Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
File: HDepAm5Fto_kc1pGm3VjYTCtElw.mft (raw, json)
Hash identifier: tMtPOSRzp74yDvFvaDAU0JhMENLvMz4NcN2dYjintWA=
Subject key identifier: E3:E4:83:0E:93:B2:64:C6:39:FB:A0:00:85:60:88:F8:91:FA:FD:B3
Authority key identifier: 1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
Certificate issuer: /CN=1c37a9026e45b68fe4735a469b75636130ad125c
Certificate serial: 019883C3DCFA71BCA2DF247C295366093DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
Manifest number: 0958
Signing time: Thu 07 Aug 2025 09:01:48 +0000
Manifest this update: Thu 07 Aug 2025 09:01:48 +0000
Manifest next update: Fri 08 Aug 2025 09:01:48 +0000
Files and hashes: 1: HDepAm5Fto_kc1pGm3VjYTCtElw.crl (hash: W4FEez0dstxvCVqr2Nljzr4mfEOdcMT7kGMRXUhOQ7M=)
2: uaDvodSl9Qqt6SU3QvEP4PKpm0c.roa (hash: KfFNiihZ95ffen8bkT+elj9FXLgX4E04ZxK55q4T9Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:c3:dc:fa:71:bc:a2:df:24:7c:29:53:66:09:3d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c37a9026e45b68fe4735a469b75636130ad125c
Validity
Not Before: Aug 7 09:01:48 2025 GMT
Not After : Aug 8 09:01:48 2025 GMT
Subject: CN=e3e4830e93b264c639fba000856088f891fafdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e1:f4:ac:ec:1e:34:36:f2:b9:72:70:ec:e2:
6d:7a:22:07:51:1e:60:0d:31:65:20:27:8b:ae:fd:
f7:9f:3d:31:f9:96:b3:a1:04:1b:ee:97:39:54:84:
e4:59:a6:ff:85:89:6e:fe:fe:63:14:26:db:7c:04:
80:53:a9:b7:cc:c0:1a:54:73:70:dd:c9:3b:7e:31:
7d:8d:58:bb:d1:5e:24:ca:37:78:41:c3:46:b2:5b:
9a:19:e1:c2:50:5c:e6:1a:07:7b:22:13:b9:fb:84:
a0:95:d6:e2:66:e2:27:ba:4b:12:40:e1:38:20:06:
43:fb:46:48:d5:d1:ed:da:9d:b1:73:18:c2:72:5c:
20:ff:1b:7b:ef:9f:57:c7:4e:41:4c:09:39:37:4f:
85:79:c4:c9:2a:52:fc:9c:ad:9d:6e:40:c8:8e:fa:
9d:72:93:1a:29:30:b7:63:dd:f8:c8:9d:67:2b:9c:
16:13:79:5c:29:f7:ac:f6:23:7a:aa:0e:5d:65:6c:
21:56:a3:23:bd:dc:5f:41:e1:f8:a8:9a:69:85:f1:
f0:d0:e3:8e:09:df:6d:32:1a:5d:da:31:4e:ed:8c:
d6:ce:50:46:c8:bd:1e:4d:be:e9:5e:86:22:26:ab:
5b:b2:4e:a9:8c:f5:5a:8e:b7:25:92:5f:db:44:b8:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E4:83:0E:93:B2:64:C6:39:FB:A0:00:85:60:88:F8:91:FA:FD:B3
X509v3 Authority Key Identifier:
keyid:1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:14:c2:59:b9:30:70:a6:0c:74:7e:71:3f:44:cf:f7:8e:f6:
d6:a4:4f:98:48:0e:62:ae:be:fb:b6:ac:9b:91:6c:82:cb:81:
d3:21:b0:8b:c7:fc:7f:2d:a4:11:ff:b8:9b:d4:94:75:ea:ba:
27:17:86:c1:87:0d:34:c4:e5:b8:9b:8c:05:16:e7:83:d3:ce:
44:ca:09:1b:f9:36:d6:99:bb:75:59:d7:85:88:32:f3:29:e2:
c9:1d:7a:7f:08:d4:76:d9:55:bf:61:1a:5d:94:53:69:05:33:
60:d7:4d:ad:ba:e5:7f:57:65:75:53:ef:bf:58:ed:1d:61:f6:
9a:b1:c1:cb:70:c7:6a:68:fc:40:08:6c:a5:47:7f:47:18:df:
e1:70:f0:64:d4:36:b0:f6:d1:45:73:6b:10:0e:4d:e9:3a:1e:
9e:2b:df:e9:cf:2a:a9:b8:94:bd:70:ce:e3:af:f4:96:e9:e9:
cb:be:51:58:0e:72:07:32:cf:08:82:ab:b1:5e:62:35:71:1c:
d8:5b:24:0b:fe:6b:67:4a:33:52:28:67:08:64:db:6a:e5:70:
e3:ee:23:7e:ce:ef:85:33:d6:ed:a1:8d:51:5a:ac:04:d2:82:
40:ff:9b:38:a6:2b:da:57:f2:42:58:5a:c9:83:56:dc:d4:f0:
4b:30:1c:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDw9z6cbyi3yR8KVNmCT3JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMzdhOTAyNmU0NWI2OGZlNDczNWE0NjliNzU2MzYxMzBh
ZDEyNWMwHhcNMjUwODA3MDkwMTQ4WhcNMjUwODA4MDkwMTQ4WjAzMTEwLwYDVQQD
EyhlM2U0ODMwZTkzYjI2NGM2MzlmYmEwMDA4NTYwODhmODkxZmFmZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uH0rOweNDbyuXJw7OJteiIHUR5g
DTFlICeLrv33nz0x+ZazoQQb7pc5VITkWab/hYlu/v5jFCbbfASAU6m3zMAaVHNw
3ck7fjF9jVi70V4kyjd4QcNGsluaGeHCUFzmGgd7IhO5+4SgldbiZuInuksSQOE4
IAZD+0ZI1dHt2p2xcxjCclwg/xt7759Xx05BTAk5N0+FecTJKlL8nK2dbkDIjvqd
cpMaKTC3Y934yJ1nK5wWE3lcKfes9iN6qg5dZWwhVqMjvdxfQeH4qJpphfHw0OOO
Cd9tMhpd2jFO7YzWzlBGyL0eTb7pXoYiJqtbsk6pjPVajrclkl/bRLjQ0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPkgw6TsmTGOfugAIVgiPiR+v2zMB8GA1UdIwQY
MBaAFBw3qQJuRbaP5HNaRpt1Y2EwrRJcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSERlcEFtNUZ0b19rYzFwR20zVmpZVEN0RWx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yYmI2MDMtZjQ3OS00MGNiLTgyZDQt
NDhkNjcyOTczYjEzLzEvSERlcEFtNUZ0b19rYzFwR20zVmpZVEN0RWx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8yYmI2MDMtZjQ3OS00MGNiLTgyZDQtNDhkNjcyOTczYjEz
LzEvSERlcEFtNUZ0b19rYzFwR20zVmpZVEN0RWx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBTCWbkw
cKYMdH5xP0TP94721qRPmEgOYq6++7asm5FsgsuB0yGwi8f8fy2kEf+4m9SUdeq6
JxeGwYcNNMTluJuMBRbng9PORMoJG/k21pm7dVnXhYgy8yniyR16fwjUdtlVv2Ea
XZRTaQUzYNdNrbrlf1dldVPvv1jtHWH2mrHBy3DHamj8QAhspUd/Rxjf4XDwZNQ2
sPbRRXNrEA5N6Toenivf6c8qqbiUvXDO46/0lunpy75RWA5yBzLPCIKrsV5iNXEc
2FskC/5rZ0ozUihnCGTbauVw4+4jfs7vhTPW7aGNUVqsBNKCQP+bOKYr2lfyQlha
yYNW3NTwSzAc8g==
-----END CERTIFICATE-----
Generated at Thu Aug 7 14:46:13 2025 by rpki-client