Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
File: HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json)
Hash identifier: wY4s2Igbq4rtZKhgZSOsibY08pDkJWOoY3NtX9U8LMI=
Subject key identifier: 74:DC:65:9A:DA:70:D2:34:16:6B:CF:A0:E1:D8:14:14:18:00:62:CF
Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
Certificate issuer: /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Certificate serial: 0198541FE1B05E74584A2C51C1E9B2CC0089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
Manifest number: 0CA7
Signing time: Tue 29 Jul 2025 03:00:32 +0000
Manifest this update: Tue 29 Jul 2025 03:00:32 +0000
Manifest next update: Wed 30 Jul 2025 03:00:32 +0000
Files and hashes: 1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: phsWZNM6aUW3IsMJXcz2UnKovXNhAEdN2djTsVzdUY0=)
2: j4nA-5dcYXHEDW8ahrcEwwSSveI.roa (hash: B4JnjqZ19Obadp4A6xUEPeEjzogbr5ee2D1zydPWFcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:e1:b0:5e:74:58:4a:2c:51:c1:e9:b2:cc:00:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Validity
Not Before: Jul 29 03:00:32 2025 GMT
Not After : Jul 30 03:00:32 2025 GMT
Subject: CN=74dc659ada70d234166bcfa0e1d81414180062cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:e5:f7:41:3e:57:90:a7:a2:5e:b2:c0:3a:
4b:b7:9c:c4:9e:a5:5a:a3:d9:c4:05:63:43:7f:73:
1d:0f:31:86:bf:90:75:22:4f:f2:10:be:47:dd:d0:
be:56:56:78:ca:f4:05:37:a4:96:46:d3:86:35:5e:
11:84:49:07:3b:e0:a8:f1:6d:08:16:4e:50:e6:25:
11:81:c2:5f:a0:5c:22:66:50:fa:5a:40:c2:a4:4c:
97:23:41:96:48:e3:47:5a:1d:72:ba:27:1b:a8:b0:
0d:f3:50:5c:67:e6:7f:4f:c8:3f:ae:5d:a8:ca:b3:
dc:ec:03:e5:bb:53:8b:23:a2:66:5c:be:45:8b:93:
ff:9e:6d:df:9e:5c:b6:8c:1f:9a:5d:1e:1d:0d:29:
eb:4f:a2:a9:a3:e7:42:dc:04:e1:78:1a:0b:cc:9d:
48:90:8f:ff:3d:6e:8f:d3:4e:e2:ac:d6:71:95:2d:
b3:f5:79:2a:f9:0e:53:78:53:f2:df:48:a4:1a:fc:
29:fc:07:87:b3:09:e5:d2:62:bf:3d:b9:5f:db:f3:
85:cf:28:e2:fb:78:2d:02:a6:5b:da:ee:17:a8:ca:
6a:99:61:4d:b6:ea:ca:ad:37:d3:e6:ae:88:fc:f0:
7e:aa:4c:db:9e:82:0a:4f:ec:7d:f5:a3:e3:a1:a5:
74:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DC:65:9A:DA:70:D2:34:16:6B:CF:A0:E1:D8:14:14:18:00:62:CF
X509v3 Authority Key Identifier:
keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e9:89:b9:b8:ac:ef:ee:fb:29:2d:81:4e:5a:19:b7:f8:80:
62:5e:8a:79:ea:1d:e1:ad:5c:84:c2:24:4c:ad:fe:13:9a:31:
45:e0:31:55:60:42:5e:3b:c4:39:7f:40:fc:00:a5:96:f5:5b:
4c:a8:b6:e4:f5:ed:6c:fc:2c:3a:f8:e5:8c:1c:53:2e:09:9f:
1f:8e:7a:86:03:12:a4:27:aa:35:08:59:fe:2a:23:46:e0:59:
97:96:fb:7c:fa:74:0a:4a:68:a6:43:c4:c6:e1:f7:a6:83:3a:
10:0f:00:70:ad:a0:bd:a5:dd:6e:19:c6:02:6a:be:bc:b0:80:
93:89:6e:71:e9:73:9d:b0:c5:df:6b:5a:d9:a5:e7:85:ff:c6:
30:08:99:08:c6:cd:3e:96:3f:f4:7f:52:cb:a6:8b:3f:9b:08:
ab:fb:98:be:2c:6f:8c:91:c7:22:d0:f2:c5:2a:5a:72:ac:d5:
20:d2:42:d1:42:30:81:1b:f4:e8:3c:15:b8:78:7d:4c:4a:6d:
a6:26:86:97:2a:3c:e2:18:01:25:57:9f:ef:42:1a:af:b0:7f:
8e:87:3d:8b:9f:a0:3b:97:62:ef:3e:4b:01:8b:19:c2:22:5b:
62:cf:ed:f5:9a:4d:ac:85:f4:60:6b:d1:a8:be:2a:11:94:7a:
ab:de:ed:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUH+GwXnRYSixRwemyzACJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTg5NTUxMjhiY2JjNzY5M2ViMWE5MzdmZjI4YjQwZWIz
NDQ4YTAwHhcNMjUwNzI5MDMwMDMyWhcNMjUwNzMwMDMwMDMyWjAzMTEwLwYDVQQD
Eyg3NGRjNjU5YWRhNzBkMjM0MTY2YmNmYTBlMWQ4MTQxNDE4MDA2MmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbnl90E+V5Cnol6ywDpLt5zEnqVa
o9nEBWNDf3MdDzGGv5B1Ik/yEL5H3dC+VlZ4yvQFN6SWRtOGNV4RhEkHO+Co8W0I
Fk5Q5iURgcJfoFwiZlD6WkDCpEyXI0GWSONHWh1yuicbqLAN81BcZ+Z/T8g/rl2o
yrPc7APlu1OLI6JmXL5Fi5P/nm3fnly2jB+aXR4dDSnrT6Kpo+dC3ATheBoLzJ1I
kI//PW6P007irNZxlS2z9Xkq+Q5TeFPy30ikGvwp/AeHswnl0mK/Pblf2/OFzyji
+3gtAqZb2u4XqMpqmWFNturKrTfT5q6I/PB+qkzbnoIKT+x99aPjoaV05wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTcZZracNI0FmvPoOHYFBQYAGLPMB8GA1UdIwQY
MBaAFByYlVEovLx2k+sak3/yi0DrNEigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83Yzg3MWQtODUzZS00YTJkLWE4ZDQt
YmY4MTNjZjA4MWI3LzEvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83Yzg3MWQtODUzZS00YTJkLWE4ZDQtYmY4MTNjZjA4MWI3
LzEvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+mJubis
7+77KS2BTloZt/iAYl6Keeod4a1chMIkTK3+E5oxReAxVWBCXjvEOX9A/ACllvVb
TKi25PXtbPwsOvjljBxTLgmfH456hgMSpCeqNQhZ/iojRuBZl5b7fPp0CkpopkPE
xuH3poM6EA8AcK2gvaXdbhnGAmq+vLCAk4lucelznbDF32ta2aXnhf/GMAiZCMbN
PpY/9H9Sy6aLP5sIq/uYvixvjJHHItDyxSpacqzVINJC0UIwgRv06DwVuHh9TEpt
piaGlyo84hgBJVef70Iar7B/joc9i5+gO5di7z5LAYsZwiJbYs/t9ZpNrIX0YGvR
qL4qEZR6q97tBQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:16:48 2025 by rpki-client