Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json)
Hash identifier: /EFq+RZaqvbpL8VwU3vAiu2FXI2BZQEoJXmAlpjpYn8=
Subject key identifier: AF:D0:68:EA:DB:A5:51:C4:83:99:2F:F6:00:F7:C1:7D:33:AB:7F:E4
Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Certificate serial: 01984A0A1D5E60F5C356009B1167E8B09325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 04:00:33 +0000
Manifest this update: Sun 27 Jul 2025 04:00:33 +0000
Manifest next update: Mon 28 Jul 2025 04:00:33 +0000
Files and hashes: 1: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: sILA2gj5JU3c9sVWGXljoXCyyDwxSTiP7kWUiUg2xZQ=)
2: qzdc_fwaLRJwIIHpIg8vA5h4lo0.roa (hash: V/FGmYc5ZjOuTnWlxFYXLE8AFUo6wdD1TCze3ez9KOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:1d:5e:60:f5:c3:56:00:9b:11:67:e8:b0:93:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Validity
Not Before: Jul 27 04:00:33 2025 GMT
Not After : Jul 28 04:00:33 2025 GMT
Subject: CN=afd068eadba551c483992ff600f7c17d33ab7fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:59:49:e7:31:fa:8e:85:f3:29:b4:e6:77:
a6:fe:a7:b0:f1:dd:df:b0:81:c2:34:af:33:14:7d:
22:fa:05:c1:04:70:af:c1:17:1c:f9:ee:e9:44:5f:
6c:c0:5d:b1:9a:a8:06:06:e6:b7:6c:e8:ca:d3:39:
47:d4:04:4e:22:a9:42:f3:5f:8b:38:e1:28:8d:72:
52:f4:cc:ca:60:ca:99:6e:2e:1e:23:12:89:8a:d5:
2c:49:b5:76:90:58:f1:d7:60:3a:75:ef:eb:36:fb:
4e:49:19:2f:41:76:62:41:f1:66:04:96:fd:2e:74:
02:a7:6a:ea:0e:17:3b:ab:f5:95:4a:71:f7:29:a2:
ea:ba:eb:72:94:ec:9c:e0:86:28:8a:6c:c3:47:68:
07:e7:10:93:0b:3c:82:ef:8a:b8:77:9c:96:82:cf:
13:0b:65:94:04:96:e2:47:e4:2c:da:6e:91:fa:cc:
ff:23:af:0d:79:c5:39:38:6a:f8:a9:ce:a1:c4:7f:
19:b9:d8:f8:6f:d5:fe:4d:ed:51:c0:de:d5:5e:db:
53:44:67:e4:2e:70:29:6a:fc:b3:06:54:9b:0d:94:
88:65:05:89:6a:cd:d3:fd:dc:55:a2:5e:df:96:47:
6a:17:92:33:09:a1:07:02:86:b0:7a:46:39:4f:c6:
e0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D0:68:EA:DB:A5:51:C4:83:99:2F:F6:00:F7:C1:7D:33:AB:7F:E4
X509v3 Authority Key Identifier:
keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:26:8e:50:3c:5c:a7:3c:1a:b3:33:c9:99:be:43:d6:b1:15:
a8:09:5c:4f:e2:46:c6:f0:63:0d:d2:a8:37:8f:e2:48:a4:05:
cf:1c:d4:8f:37:55:2b:7f:14:02:98:df:e5:e4:fb:d3:70:37:
b9:2a:23:8d:93:0e:1b:1e:aa:bb:c6:cd:76:c9:34:3d:f3:3a:
0a:f6:99:21:e8:5a:63:59:15:98:5f:80:c5:c4:96:04:2f:d2:
bc:83:75:7a:21:93:c8:3f:f5:fc:51:95:57:7f:80:d1:b8:39:
61:1b:9b:e2:b8:2e:9c:23:34:a2:71:e0:e4:67:81:e1:4b:0a:
08:49:9a:b4:00:3f:30:2f:52:0b:e5:10:46:40:2a:d5:c8:7e:
57:2a:85:bc:86:77:9a:25:e5:59:70:47:f2:c0:e8:48:bc:6b:
9e:8e:aa:9f:f9:31:93:f1:71:3b:aa:cc:55:e5:5f:7e:1d:31:
0d:59:fe:5c:1a:1c:7d:eb:f2:f0:e0:c1:7d:74:cf:f7:75:e3:
29:7a:39:46:c1:b5:f8:90:a1:a7:07:f5:08:a2:6e:3c:ed:21:
58:65:3f:ac:38:6a:f8:e5:08:92:1d:df:b5:e7:b5:de:e7:37:
ac:fb:cf:bd:34:96:6d:0e:18:03:eb:dc:30:cc:47:95:3d:0c:
6b:e9:28:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCh1eYPXDVgCbEWfosJMlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZGY1NGJkYzEwNDEwNmNkYjI5OWUwMWVmMDhhNjA5ODVl
YzM1ZmIwHhcNMjUwNzI3MDQwMDMzWhcNMjUwNzI4MDQwMDMzWjAzMTEwLwYDVQQD
EyhhZmQwNjhlYWRiYTU1MWM0ODM5OTJmZjYwMGY3YzE3ZDMzYWI3ZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl25ZSecx+o6F8ym05nem/qew8d3f
sIHCNK8zFH0i+gXBBHCvwRcc+e7pRF9swF2xmqgGBua3bOjK0zlH1AROIqlC81+L
OOEojXJS9MzKYMqZbi4eIxKJitUsSbV2kFjx12A6de/rNvtOSRkvQXZiQfFmBJb9
LnQCp2rqDhc7q/WVSnH3KaLquutylOyc4IYoimzDR2gH5xCTCzyC74q4d5yWgs8T
C2WUBJbiR+Qs2m6R+sz/I68NecU5OGr4qc6hxH8Zudj4b9X+Te1RwN7VXttTRGfk
LnApavyzBlSbDZSIZQWJas3T/dxVol7flkdqF5IzCaEHAoawekY5T8bgQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/QaOrbpVHEg5kv9gD3wX0zq3/kMB8GA1UdIwQY
MBaAFITfVL3BBBBs2ymeAe8IpgmF7DX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE45VXZjRUVFR3piS1o0Qjd3aW1DWVhzTmZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9mOTNkYTItMTQ1Ny00Y2Q5LTkwNzMt
ODA2YTMxNWRkMWZkLzEvaE45VXZjRUVFR3piS1o0Qjd3aW1DWVhzTmZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9mOTNkYTItMTQ1Ny00Y2Q5LTkwNzMtODA2YTMxNWRkMWZk
LzEvaE45VXZjRUVFR3piS1o0Qjd3aW1DWVhzTmZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvyaOUDxc
pzwaszPJmb5D1rEVqAlcT+JGxvBjDdKoN4/iSKQFzxzUjzdVK38UApjf5eT703A3
uSojjZMOGx6qu8bNdsk0PfM6CvaZIehaY1kVmF+AxcSWBC/SvIN1eiGTyD/1/FGV
V3+A0bg5YRub4rgunCM0onHg5GeB4UsKCEmatAA/MC9SC+UQRkAq1ch+VyqFvIZ3
miXlWXBH8sDoSLxrno6qn/kxk/FxO6rMVeVffh0xDVn+XBocfevy8ODBfXTP93Xj
KXo5RsG1+JChpwf1CKJuPO0hWGU/rDhq+OUIkh3ftee13uc3rPvPvTSWbQ4YA+vc
MMxHlT0Ma+koAw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 06:00:17 2025 by rpki-client