
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier: xGszsDTXIh/P74G0cQJGfaBj7OwS0b3SOe+DNljxedI=
Subject key identifier: 0C:D1:4C:CA:F5:46:70:9F:33:33:4D:69:F1:7D:44:D7:62:9B:BA:65
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial: 0198879F7D4407001F9001F0334ADE0B62DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number: 14B8
Signing time: Fri 08 Aug 2025 03:00:33 +0000
Manifest this update: Fri 08 Aug 2025 03:00:33 +0000
Manifest next update: Sat 09 Aug 2025 03:00:33 +0000
Files and hashes: 1: A3wyPhRamUsWB9_qHryX-EDk1e0.roa (hash: QXg6wSruYhyDuN8fgBSyc5BU3QNmFqD0/uvIAs24UoQ=)
2: UuAIaR0v0SUcpnHbi81lgTGwt68.roa (hash: S7roZyfDvSD0rs1D/ICIUXI/40e6tijQPmSOTtOsoBs=)
3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: cKsyXEKKp9U6wtoBLMLfDXLh/xSN6s8f+/+c3Pjyuu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:9f:7d:44:07:00:1f:90:01:f0:33:4a:de:0b:62:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Validity
Not Before: Aug 8 03:00:33 2025 GMT
Not After : Aug 9 03:00:33 2025 GMT
Subject: CN=0cd14ccaf546709f33334d69f17d44d7629bba65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:fe:a6:a5:84:6c:ce:af:f9:24:c2:fb:bc:
61:d9:56:bf:48:20:a2:4f:31:23:1f:75:be:2c:45:
d4:ec:f3:53:19:19:45:ae:72:c4:c6:e3:d0:c1:26:
22:da:7f:e3:bc:02:d3:d3:a4:e8:f8:61:9c:ab:e0:
6d:82:92:52:e5:a4:a2:de:63:5b:90:74:70:5f:8e:
40:91:4f:d0:ec:4b:89:99:31:4c:0c:9c:a6:2b:cd:
7c:bb:af:6a:0a:ed:20:29:99:f1:3c:52:2e:7a:e0:
d8:d2:9c:c2:db:f2:8d:d9:b6:f3:d3:e9:c4:8c:75:
46:41:33:5d:a3:8a:1f:30:52:ad:5b:d0:66:7e:34:
a6:93:2a:cb:ef:71:20:17:bb:45:14:0a:b2:ef:9c:
eb:73:72:52:55:e7:d2:42:0b:ab:af:50:d8:96:d6:
d6:b8:55:01:5a:2e:e2:87:d5:7a:17:95:a8:4a:91:
a8:c3:c1:fb:1c:82:32:3c:4f:46:82:30:bf:11:bb:
c5:e3:e0:5e:9f:be:0f:77:d7:85:eb:04:b7:7a:05:
72:85:70:24:58:a6:91:1a:7d:5e:28:db:09:4d:52:
c9:96:75:ff:ea:4d:23:20:2a:e1:7f:cc:16:66:f6:
74:5a:89:f8:e9:99:13:cc:8a:ce:98:b3:3c:8a:81:
f7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D1:4C:CA:F5:46:70:9F:33:33:4D:69:F1:7D:44:D7:62:9B:BA:65
X509v3 Authority Key Identifier:
keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:36:61:c5:f0:67:aa:25:b9:99:19:ea:28:ee:4e:71:83:3c:
0f:d4:dd:ec:95:f1:c4:c8:40:a2:95:d4:7a:77:2a:0b:d4:c1:
b4:99:56:ed:1a:95:cb:a9:86:c2:ef:c4:da:39:c4:bb:ff:c4:
05:ca:9d:bd:cc:8c:97:0d:49:0a:ea:04:26:67:d0:8a:39:77:
03:32:63:ac:0e:48:be:26:db:9d:5b:8f:6c:45:43:58:b6:7f:
60:9f:51:57:17:59:65:d9:c2:74:55:6b:f9:a5:2b:9e:fd:7b:
3a:5e:03:57:e4:6f:3e:68:61:7b:eb:7f:5e:86:02:e8:df:f0:
21:01:4a:ad:60:6d:16:b2:3d:37:79:54:ee:db:e6:53:51:8e:
bf:0a:92:ae:b5:ef:5f:ac:04:b0:1f:be:6d:29:f0:b3:83:1a:
95:0b:8a:b9:6f:2a:72:18:84:f3:2f:72:a4:31:a4:82:9f:6f:
44:f4:56:ce:b8:03:3d:f5:16:7d:18:c7:a9:a3:7a:03:f4:bc:
04:8c:5d:0d:f8:20:00:d7:69:2c:2a:6c:f8:e3:b0:63:60:9e:
9d:9b:10:13:e5:4c:3c:60:40:c6:dc:ea:a0:e1:e5:b1:85:78:
f5:95:dd:85:f6:16:04:9f:f9:d4:02:c3:14:3f:f8:55:96:31:
69:43:57:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiHn31EBwAfkAHwM0reC2LdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MzcwY2M1ZDI2MGYzZTJhZWZmNWRkOGY4ZjRhNDE1YTIz
NDVhODEwHhcNMjUwODA4MDMwMDMzWhcNMjUwODA5MDMwMDMzWjAzMTEwLwYDVQQD
EygwY2QxNGNjYWY1NDY3MDlmMzMzMzRkNjlmMTdkNDRkNzYyOWJiYTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CH+pqWEbM6v+STC+7xh2Va/SCCi
TzEjH3W+LEXU7PNTGRlFrnLExuPQwSYi2n/jvALT06To+GGcq+BtgpJS5aSi3mNb
kHRwX45AkU/Q7EuJmTFMDJymK818u69qCu0gKZnxPFIueuDY0pzC2/KN2bbz0+nE
jHVGQTNdo4ofMFKtW9BmfjSmkyrL73EgF7tFFAqy75zrc3JSVefSQgurr1DYltbW
uFUBWi7ih9V6F5WoSpGow8H7HIIyPE9GgjC/EbvF4+Ben74Pd9eF6wS3egVyhXAk
WKaRGn1eKNsJTVLJlnX/6k0jICrhf8wWZvZ0Won46ZkTzIrOmLM8ioH3nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzRTMr1RnCfMzNNafF9RNdim7plMB8GA1UdIwQY
MBaAFIU3DMXSYPPirv9d2Pj0pBWiNFqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZjcyNDYtY2U4Zi00NGY4LWE4MzEt
YWU2MGJlYTA2YTljLzEvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80ZjcyNDYtY2U4Zi00NGY4LWE4MzEtYWU2MGJlYTA2YTlj
LzEvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjZhxfBn
qiW5mRnqKO5OcYM8D9Td7JXxxMhAopXUencqC9TBtJlW7RqVy6mGwu/E2jnEu//E
BcqdvcyMlw1JCuoEJmfQijl3AzJjrA5IvibbnVuPbEVDWLZ/YJ9RVxdZZdnCdFVr
+aUrnv17Ol4DV+RvPmhhe+t/XoYC6N/wIQFKrWBtFrI9N3lU7tvmU1GOvwqSrrXv
X6wEsB++bSnws4MalQuKuW8qchiE8y9ypDGkgp9vRPRWzrgDPfUWfRjHqaN6A/S8
BIxdDfggANdpLCps+OOwY2CenZsQE+VMPGBAxtzqoOHlsYV49ZXdhfYWBJ/51ALD
FD/4VZYxaUNXfQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:02:11 2025 by rpki-client