNjhlNjgwYjE5NTQyZjhmNzMwMzg2MTQ0
YzhhNWYwHhcNMjUwODEzMDAwMTQxWhcNMjUwODE0MDAwMTQxWjAzMTEwLwYDVQQD
Eyg5OTg1ODNiNjJkZGIzY2RlYzc1ZjM2YTU0YWU3Nzk1MTY1ZjdhMzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNc08Ak2Kup+kFZ1FRjN4v89jEIX
Ta9r+fru6XvUKcZbBYFrXHB3NbWtY/oYVYA8Z7FRXBACbxdNAqrr8lKPcGe1pfyo
dzwVxDeXSHQHAyFz22NDEc/PkH4+alQqXp/bCyvPeq+ywl/UNVxfhuojfQPNS78E
od+gLMZCUnQkr01Q+QajwkgI0O1AcjnDCbQhe5RGB3WeRahPWkWtwAOaGE6K4ZYS
B7R8K6jIT0NKmdOAxCgId5Csg2n4B0Hiun4E9CFtj/E/YcWSl+JK05LOdsCesOgf
b1DPBHGuV//kwVbqd30Dw3i5rWHJqykHkJbheBJnr05GeLGvSREJ9MwaBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmFg7Yt2zzex182pUrneVFl96NTMB8GA1UdIwQY
MBaAFB9QSxu3Fo5oCxlUL49zA4YUTIpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zYzc0YTgtOWY3Mi00YzA2LWI1MTYt
MzViYjYwZWEwN2MxLzEvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8zYzc0YTgtOWY3Mi00YzA2LWI1MTYtMzViYjYwZWEwN2Mx
LzEvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFr/ANEpn
VNUzoXtiGD4iZPSKdOHaXgAJpk5dAhdACbSt0VinoLfm7QHVCarkdDES999JxlEo
N8KQB/0Z4NIW5cilp7JJrTIYSihTkYdR6DoBQnUYExyCRN9K7SavV53ylEEvkF/D
/zvKwdrHq77EsLjaeJuGQM5PEIhZAWWfHyxYUvzXpIkd8gjfDf4HEGBLvbllstxH
nzLshY8SJifYi0BW6zI9V3CH8ePobmIBrZjaL0MnNoaqCxbzqEL1ITZ0IRvcXuDV
6iycLGZkTHSDJ83R/hOIEOEtMyJskKIRw2y7CcB0d2CXaD5mFVYqhJ+/apEqnhyz
ONsOz9jfrquqxw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:46 2025 by rpki-client