
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
File: hpwOc330guiapnJs3YqZWKp0ER4.mft (raw, json)
Hash identifier: Vq7cpwD3M1EupZri9HSceB5Tj7bSoNXNxSrDj8/b1qU=
Subject key identifier: 72:AD:48:01:D3:02:C2:5B:B0:97:D0:81:25:3F:6F:DE:01:C2:8A:D2
Authority key identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
Certificate issuer: /CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Certificate serial: 01987DC0C2896CCB8747E3F93497673B71BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
Manifest number: 7F
Signing time: Wed 06 Aug 2025 05:00:41 +0000
Manifest this update: Wed 06 Aug 2025 05:00:41 +0000
Manifest next update: Thu 07 Aug 2025 05:00:41 +0000
Files and hashes: 1: f9MGnlddFQ2IMf-Uoo2fTYxJ_co.roa (hash: kPIpbLqEj4dHSmVPx7WOIcV4CWQtCce8UvwQXn1AUT0=)
2: hpwOc330guiapnJs3YqZWKp0ER4.crl (hash: 2u0Jp6/a25vUaIBIJ7HIXus85t355y1zZ8Pl1YP89TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:c2:89:6c:cb:87:47:e3:f9:34:97:67:3b:71:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Validity
Not Before: Aug 6 05:00:41 2025 GMT
Not After : Aug 7 05:00:41 2025 GMT
Subject: CN=72ad4801d302c25bb097d081253f6fde01c28ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:a9:2a:2d:35:35:fd:63:8b:e8:86:4c:2f:
5b:5d:19:fa:4a:0c:e1:9f:86:64:7d:3e:2a:5c:78:
54:28:5d:1a:52:19:35:f0:5a:97:20:62:2c:fd:4d:
85:12:96:67:b7:24:55:29:5a:75:39:eb:4a:9d:16:
cf:63:d7:f2:c9:67:5e:70:77:e2:97:0f:d5:ae:d9:
6b:e7:73:b3:4b:a0:ee:39:2c:46:4a:cf:35:ed:2b:
0b:73:6a:69:48:72:57:e8:ab:99:0e:9e:23:c9:76:
fc:22:b3:fc:59:3b:14:b7:fd:c0:50:a0:f2:e7:51:
30:44:bd:db:71:c7:45:b9:73:13:29:55:19:d8:fa:
ab:b4:86:e9:09:21:69:d6:78:c8:ed:75:70:a0:0a:
d3:1e:78:87:31:64:c2:95:16:af:ef:73:85:96:72:
f6:b4:9c:a1:47:54:b0:96:83:7f:a1:1d:47:5b:84:
99:f6:7d:9f:53:60:25:7d:fc:30:f8:5b:51:90:0b:
4d:f6:82:74:09:6c:a9:d5:ab:33:d9:9a:93:85:a3:
d7:a8:a6:4e:e4:18:c7:2e:0f:5b:cc:9d:70:d8:73:
18:0d:9b:1b:50:82:2a:ac:7a:26:cc:c8:61:04:5a:
14:86:a7:98:07:72:f8:86:6e:01:9d:ed:2c:b2:6d:
c2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AD:48:01:D3:02:C2:5B:B0:97:D0:81:25:3F:6F:DE:01:C2:8A:D2
X509v3 Authority Key Identifier:
keyid:86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4a:fe:a1:1f:28:08:96:2a:a0:be:b5:87:6a:73:b4:4e:83:
8a:e9:39:06:fe:e3:19:ca:f8:df:ef:8b:7b:72:dc:9a:db:aa:
cb:ed:d4:56:c1:d7:29:70:2b:ba:ea:69:70:90:4a:fa:5e:33:
18:f9:b3:66:1c:d3:79:ae:ad:66:b2:5a:96:b2:b2:45:85:76:
6e:87:98:03:0d:3d:c7:61:12:a0:97:18:99:92:7e:5b:d3:cd:
9d:aa:0e:24:8a:1a:1e:ce:52:1a:4f:c4:c8:c0:69:57:c7:7c:
92:40:33:43:05:b3:ef:af:22:c9:4a:67:d8:b3:0f:c7:d9:dc:
7d:8c:52:c7:40:de:03:9e:ac:08:9c:0d:13:31:25:f4:5f:73:
fd:be:4e:64:2d:7b:40:79:64:1a:42:44:75:41:7b:ec:cd:28:
79:18:8e:54:b5:6b:95:17:e1:7a:61:50:16:d2:da:0b:f5:b5:
c5:ad:f4:42:23:6d:55:5b:23:07:08:bc:01:7a:f7:6f:d1:a4:
41:9b:e0:71:9c:0a:fb:4e:4b:c6:dd:07:16:98:7d:a8:98:ad:
81:0c:08:67:9d:c5:34:ed:94:ca:3e:8f:b7:b5:ea:6f:33:7f:
e5:24:5b:76:e4:c5:ed:81:2d:3a:b5:d8:41:75:e1:84:c0:05:
f2:9d:f2:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9wMKJbMuHR+P5NJdnO3G6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OWMwZTczN2RmNDgyZTg5YWE2NzI2Y2RkOGE5OTU4YWE3
NDExMWUwHhcNMjUwODA2MDUwMDQxWhcNMjUwODA3MDUwMDQxWjAzMTEwLwYDVQQD
Eyg3MmFkNDgwMWQzMDJjMjViYjA5N2QwODEyNTNmNmZkZTAxYzI4YWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1WpKi01Nf1ji+iGTC9bXRn6Sgzh
n4ZkfT4qXHhUKF0aUhk18FqXIGIs/U2FEpZntyRVKVp1OetKnRbPY9fyyWdecHfi
lw/Vrtlr53OzS6DuOSxGSs817SsLc2ppSHJX6KuZDp4jyXb8IrP8WTsUt/3AUKDy
51EwRL3bccdFuXMTKVUZ2PqrtIbpCSFp1njI7XVwoArTHniHMWTClRav73OFlnL2
tJyhR1SwloN/oR1HW4SZ9n2fU2Alffww+FtRkAtN9oJ0CWyp1asz2ZqThaPXqKZO
5BjHLg9bzJ1w2HMYDZsbUIIqrHomzMhhBFoUhqeYB3L4hm4Bne0ssm3CBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKtSAHTAsJbsJfQgSU/b94BworSMB8GA1UdIwQY
MBaAFIacDnN99ILomqZybN2KmViqdBEeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNzk4MGItY2VmOC00YjUzLWEwMzEt
YzVlMGZhY2E0YTVlLzEvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hNzk4MGItY2VmOC00YjUzLWEwMzEtYzVlMGZhY2E0YTVl
LzEvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEr+oR8o
CJYqoL61h2pztE6Diuk5Bv7jGcr43++Le3Lcmtuqy+3UVsHXKXAruuppcJBK+l4z
GPmzZhzTea6tZrJalrKyRYV2boeYAw09x2ESoJcYmZJ+W9PNnaoOJIoaHs5SGk/E
yMBpV8d8kkAzQwWz768iyUpn2LMPx9ncfYxSx0DeA56sCJwNEzEl9F9z/b5OZC17
QHlkGkJEdUF77M0oeRiOVLVrlRfhemFQFtLaC/W1xa30QiNtVVsjBwi8AXr3b9Gk
QZvgcZwK+05Lxt0HFph9qJitgQwIZ53FNO2Uyj6Pt7XqbzN/5SRbduTF7YEtOrXY
QXXhhMAF8p3yZw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:03:23 2025 by rpki-client