Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
File: HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json)
Hash identifier: P1odj28vJ+taIavII8oWso9Qw42XSzoceJbhqKnUQdU=
Subject key identifier: 3A:6B:D3:7B:E0:16:A8:06:B2:8D:DA:F1:47:7F:B6:DB:BF:8B:1F:71
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial: 0198477843EC9523AE890445BC15C21EC303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
Manifest number: 0F8E
Signing time: Sat 26 Jul 2025 16:02:00 +0000
Manifest this update: Sat 26 Jul 2025 16:02:00 +0000
Manifest next update: Sun 27 Jul 2025 16:02:00 +0000
Files and hashes: 1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: 5krozYxsMBfKtMsdiiLCATspIywo1alf2XKO4VFC3mY=)
2: kk1RvulsDSTUcsB-uonoLPTmX_c.roa (hash: 8TFkWIExCyZU8KrfnY1OXWc5V95rzbge2YPptcmVOsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:43:ec:95:23:ae:89:04:45:bc:15:c2:1e:c3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Validity
Not Before: Jul 26 16:02:00 2025 GMT
Not After : Jul 27 16:02:00 2025 GMT
Subject: CN=3a6bd37be016a806b28ddaf1477fb6dbbf8b1f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:73:9e:c4:de:0c:10:d5:2d:6c:c3:de:15:d3:
e3:2b:4c:e0:61:25:b4:15:17:fe:e1:0a:45:cb:44:
b9:47:c8:31:69:94:43:1e:84:59:56:a7:04:b2:89:
75:c9:73:07:b3:64:40:14:c9:c2:8b:7c:49:c9:f1:
e2:e4:6f:2b:9f:10:8a:fe:24:f1:c3:35:c2:21:a6:
51:06:48:17:75:67:73:bc:25:65:ee:06:93:48:58:
71:4c:d8:c0:2a:6e:cb:0d:66:63:43:ae:1b:01:02:
c5:fa:33:cc:c3:cc:81:ae:2d:04:63:6c:12:75:71:
e6:b3:b6:6b:35:3d:12:f6:43:20:24:0a:b6:5a:7d:
b0:c8:4f:e2:3d:25:c4:5c:c6:f3:d2:2a:0a:fc:be:
a5:36:7a:d5:53:1d:fe:7d:74:17:bb:15:78:cb:84:
0c:7c:d7:71:59:d9:3c:9d:9b:6e:6b:f3:e6:6e:3e:
90:22:ae:4d:c4:3e:b2:4e:19:80:bd:36:c8:eb:13:
d3:c8:8b:f2:36:fd:a1:71:44:00:13:ae:2a:92:9d:
92:65:be:fe:6f:f7:81:aa:41:d7:e4:d9:a8:81:a4:
39:e0:8a:37:8c:3c:59:c5:19:a5:93:b2:87:9f:33:
41:09:ec:f8:df:0e:e0:f8:6a:cd:5b:eb:07:e3:3a:
8f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6B:D3:7B:E0:16:A8:06:B2:8D:DA:F1:47:7F:B6:DB:BF:8B:1F:71
X509v3 Authority Key Identifier:
keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1b:af:67:6e:2b:02:d9:0c:68:56:88:9f:f7:fc:96:51:0b:
56:e9:28:8e:49:64:49:4a:d5:58:fb:c5:d3:57:10:9b:89:95:
b1:e8:e3:99:31:e9:85:7c:c4:1c:c2:61:9a:0a:d6:84:8e:63:
b7:55:af:e7:15:48:60:72:a5:5d:a7:e2:69:89:a3:ec:3c:03:
1a:ee:b5:1f:58:ff:cb:45:81:79:98:50:35:89:6c:84:dc:81:
ca:5a:ef:20:d4:75:59:0d:1f:c1:95:7b:ee:a0:1d:59:0a:4c:
c7:e8:3a:8a:65:c6:da:01:c6:4a:7c:f2:4c:0c:3b:bd:e1:bf:
23:32:02:30:6b:26:8d:9f:74:a9:54:c3:34:7c:d4:d0:02:b0:
fd:5d:06:95:52:44:31:f1:0d:a5:9f:0b:db:11:3d:21:29:4b:
2b:ee:58:e9:9f:9a:7c:9f:14:90:5b:9e:15:d6:19:71:5b:28:
c8:98:76:5e:6e:4c:79:ac:de:fc:c9:9c:4a:2f:b9:07:34:2f:
0c:fe:56:c8:15:fb:5d:97:8f:ed:4c:c9:d0:cb:6b:2b:45:f2:
80:4c:8a:ea:5f:68:9d:48:bb:61:0d:d1:7e:40:30:4c:9c:1d:
82:36:47:7c:bf:19:31:eb:ed:d8:75:86:99:8f:d0:fe:3a:26:
3e:07:1f:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHeEPslSOuiQRFvBXCHsMDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNTQ5ZmM1ZDY4Mjk4Nzg0YzZhNGM1YmM5OWFlN2QzMDE2
YTE4YTMwHhcNMjUwNzI2MTYwMjAwWhcNMjUwNzI3MTYwMjAwWjAzMTEwLwYDVQQD
EygzYTZiZDM3YmUwMTZhODA2YjI4ZGRhZjE0NzdmYjZkYmJmOGIxZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63OexN4MENUtbMPeFdPjK0zgYSW0
FRf+4QpFy0S5R8gxaZRDHoRZVqcEsol1yXMHs2RAFMnCi3xJyfHi5G8rnxCK/iTx
wzXCIaZRBkgXdWdzvCVl7gaTSFhxTNjAKm7LDWZjQ64bAQLF+jPMw8yBri0EY2wS
dXHms7ZrNT0S9kMgJAq2Wn2wyE/iPSXEXMbz0ioK/L6lNnrVUx3+fXQXuxV4y4QM
fNdxWdk8nZtua/Pmbj6QIq5NxD6yThmAvTbI6xPTyIvyNv2hcUQAE64qkp2SZb7+
b/eBqkHX5NmogaQ54Io3jDxZxRmlk7KHnzNBCez43w7g+GrNW+sH4zqP7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpr03vgFqgGso3a8Ud/ttu/ix9xMB8GA1UdIwQY
MBaAFBxUn8XWgph4TGpMW8ma59MBahijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84NTRiZDMtNTA5OC00OTY0LWJiMzUt
NTI0MWUzMWNkOGRhLzEvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84NTRiZDMtNTA5OC00OTY0LWJiMzUtNTI0MWUzMWNkOGRh
LzEvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRuvZ24r
AtkMaFaIn/f8llELVukojklkSUrVWPvF01cQm4mVsejjmTHphXzEHMJhmgrWhI5j
t1Wv5xVIYHKlXafiaYmj7DwDGu61H1j/y0WBeZhQNYlshNyBylrvINR1WQ0fwZV7
7qAdWQpMx+g6imXG2gHGSnzyTAw7veG/IzICMGsmjZ90qVTDNHzU0AKw/V0GlVJE
MfENpZ8L2xE9ISlLK+5Y6Z+afJ8UkFueFdYZcVsoyJh2Xm5Meaze/MmcSi+5BzQv
DP5WyBX7XZeP7UzJ0MtrK0XygEyK6l9onUi7YQ3RfkAwTJwdgjZHfL8ZMevt2HWG
mY/Q/jomPgcf2g==
-----END CERTIFICATE-----
Generated at Sat Jul 26 21:14:45 2025 by rpki-client