Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
File: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft (raw, json)
Hash identifier: Q/Rl1tFkeHJWpY4Uic6Ww5BmrDi9bQAYcIHq07zlTf8=
Subject key identifier: 1F:7C:CA:86:81:22:48:30:40:15:62:E1:85:58:FB:D6:20:CA:EA:93
Authority key identifier: 1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99
Certificate issuer: /CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
Certificate serial: 0198730702F920CC9BE3AFF999A7FF2217F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 03:01:36 +0000
Manifest this update: Mon 04 Aug 2025 03:01:36 +0000
Manifest next update: Tue 05 Aug 2025 03:01:36 +0000
Files and hashes: 1: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl (hash: cc2FT2PCoURLZf5KhHrFCZdT6JLd8AJOu2T6iVq/U/Y=)
2: Rk8F0_O96bWnV23XOY1ym8DMObc.roa (hash: mN43AwUntAXDuv+4vVnXFfluzZ73Kps3qVN8w0gCSEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:07:02:f9:20:cc:9b:e3:af:f9:99:a7:ff:22:17:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
Validity
Not Before: Aug 4 03:01:36 2025 GMT
Not After : Aug 5 03:01:36 2025 GMT
Subject: CN=1f7cca8681224830401562e18558fbd620caea93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:91:9b:80:35:0d:50:30:9c:b2:03:ca:c2:51:
65:b0:f0:8f:82:89:2f:fe:57:14:ae:8b:8d:f4:0c:
65:7b:dc:d2:13:77:eb:b4:81:38:a8:0c:a2:bf:39:
f3:9a:c9:5d:4c:c9:28:a4:10:d8:25:59:55:8f:c4:
bb:4a:a9:80:70:0a:83:a5:7d:29:93:c1:60:75:42:
90:dc:79:68:f5:24:15:a6:73:f5:ba:8a:2c:2b:50:
fb:b0:34:43:89:28:f7:21:93:c5:1c:03:6e:1f:22:
f1:9d:df:d3:d1:fe:e1:8c:a7:32:08:7a:72:fa:9a:
73:3a:44:69:a0:60:d2:4d:a3:2c:49:50:d6:61:49:
e8:95:97:9a:4b:58:e0:0c:e1:46:a2:ca:06:e1:51:
89:ed:f3:a6:7b:4b:ff:85:73:04:1a:c6:bd:b3:6d:
36:86:9a:75:2d:d7:01:93:f1:ec:5a:27:44:70:58:
fe:4e:aa:ad:a9:6a:5a:85:1d:dc:83:25:fb:97:23:
eb:3b:fe:14:a4:2a:1a:53:d8:31:d8:85:88:3d:ed:
b5:e1:e1:e1:a0:ea:98:27:01:6b:af:6d:1e:e7:42:
d7:27:9d:25:22:37:28:76:00:3a:14:19:de:21:7f:
de:c7:51:e8:ef:0d:e4:e4:67:a3:8f:11:38:59:0e:
63:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7C:CA:86:81:22:48:30:40:15:62:E1:85:58:FB:D6:20:CA:EA:93
X509v3 Authority Key Identifier:
keyid:1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:04:07:5e:1e:44:6e:ef:59:2a:97:29:93:0f:c6:07:12:f2:
94:05:23:23:71:b5:1e:c9:cb:3e:ea:25:24:89:cf:4c:61:fd:
ce:b4:5d:69:b7:16:78:62:5b:20:ff:0b:ad:72:6d:62:d7:f5:
8b:70:fc:42:b3:7a:dd:39:7b:f9:de:25:19:c9:be:02:89:16:
a9:ab:c9:ff:d0:63:e4:43:65:10:18:d0:4f:b2:76:16:ae:10:
43:9c:e5:89:41:86:c7:38:d4:e1:89:04:c4:97:39:70:4b:2e:
7f:b7:64:3c:05:9c:a1:9e:fc:fd:4e:ca:11:78:b7:07:83:8c:
55:23:bf:cc:8c:74:6a:f4:21:98:87:bd:b3:e4:31:5d:67:c2:
68:c9:64:cb:1a:a9:24:70:ba:cf:16:f3:71:fe:bf:da:89:2c:
a9:ff:c2:07:88:32:28:82:00:1c:00:1a:10:31:19:8b:ef:34:
9c:2a:4d:98:7b:38:2d:00:37:fe:fe:0c:53:f7:03:92:4f:90:
16:cb:aa:12:52:95:4b:28:87:77:e8:47:d4:43:66:69:11:7b:
5a:77:dc:b5:08:b5:a4:79:1a:45:c6:51:df:bd:bf:a8:5d:86:
e6:9e:20:31:48:fa:99:04:c5:25:01:02:1c:3f:e1:09:4b:1f:
f5:fe:ab:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBwL5IMyb46/5maf/IhfxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZmMyYjM2NTE0MTYzZDM4OWVlOGZlMThmOGUyMzQzZmE0
ZGRjOTkwHhcNMjUwODA0MDMwMTM2WhcNMjUwODA1MDMwMTM2WjAzMTEwLwYDVQQD
EygxZjdjY2E4NjgxMjI0ODMwNDAxNTYyZTE4NTU4ZmJkNjIwY2FlYTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55GbgDUNUDCcsgPKwlFlsPCPgokv
/lcUrouN9Axle9zSE3frtIE4qAyivznzmsldTMkopBDYJVlVj8S7SqmAcAqDpX0p
k8FgdUKQ3Hlo9SQVpnP1uoosK1D7sDRDiSj3IZPFHANuHyLxnd/T0f7hjKcyCHpy
+ppzOkRpoGDSTaMsSVDWYUnolZeaS1jgDOFGosoG4VGJ7fOme0v/hXMEGsa9s202
hpp1LdcBk/HsWidEcFj+TqqtqWpahR3cgyX7lyPrO/4UpCoaU9gx2IWIPe214eHh
oOqYJwFrr20e50LXJ50lIjcodgA6FBneIX/ex1Ho7w3k5GejjxE4WQ5jlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB98yoaBIkgwQBVi4YVY+9YgyuqTMB8GA1UdIwQY
MBaAFB38KzZRQWPTie6P4Y+OI0P6TdyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kOTI5YWItNDg5Ni00M2UyLWE4NzYt
MDFiZWQ4NzgyYzdmLzEvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kOTI5YWItNDg5Ni00M2UyLWE4NzYtMDFiZWQ4NzgyYzdm
LzEvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQQHXh5E
bu9ZKpcpkw/GBxLylAUjI3G1HsnLPuolJInPTGH9zrRdabcWeGJbIP8LrXJtYtf1
i3D8QrN63Tl7+d4lGcm+AokWqavJ/9Bj5ENlEBjQT7J2Fq4QQ5zliUGGxzjU4YkE
xJc5cEsuf7dkPAWcoZ78/U7KEXi3B4OMVSO/zIx0avQhmIe9s+QxXWfCaMlkyxqp
JHC6zxbzcf6/2oksqf/CB4gyKIIAHAAaEDEZi+80nCpNmHs4LQA3/v4MU/cDkk+Q
FsuqElKVSyiHd+hH1ENmaRF7WnfctQi1pHkaRcZR372/qF2G5p4gMUj6mQTFJQEC
HD/hCUsf9f6r2A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:31 2025 by rpki-client