Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
File: HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft (raw, json)
Hash identifier: 0+tSflTeH01Gw4dz4IT1VRirUCkKynD6FrBBTAeyijw=
Subject key identifier: A4:79:F8:24:29:62:4A:B8:A2:A2:13:04:0D:98:7B:53:3D:A5:8D:9D
Authority key identifier: 1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
Certificate issuer: /CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Certificate serial: 01987CAE3F4350C07B2D33F3EE45FA9B2BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
Manifest number: 0295
Signing time: Wed 06 Aug 2025 00:00:50 +0000
Manifest this update: Wed 06 Aug 2025 00:00:50 +0000
Manifest next update: Thu 07 Aug 2025 00:00:50 +0000
Files and hashes: 1: HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl (hash: f/w66to2wENmb2nMnRLIVQkQ1dLSs2XqVTnVv8U63C0=)
2: bf-KUAB6aLpkHJGbHNwPz-TdsjU.roa (hash: HN5lyJEQT7Bh/OQNiW1klOAzdGY3jUKHNz1khIQidQk=)
3: zg1Lpd5dXDDrXWEs29Dqtm1PLWo.roa (hash: c0hWZybUPDWWpEetuD+QWOEePUUQ5c0jYzDlZOTBQ5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:3f:43:50:c0:7b:2d:33:f3:ee:45:fa:9b:2b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Validity
Not Before: Aug 6 00:00:50 2025 GMT
Not After : Aug 7 00:00:50 2025 GMT
Subject: CN=a479f82429624ab8a2a213040d987b533da58d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:50:35:a3:ff:66:0f:35:ad:9e:69:a7:6f:
de:df:1d:5e:8a:3c:96:5f:f1:7e:1e:82:45:41:1c:
63:09:9b:5a:bb:5f:80:86:67:99:9e:4c:1a:8c:57:
3c:12:bc:95:40:bd:ef:b9:42:b9:10:89:3f:9d:9a:
f7:0e:42:97:53:5d:cf:2d:7d:12:83:aa:34:3d:59:
5d:a2:b1:05:41:12:76:7f:ec:a7:ce:d0:1f:bc:f0:
5e:ee:8e:e4:56:27:b1:29:c5:ba:c2:43:c8:f9:f9:
b4:3a:13:c3:cf:e3:e6:eb:96:04:88:6a:70:ce:5d:
cc:c8:74:71:45:3e:f3:e3:45:51:e2:39:08:da:c0:
c8:bb:c4:ed:0f:83:4a:82:89:a1:cb:87:99:73:7d:
2a:3c:34:33:44:a1:94:4a:e6:31:52:89:fa:1c:30:
80:e5:13:e0:62:45:cb:37:54:bc:2c:0c:e7:b2:7e:
c5:7f:76:95:5e:10:a1:7e:d3:67:cb:86:fa:43:35:
11:bc:e0:f6:89:91:7c:01:ba:ff:16:9c:a6:05:8b:
b1:c8:28:b8:5d:c3:05:b3:b9:7d:29:66:bf:e2:75:
6d:22:10:dc:2e:ef:67:4b:c2:07:27:0c:3b:62:ab:
05:83:82:56:a3:da:31:45:fa:24:22:53:d3:87:da:
73:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:79:F8:24:29:62:4A:B8:A2:A2:13:04:0D:98:7B:53:3D:A5:8D:9D
X509v3 Authority Key Identifier:
keyid:1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ed:b9:6d:fa:69:5b:c6:5d:22:b8:46:bc:e7:1d:29:20:1f:
b8:0b:ea:3b:59:1c:ea:5a:42:0c:11:14:de:5e:65:8c:c4:bc:
9f:12:e7:03:df:6b:bd:90:b2:96:68:e6:e2:f5:d7:2d:5a:b4:
fd:6b:03:fe:bb:23:c1:3e:55:bc:39:6a:39:93:b9:de:51:a0:
3a:9f:d1:30:5a:2d:77:5f:bd:c6:8d:98:43:2f:52:24:08:ee:
4d:d9:3b:72:b5:66:99:bc:85:9e:d5:a4:06:48:bf:02:92:ff:
7b:c5:c2:b4:cb:de:0d:6e:de:d8:85:da:19:46:33:d9:39:80:
55:c4:41:65:0f:38:67:7f:10:79:f1:f2:95:32:6c:92:17:2c:
21:42:cb:55:3d:5c:ad:62:db:5b:09:f7:b8:af:af:2c:65:82:
7d:3d:57:4e:b4:8f:f1:fa:78:30:b8:76:7b:74:c5:37:a2:b5:
fc:04:25:a4:19:5c:7f:17:c7:45:00:28:2d:e5:9f:54:69:1f:
7c:71:2f:c2:79:af:f5:dd:aa:1c:15:80:ca:ac:9d:b8:55:4a:
c6:08:08:32:f3:ad:7c:eb:89:6d:5f:72:51:b0:6f:72:aa:7b:
38:96:7a:17:8d:a9:79:16:4d:6f:ca:4c:b3:d8:88:3c:7f:2f:
59:2b:ba:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8rj9DUMB7LTPz7kX6myvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZTY1YzU3Njg2Y2U1ZTUxYjM2N2ZjOTk2YjQ5YmNjNTk4
OTZiOWMwHhcNMjUwODA2MDAwMDUwWhcNMjUwODA3MDAwMDUwWjAzMTEwLwYDVQQD
EyhhNDc5ZjgyNDI5NjI0YWI4YTJhMjEzMDQwZDk4N2I1MzNkYTU4ZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1dQNaP/Zg81rZ5pp2/e3x1eijyW
X/F+HoJFQRxjCZtau1+AhmeZnkwajFc8EryVQL3vuUK5EIk/nZr3DkKXU13PLX0S
g6o0PVldorEFQRJ2f+ynztAfvPBe7o7kViexKcW6wkPI+fm0OhPDz+Pm65YEiGpw
zl3MyHRxRT7z40VR4jkI2sDIu8TtD4NKgomhy4eZc30qPDQzRKGUSuYxUon6HDCA
5RPgYkXLN1S8LAznsn7Ff3aVXhChftNny4b6QzURvOD2iZF8Abr/FpymBYuxyCi4
XcMFs7l9KWa/4nVtIhDcLu9nS8IHJww7YqsFg4JWo9oxRfokIlPTh9pzrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKR5+CQpYkq4oqITBA2Ye1M9pY2dMB8GA1UdIwQY
MBaAFBzmXFdobOXlGzZ/yZa0m8xZiWucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE9aY1YyaHM1ZVViTm5fSmxyU2J6Rm1KYTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZjhmMzYtZTM1OC00Yjc2LTg4MjIt
MTI4YjVjM2QwNTNhLzEvSE9aY1YyaHM1ZVViTm5fSmxyU2J6Rm1KYTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9hZjhmMzYtZTM1OC00Yjc2LTg4MjItMTI4YjVjM2QwNTNh
LzEvSE9aY1YyaHM1ZVViTm5fSmxyU2J6Rm1KYTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfu25bfpp
W8ZdIrhGvOcdKSAfuAvqO1kc6lpCDBEU3l5ljMS8nxLnA99rvZCylmjm4vXXLVq0
/WsD/rsjwT5VvDlqOZO53lGgOp/RMFotd1+9xo2YQy9SJAjuTdk7crVmmbyFntWk
Bki/ApL/e8XCtMveDW7e2IXaGUYz2TmAVcRBZQ84Z38QefHylTJskhcsIULLVT1c
rWLbWwn3uK+vLGWCfT1XTrSP8fp4MLh2e3TFN6K1/AQlpBlcfxfHRQAoLeWfVGkf
fHEvwnmv9d2qHBWAyqyduFVKxggIMvOtfOuJbV9yUbBvcqp7OJZ6F42peRZNb8pM
s9iIPH8vWSu6Wg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:05:45 2025 by rpki-client