Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
File: HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json)
Hash identifier: RQ//ixZnDhi4PK2Z5hcaudB3s9hYCpvNnjrUq8P/nvk=
Subject key identifier: C0:84:31:BD:3F:EB:6C:68:48:61:4C:2D:C2:BC:F9:54:74:A1:97:21
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial: 01984A0A048A33EEBE355B4668AAA7148C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
Manifest number: 1001
Signing time: Sun 27 Jul 2025 04:00:27 +0000
Manifest this update: Sun 27 Jul 2025 04:00:27 +0000
Manifest next update: Mon 28 Jul 2025 04:00:27 +0000
Files and hashes: 1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: cuLlf5tNaUtv6pszbvV3biIbL0XTmonJesCoS23Ddho=)
2: eOnuHiStsO3O13pB5kbTSUIQpmU.roa (hash: kcBz+mRqFqqkTHe8HhDtwvud8iIZt9DbOQoP1ie6taQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:04:8a:33:ee:be:35:5b:46:68:aa:a7:14:8c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Validity
Not Before: Jul 27 04:00:27 2025 GMT
Not After : Jul 28 04:00:27 2025 GMT
Subject: CN=c08431bd3feb6c6848614c2dc2bcf95474a19721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:dc:c7:d9:cd:53:d7:9a:e7:af:c3:76:79:
b5:31:d1:63:e6:7b:9f:51:52:31:fb:e1:36:99:56:
63:9f:95:73:91:00:33:68:95:a6:38:2e:db:cf:51:
97:94:51:c4:ef:2f:02:29:fa:0b:31:a8:88:1f:80:
e0:79:20:76:b4:1d:aa:64:51:47:93:59:86:44:5e:
25:88:00:3d:30:60:7d:62:14:5c:d5:f4:44:97:7b:
29:86:0b:5e:d4:b1:cc:b6:ad:35:59:59:8b:23:b6:
db:cb:0b:b2:19:16:68:d3:a9:e6:7c:8b:af:e0:62:
af:33:8d:94:10:4a:33:8a:3b:43:01:31:3a:d6:af:
c3:02:6f:50:44:55:f1:a5:8b:2b:91:40:0b:7d:17:
37:2d:67:3e:76:a7:a4:c7:8d:dd:6c:99:ec:27:f4:
88:09:8a:d2:19:6e:3b:6e:e9:f9:e4:aa:77:c6:6b:
ba:b2:c8:aa:9b:e8:cf:9e:bf:e0:01:5c:4a:b3:4b:
b8:45:47:b7:35:d7:37:88:84:68:54:c9:b5:b9:68:
5e:c0:75:f0:21:2e:82:fe:68:70:ce:30:c6:8f:26:
63:ae:fb:fe:1b:1f:3c:79:c1:c8:d4:38:38:e1:14:
e5:19:17:fa:3e:62:19:36:50:62:06:9c:70:46:88:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:84:31:BD:3F:EB:6C:68:48:61:4C:2D:C2:BC:F9:54:74:A1:97:21
X509v3 Authority Key Identifier:
keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4b:a2:62:54:e0:d6:34:67:07:f7:87:e0:3f:f8:d6:85:71:
87:0b:29:97:22:38:8f:f3:c9:ca:2b:af:a5:16:d1:ba:c8:8e:
ae:e0:51:bf:70:4c:3b:a9:2b:ac:5a:0f:f7:1d:2b:df:b7:e3:
c9:4f:08:5b:48:c9:bc:68:ee:2d:ba:ce:dd:bf:c2:6a:ec:a4:
38:3f:39:44:69:7f:61:e8:d4:6b:2a:11:a9:97:0b:8a:99:cb:
82:04:d5:fe:f2:5b:e2:ad:88:7e:2d:f6:49:a7:46:2e:f0:4f:
cd:39:06:7a:96:b5:09:27:08:33:8b:9c:63:28:9c:1f:ba:ae:
5e:24:e3:c3:3e:d0:bb:cd:ec:10:20:83:ce:60:d5:ab:09:dd:
bf:ef:c1:2f:ed:15:f0:65:ee:f1:d0:e6:0c:c7:62:af:a3:4e:
77:2a:df:c2:31:06:30:24:2e:7b:6c:d2:5f:11:34:f3:af:e4:
b7:3a:8b:9c:9e:3f:51:78:62:6e:38:29:6e:e2:e2:6e:f6:0e:
2a:47:1a:b5:f7:b5:fe:c6:8d:c6:fb:09:30:e9:9c:78:bf:bf:
4d:bb:73:34:ce:10:d4:81:62:8b:57:d2:c1:2c:23:5c:cb:0b:
9e:78:80:3e:c4:d5:c6:e4:be:5a:4e:ad:f3:62:35:b8:89:56:
e7:67:7e:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCgSKM+6+NVtGaKqnFIwfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNzY3OTQzNTczZDZiMzVlYmFjZTFhMmYzNDhjYTNmMDA1
NmMxYWIwHhcNMjUwNzI3MDQwMDI3WhcNMjUwNzI4MDQwMDI3WjAzMTEwLwYDVQQD
EyhjMDg0MzFiZDNmZWI2YzY4NDg2MTRjMmRjMmJjZjk1NDc0YTE5NzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhTcx9nNU9ea56/Ddnm1MdFj5nuf
UVIx++E2mVZjn5VzkQAzaJWmOC7bz1GXlFHE7y8CKfoLMaiIH4DgeSB2tB2qZFFH
k1mGRF4liAA9MGB9YhRc1fREl3sphgte1LHMtq01WVmLI7bbywuyGRZo06nmfIuv
4GKvM42UEEozijtDATE61q/DAm9QRFXxpYsrkUALfRc3LWc+dqekx43dbJnsJ/SI
CYrSGW47bun55Kp3xmu6ssiqm+jPnr/gAVxKs0u4RUe3Ndc3iIRoVMm1uWhewHXw
IS6C/mhwzjDGjyZjrvv+Gx88ecHI1Dg44RTlGRf6PmIZNlBiBpxwRoh+WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCEMb0/62xoSGFMLcK8+VR0oZchMB8GA1UdIwQY
MBaAFB52eUNXPWs166zhovNIyj8AVsGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZTA5NTctYzk1MS00NTAyLTlmZTct
YTQwOGQ2N2JmZjM3LzEvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83ZTA5NTctYzk1MS00NTAyLTlmZTctYTQwOGQ2N2JmZjM3
LzEvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0uiYlTg
1jRnB/eH4D/41oVxhwsplyI4j/PJyiuvpRbRusiOruBRv3BMO6krrFoP9x0r37fj
yU8IW0jJvGjuLbrO3b/CauykOD85RGl/YejUayoRqZcLipnLggTV/vJb4q2Ifi32
SadGLvBPzTkGepa1CScIM4ucYyicH7quXiTjwz7Qu83sECCDzmDVqwndv+/BL+0V
8GXu8dDmDMdir6NOdyrfwjEGMCQue2zSXxE086/ktzqLnJ4/UXhibjgpbuLibvYO
Kkcatfe1/saNxvsJMOmceL+/TbtzNM4Q1IFii1fSwSwjXMsLnniAPsTVxuS+Wk6t
82I1uIlW52d+7g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:27:02 2025 by rpki-client