Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier: Ux9eryVbCzQyj4mHRKrNpuZaogsip+8N5XupEUzzsQ4=
Subject key identifier: A2:DF:94:9B:1F:CB:E2:35:42:EB:95:9E:35:C1:C5:84:2D:09:85:E3
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 019848F78D5335181BC4E4BBB0CFC87C5068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number: 1342
Signing time: Sat 26 Jul 2025 23:00:39 +0000
Manifest this update: Sat 26 Jul 2025 23:00:39 +0000
Manifest next update: Sun 27 Jul 2025 23:00:39 +0000
Files and hashes: 1: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: vWRXa694tQkr2Edap8aGhPJNp+eb62Ht5TcFKOn5jbs=)
2: _TB_DSwnuCOKtWool6QsRH-BI2c.roa (hash: IfCRqnm3tSTnJ1oqOSYusfB1IFZQtEWpYBfMbK20Izo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:8d:53:35:18:1b:c4:e4:bb:b0:cf:c8:7c:50:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Jul 26 23:00:39 2025 GMT
Not After : Jul 27 23:00:39 2025 GMT
Subject: CN=a2df949b1fcbe23542eb959e35c1c5842d0985e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:ad:d5:ed:73:b4:27:3f:0e:77:25:48:11:
27:cf:01:d0:00:bb:8f:e9:8c:ff:4f:2e:57:81:b2:
6e:43:21:d0:ad:07:fa:07:77:53:9e:b7:a6:47:cd:
49:8e:99:27:85:28:d0:12:ee:a7:9d:5f:a6:72:1c:
77:81:05:fc:58:68:1a:fb:45:34:2e:74:63:7c:07:
e4:c2:69:4e:ea:2e:cf:cb:56:52:71:bf:f4:f8:d2:
35:10:9f:27:cf:d4:11:1b:09:52:ea:16:70:64:23:
95:00:db:0b:0f:84:33:2e:ee:5f:7e:39:ef:dd:a8:
0d:ca:3f:e1:61:de:9f:2d:5a:3e:43:65:5c:37:4d:
bd:88:98:ee:8e:b3:85:68:11:09:13:6a:91:c2:e1:
1e:79:fe:71:97:6b:13:55:47:03:ce:6d:43:75:b5:
52:53:df:59:96:37:53:54:59:89:1b:d5:14:9d:93:
71:0d:e0:36:d1:4d:ab:87:da:e5:de:92:47:87:bb:
8f:ce:b8:61:60:8b:25:f4:68:0c:a0:ef:92:ad:e1:
5f:76:26:cf:7e:92:65:ed:92:bd:ca:a9:a2:2f:70:
99:d8:3d:ca:5a:ee:66:d9:5b:3a:18:71:9a:26:40:
1e:ac:76:f4:a4:ca:8e:c8:9b:65:29:02:21:66:be:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DF:94:9B:1F:CB:E2:35:42:EB:95:9E:35:C1:C5:84:2D:09:85:E3
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:90:bb:f0:56:77:f1:db:20:d4:f2:a7:30:24:bf:8d:87:7b:
31:4d:09:ed:86:98:0d:89:b6:d5:49:c9:76:34:ef:14:62:19:
b1:96:a2:7c:bb:ef:8b:0d:3f:06:8a:21:b7:b0:e4:e3:39:ef:
6c:44:6d:1f:a0:f6:af:e6:1d:e6:12:fa:9a:ce:2e:2c:11:e8:
42:98:6b:8a:05:ae:1c:29:ae:a1:67:11:fe:fa:01:aa:b3:2c:
1e:b3:6a:a6:df:0c:89:f2:66:24:ea:56:eb:59:bc:25:e7:25:
92:fa:0a:32:1a:7b:12:62:b2:d6:f2:ed:63:c4:c5:97:aa:2d:
76:9a:3a:8d:1f:a8:00:0e:c1:af:a4:de:ca:11:40:db:a7:65:
cd:70:20:35:00:dd:a7:3e:e5:91:2f:a5:02:57:22:60:b6:97:
ec:59:a3:63:88:a6:b4:8b:7e:36:ff:b4:56:a0:e4:25:b0:7f:
99:0e:60:ae:ce:18:1a:5c:8a:20:33:97:5f:80:44:69:f9:01:
04:b9:8d:39:06:bb:e4:f3:5f:92:bd:e1:6e:23:5c:94:e6:f8:
a1:22:da:45:f3:00:d3:a3:07:a5:98:9c:4a:e6:1b:c3:be:f4:
51:7b:d5:e2:e1:ba:70:5c:45:9a:90:6e:94:09:66:97:92:bd:
20:a7:6d:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI941TNRgbxOS7sM/IfFBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjliY2JkNWNmY2MxOTVlNzZiNzBhMWJmMGRkOTkxZWM3
ZTMzZDQwHhcNMjUwNzI2MjMwMDM5WhcNMjUwNzI3MjMwMDM5WjAzMTEwLwYDVQQD
EyhhMmRmOTQ5YjFmY2JlMjM1NDJlYjk1OWUzNWMxYzU4NDJkMDk4NWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArumt1e1ztCc/DnclSBEnzwHQALuP
6Yz/Ty5XgbJuQyHQrQf6B3dTnremR81JjpknhSjQEu6nnV+mchx3gQX8WGga+0U0
LnRjfAfkwmlO6i7Py1ZScb/0+NI1EJ8nz9QRGwlS6hZwZCOVANsLD4QzLu5ffjnv
3agNyj/hYd6fLVo+Q2VcN029iJjujrOFaBEJE2qRwuEeef5xl2sTVUcDzm1DdbVS
U99ZljdTVFmJG9UUnZNxDeA20U2rh9rl3pJHh7uPzrhhYIsl9GgMoO+SreFfdibP
fpJl7ZK9yqmiL3CZ2D3KWu5m2Vs6GHGaJkAerHb0pMqOyJtlKQIhZr746wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLflJsfy+I1QuuVnjXBxYQtCYXjMB8GA1UdIwQY
MBaAFB8pvL1c/MGV52twob8N2ZHsfjPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEt
ZDRkMzVkOTk5ODFkLzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEtZDRkMzVkOTk5ODFk
LzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJC78FZ3
8dsg1PKnMCS/jYd7MU0J7YaYDYm21UnJdjTvFGIZsZaifLvviw0/Booht7Dk4znv
bERtH6D2r+Yd5hL6ms4uLBHoQphrigWuHCmuoWcR/voBqrMsHrNqpt8MifJmJOpW
61m8JeclkvoKMhp7EmKy1vLtY8TFl6otdpo6jR+oAA7Br6TeyhFA26dlzXAgNQDd
pz7lkS+lAlciYLaX7FmjY4imtIt+Nv+0VqDkJbB/mQ5grs4YGlyKIDOXX4BEafkB
BLmNOQa75PNfkr3hbiNclOb4oSLaRfMA06MHpZicSuYbw770UXvV4uG6cFxFmpBu
lAlml5K9IKdttQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:06:19 2025 by rpki-client