Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
File: hGOGJiDUZ8inn49E7zW7YK-CP50.mft (raw, json)
Hash identifier: 80SvJUF06q7kFK/Z8BdhE9DOD4WI+fJ8bv+8iecKEpk=
Subject key identifier: 37:A4:49:33:6A:AF:6B:6C:BC:AA:4E:20:CD:AF:33:05:94:47:15:60
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 019873071F835392EB3823E23E5965766831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
Manifest number: 0BAF
Signing time: Mon 04 Aug 2025 03:01:43 +0000
Manifest this update: Mon 04 Aug 2025 03:01:43 +0000
Manifest next update: Tue 05 Aug 2025 03:01:43 +0000
Files and hashes: 1: W_w_aPZvJbU42Kz9V0NRmPtHDis.roa (hash: ewpJRuxuw72pVqijrdCqZs1SsB9C/J+Oxbfa2mr8J8I=)
2: hGOGJiDUZ8inn49E7zW7YK-CP50.crl (hash: mhglb/H8TCtpe28TYq+PTtGYb0yiFWdqPRAdDlIwzJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:07:1f:83:53:92:eb:38:23:e2:3e:59:65:76:68:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Aug 4 03:01:43 2025 GMT
Not After : Aug 5 03:01:43 2025 GMT
Subject: CN=37a449336aaf6b6cbcaa4e20cdaf330594471560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:5c:6d:92:2f:4f:b2:5b:68:46:2d:9a:2f:
df:25:9e:4c:10:38:51:b3:fd:97:c5:87:d1:35:7a:
df:93:82:79:6c:ce:89:1f:09:37:a8:37:22:e6:3c:
01:74:c3:5e:3c:5a:b1:2c:42:2f:37:8e:b1:dd:d4:
71:0c:02:d4:ed:7d:07:27:ba:9d:24:ce:61:14:1d:
db:a4:2b:d0:71:e3:42:31:31:33:4e:4d:22:21:c1:
e2:b2:7a:ee:7b:77:77:94:4b:18:83:f0:30:34:b3:
1b:24:3b:6b:f9:ac:31:16:ae:b4:4d:69:d7:0f:53:
8e:de:ce:8f:c1:54:0c:39:5d:bf:d9:3b:7c:7d:4b:
0a:ce:71:8d:26:c0:4a:46:22:73:da:bf:76:6f:8b:
cb:54:c8:d7:a9:2f:7c:41:75:3f:c7:f0:25:0d:22:
47:c1:e7:5c:15:87:d8:7c:33:9c:80:79:74:90:ed:
82:39:33:bb:18:cb:d7:b6:c5:de:5a:e6:66:6e:8e:
67:a8:90:a0:a6:fc:83:cc:2c:29:f1:9c:32:e1:19:
84:af:76:70:c2:72:a4:e3:4d:77:a6:76:74:f0:83:
6e:88:30:72:3a:d0:0c:c6:9f:81:73:b0:d4:9c:8b:
cc:22:43:8d:d1:ba:bd:ce:0e:df:dc:86:d2:fc:2e:
23:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A4:49:33:6A:AF:6B:6C:BC:AA:4E:20:CD:AF:33:05:94:47:15:60
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d3:57:6c:7e:4c:28:5d:61:d0:32:da:32:1e:59:49:93:7d:
41:d3:03:85:09:68:6a:91:de:04:38:49:56:e6:f6:11:8f:cc:
21:66:e0:46:42:12:a0:69:8f:eb:45:18:27:fa:25:57:7b:89:
b9:b2:11:bf:e9:18:dc:0b:98:71:97:df:24:be:4a:bf:5b:57:
d6:c3:d2:65:fe:00:51:44:c0:e1:d5:f1:a4:38:db:01:5e:0b:
21:56:b8:0a:76:75:09:f9:9b:de:5c:f6:0f:c2:d4:4f:66:ec:
c8:8a:93:5a:29:b8:47:de:14:14:bc:8c:ef:ab:7d:ab:42:ff:
10:3b:5b:82:15:0e:bd:29:67:48:36:20:d5:7f:52:68:b6:1d:
dd:ab:08:63:63:8a:7d:7c:c1:0c:97:d6:f1:6f:23:a0:9f:e8:
34:71:41:81:26:64:3c:44:ec:fd:6a:f3:ce:06:f8:34:8a:03:
40:7e:f5:7a:34:48:b2:f2:62:12:36:b8:74:ec:55:7c:a4:b7:
c4:53:62:f4:bd:86:72:76:30:85:21:5b:5d:e8:9f:07:d0:bf:
d1:b4:d6:a2:d5:9d:1c:d6:31:70:3e:16:e9:0e:3f:41:a4:a8:
41:40:7e:c9:c6:ed:d4:49:82:9f:90:3f:3c:c0:c6:d4:e4:e8:
7d:76:1d:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBx+DU5LrOCPiPllldmgxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NjM4NjI2MjBkNDY3YzhhNzlmOGY0NGVmMzViYjYwYWY4
MjNmOWQwHhcNMjUwODA0MDMwMTQzWhcNMjUwODA1MDMwMTQzWjAzMTEwLwYDVQQD
EygzN2E0NDkzMzZhYWY2YjZjYmNhYTRlMjBjZGFmMzMwNTk0NDcxNTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh9cbZIvT7JbaEYtmi/fJZ5MEDhR
s/2XxYfRNXrfk4J5bM6JHwk3qDci5jwBdMNePFqxLEIvN46x3dRxDALU7X0HJ7qd
JM5hFB3bpCvQceNCMTEzTk0iIcHisnrue3d3lEsYg/AwNLMbJDtr+awxFq60TWnX
D1OO3s6PwVQMOV2/2Tt8fUsKznGNJsBKRiJz2r92b4vLVMjXqS98QXU/x/AlDSJH
wedcFYfYfDOcgHl0kO2COTO7GMvXtsXeWuZmbo5nqJCgpvyDzCwp8Zwy4RmEr3Zw
wnKk4013pnZ08INuiDByOtAMxp+Bc7DUnIvMIkON0bq9zg7f3IbS/C4j/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDekSTNqr2tsvKpOIM2vMwWURxVgMB8GA1UdIwQY
MBaAFIRjhiYg1GfIp5+PRO81u2Cvgj+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdPR0ppRFVaOGlubjQ5RTd6VzdZSy1DUDUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iMzQxMWItNDg2Mi00ODcxLWI5YTgt
ZmU3YWQ3ZmM0Nzg5LzEvaEdPR0ppRFVaOGlubjQ5RTd6VzdZSy1DUDUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9iMzQxMWItNDg2Mi00ODcxLWI5YTgtZmU3YWQ3ZmM0Nzg5
LzEvaEdPR0ppRFVaOGlubjQ5RTd6VzdZSy1DUDUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtNXbH5M
KF1h0DLaMh5ZSZN9QdMDhQloapHeBDhJVub2EY/MIWbgRkISoGmP60UYJ/olV3uJ
ubIRv+kY3AuYcZffJL5Kv1tX1sPSZf4AUUTA4dXxpDjbAV4LIVa4CnZ1Cfmb3lz2
D8LUT2bsyIqTWim4R94UFLyM76t9q0L/EDtbghUOvSlnSDYg1X9SaLYd3asIY2OK
fXzBDJfW8W8joJ/oNHFBgSZkPETs/Wrzzgb4NIoDQH71ejRIsvJiEja4dOxVfKS3
xFNi9L2GcnYwhSFbXeifB9C/0bTWotWdHNYxcD4W6Q4/QaSoQUB+ycbt1EmCn5A/
PMDG1OTofXYdgw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:25 2025 by rpki-client