Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
File: hVxdD-JZNayRq1qtpkUmAOWNJaU.mft (raw, json)
Hash identifier: 5E+VTasI/mUrEJOpCumIBLUkwmWy+6jozwjIoEeCRsM=
Subject key identifier: 2E:D1:BC:12:32:FC:AC:5B:77:57:F8:5E:D0:53:D8:9E:2F:4C:4A:54
Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Certificate serial: 0198827956E2750D64C301D8AC1B855A3834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 03:00:46 +0000
Manifest this update: Thu 07 Aug 2025 03:00:46 +0000
Manifest next update: Fri 08 Aug 2025 03:00:46 +0000
Files and hashes: 1: G0GNUJP7OR8YupD74ZDHt57bEcw.roa (hash: H4bYVhJJbIf3r2c4VUmIGnEkOT0psTbbUXpiYyljGec=)
2: Y2TFuYLjHOh19Nsn9IXR0BXi0GA.roa (hash: EGQLXveu0rNxAJdauUxs2BGnjI8o9tZmq21wSdM7BEk=)
3: hVxdD-JZNayRq1qtpkUmAOWNJaU.crl (hash: eiMfuH6IOYM0WiGg/mpqITXN4mlH0lSm3qzdlZVvqXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:79:56:e2:75:0d:64:c3:01:d8:ac:1b:85:5a:38:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Validity
Not Before: Aug 7 03:00:46 2025 GMT
Not After : Aug 8 03:00:46 2025 GMT
Subject: CN=2ed1bc1232fcac5b7757f85ed053d89e2f4c4a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:a7:eb:84:b1:b7:11:43:6e:eb:54:7a:94:
a2:86:f8:ae:ae:f4:e5:55:60:e2:56:51:de:84:c9:
81:fc:50:05:1d:74:96:3e:fc:08:54:21:44:ee:38:
0c:35:7d:23:f5:9b:25:ea:8f:22:09:71:04:bc:08:
6d:9a:6f:ee:2f:4c:fb:22:7a:fa:e5:3e:95:17:d3:
57:62:34:cc:68:59:21:09:2b:52:6a:b5:97:db:dc:
a8:5c:bf:ed:5f:ea:79:88:12:10:01:1d:e6:3f:b5:
ae:3b:88:a2:c9:78:64:28:6c:e2:9a:bb:9b:c8:89:
1a:a3:98:54:ad:3a:86:c2:c5:72:88:4e:43:fd:82:
0b:1e:d7:39:27:6a:77:9c:d2:fc:a7:fc:6d:14:b3:
da:52:be:29:c4:4f:a9:1c:6e:0b:6e:fa:52:a1:3e:
95:77:73:da:e4:58:b4:3d:61:e8:fc:c3:c3:93:73:
5f:9c:56:38:64:97:14:f0:c4:eb:17:d0:da:6d:d2:
75:d0:1e:02:9c:7a:b2:83:83:d3:8a:dc:3a:e6:cf:
db:87:2c:09:27:02:69:d7:40:13:3e:d7:39:9f:1b:
7e:3e:fa:08:23:9e:ef:33:7e:15:af:f3:25:02:8c:
03:7d:17:be:e9:c1:41:ba:b9:23:0b:85:e5:86:fa:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D1:BC:12:32:FC:AC:5B:77:57:F8:5E:D0:53:D8:9E:2F:4C:4A:54
X509v3 Authority Key Identifier:
keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3c:cb:8d:d0:99:bc:1c:18:db:1c:1c:b8:33:df:08:25:de:
0d:71:55:9c:1d:15:54:d5:e5:e3:ce:03:8d:0c:85:5f:7a:c9:
f8:0a:1a:19:97:15:d8:35:7f:fd:52:66:5a:3f:79:50:a2:4d:
0d:32:87:d5:6d:e0:0b:d8:5c:0d:27:bb:11:6d:77:d5:c1:df:
09:ed:1b:01:53:07:4e:e8:3c:93:e9:c5:7e:78:7f:0f:f7:03:
a9:74:86:ac:62:4b:19:e8:58:95:00:58:8b:6d:11:e4:ba:f9:
9c:9a:04:08:38:c6:32:af:bd:11:02:ee:70:f4:f9:b8:ad:68:
4c:a0:80:70:fd:91:10:74:bc:ee:6a:ed:80:46:05:f4:81:15:
20:b8:00:7b:0c:3c:49:df:8a:ac:0c:bf:6a:e4:1b:fb:22:0f:
b8:53:27:fc:89:91:6a:c5:6c:b6:a8:0e:b7:e1:d1:ae:10:3d:
7d:49:ab:d5:fb:f3:60:9f:99:50:cb:84:a6:90:82:96:8c:24:
1b:f8:bd:9a:65:3a:8d:57:30:96:a3:01:bc:f4:ae:08:79:cb:
bc:90:13:12:85:75:29:45:a2:2b:43:d8:f8:71:fe:f8:c2:0a:
1a:81:d7:65:69:9b:a9:4e:1e:a8:a1:9a:a1:a0:27:cf:39:10:
0c:36:d5:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCeVbidQ1kwwHYrBuFWjg0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NWM1ZDBmZTI1OTM1YWM5MWFiNWFhZGE2NDUyNjAwZTU4
ZDI1YTUwHhcNMjUwODA3MDMwMDQ2WhcNMjUwODA4MDMwMDQ2WjAzMTEwLwYDVQQD
EygyZWQxYmMxMjMyZmNhYzViNzc1N2Y4NWVkMDUzZDg5ZTJmNGM0YTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT6n64SxtxFDbutUepSihviurvTl
VWDiVlHehMmB/FAFHXSWPvwIVCFE7jgMNX0j9Zsl6o8iCXEEvAhtmm/uL0z7Inr6
5T6VF9NXYjTMaFkhCStSarWX29yoXL/tX+p5iBIQAR3mP7WuO4iiyXhkKGzimrub
yIkao5hUrTqGwsVyiE5D/YILHtc5J2p3nNL8p/xtFLPaUr4pxE+pHG4LbvpSoT6V
d3Pa5Fi0PWHo/MPDk3NfnFY4ZJcU8MTrF9DabdJ10B4CnHqyg4PTitw65s/bhywJ
JwJp10ATPtc5nxt+PvoII57vM34Vr/MlAowDfRe+6cFBurkjC4XlhvoAmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7RvBIy/Kxbd1f4XtBT2J4vTEpUMB8GA1UdIwQY
MBaAFIVcXQ/iWTWskataraZFJgDljSWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMmIwNTEtM2EyMy00ODM1LWIzMGQt
MmFmNDc5MWQ5NmViLzEvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMmIwNTEtM2EyMy00ODM1LWIzMGQtMmFmNDc5MWQ5NmVi
LzEvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTzLjdCZ
vBwY2xwcuDPfCCXeDXFVnB0VVNXl484DjQyFX3rJ+AoaGZcV2DV//VJmWj95UKJN
DTKH1W3gC9hcDSe7EW131cHfCe0bAVMHTug8k+nFfnh/D/cDqXSGrGJLGehYlQBY
i20R5Lr5nJoECDjGMq+9EQLucPT5uK1oTKCAcP2REHS87mrtgEYF9IEVILgAeww8
Sd+KrAy/auQb+yIPuFMn/ImRasVstqgOt+HRrhA9fUmr1fvzYJ+ZUMuEppCClowk
G/i9mmU6jVcwlqMBvPSuCHnLvJATEoV1KUWiK0PY+HH++MIKGoHXZWmbqU4eqKGa
oaAnzzkQDDbVnw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:15:22 2025 by rpki-client