Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
File: HxKTy74vaSVA08xaboI2YElMQGM.mft (raw, json)
Hash identifier: Qxc3TDCyDaSl3RLDH/wur/RdmbENY1WUIQv4rv2YwhQ=
Subject key identifier: 30:3F:AE:B5:9A:BE:33:91:DA:7B:36:88:9D:2C:5C:D7:94:F7:0A:02
Authority key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
Certificate issuer: /CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Certificate serial: 01984A0A409FEF1406BB6EE3B9ABD0DEDE85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
Manifest number: 0D84
Signing time: Sun 27 Jul 2025 04:00:42 +0000
Manifest this update: Sun 27 Jul 2025 04:00:42 +0000
Manifest next update: Mon 28 Jul 2025 04:00:42 +0000
Files and hashes: 1: HxKTy74vaSVA08xaboI2YElMQGM.crl (hash: m1wR/MCKk+DqKQ4nZFQXbTxekI6YhcoGjJOKtMKaOwY=)
2: qBbXPlomssD9zrP_xFljqdR0LbI.roa (hash: Gow+NF8w68xqHQfvdIHVUtAvsOi+ZzLSZN8/SeU/9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:40:9f:ef:14:06:bb:6e:e3:b9:ab:d0:de:de:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Validity
Not Before: Jul 27 04:00:42 2025 GMT
Not After : Jul 28 04:00:42 2025 GMT
Subject: CN=303faeb59abe3391da7b36889d2c5cd794f70a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:d1:ba:46:79:29:54:b4:89:c9:3b:9c:b6:
50:c5:65:26:62:b1:01:85:6e:4f:32:0a:58:78:b5:
39:63:c1:df:73:80:fa:4f:6b:f7:87:f7:a9:bd:1c:
83:fd:6b:fa:ec:00:42:c3:21:50:5b:64:40:6f:a3:
b1:ac:d2:33:24:42:4a:ea:29:49:18:06:bc:34:d5:
d8:bb:31:c2:28:b6:c0:e7:a9:8a:c6:90:86:c5:bf:
c3:0f:9c:dc:f9:dd:59:5c:c5:37:d5:9d:35:db:c7:
12:d0:12:2c:77:8f:8f:94:5f:d1:76:33:21:c4:ef:
1b:94:0e:ad:7f:1c:10:da:74:48:7c:1d:ad:57:53:
f7:93:13:6f:69:c7:e9:de:65:63:c0:ac:9d:cc:93:
a6:95:66:bc:db:da:a6:28:85:ec:ac:00:a8:90:0e:
c6:d8:a7:fb:62:af:8b:1a:24:79:86:13:99:1d:76:
58:c3:52:8d:ce:44:2a:ce:53:0a:95:b2:48:e3:5d:
19:32:1f:65:7b:0f:c6:de:55:db:70:3f:53:e3:7e:
2e:48:58:14:ba:bf:5a:a7:54:8c:c0:ef:91:cd:40:
38:5a:27:71:36:e5:b8:dc:6a:fd:2a:73:d0:ae:cd:
4d:7b:b4:3c:e2:9e:81:16:2c:7a:5b:c6:f6:ba:40:
40:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3F:AE:B5:9A:BE:33:91:DA:7B:36:88:9D:2C:5C:D7:94:F7:0A:02
X509v3 Authority Key Identifier:
keyid:1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fb:c7:b0:29:76:31:47:4e:81:8c:ec:90:77:54:85:6f:7c:
e5:bf:ba:c3:ef:4f:23:86:11:cf:88:98:8f:38:b6:1c:38:5e:
4f:6c:bf:f4:7a:dd:71:3f:61:21:84:a7:6c:83:99:3f:7d:08:
ba:e1:b1:df:73:ed:a8:a9:32:55:d3:d4:1d:1a:8b:72:67:96:
06:d0:92:0c:40:00:dd:f3:61:b7:87:b8:7e:88:54:5c:62:36:
15:23:2a:aa:c6:3f:37:c6:1e:75:d7:3f:c3:98:ba:c6:1d:99:
77:c0:3f:1c:86:89:bd:39:b5:bc:7d:19:0b:9f:19:f1:da:5a:
f2:66:6d:5b:6f:6e:5b:af:0f:6a:94:72:9b:d5:f8:d8:be:00:
1d:f0:c5:3a:d2:a1:25:fe:ef:57:77:ab:b8:38:6b:92:7a:f7:
df:31:b1:79:f8:8c:66:6b:41:68:1e:9b:cb:1b:fb:50:3d:ec:
6a:f7:61:2a:ff:b9:dc:a6:3c:7a:a3:4a:50:63:43:36:29:ad:
cf:e5:74:08:fc:13:d9:a9:61:c7:9c:76:5c:91:e9:5f:5e:b6:
43:2c:80:44:1c:79:23:43:fd:30:d7:41:ab:6e:d6:a8:e4:97:
45:6f:43:11:97:dd:b7:cc:c9:c9:33:31:0f:80:41:c3:db:cd:
82:c0:8c:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCkCf7xQGu27juavQ3t6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTI5M2NiYmUyZjY5MjU0MGQzY2M1YTZlODIzNjYwNDk0
YzQwNjMwHhcNMjUwNzI3MDQwMDQyWhcNMjUwNzI4MDQwMDQyWjAzMTEwLwYDVQQD
EygzMDNmYWViNTlhYmUzMzkxZGE3YjM2ODg5ZDJjNWNkNzk0ZjcwYTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXzRukZ5KVS0ick7nLZQxWUmYrEB
hW5PMgpYeLU5Y8Hfc4D6T2v3h/epvRyD/Wv67ABCwyFQW2RAb6OxrNIzJEJK6ilJ
GAa8NNXYuzHCKLbA56mKxpCGxb/DD5zc+d1ZXMU31Z0128cS0BIsd4+PlF/RdjMh
xO8blA6tfxwQ2nRIfB2tV1P3kxNvacfp3mVjwKydzJOmlWa829qmKIXsrACokA7G
2Kf7Yq+LGiR5hhOZHXZYw1KNzkQqzlMKlbJI410ZMh9lew/G3lXbcD9T434uSFgU
ur9ap1SMwO+RzUA4WidxNuW43Gr9KnPQrs1Ne7Q84p6BFix6W8b2ukBAfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDA/rrWavjOR2ns2iJ0sXNeU9woCMB8GA1UdIwQY
MBaAFB8Sk8u+L2klQNPMWm6CNmBJTEBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQt
MjY5NzE1OTlhNTU0LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQtMjY5NzE1OTlhNTU0
LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPvHsCl2
MUdOgYzskHdUhW985b+6w+9PI4YRz4iYjzi2HDheT2y/9HrdcT9hIYSnbIOZP30I
uuGx33PtqKkyVdPUHRqLcmeWBtCSDEAA3fNht4e4fohUXGI2FSMqqsY/N8Yeddc/
w5i6xh2Zd8A/HIaJvTm1vH0ZC58Z8dpa8mZtW29uW68PapRym9X42L4AHfDFOtKh
Jf7vV3eruDhrknr33zGxefiMZmtBaB6byxv7UD3savdhKv+53KY8eqNKUGNDNimt
z+V0CPwT2alhx5x2XJHpX162QyyARBx5I0P9MNdBq27WqOSXRW9DEZfdt8zJyTMx
D4BBw9vNgsCMFQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:07:51 2025 by rpki-client