Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
File: Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft (raw, json)
Hash identifier: LzU1FPVlzOgqisH1Z49iqAppvgvb6VUXYi1nBKU/Lck=
Subject key identifier: AA:88:0B:20:F0:7A:8E:3E:2A:82:83:6C:25:62:BB:42:C0:F1:24:1B
Authority key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
Certificate issuer: /CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Certificate serial: 019890DA3062608D99543959B2A4F4704822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
Manifest number: 0574
Signing time: Sat 09 Aug 2025 22:01:14 +0000
Manifest this update: Sat 09 Aug 2025 22:01:14 +0000
Manifest next update: Sun 10 Aug 2025 22:01:14 +0000
Files and hashes: 1: 1-i_f4gNCAnPwT26M-00faBCZ1ec.roa (hash: rf9DtMiWGOZOoz1U+iRouParfUgOp6ltk1lTfbvhGLM=)
2: Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl (hash: IZoKPelt7BbH/IIwD5JQyktaffTZDdiHtSL2xfcLaRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:da:30:62:60:8d:99:54:39:59:b2:a4:f4:70:48:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Validity
Not Before: Aug 9 22:01:14 2025 GMT
Not After : Aug 10 22:01:14 2025 GMT
Subject: CN=aa880b20f07a8e3e2a82836c2562bb42c0f1241b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:ee:05:f5:5c:85:e1:8b:f7:65:e3:d8:7d:
92:0c:3e:64:f4:08:ba:46:1f:f8:ca:31:a7:65:a4:
17:14:58:f2:2d:48:9f:69:44:92:c7:97:84:34:27:
fc:06:4b:68:69:7a:23:4f:b5:89:87:49:83:c8:3d:
d5:e4:4e:81:51:e9:f6:98:05:a5:cd:66:7b:93:00:
94:b1:6f:6a:2e:2c:11:73:f7:e7:b0:91:6b:7a:eb:
9e:de:a2:d7:8d:40:ee:3b:04:ca:0d:6e:a8:c4:79:
48:09:6c:d1:78:ce:53:6b:e6:75:6d:3c:09:3c:40:
4e:64:7a:19:67:8e:03:fc:df:72:51:0e:c0:6b:7b:
cd:0c:bf:5e:22:8e:7d:54:f5:7a:e7:a2:d1:95:61:
b1:d5:5f:de:ed:38:40:20:72:6d:ad:d4:ef:64:a0:
04:ef:61:b2:59:ce:e1:ff:e3:58:78:6d:09:65:63:
2f:fb:67:fc:c8:49:f7:14:7d:74:96:e2:6d:11:81:
32:e6:76:19:a2:ca:56:10:dc:e3:4b:b1:ab:95:51:
7d:f8:6c:08:66:89:0f:4d:88:cc:ee:bb:3d:72:d3:
69:eb:89:0b:e2:85:b2:f6:44:17:6b:95:a8:2d:ad:
80:73:6c:87:28:2f:15:bc:eb:43:35:34:7f:9f:de:
3d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:88:0B:20:F0:7A:8E:3E:2A:82:83:6C:25:62:BB:42:C0:F1:24:1B
X509v3 Authority Key Identifier:
keyid:1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:16:65:f7:28:f8:ee:b9:be:08:90:b5:b5:46:f7:86:14:e7:
0a:ca:96:d1:b1:bc:45:60:3c:d4:12:34:78:ff:8e:38:ad:13:
56:f9:a0:d4:ad:4c:3e:fe:fe:b3:2a:0f:03:94:e9:b5:48:23:
88:a4:83:6e:4f:5c:64:0f:60:dc:36:39:30:8f:b1:b7:04:66:
95:14:99:ee:b7:d1:df:40:ce:9a:75:c7:1b:8e:eb:c9:0e:72:
33:89:18:51:6f:42:0b:7f:b6:d9:d6:22:2c:38:b4:31:9b:92:
83:37:2d:6e:8b:a2:fc:00:b3:f6:01:15:c8:1a:19:d2:11:2f:
6a:aa:14:8d:6f:e0:5d:2e:fa:53:16:7d:7c:35:98:54:a8:ce:
30:34:85:ca:28:9d:b7:a6:f1:24:ed:ce:57:32:ca:28:ab:b7:
56:56:7d:3b:01:d2:1f:0d:68:08:85:de:d0:ab:5b:91:74:52:
f4:88:8b:8e:75:de:4e:22:7f:b4:c0:22:d3:8b:55:7c:88:26:
46:15:e4:c9:06:a5:c3:b4:26:4d:a3:7f:e9:30:bd:9b:e4:d4:
b2:c6:8f:1c:73:c3:b6:28:71:53:d6:ac:da:97:2e:32:cb:a4:
21:29:43:36:e5:66:78:ca:d6:fd:ad:17:8d:ba:3e:e6:41:23:
ea:8e:dc:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQ2jBiYI2ZVDlZsqT0cEgiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZWIzZmFhODM4ODU0OWI1NWNiM2YzYWJkNGM2YzE1MTA2
Y2Y1M2IwHhcNMjUwODA5MjIwMTE0WhcNMjUwODEwMjIwMTE0WjAzMTEwLwYDVQQD
EyhhYTg4MGIyMGYwN2E4ZTNlMmE4MjgzNmMyNTYyYmI0MmMwZjEyNDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3buBfVcheGL92Xj2H2SDD5k9Ai6
Rh/4yjGnZaQXFFjyLUifaUSSx5eENCf8BktoaXojT7WJh0mDyD3V5E6BUen2mAWl
zWZ7kwCUsW9qLiwRc/fnsJFreuue3qLXjUDuOwTKDW6oxHlICWzReM5Ta+Z1bTwJ
PEBOZHoZZ44D/N9yUQ7Aa3vNDL9eIo59VPV656LRlWGx1V/e7ThAIHJtrdTvZKAE
72GyWc7h/+NYeG0JZWMv+2f8yEn3FH10luJtEYEy5nYZospWENzjS7GrlVF9+GwI
ZokPTYjM7rs9ctNp64kL4oWy9kQXa5WoLa2Ac2yHKC8VvOtDNTR/n9491QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqICyDweo4+KoKDbCViu0LA8SQbMB8GA1UdIwQY
MBaAFB3rP6qDiFSbVcs/Or1MbBUQbPU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGVzX3FvT0lWSnRWeXo4NnZVeHNGUkJzOVRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82YzQxMzEtMzY1Yy00YzE0LTllMGIt
NTAyYTk1N2ZkYWY4LzEvSGVzX3FvT0lWSnRWeXo4NnZVeHNGUkJzOVRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82YzQxMzEtMzY1Yy00YzE0LTllMGItNTAyYTk1N2ZkYWY4
LzEvSGVzX3FvT0lWSnRWeXo4NnZVeHNGUkJzOVRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxZl9yj4
7rm+CJC1tUb3hhTnCsqW0bG8RWA81BI0eP+OOK0TVvmg1K1MPv7+syoPA5TptUgj
iKSDbk9cZA9g3DY5MI+xtwRmlRSZ7rfR30DOmnXHG47ryQ5yM4kYUW9CC3+22dYi
LDi0MZuSgzctboui/ACz9gEVyBoZ0hEvaqoUjW/gXS76UxZ9fDWYVKjOMDSFyiid
t6bxJO3OVzLKKKu3VlZ9OwHSHw1oCIXe0KtbkXRS9IiLjnXeTiJ/tMAi04tVfIgm
RhXkyQalw7QmTaN/6TC9m+TUssaPHHPDtihxU9as2pcuMsukISlDNuVmeMrW/a0X
jbo+5kEj6o7c1w==
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:57:23 2025 by rpki-client