Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
File: hiuiH8_MNMnZtafGCBWF4KDucK4.mft (raw, json)
Hash identifier: oteIhCY+2IZ85xDkQbUn7unJAhHj1n7GH5eBfzZdF9s=
Subject key identifier: 36:53:C7:99:EA:2D:F0:A2:7A:AD:2D:94:68:46:F2:AA:FB:D0:70:99
Authority key identifier: 86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
Certificate issuer: /CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Certificate serial: 019897B7E04B12A4CFA29745D42FBB1F25D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
Manifest number: 0723
Signing time: Mon 11 Aug 2025 06:01:06 +0000
Manifest this update: Mon 11 Aug 2025 06:01:06 +0000
Manifest next update: Tue 12 Aug 2025 06:01:06 +0000
Files and hashes: 1: hiuiH8_MNMnZtafGCBWF4KDucK4.crl (hash: TK6b+SQv2nkmE0MS9RrPusD8cOE7VM+jg/DmCnX85ds=)
2: iVxulShReTYBVaVMHOSAPgJMX4w.roa (hash: K1U4ekJDUmOT/6sNVV1rdRQsFS3D9+kf/By0ijYc4Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:e0:4b:12:a4:cf:a2:97:45:d4:2f:bb:1f:25:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Validity
Not Before: Aug 11 06:01:06 2025 GMT
Not After : Aug 12 06:01:06 2025 GMT
Subject: CN=3653c799ea2df0a27aad2d946846f2aafbd07099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0a:73:f8:c2:b7:4f:3a:ca:d5:80:11:f0:b0:
e9:51:78:c7:f0:61:b3:00:9d:94:95:eb:8c:4d:23:
3a:b7:37:1d:ef:68:b0:db:5b:b1:7c:43:60:2a:68:
80:46:6e:24:45:90:54:5a:9f:d4:63:20:f8:5f:08:
17:72:db:39:74:2d:bf:74:f2:df:1f:78:91:5b:59:
f9:76:fa:86:26:02:d1:f3:eb:90:4b:3c:53:11:2c:
dd:95:78:a4:8f:e6:60:3a:a5:1a:6d:39:f7:39:05:
88:33:c5:9f:d3:20:3c:f2:99:6d:3c:ac:7b:a9:34:
2e:7f:9b:24:32:45:f5:99:cd:dd:af:19:5d:60:f2:
dd:21:29:31:0b:aa:de:87:9a:a0:76:06:57:7b:22:
be:d6:3d:5d:20:f8:93:83:c2:41:5e:13:d9:c5:4e:
6a:39:f8:30:6d:83:8b:ea:75:a9:49:84:67:85:fa:
03:66:c0:78:dd:10:0c:ff:db:fa:52:da:65:4e:bc:
63:ab:60:b8:5d:34:de:e6:ab:50:df:f5:61:23:57:
5e:2e:77:56:77:fb:b6:50:49:21:b4:fb:7c:26:ff:
8b:5d:70:e1:89:61:0c:ac:c4:32:15:6e:0a:6c:bc:
51:26:e3:d0:91:15:5f:e7:69:4c:43:f2:75:8d:53:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:53:C7:99:EA:2D:F0:A2:7A:AD:2D:94:68:46:F2:AA:FB:D0:70:99
X509v3 Authority Key Identifier:
keyid:86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:91:15:4c:1f:a1:45:eb:02:bb:dc:3c:b4:e4:b2:7c:30:f3:
b0:0b:9c:92:ea:36:2b:1e:f2:84:8f:48:72:e4:77:94:e7:da:
9d:96:71:e4:3d:94:ba:b6:cd:58:61:80:84:58:39:8a:1d:81:
f1:5e:d3:e9:e2:1f:38:94:93:e5:a1:4b:b5:02:07:82:88:3a:
a3:cb:2a:e2:2c:61:52:c5:c9:40:83:67:51:b0:e1:6e:d5:15:
9a:8c:5a:d4:5a:11:ad:56:7e:44:8f:75:ea:24:a0:85:90:b6:
a9:b0:79:dc:ed:70:3b:37:dd:10:48:6a:80:1d:b9:d6:04:56:
da:fc:44:c8:1a:e5:e7:40:ea:94:33:4a:dc:d8:db:e1:7f:9d:
79:3c:17:9b:2d:40:4d:eb:bc:94:5a:b0:6d:3d:90:03:5d:d6:
e9:9c:ae:60:c3:e0:f8:b5:c2:b3:48:a9:11:24:bd:8c:be:52:
81:b6:31:81:1a:be:45:d1:a5:89:da:e1:71:e4:05:75:bb:c2:
76:99:6e:b6:9f:3f:ac:bb:bf:f8:08:ab:28:40:48:5f:a8:9d:
32:7a:1d:bd:42:c1:92:78:4c:8f:8e:27:63:fc:72:27:8a:15:
e7:8b:04:ae:7e:27:3b:96:f7:e2:5b:28:f8:cd:9d:a8:1e:15:
b0:63:2c:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXt+BLEqTPopdF1C+7HyXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MmJhMjFmY2ZjYzM0YzlkOWI1YTdjNjA4MTU4NWUwYTBl
ZTcwYWUwHhcNMjUwODExMDYwMTA2WhcNMjUwODEyMDYwMTA2WjAzMTEwLwYDVQQD
EygzNjUzYzc5OWVhMmRmMGEyN2FhZDJkOTQ2ODQ2ZjJhYWZiZDA3MDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wpz+MK3TzrK1YAR8LDpUXjH8GGz
AJ2UleuMTSM6tzcd72iw21uxfENgKmiARm4kRZBUWp/UYyD4XwgXcts5dC2/dPLf
H3iRW1n5dvqGJgLR8+uQSzxTESzdlXikj+ZgOqUabTn3OQWIM8Wf0yA88pltPKx7
qTQuf5skMkX1mc3drxldYPLdISkxC6reh5qgdgZXeyK+1j1dIPiTg8JBXhPZxU5q
OfgwbYOL6nWpSYRnhfoDZsB43RAM/9v6UtplTrxjq2C4XTTe5qtQ3/VhI1deLndW
d/u2UEkhtPt8Jv+LXXDhiWEMrMQyFW4KbLxRJuPQkRVf52lMQ/J1jVMfeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZTx5nqLfCieq0tlGhG8qr70HCZMB8GA1UdIwQY
MBaAFIYroh/PzDTJ2bWnxggVheCg7nCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGl1aUg4X01OTW5adGFmR0NCV0Y0S0R1Y0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80NzVlNmYtODlhNS00M2U4LTgzYjkt
NDk1YTk1OWIxNmU3LzEvaGl1aUg4X01OTW5adGFmR0NCV0Y0S0R1Y0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni80NzVlNmYtODlhNS00M2U4LTgzYjktNDk1YTk1OWIxNmU3
LzEvaGl1aUg4X01OTW5adGFmR0NCV0Y0S0R1Y0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZEVTB+h
ResCu9w8tOSyfDDzsAuckuo2Kx7yhI9IcuR3lOfanZZx5D2UurbNWGGAhFg5ih2B
8V7T6eIfOJST5aFLtQIHgog6o8sq4ixhUsXJQINnUbDhbtUVmoxa1FoRrVZ+RI91
6iSghZC2qbB53O1wOzfdEEhqgB251gRW2vxEyBrl50DqlDNK3Njb4X+deTwXmy1A
Teu8lFqwbT2QA13W6ZyuYMPg+LXCs0ipESS9jL5SgbYxgRq+RdGlidrhceQFdbvC
dplutp8/rLu/+AirKEBIX6idMnodvULBknhMj44nY/xyJ4oV54sErn4nO5b34lso
+M2dqB4VsGMsDg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:53 2025 by rpki-client