Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
File: HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft (raw, json)
Hash identifier: VJ+kM4jwNy2FQca5t2w1BdSUYX2sVDX4nFwsZnAOpZQ=
Subject key identifier: 3A:11:CF:D6:2E:F5:7D:72:78:BD:AC:D6:AF:FC:74:3D:9F:CA:5E:65
Authority key identifier: 1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
Certificate issuer: /CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Certificate serial: 0197703EF16469C30A15E1BE2128B243BFD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
Manifest number: 01DB
Signing time: Sat 14 Jun 2025 21:01:02 +0000
Manifest this update: Sat 14 Jun 2025 21:01:02 +0000
Manifest next update: Sun 15 Jun 2025 21:01:02 +0000
Files and hashes: 1: HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl (hash: l+lteQMrOI9UR6yopM3eTuZpasKy098SI2yKApO4aqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:f1:64:69:c3:0a:15:e1:be:21:28:b2:43:bf:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Validity
Not Before: Jun 14 21:01:02 2025 GMT
Not After : Jun 15 21:01:02 2025 GMT
Subject: CN=3a11cfd62ef57d7278bdacd6affc743d9fca5e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:e0:23:fc:13:76:63:71:5c:17:77:69:5c:
45:65:58:25:59:3f:53:d6:d5:c8:51:a1:42:48:29:
d5:dc:ed:ba:da:a0:d2:8f:00:f4:dd:6b:4f:af:71:
ed:00:55:80:e2:a1:98:6c:e7:54:04:30:32:57:01:
cc:fd:13:d7:df:0c:6d:33:30:17:3e:76:22:4a:71:
60:4c:10:bc:6d:22:76:c6:60:a9:48:09:0f:52:de:
66:b8:d3:e5:d2:72:94:b3:f1:bf:9f:85:bf:ec:35:
97:06:82:22:a7:59:25:0d:57:48:e8:1f:06:c5:2b:
8c:1f:5a:ac:f8:bf:65:c6:19:cc:36:7e:88:e2:75:
48:4c:e5:ae:7e:c0:8e:ba:89:01:d1:b2:52:64:19:
d7:ad:3a:0a:8d:e6:b8:fc:57:84:c2:c6:06:e7:0b:
89:9b:b3:c5:4d:d0:c0:a3:5a:32:35:40:08:ba:50:
e4:88:f5:76:11:47:cc:a4:2e:ed:b1:56:d9:85:7e:
42:ba:3c:4d:c8:b6:15:66:de:44:07:16:eb:23:a9:
8e:28:4a:d5:eb:fd:b4:7a:cb:9f:02:74:3c:38:2e:
26:e9:b5:7a:e8:66:e4:0d:f2:c7:e6:96:20:77:2e:
21:98:52:32:cb:28:58:e0:af:e9:d7:16:b6:c8:26:
0e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:11:CF:D6:2E:F5:7D:72:78:BD:AC:D6:AF:FC:74:3D:9F:CA:5E:65
X509v3 Authority Key Identifier:
keyid:1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4c:4c:81:ed:91:05:6b:47:f8:00:5c:69:9a:b2:15:f3:f4:
91:12:6e:07:96:8d:47:e7:55:36:ca:5a:71:8e:fc:ef:e8:bf:
50:4d:dd:bc:3f:fd:ea:0b:f1:ed:c8:25:c1:85:e2:81:ae:07:
14:db:b8:d5:18:75:9e:e4:fb:21:a9:96:84:68:00:76:94:a7:
5f:92:2f:23:84:a3:55:e2:6d:dc:93:89:e5:31:73:c2:39:e1:
5f:8b:eb:70:d6:5d:38:5c:6c:33:4a:eb:47:9b:43:c6:88:09:
d0:a3:0c:03:dc:eb:b7:8f:68:66:9e:dc:9e:51:10:fb:bf:be:
23:77:75:0a:10:50:5e:c9:5c:78:54:be:08:70:9a:ff:dd:5e:
61:ab:47:00:85:11:a7:f3:83:8d:30:18:6f:05:f1:aa:c6:ee:
45:c0:24:01:c2:bc:91:31:0e:c0:77:cd:ab:8e:9c:45:a2:51:
dc:39:f6:5a:55:06:9e:c9:8a:4f:99:57:72:8a:e8:5d:cf:25:
e9:db:68:36:ed:f3:f5:e3:a8:c4:f6:b7:8b:4c:34:46:88:70:
fc:ac:a9:b0:27:a5:cd:36:fd:fe:ad:44:06:0c:9b:11:11:23:
a9:ed:59:06:b5:78:e2:c0:dd:6b:70:5b:d0:fc:33:0b:b4:fe:
61:f4:cb:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwPvFkacMKFeG+ISiyQ7/YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmM2JmMjM3NTZjNmU3ZDY0ZDY4MjJmNTk3YjFkNTgwNDli
ZDQ4ZjEwHhcNMjUwNjE0MjEwMTAyWhcNMjUwNjE1MjEwMTAyWjAzMTEwLwYDVQQD
EygzYTExY2ZkNjJlZjU3ZDcyNzhiZGFjZDZhZmZjNzQzZDlmY2E1ZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2ngI/wTdmNxXBd3aVxFZVglWT9T
1tXIUaFCSCnV3O262qDSjwD03WtPr3HtAFWA4qGYbOdUBDAyVwHM/RPX3wxtMzAX
PnYiSnFgTBC8bSJ2xmCpSAkPUt5muNPl0nKUs/G/n4W/7DWXBoIip1klDVdI6B8G
xSuMH1qs+L9lxhnMNn6I4nVITOWufsCOuokB0bJSZBnXrToKjea4/FeEwsYG5wuJ
m7PFTdDAo1oyNUAIulDkiPV2EUfMpC7tsVbZhX5CujxNyLYVZt5EBxbrI6mOKErV
6/20esufAnQ8OC4m6bV66GbkDfLH5pYgdy4hmFIyyyhY4K/p1xa2yCYOawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoRz9Yu9X1yeL2s1q/8dD2fyl5lMB8GA1UdIwQY
MBaAFB878jdWxufWTWgi9Zex1YBJvUjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHp2eU4xYkc1OVpOYUNMMWw3SFZnRW05U1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kMWJjZTItZjZkOC00OGFhLTk2MzIt
NDNkYzJkYmNhYjc3LzEvSHp2eU4xYkc1OVpOYUNMMWw3SFZnRW05U1BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kMWJjZTItZjZkOC00OGFhLTk2MzItNDNkYzJkYmNhYjc3
LzEvSHp2eU4xYkc1OVpOYUNMMWw3SFZnRW05U1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0xMge2R
BWtH+ABcaZqyFfP0kRJuB5aNR+dVNspacY787+i/UE3dvD/96gvx7cglwYXiga4H
FNu41Rh1nuT7IamWhGgAdpSnX5IvI4SjVeJt3JOJ5TFzwjnhX4vrcNZdOFxsM0rr
R5tDxogJ0KMMA9zrt49oZp7cnlEQ+7++I3d1ChBQXslceFS+CHCa/91eYatHAIUR
p/ODjTAYbwXxqsbuRcAkAcK8kTEOwHfNq46cRaJR3Dn2WlUGnsmKT5lXcoroXc8l
6dtoNu3z9eOoxPa3i0w0Rohw/KypsCelzTb9/q1EBgybEREjqe1ZBrV44sDda3Bb
0PwzC7T+YfTLEA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:34:34 2025 by rpki-client