Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: u2uYTXC/C4tmjrMduRzPVirXYq95pNq9tUl+0CdkL9c=
Subject key identifier: 20:EC:67:5C:94:A9:62:34:0C:0B:5B:B5:BF:07:B3:88:EB:F2:45:D7
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 01987418FDE4B7D19B2BCBDB10F7EC86599A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 0F83
Signing time: Mon 04 Aug 2025 08:00:51 +0000
Manifest this update: Mon 04 Aug 2025 08:00:51 +0000
Manifest next update: Tue 05 Aug 2025 08:00:51 +0000
Files and hashes: 1: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: z6cGE5r9AQlUY/61NVV/82XHaQyDY1ywfKjhaTdC55U=)
2: I5Xu8_YbkRGpwTMlPEbzbNadX4o.roa (hash: B6r1juc4mX6gmzIU2gNZpN65PXm/XHcIEb2Ag0utzNw=)
3: TPDLRQuqICQP26Z5DLtwUuRH6jc.roa (hash: XySQwbc/9iXTVwgfkcqQbJH2XphS+YuGBqB7m8X+7eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:fd:e4:b7:d1:9b:2b:cb:db:10:f7:ec:86:59:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Aug 4 08:00:51 2025 GMT
Not After : Aug 5 08:00:51 2025 GMT
Subject: CN=20ec675c94a962340c0b5bb5bf07b388ebf245d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:ef:07:d7:4d:25:a0:02:3e:4f:6a:23:41:
c2:1c:d1:fa:40:c8:7c:2f:95:e7:1c:c8:ea:32:a7:
7a:77:4a:6e:d7:09:f4:63:d9:6b:5a:bc:b0:e9:59:
49:89:1e:43:19:1a:4c:33:a0:8a:97:be:ae:e6:c1:
c2:71:40:10:41:ac:6b:da:e5:3f:3e:12:7b:a1:4f:
23:f9:f5:e4:25:39:df:f2:6e:1b:ab:3d:84:5e:e2:
6a:17:61:26:f2:f0:a4:c5:45:31:eb:cd:fa:6a:63:
05:30:c3:34:69:c8:aa:db:c8:7a:1f:17:cd:e4:c9:
da:89:71:29:99:82:43:26:f5:95:d2:b0:93:d3:56:
bd:ea:e6:05:9c:2a:a6:7d:e7:78:3e:58:36:2b:dc:
9e:6f:39:35:45:4d:77:36:ba:38:c8:94:de:e9:a9:
74:4d:70:ae:ef:41:99:20:04:4c:a4:be:e0:58:cd:
8b:8c:e0:b7:ee:20:11:bc:27:8f:d2:55:0b:70:4d:
1e:49:30:90:7b:30:02:3a:57:08:d6:27:9a:f3:4c:
98:67:0a:b6:30:9b:7f:ba:6b:61:26:ef:9f:7a:b3:
ec:fb:a3:95:21:88:6b:ec:0f:d0:4e:99:81:3e:3f:
5b:25:d3:2c:a4:94:8f:a5:59:35:79:cc:b2:07:d1:
8f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EC:67:5C:94:A9:62:34:0C:0B:5B:B5:BF:07:B3:88:EB:F2:45:D7
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:47:26:79:3a:15:fb:0f:2e:78:bd:6d:d6:83:ac:a3:f6:92:
cc:8d:3e:ba:3e:d8:c1:1a:63:0e:30:25:3a:de:55:a5:c8:07:
68:a5:1d:d8:81:35:57:79:af:48:b9:f6:ac:15:be:72:5a:da:
00:a0:93:73:b4:f3:11:34:9e:dd:b1:df:0c:ca:8a:58:f3:22:
0a:3c:33:c5:8d:7f:13:14:99:a5:ea:99:9c:69:bf:92:c0:06:
8a:ae:54:78:2d:c3:57:65:08:be:b0:ae:41:fa:64:fd:72:e7:
46:cc:f4:51:10:88:41:23:3f:8f:d9:41:d8:77:94:75:f5:73:
00:35:8b:c7:33:27:a6:b6:be:0c:d9:60:a6:52:80:80:34:0b:
ba:7b:11:2a:45:7a:16:52:64:7b:e4:a7:d4:9b:73:a7:ee:b2:
6e:e9:0e:3e:23:e1:1c:54:de:6f:27:96:b7:e4:cf:41:e1:b3:
59:a7:d8:c9:82:ac:f0:e2:18:98:e9:69:70:5b:c3:68:8a:dc:
95:56:5e:45:fe:98:06:e8:f7:04:4d:43:40:36:9b:9c:79:a3:
9e:ea:22:14:2f:46:7d:45:11:28:8e:c4:17:e8:4b:87:51:e0:
82:f9:b1:11:46:94:22:f4:29:16:b4:34:71:99:cb:e7:d5:81:
eb:f4:0c:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GP3kt9GbK8vbEPfshlmaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMTBlMzhlZDU1ZTMxODVhZWQ2ZjA3OWY4YmI5YmYxMmQ0
NDQ4ZGIwHhcNMjUwODA0MDgwMDUxWhcNMjUwODA1MDgwMDUxWjAzMTEwLwYDVQQD
EygyMGVjNjc1Yzk0YTk2MjM0MGMwYjViYjViZjA3YjM4OGViZjI0NWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxszvB9dNJaACPk9qI0HCHNH6QMh8
L5XnHMjqMqd6d0pu1wn0Y9lrWryw6VlJiR5DGRpMM6CKl76u5sHCcUAQQaxr2uU/
PhJ7oU8j+fXkJTnf8m4bqz2EXuJqF2Em8vCkxUUx6836amMFMMM0aciq28h6HxfN
5MnaiXEpmYJDJvWV0rCT01a96uYFnCqmfed4Plg2K9yebzk1RU13Nro4yJTe6al0
TXCu70GZIARMpL7gWM2LjOC37iARvCeP0lULcE0eSTCQezACOlcI1iea80yYZwq2
MJt/umthJu+ferPs+6OVIYhr7A/QTpmBPj9bJdMspJSPpVk1ecyyB9GPfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDsZ1yUqWI0DAtbtb8Hs4jr8kXXMB8GA1UdIwQY
MBaAFB0Q447VXjGFrtbwefi7m/EtREjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMjM5NjktZmZiMC00ZTU3LWEzNmEt
NzYwZjZiNmFhYmMxLzEvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lMjM5NjktZmZiMC00ZTU3LWEzNmEtNzYwZjZiNmFhYmMx
LzEvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUcmeToV
+w8ueL1t1oOso/aSzI0+uj7YwRpjDjAlOt5VpcgHaKUd2IE1V3mvSLn2rBW+clra
AKCTc7TzETSe3bHfDMqKWPMiCjwzxY1/ExSZpeqZnGm/ksAGiq5UeC3DV2UIvrCu
Qfpk/XLnRsz0URCIQSM/j9lB2HeUdfVzADWLxzMnpra+DNlgplKAgDQLunsRKkV6
FlJke+Sn1Jtzp+6ybukOPiPhHFTebyeWt+TPQeGzWafYyYKs8OIYmOlpcFvDaIrc
lVZeRf6YBuj3BE1DQDabnHmjnuoiFC9GfUURKI7EF+hLh1HggvmxEUaUIvQpFrQ0
cZnL59WB6/QMwg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:58 2025 by rpki-client