Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
File: HKrZOQiq2NJG62n35mqnDeW9Whc.mft (raw, json)
Hash identifier: CKi5KS7MRsibzWN1Da30ayQMwGro2E0Hae+TNY4FjvY=
Subject key identifier: 7A:F4:01:8D:7C:CB:B7:20:92:07:F8:DF:87:CE:E0:0B:87:FB:0F:78
Authority key identifier: 1C:AA:D9:39:08:AA:D8:D2:46:EB:69:F7:E6:6A:A7:0D:E5:BD:5A:17
Certificate issuer: /CN=1caad93908aad8d246eb69f7e66aa70de5bd5a17
Certificate serial: 01988B460A7D13644527D01171D8BEFE17DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
Manifest number: 0D08
Signing time: Fri 08 Aug 2025 20:01:19 +0000
Manifest this update: Fri 08 Aug 2025 20:01:19 +0000
Manifest next update: Sat 09 Aug 2025 20:01:19 +0000
Files and hashes: 1: HKrZOQiq2NJG62n35mqnDeW9Whc.crl (hash: 57qZeN0HhzrDF6unGd4UDV49FmucHiONbRLbDJd/nd4=)
2: ackszuiJCTUVf3NL6BGlMWZR6mU.roa (hash: eS/ev9znkjBG3HaRk+tKGqjX3/CUPsNsHqj4Rs2K9+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:46:0a:7d:13:64:45:27:d0:11:71:d8:be:fe:17:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1caad93908aad8d246eb69f7e66aa70de5bd5a17
Validity
Not Before: Aug 8 20:01:19 2025 GMT
Not After : Aug 9 20:01:19 2025 GMT
Subject: CN=7af4018d7ccbb7209207f8df87cee00b87fb0f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:4e:54:f7:de:2f:71:e2:f9:ce:43:a6:4e:
cb:00:5b:c3:3b:e8:bb:84:4f:33:de:b6:ed:fc:f3:
84:34:b2:02:8e:2b:1b:de:f8:68:13:a1:a3:ff:3e:
32:f1:04:08:35:93:de:06:91:be:09:76:a8:bf:06:
3a:dc:54:3f:f0:80:ac:79:03:00:d3:4d:4a:3b:75:
cd:d7:a2:5a:0b:b4:8b:72:7b:36:a5:41:b9:36:b2:
dc:1e:72:76:a3:16:70:c4:3b:1b:73:fe:5e:a1:7f:
17:e2:b8:cf:00:f4:58:d0:8f:7b:81:bb:06:cf:47:
ba:47:a9:8a:fa:65:5c:a4:49:44:ba:87:9a:c6:c5:
f4:3b:b5:82:c2:a1:c2:f0:17:99:0d:c2:53:33:ca:
48:00:10:ad:77:60:ce:12:9f:28:d4:ac:1d:65:72:
ae:dd:80:ba:c3:25:1f:70:0e:ad:19:6e:3f:f5:02:
69:4b:43:83:ee:8e:70:3b:32:56:2d:3f:c6:3b:2a:
48:28:65:c8:ee:f0:3f:12:b3:1b:ad:bd:e4:4a:63:
08:71:08:9c:14:1e:e2:06:13:d8:05:4c:70:33:24:
77:7e:df:da:e2:66:5c:c2:58:7c:2a:63:f7:0b:57:
e8:53:9a:47:6e:21:59:89:5b:c7:12:c8:73:ac:da:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F4:01:8D:7C:CB:B7:20:92:07:F8:DF:87:CE:E0:0B:87:FB:0F:78
X509v3 Authority Key Identifier:
keyid:1C:AA:D9:39:08:AA:D8:D2:46:EB:69:F7:E6:6A:A7:0D:E5:BD:5A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:04:98:2d:61:53:23:8c:a6:8b:fc:30:c6:ff:1b:c2:9e:cb:
0d:54:f3:26:4a:88:ca:7d:c0:7f:33:6d:cc:dd:c4:44:d6:b5:
e6:90:cf:b9:50:e6:09:1d:b7:60:57:e9:45:6a:5b:ee:07:5c:
4e:9b:82:f4:19:83:44:e2:94:cd:41:57:da:46:8c:fe:d5:9b:
67:08:8d:52:50:c8:cb:1b:8a:5e:37:86:8b:8a:0f:09:28:f4:
ec:d7:0b:0a:c7:6d:c9:f9:89:43:33:5d:69:c3:de:ae:31:ec:
7b:48:3b:22:70:0f:d7:61:22:2c:b7:c4:6f:15:f1:6e:f2:85:
8f:c0:68:4d:f9:11:a6:5c:da:78:db:b3:56:f1:2c:ce:38:5f:
09:aa:c4:7c:f5:3a:b2:ba:9f:4f:35:48:45:0b:b7:53:93:c5:
da:ab:fd:ce:d9:4a:49:4b:6d:1d:2c:d7:03:91:31:d6:29:bc:
ee:b9:18:17:01:b2:cc:bb:23:a2:63:3f:f5:6f:5c:c7:de:ed:
ea:da:b1:2b:03:4d:81:f8:d8:78:39:86:3e:f3:6f:f6:bb:0d:
fe:0b:ba:3b:56:cb:6e:16:4c:da:21:e4:52:3e:2c:93:7e:a9:
0d:4c:89:e9:e2:ae:3e:0d:51:d3:d5:a5:e4:e1:73:b2:f3:4b:
eb:ee:58:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLRgp9E2RFJ9ARcdi+/hfeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYWFkOTM5MDhhYWQ4ZDI0NmViNjlmN2U2NmFhNzBkZTVi
ZDVhMTcwHhcNMjUwODA4MjAwMTE5WhcNMjUwODA5MjAwMTE5WjAzMTEwLwYDVQQD
Eyg3YWY0MDE4ZDdjY2JiNzIwOTIwN2Y4ZGY4N2NlZTAwYjg3ZmIwZjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqttOVPfeL3Hi+c5Dpk7LAFvDO+i7
hE8z3rbt/POENLICjisb3vhoE6Gj/z4y8QQINZPeBpG+CXaovwY63FQ/8ICseQMA
001KO3XN16JaC7SLcns2pUG5NrLcHnJ2oxZwxDsbc/5eoX8X4rjPAPRY0I97gbsG
z0e6R6mK+mVcpElEuoeaxsX0O7WCwqHC8BeZDcJTM8pIABCtd2DOEp8o1KwdZXKu
3YC6wyUfcA6tGW4/9QJpS0OD7o5wOzJWLT/GOypIKGXI7vA/ErMbrb3kSmMIcQic
FB7iBhPYBUxwMyR3ft/a4mZcwlh8KmP3C1foU5pHbiFZiVvHEshzrNpLkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHr0AY18y7cgkgf434fO4AuH+w94MB8GA1UdIwQY
MBaAFByq2TkIqtjSRutp9+Zqpw3lvVoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEtyWk9RaXEyTkpHNjJuMzVtcW5EZVc5V2hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9hYmI2Y2EtMWExMS00YmE1LTllZTMt
YTc5OGJkYzczMTFmLzEvSEtyWk9RaXEyTkpHNjJuMzVtcW5EZVc5V2hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9hYmI2Y2EtMWExMS00YmE1LTllZTMtYTc5OGJkYzczMTFm
LzEvSEtyWk9RaXEyTkpHNjJuMzVtcW5EZVc5V2hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvgSYLWFT
I4ymi/wwxv8bwp7LDVTzJkqIyn3AfzNtzN3ERNa15pDPuVDmCR23YFfpRWpb7gdc
TpuC9BmDROKUzUFX2kaM/tWbZwiNUlDIyxuKXjeGi4oPCSj07NcLCsdtyfmJQzNd
acPerjHse0g7InAP12EiLLfEbxXxbvKFj8BoTfkRplzaeNuzVvEszjhfCarEfPU6
srqfTzVIRQu3U5PF2qv9ztlKSUttHSzXA5Ex1im87rkYFwGyzLsjomM/9W9cx97t
6tqxKwNNgfjYeDmGPvNv9rsN/gu6O1bLbhZM2iHkUj4sk36pDUyJ6eKuPg1R09Wl
5OFzsvNL6+5Y2w==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:29 2025 by rpki-client