Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
File: HvNtbboJfqbUsq2k52PoTss9gXo.mft (raw, json)
Hash identifier: k/WizThVAOAGhiz+pjaRHPuc86Swl3zwTwu1KKGZCDE=
Subject key identifier: 12:70:A5:0E:BA:92:D5:A5:26:5F:AD:32:87:F6:C7:88:97:F3:2C:F3
Authority key identifier: 1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
Certificate issuer: /CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Certificate serial: 01987298F9B46CDC45013A41F60716E54C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
Manifest number: 0501
Signing time: Mon 04 Aug 2025 01:01:24 +0000
Manifest this update: Mon 04 Aug 2025 01:01:24 +0000
Manifest next update: Tue 05 Aug 2025 01:01:24 +0000
Files and hashes: 1: 1-fDLqnKfMZzfosw8Gra-kuHRukQ.roa (hash: 91Wi2oW4Wdmr3Kf24VCGVEfXWacp6jcVuiTMlTsIcZQ=)
2: HvNtbboJfqbUsq2k52PoTss9gXo.crl (hash: MPOFOxEK2o2TYKMJY1BlrB5dtnElzg6jx0KRQ3Ol3PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:f9:b4:6c:dc:45:01:3a:41:f6:07:16:e5:4c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Validity
Not Before: Aug 4 01:01:24 2025 GMT
Not After : Aug 5 01:01:24 2025 GMT
Subject: CN=1270a50eba92d5a5265fad3287f6c78897f32cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:37:a4:c0:a2:c3:01:92:29:ff:db:20:be:44:
55:5f:ed:79:07:12:6d:7f:45:8f:b9:b4:41:b0:10:
96:c4:6c:bb:62:31:f0:c3:0a:6a:e2:15:f6:42:73:
d1:c9:70:96:93:d6:42:e5:18:32:22:69:94:1d:18:
26:c3:c2:03:95:a2:56:bb:f5:64:5f:3e:85:55:16:
36:7b:6f:31:64:8e:f6:61:bc:c5:cc:24:b2:02:d4:
3f:e9:ed:30:65:40:62:55:dd:28:f5:d7:a6:6c:c9:
89:7e:d3:56:87:c1:31:e1:24:46:4c:fd:22:82:35:
5b:d6:dc:b2:3d:1e:eb:6e:f6:27:d3:ca:de:a9:6b:
a9:b9:66:3a:e7:5c:00:48:22:f2:5c:3f:8c:5b:42:
82:61:81:0f:cc:31:b1:bf:75:03:eb:e5:1e:7c:2e:
00:09:78:ce:af:50:7d:2d:73:d3:b5:7c:ff:49:23:
27:e4:21:0c:1b:ee:ab:9d:5b:8d:65:b2:92:09:bc:
8e:46:da:da:0b:d4:72:dc:89:f5:ce:20:d3:af:aa:
a7:85:cb:c9:96:04:7f:ec:89:75:a4:dd:32:da:f1:
15:93:e5:3c:13:2b:5b:fe:ed:b1:60:41:7c:d8:32:
52:00:a1:75:61:b9:e1:c1:54:b8:b5:de:39:82:22:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:70:A5:0E:BA:92:D5:A5:26:5F:AD:32:87:F6:C7:88:97:F3:2C:F3
X509v3 Authority Key Identifier:
keyid:1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1e:ae:fd:66:bf:a3:b3:e6:6c:01:8c:7b:36:09:f9:bf:98:
dc:f1:33:c7:e3:31:ba:78:7c:d5:94:f9:83:04:f2:8d:fd:7d:
7f:07:f1:a2:ec:3b:19:de:b7:9e:6c:f9:98:94:79:ec:2c:1b:
ce:db:79:a9:23:22:6b:a2:f8:f6:d3:89:11:92:6e:62:be:8d:
28:b4:24:28:60:69:f4:41:0c:9b:c5:e2:ad:4d:a9:fc:eb:18:
70:24:e6:31:af:57:d4:2a:ab:e0:94:d1:89:b3:4a:63:0f:72:
f6:5b:90:da:17:d2:48:1c:f6:ec:b2:88:5d:8d:0e:c5:ba:a1:
9c:f5:7c:34:d3:c4:52:fd:bd:d1:a0:63:27:c9:9c:67:b9:e7:
50:73:91:a5:99:b7:cf:fe:a5:5a:db:c2:2c:23:0a:5a:1b:d1:
05:08:f5:34:e7:3f:48:0f:ff:7e:ba:54:81:13:ff:c3:f8:bf:
f6:c8:d5:9c:09:02:bf:d7:60:12:8e:1d:82:56:a7:36:88:89:
7c:5a:68:98:a9:0a:fe:bd:c9:bb:3e:29:d1:77:9d:ec:87:79:
82:17:8c:18:5d:14:00:91:57:42:71:8d:7e:13:87:3f:c4:62:
0e:9c:0c:4b:b6:d3:40:b0:40:b5:07:62:88:6b:28:60:cb:f1:
1b:03:9b:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymPm0bNxFATpB9gcW5UxcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZjM2ZDZkYmEwOTdlYTZkNGIyYWRhNGU3NjNlODRlY2Iz
ZDgxN2EwHhcNMjUwODA0MDEwMTI0WhcNMjUwODA1MDEwMTI0WjAzMTEwLwYDVQQD
EygxMjcwYTUwZWJhOTJkNWE1MjY1ZmFkMzI4N2Y2Yzc4ODk3ZjMyY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jekwKLDAZIp/9sgvkRVX+15BxJt
f0WPubRBsBCWxGy7YjHwwwpq4hX2QnPRyXCWk9ZC5RgyImmUHRgmw8IDlaJWu/Vk
Xz6FVRY2e28xZI72YbzFzCSyAtQ/6e0wZUBiVd0o9dembMmJftNWh8Ex4SRGTP0i
gjVb1tyyPR7rbvYn08reqWupuWY651wASCLyXD+MW0KCYYEPzDGxv3UD6+UefC4A
CXjOr1B9LXPTtXz/SSMn5CEMG+6rnVuNZbKSCbyORtraC9Ry3In1ziDTr6qnhcvJ
lgR/7Il1pN0y2vEVk+U8Eytb/u2xYEF82DJSAKF1YbnhwVS4td45giL89QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJwpQ66ktWlJl+tMof2x4iX8yzzMB8GA1UdIwQY
MBaAFB7zbW26CX6m1LKtpOdj6E7LPYF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZOdGJib0pmcWJVc3EyazUyUG9Uc3M5Z1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8zZWQzN2ItYjgwYS00YjEwLTkxNGIt
NTdjOTI0MzFkM2QzLzEvSHZOdGJib0pmcWJVc3EyazUyUG9Uc3M5Z1hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8zZWQzN2ItYjgwYS00YjEwLTkxNGItNTdjOTI0MzFkM2Qz
LzEvSHZOdGJib0pmcWJVc3EyazUyUG9Uc3M5Z1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASR6u/Wa/
o7PmbAGMezYJ+b+Y3PEzx+Mxunh81ZT5gwTyjf19fwfxouw7Gd63nmz5mJR57Cwb
ztt5qSMia6L49tOJEZJuYr6NKLQkKGBp9EEMm8XirU2p/OsYcCTmMa9X1Cqr4JTR
ibNKYw9y9luQ2hfSSBz27LKIXY0OxbqhnPV8NNPEUv290aBjJ8mcZ7nnUHORpZm3
z/6lWtvCLCMKWhvRBQj1NOc/SA//frpUgRP/w/i/9sjVnAkCv9dgEo4dglanNoiJ
fFpomKkK/r3Juz4p0Xed7Id5gheMGF0UAJFXQnGNfhOHP8RiDpwMS7bTQLBAtQdi
iGsoYMvxGwObzg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:32 2025 by rpki-client