Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
File: Hrq0DWCBM83fdsO1pvgV34H7x90.mft (raw, json)
Hash identifier: a8G77tlKAt4ydt3gZn7zNlHy9YDOFUhp+iF3SDT/gxQ=
Subject key identifier: 11:51:4C:14:21:8B:68:20:92:4E:B8:13:E4:17:DD:14:A7:05:50:DA
Authority key identifier: 1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
Certificate issuer: /CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Certificate serial: 01988F90AB38D5755B721FA6A31C2D31CB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
Manifest number: 0170
Signing time: Sat 09 Aug 2025 16:01:19 +0000
Manifest this update: Sat 09 Aug 2025 16:01:19 +0000
Manifest next update: Sun 10 Aug 2025 16:01:19 +0000
Files and hashes: 1: Hrq0DWCBM83fdsO1pvgV34H7x90.crl (hash: h0Z69laRkY0FxfxWwuq1i1bo6Tq5MM8jWE4lD+UxbOA=)
2: dOirMHERf2S7XaVhDBj8pRwQyLU.roa (hash: RUHnPEXdDgz2x6FeuZ8yiEPV6rqAxw/OAxkwBlLK73U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:ab:38:d5:75:5b:72:1f:a6:a3:1c:2d:31:cb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Validity
Not Before: Aug 9 16:01:19 2025 GMT
Not After : Aug 10 16:01:19 2025 GMT
Subject: CN=11514c14218b6820924eb813e417dd14a70550da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:82:50:b9:1c:44:ea:9e:50:6c:ff:46:95:
7c:db:5f:13:16:3b:58:9a:71:5f:a8:77:d2:07:25:
78:e5:24:1e:d8:5a:ac:c0:c5:21:df:36:c8:dd:24:
55:21:f5:fe:16:80:73:40:7e:47:1a:23:42:da:6e:
0e:34:b1:1a:1d:15:cc:75:f1:4a:73:92:99:93:f8:
f1:c6:33:a6:11:a6:1d:21:31:bc:9f:67:c3:82:73:
21:8d:05:f9:a5:a8:4e:09:87:59:f6:50:f7:22:33:
c3:57:50:d7:f1:bf:87:6e:a5:6e:a2:77:95:f8:3b:
5c:ec:57:85:72:01:40:63:7d:7a:ad:39:d7:09:0d:
c4:2e:2b:9e:24:01:c2:ff:89:d6:10:85:e8:35:ea:
e0:d8:c6:cc:da:73:96:66:0c:08:3f:27:5e:98:da:
4f:20:9d:96:c9:05:c5:95:11:b6:86:3c:53:f0:39:
08:dd:9b:29:f7:7e:ee:e1:1d:65:f6:86:35:b1:a4:
43:26:7e:52:76:f3:30:2b:c8:25:3e:5e:21:92:1b:
d5:94:0d:0b:1b:16:c5:ac:d3:99:a4:8a:a3:d2:cd:
c5:37:8d:2c:5b:f0:92:22:86:11:70:cb:7c:7d:72:
21:eb:4e:8e:9d:e3:df:27:1f:8d:45:c6:38:82:b4:
ab:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:51:4C:14:21:8B:68:20:92:4E:B8:13:E4:17:DD:14:A7:05:50:DA
X509v3 Authority Key Identifier:
keyid:1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:31:8b:e5:3d:bb:83:6e:e8:a0:91:35:64:6e:b8:ef:55:37:
06:99:52:74:0e:df:5e:02:94:8a:eb:74:6f:b7:af:49:85:fc:
3e:90:67:40:13:51:af:48:4e:77:27:18:54:90:d1:c7:d7:49:
1b:1e:17:80:bd:e1:fe:0f:36:e6:0a:ab:99:8a:44:f0:31:17:
a5:94:d3:61:14:69:f9:fb:29:53:f0:03:ff:71:55:34:c6:a7:
5d:a2:92:c8:93:a8:9d:1f:2a:b4:88:86:d4:53:eb:19:5a:16:
2e:82:07:6d:8f:e5:6a:c6:7e:be:25:1b:7b:34:a1:5e:4d:a4:
da:6e:24:bc:dd:13:a9:dc:32:9b:2a:86:a7:cb:2d:15:a3:6e:
56:08:ea:e9:62:4e:a3:f3:09:9a:ce:57:c4:41:fd:1e:3a:84:
5c:e9:43:22:a3:b3:b0:2e:92:5b:20:0a:9d:8f:b7:71:1d:9d:
33:10:ff:5d:79:3d:0e:83:11:92:d5:ba:4b:1c:39:c5:4b:a8:
4b:e6:17:16:6c:cb:5d:70:20:2f:c7:5e:4b:a2:14:a4:90:90:
4d:b4:b0:24:5c:0b:62:4a:30:7a:7f:c8:ab:68:07:b0:3c:ff:
71:4e:ed:12:3a:c9:cc:0c:51:6e:fb:72:af:04:fc:71:41:57:
82:89:93:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPkKs41XVbch+moxwtMct3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYmFiNDBkNjA4MTMzY2RkZjc2YzNiNWE2ZjgxNWRmODFm
YmM3ZGQwHhcNMjUwODA5MTYwMTE5WhcNMjUwODEwMTYwMTE5WjAzMTEwLwYDVQQD
EygxMTUxNGMxNDIxOGI2ODIwOTI0ZWI4MTNlNDE3ZGQxNGE3MDU1MGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVaCULkcROqeUGz/RpV8218TFjtY
mnFfqHfSByV45SQe2FqswMUh3zbI3SRVIfX+FoBzQH5HGiNC2m4ONLEaHRXMdfFK
c5KZk/jxxjOmEaYdITG8n2fDgnMhjQX5pahOCYdZ9lD3IjPDV1DX8b+HbqVuoneV
+Dtc7FeFcgFAY316rTnXCQ3ELiueJAHC/4nWEIXoNerg2MbM2nOWZgwIPydemNpP
IJ2WyQXFlRG2hjxT8DkI3Zsp937u4R1l9oY1saRDJn5SdvMwK8glPl4hkhvVlA0L
GxbFrNOZpIqj0s3FN40sW/CSIoYRcMt8fXIh606OnePfJx+NRcY4grSrpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFRTBQhi2ggkk64E+QX3RSnBVDaMB8GA1UdIwQY
MBaAFB66tA1ggTPN33bDtab4Fd+B+8fdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHJxMERXQ0JNODNmZHNPMXB2Z1YzNEg3eDkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yYjI2YWYtZTc1NC00MDgwLTllYzkt
NTlmMGYxMGIxZDI5LzEvSHJxMERXQ0JNODNmZHNPMXB2Z1YzNEg3eDkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8yYjI2YWYtZTc1NC00MDgwLTllYzktNTlmMGYxMGIxZDI5
LzEvSHJxMERXQ0JNODNmZHNPMXB2Z1YzNEg3eDkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjGL5T27
g27ooJE1ZG6471U3BplSdA7fXgKUiut0b7evSYX8PpBnQBNRr0hOdycYVJDRx9dJ
Gx4XgL3h/g825gqrmYpE8DEXpZTTYRRp+fspU/AD/3FVNManXaKSyJOonR8qtIiG
1FPrGVoWLoIHbY/lasZ+viUbezShXk2k2m4kvN0TqdwymyqGp8stFaNuVgjq6WJO
o/MJms5XxEH9HjqEXOlDIqOzsC6SWyAKnY+3cR2dMxD/XXk9DoMRktW6Sxw5xUuo
S+YXFmzLXXAgL8deS6IUpJCQTbSwJFwLYkowen/Iq2gHsDz/cU7tEjrJzAxRbvty
rwT8cUFXgomTUA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:49:29 2025 by rpki-client