Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
File: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft (raw, json)
Hash identifier: BBf7f5BTgcJ6oWyRTd5QffJNb4KU2krSrqzIMi7/0/I=
Subject key identifier: 5C:B9:24:4C:F9:A1:2E:66:B9:1F:50:7B:5A:15:39:2D:C5:29:EC:68
Authority key identifier: 1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE
Certificate issuer: /CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
Certificate serial: 0198A04E8FC54FA9DAC37A395DA4D576EDDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
Manifest number: 0C1F
Signing time: Tue 12 Aug 2025 22:02:39 +0000
Manifest this update: Tue 12 Aug 2025 22:02:39 +0000
Manifest next update: Wed 13 Aug 2025 22:02:39 +0000
Files and hashes: 1: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl (hash: /LqsXSb47Y4oJXMSnRQR6c5pQ16ex1fwPlhCcXSTTys=)
2: tVk3cWsdi3hZrDEonwmclNGT-5M.roa (hash: bJG7n4hjSkt99mV93dCKPOM2IO0DVMxNl1m0F3B2sm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:8f:c5:4f:a9:da:c3:7a:39:5d:a4:d5:76:ed:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
Validity
Not Before: Aug 12 22:02:39 2025 GMT
Not After : Aug 13 22:02:39 2025 GMT
Subject: CN=5cb9244cf9a12e66b91f507b5a15392dc529ec68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:59:42:74:33:4f:c9:d7:e3:f4:5f:d2:16:
b5:f6:12:e5:08:ac:62:ea:02:b7:b4:63:3b:03:90:
a3:3c:2b:e4:18:36:75:99:c4:34:61:94:2a:43:19:
c9:aa:a4:f4:83:3f:18:b1:e3:77:33:0d:a0:2e:4d:
4d:75:7d:0f:0d:3e:29:a6:92:76:2f:cf:6e:91:fe:
0b:9a:a2:b9:5e:c1:32:3c:b3:a0:52:54:18:aa:bb:
25:3f:b0:6d:29:9b:c0:29:ea:2b:79:56:bf:02:22:
2b:00:4a:03:f4:85:ae:c5:c3:82:0e:84:23:bf:5c:
95:df:b5:1b:e1:75:29:e6:2a:e0:e9:c5:1b:34:3d:
c2:2c:7b:72:36:9a:26:47:4c:5e:f8:18:0d:6a:77:
3a:dc:9c:88:98:fb:60:32:50:0b:27:0d:0e:d4:4e:
19:03:81:e0:2c:42:26:7f:3e:17:a4:06:a8:e6:67:
63:b4:18:94:f6:bd:9f:48:62:ee:ae:29:94:89:ad:
6a:e2:cf:9f:0f:8d:27:5d:47:97:42:00:81:87:70:
bb:1a:2d:94:c8:4f:2b:88:3a:a9:d2:55:95:d5:3a:
a0:18:d2:b2:87:83:b3:f4:ef:17:3b:18:d8:cc:ec:
12:f8:b3:e4:4c:13:fa:b2:aa:2d:e2:04:ac:48:c8:
1c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B9:24:4C:F9:A1:2E:66:B9:1F:50:7B:5A:15:39:2D:C5:29:EC:68
X509v3 Authority Key Identifier:
keyid:1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cb:7c:16:ec:42:d7:86:12:59:e0:e2:76:7e:c2:48:f0:fa:
c7:fc:98:ca:59:ab:f4:4f:fa:3e:7d:61:09:94:f9:23:28:8d:
10:88:6e:50:91:59:12:12:9e:dd:05:1b:44:73:c9:57:70:5f:
50:5e:15:42:31:63:7c:de:44:81:d7:34:7c:b0:c7:90:e2:98:
21:c1:6d:cb:12:f3:47:9f:f5:d7:7f:b2:54:ff:f6:48:13:12:
77:9f:22:e7:a8:ea:83:fa:3d:b0:8c:27:9a:57:c1:79:49:6a:
5c:81:47:f7:6e:80:17:8e:a9:5c:21:df:0c:ba:d4:37:9a:28:
54:f2:b8:8f:a3:58:c1:20:7f:1d:3f:51:01:99:a4:aa:3f:35:
72:8d:10:71:81:b7:a0:52:6d:53:50:d2:49:68:27:fa:bc:a5:
a6:6d:70:4a:6d:97:45:4a:65:43:b5:71:ba:b2:4d:09:e2:da:
b9:da:41:b5:6f:22:82:f8:a6:ac:0a:e6:af:11:e9:14:92:50:
97:df:a3:82:5e:9f:2d:49:e7:a4:67:16:91:21:51:38:08:ab:
2b:19:8f:a9:6b:00:4e:ca:70:0e:e2:ee:fa:6a:f3:6b:16:b4:
b9:f1:a7:ce:0d:0b:d7:7e:de:de:9b:2b:f1:5d:ba:3f:65:09:
71:ce:42:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTo/FT6naw3o5XaTVdu3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNWRhOTEwOWY2MTRjN2M0MTU5YjMyMzFhMzg3NzcwMmE2
ZjIxY2UwHhcNMjUwODEyMjIwMjM5WhcNMjUwODEzMjIwMjM5WjAzMTEwLwYDVQQD
Eyg1Y2I5MjQ0Y2Y5YTEyZTY2YjkxZjUwN2I1YTE1MzkyZGM1MjllYzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfxZQnQzT8nX4/Rf0ha19hLlCKxi
6gK3tGM7A5CjPCvkGDZ1mcQ0YZQqQxnJqqT0gz8YseN3Mw2gLk1NdX0PDT4pppJ2
L89ukf4LmqK5XsEyPLOgUlQYqrslP7BtKZvAKeoreVa/AiIrAEoD9IWuxcOCDoQj
v1yV37Ub4XUp5irg6cUbND3CLHtyNpomR0xe+BgNanc63JyImPtgMlALJw0O1E4Z
A4HgLEImfz4XpAao5mdjtBiU9r2fSGLurimUia1q4s+fD40nXUeXQgCBh3C7Gi2U
yE8riDqp0lWV1TqgGNKyh4Oz9O8XOxjYzOwS+LPkTBP6sqot4gSsSMgc5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFy5JEz5oS5muR9Qe1oVOS3FKexoMB8GA1UdIwQY
MBaAFB1dqRCfYUx8QVmzIxo4d3AqbyHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zM2FjMGUtZTE5ZS00Yzg5LWJkZjMt
NzA2YTZmYzE2NGIxLzEvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8zM2FjMGUtZTE5ZS00Yzg5LWJkZjMtNzA2YTZmYzE2NGIx
LzEvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMt8FuxC
14YSWeDidn7CSPD6x/yYylmr9E/6Pn1hCZT5IyiNEIhuUJFZEhKe3QUbRHPJV3Bf
UF4VQjFjfN5Egdc0fLDHkOKYIcFtyxLzR5/113+yVP/2SBMSd58i56jqg/o9sIwn
mlfBeUlqXIFH926AF46pXCHfDLrUN5ooVPK4j6NYwSB/HT9RAZmkqj81co0QcYG3
oFJtU1DSSWgn+rylpm1wSm2XRUplQ7VxurJNCeLaudpBtW8igvimrArmrxHpFJJQ
l9+jgl6fLUnnpGcWkSFROAirKxmPqWsATspwDuLu+mrzaxa0ufGnzg0L137e3psr
8V26P2UJcc5C4g==
-----END CERTIFICATE-----
Generated at Wed Aug 13 07:37:08 2025 by rpki-client