Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
File: HGnHYzivyQhbj71mm4t0vXqS1DE.mft (raw, json)
Hash identifier: lKqhqfU0SmuU8Lw3jhZ+8N1Sr4xpi75uWqmuSXIU9Bc=
Subject key identifier: 28:6B:05:4F:49:06:77:D5:A5:8B:0D:6F:30:7B:59:A7:67:1D:46:E2
Authority key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Certificate issuer: /CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Certificate serial: 01989147B8CBDD52E199D0F1C9E73FD441BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
Manifest number: 1313
Signing time: Sun 10 Aug 2025 00:00:53 +0000
Manifest this update: Sun 10 Aug 2025 00:00:53 +0000
Manifest next update: Mon 11 Aug 2025 00:00:53 +0000
Files and hashes: 1: Biv2qTrQNJJYQlmIhX2GXCsPh8k.roa (hash: qgzc+HC1Pbq5Sym5wnfMxLGpd7cCm/TouNcPCVsFEcM=)
2: HGnHYzivyQhbj71mm4t0vXqS1DE.crl (hash: Glayl0EvFHpIa/KP3FuL6sNVreupEbqsobiNdpp+5/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:b8:cb:dd:52:e1:99:d0:f1:c9:e7:3f:d4:41:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Validity
Not Before: Aug 10 00:00:53 2025 GMT
Not After : Aug 11 00:00:53 2025 GMT
Subject: CN=286b054f490677d5a58b0d6f307b59a7671d46e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:79:d5:ce:20:68:a0:15:3c:fb:a6:96:37:4b:
43:54:77:4d:c6:77:3a:5c:e2:24:4d:46:53:60:c5:
16:fc:27:21:db:fc:69:70:14:0a:60:ed:41:dc:15:
2d:33:33:42:d0:f3:84:68:08:ab:08:6c:a3:cc:f0:
a7:35:88:91:69:cf:ae:d6:7a:61:05:f7:a0:79:f6:
69:56:8c:59:19:61:0e:64:9d:2f:f9:1e:38:7e:3c:
3d:cf:21:74:2f:01:50:f6:bc:da:ac:8e:47:c9:2f:
2a:f5:dc:21:27:2d:76:e7:c5:b2:3c:82:43:0d:67:
62:5a:58:d4:cb:06:f2:25:44:8a:77:c7:2a:c0:02:
5e:ea:44:b5:da:b6:f6:2a:34:02:22:c2:37:d6:01:
05:f4:02:c3:d7:85:b9:e9:03:78:28:f2:a3:c4:f1:
51:5a:f0:a3:cc:e9:bc:95:ff:52:9a:81:68:12:7d:
e7:95:a5:91:9f:b2:68:b3:ea:6e:1f:03:ee:82:97:
68:1a:a1:98:b9:f3:06:66:52:47:73:d9:da:19:21:
38:43:7b:82:33:82:71:39:ba:ce:45:d0:28:61:23:
99:66:c8:99:70:ef:cf:4e:f0:5e:f9:ce:41:20:57:
5f:9f:f6:be:26:42:54:5b:15:03:0b:bb:fa:63:76:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6B:05:4F:49:06:77:D5:A5:8B:0D:6F:30:7B:59:A7:67:1D:46:E2
X509v3 Authority Key Identifier:
keyid:1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:65:90:90:6e:dc:9a:3c:28:87:fe:13:d0:45:47:e0:94:6b:
2d:6c:1a:cc:57:cc:65:35:60:71:d7:81:bf:70:0d:a0:fb:41:
1e:03:69:30:c9:9a:c6:7d:a6:33:ce:a6:50:f8:e9:01:00:07:
6c:53:65:6a:f6:7e:5f:81:ce:bb:5a:4f:8a:7b:cb:09:b5:8b:
ee:54:4d:d5:ca:d0:fb:8f:1c:6a:26:ac:ec:33:15:2a:90:04:
56:c7:07:e0:c8:53:53:ac:29:0d:8d:75:46:43:dc:d8:44:84:
9d:25:09:22:cd:37:21:b0:01:07:f9:27:d6:7c:cd:80:8e:da:
0d:95:9b:80:95:6e:47:1d:84:50:e3:2e:47:f9:bd:f4:d9:f8:
b0:84:7e:86:0f:43:39:78:fd:4b:40:fe:d2:a9:a2:c2:05:b1:
6d:3a:13:f5:21:29:58:e3:5f:4f:55:59:d7:69:1a:92:1e:3c:
16:31:6d:3b:1a:88:c3:17:7e:d8:98:bc:15:75:cb:f5:18:ad:
df:32:f6:df:c0:53:b0:89:9f:9b:5e:56:3f:ad:ed:00:54:b6:
43:bd:f2:af:4c:8f:e0:ce:72:a4:23:ba:b6:2e:e6:b8:35:d7:
c7:16:7a:63:0d:7d:59:e6:ee:03:4e:60:68:b6:f2:97:f8:75:
c9:b3:4f:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRR7jL3VLhmdDxyec/1EG6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNjljNzYzMzhhZmM5MDg1YjhmYmQ2NjliOGI3NGJkN2E5
MmQ0MzEwHhcNMjUwODEwMDAwMDUzWhcNMjUwODExMDAwMDUzWjAzMTEwLwYDVQQD
EygyODZiMDU0ZjQ5MDY3N2Q1YTU4YjBkNmYzMDdiNTlhNzY3MWQ0NmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXnVziBooBU8+6aWN0tDVHdNxnc6
XOIkTUZTYMUW/Cch2/xpcBQKYO1B3BUtMzNC0POEaAirCGyjzPCnNYiRac+u1nph
BfegefZpVoxZGWEOZJ0v+R44fjw9zyF0LwFQ9rzarI5HyS8q9dwhJy1258WyPIJD
DWdiWljUywbyJUSKd8cqwAJe6kS12rb2KjQCIsI31gEF9ALD14W56QN4KPKjxPFR
WvCjzOm8lf9SmoFoEn3nlaWRn7Jos+puHwPugpdoGqGYufMGZlJHc9naGSE4Q3uC
M4JxObrORdAoYSOZZsiZcO/PTvBe+c5BIFdfn/a+JkJUWxUDC7v6Y3bCdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChrBU9JBnfVpYsNbzB7WadnHUbiMB8GA1UdIwQY
MBaAFBxpx2M4r8kIW4+9ZpuLdL16ktQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEduSFl6aXZ5UWhiajcxbW00dDB2WHFTMURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9hMjA4OGItYTEyNi00YmE2LTg3MWMt
NTc1OWI0MjdmNGQxLzEvSEduSFl6aXZ5UWhiajcxbW00dDB2WHFTMURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9hMjA4OGItYTEyNi00YmE2LTg3MWMtNTc1OWI0MjdmNGQx
LzEvSEduSFl6aXZ5UWhiajcxbW00dDB2WHFTMURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGWQkG7c
mjwoh/4T0EVH4JRrLWwazFfMZTVgcdeBv3ANoPtBHgNpMMmaxn2mM86mUPjpAQAH
bFNlavZ+X4HOu1pPinvLCbWL7lRN1crQ+48caias7DMVKpAEVscH4MhTU6wpDY11
RkPc2ESEnSUJIs03IbABB/kn1nzNgI7aDZWbgJVuRx2EUOMuR/m99Nn4sIR+hg9D
OXj9S0D+0qmiwgWxbToT9SEpWONfT1VZ12kakh48FjFtOxqIwxd+2Ji8FXXL9Rit
3zL238BTsImfm15WP63tAFS2Q73yr0yP4M5ypCO6ti7muDXXxxZ6Yw19WebuA05g
aLbyl/h1ybNPIA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:15:37 2025 by rpki-client