Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
File: hGhM2vJd5AvvwejkIoWo1ew4kEc.mft (raw, json)
Hash identifier: siLVFl2MCVzYmZDXhuSQeNMMaIrQieLBy62vD6b7zSg=
Subject key identifier: C6:B7:98:D1:60:3F:24:7E:C2:4A:A2:77:4C:84:8D:04:05:31:BD:70
Authority key identifier: 84:68:4C:DA:F2:5D:E4:0B:EF:C1:E8:E4:22:85:A8:D5:EC:38:90:47
Certificate issuer: /CN=84684cdaf25de40befc1e8e42285a8d5ec389047
Certificate serial: 01987C40C663284D2E91F6FA5456CA23ACE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGhM2vJd5AvvwejkIoWo1ew4kEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
Manifest number: 0439
Signing time: Tue 05 Aug 2025 22:01:16 +0000
Manifest this update: Tue 05 Aug 2025 22:01:16 +0000
Manifest next update: Wed 06 Aug 2025 22:01:16 +0000
Files and hashes: 1: hGhM2vJd5AvvwejkIoWo1ew4kEc.crl (hash: 2t0eA2vpp1xLjkREIWQUdmBPfJowKzKD4/cvBLCoduA=)
2: oidwYZW8G2o74OS_a_nCcJCpjCg.roa (hash: ogxgsB9YER6I/w+iNtW/Wqu1gf3XIhY2x4sxgGoaIJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGhM2vJd5AvvwejkIoWo1ew4kEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:c6:63:28:4d:2e:91:f6:fa:54:56:ca:23:ac:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84684cdaf25de40befc1e8e42285a8d5ec389047
Validity
Not Before: Aug 5 22:01:16 2025 GMT
Not After : Aug 6 22:01:16 2025 GMT
Subject: CN=c6b798d1603f247ec24aa2774c848d040531bd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:54:d3:8f:e2:b4:16:61:71:49:f0:d0:ed:
9a:6c:51:a5:72:7c:bc:dd:d8:f0:f1:33:56:de:5e:
a3:94:5c:81:89:75:b5:c3:c4:c7:30:2d:ee:c4:6b:
3e:b6:16:2e:cb:78:fc:81:ad:38:9d:6d:15:ba:71:
c2:47:ec:80:d3:27:b2:f8:1e:a1:a0:82:d6:d3:dc:
78:f6:c8:f0:21:f2:b5:22:31:8a:46:30:cb:c3:93:
56:4f:c1:09:98:ed:15:56:7c:a0:d8:3c:39:e0:5f:
a3:9c:99:13:f7:18:2f:8b:11:d4:40:11:a2:b5:ac:
97:d9:46:13:45:de:03:5b:06:b4:5b:a8:11:f0:8b:
8b:7b:63:88:56:0b:2e:b9:ce:db:9a:10:19:08:b5:
ef:3f:fc:ae:71:f3:fe:e4:f1:65:13:fa:83:77:f2:
87:5f:8b:93:7c:cc:32:b9:55:59:27:49:e5:bd:7c:
21:33:fb:29:1d:72:b7:43:b4:05:b4:d0:7a:ae:00:
0f:fa:e6:81:13:2b:45:b4:80:6e:9c:31:19:bf:b6:
2e:b0:fb:e7:d9:7b:53:a1:ef:df:bc:19:30:03:17:
ab:9e:b8:08:2d:0b:25:92:8e:93:ba:80:b4:f1:4c:
1d:b1:8a:2e:a6:da:a1:f4:de:02:b4:b2:71:73:e1:
85:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B7:98:D1:60:3F:24:7E:C2:4A:A2:77:4C:84:8D:04:05:31:BD:70
X509v3 Authority Key Identifier:
keyid:84:68:4C:DA:F2:5D:E4:0B:EF:C1:E8:E4:22:85:A8:D5:EC:38:90:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGhM2vJd5AvvwejkIoWo1ew4kEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:66:0b:e4:81:bd:e1:a8:55:89:e4:8e:5e:d5:a7:1c:2e:f4:
bf:62:dd:a9:ed:74:e4:3d:d1:e3:3b:a7:89:19:98:c7:55:6e:
1c:6b:0e:55:0d:23:e0:71:91:66:7b:01:71:de:d5:84:60:af:
ad:42:84:d8:76:4e:42:ce:80:e9:e1:f9:c8:70:80:7a:ae:c9:
15:ed:bd:31:0f:46:9f:36:be:47:b4:06:ce:7e:12:27:1b:63:
57:6c:4b:6b:62:c4:30:69:06:10:2c:a3:d1:ff:5b:9a:bc:0b:
c0:94:1a:4a:0f:e0:28:9d:22:7c:99:d3:98:51:18:c2:e0:e8:
04:3d:5e:7b:f4:e8:5c:df:0c:51:65:fa:47:d7:71:74:d8:a2:
93:37:94:48:b0:42:d8:3a:a2:7a:53:bf:d0:55:cb:00:5d:4f:
e6:65:8a:ad:63:a0:de:ff:88:eb:34:46:d7:c2:d7:bc:8f:68:
ac:b4:a7:57:d5:f9:b6:b4:ec:91:8c:a4:44:2d:de:f2:d4:67:
c2:86:26:49:1c:fb:10:08:b0:49:d4:0c:6d:fc:54:49:f7:f6:
d8:c0:c7:9e:90:d8:31:2b:8f:0f:d7:a0:63:f4:d4:4c:12:76:
70:4c:ca:2d:3b:44:7f:b4:b3:44:33:c8:e9:3e:d2:a3:4c:5f:
e7:61:a4:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8QMZjKE0ukfb6VFbKI6znMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0Njg0Y2RhZjI1ZGU0MGJlZmMxZThlNDIyODVhOGQ1ZWMz
ODkwNDcwHhcNMjUwODA1MjIwMTE2WhcNMjUwODA2MjIwMTE2WjAzMTEwLwYDVQQD
EyhjNmI3OThkMTYwM2YyNDdlYzI0YWEyNzc0Yzg0OGQwNDA1MzFiZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+RU04/itBZhcUnw0O2abFGlcny8
3djw8TNW3l6jlFyBiXW1w8THMC3uxGs+thYuy3j8ga04nW0VunHCR+yA0yey+B6h
oILW09x49sjwIfK1IjGKRjDLw5NWT8EJmO0VVnyg2Dw54F+jnJkT9xgvixHUQBGi
tayX2UYTRd4DWwa0W6gR8IuLe2OIVgsuuc7bmhAZCLXvP/yucfP+5PFlE/qDd/KH
X4uTfMwyuVVZJ0nlvXwhM/spHXK3Q7QFtNB6rgAP+uaBEytFtIBunDEZv7YusPvn
2XtToe/fvBkwAxernrgILQslko6TuoC08UwdsYouptqh9N4CtLJxc+GF3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMa3mNFgPyR+wkqid0yEjQQFMb1wMB8GA1UdIwQY
MBaAFIRoTNryXeQL78Ho5CKFqNXsOJBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdoTTJ2SmQ1QXZ2d2Vqa0lvV28xZXc0a0VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jMDM4M2EtZjI3MS00YzFlLWI1Y2Et
ZGVjYjIyMDYyYzcwLzEvaEdoTTJ2SmQ1QXZ2d2Vqa0lvV28xZXc0a0VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9jMDM4M2EtZjI3MS00YzFlLWI1Y2EtZGVjYjIyMDYyYzcw
LzEvaEdoTTJ2SmQ1QXZ2d2Vqa0lvV28xZXc0a0VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamYL5IG9
4ahVieSOXtWnHC70v2Ldqe105D3R4zuniRmYx1VuHGsOVQ0j4HGRZnsBcd7VhGCv
rUKE2HZOQs6A6eH5yHCAeq7JFe29MQ9Gnza+R7QGzn4SJxtjV2xLa2LEMGkGECyj
0f9bmrwLwJQaSg/gKJ0ifJnTmFEYwuDoBD1ee/ToXN8MUWX6R9dxdNiikzeUSLBC
2DqielO/0FXLAF1P5mWKrWOg3v+I6zRG18LXvI9orLSnV9X5trTskYykRC3e8tRn
woYmSRz7EAiwSdQMbfxUSff22MDHnpDYMSuPD9egY/TUTBJ2cEzKLTtEf7SzRDPI
6T7So0xf52Gkqw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:44:43 2025 by rpki-client