Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
File: 0HCWDtmg2hybfiRX6ry2YEeNCK4.mft (raw, json)
Hash identifier: 5x3qxjyvFPeYJ8enZsloWkcxdpq7wFLAk2BZUEAnywM=
Subject key identifier: 84:BA:57:3B:29:5C:F9:BB:FE:FE:83:0E:F5:B2:9F:21:F5:87:F1:C7
Authority key identifier: D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
Certificate issuer: /CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Certificate serial: 019833B99440672210AD113604ABA4649017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
Manifest number: 06D6
Signing time: Tue 22 Jul 2025 20:00:56 +0000
Manifest this update: Tue 22 Jul 2025 20:00:56 +0000
Manifest next update: Wed 23 Jul 2025 20:00:56 +0000
Files and hashes: 1: 0HCWDtmg2hybfiRX6ry2YEeNCK4.crl (hash: 9F7r01tE/6S1iXPxsORmI1ZA4QDZJDfiWZUFG98OZKE=)
2: ZYblDAaDwwmnrchNjFrf0zm4tO0.roa (hash: TUJh6mrSVIERTxbeRqv55tj1PiJ2BrobmYQdllbfBL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:b9:94:40:67:22:10:ad:11:36:04:ab:a4:64:90:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Validity
Not Before: Jul 22 20:00:56 2025 GMT
Not After : Jul 23 20:00:56 2025 GMT
Subject: CN=84ba573b295cf9bbfefe830ef5b29f21f587f1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:d2:07:80:c0:0b:73:61:a7:37:ef:06:7c:
a6:15:0a:9e:4f:c8:3e:a1:ad:f1:20:e2:7a:77:f2:
d3:af:91:5d:8b:4f:05:0f:1c:d7:7f:ce:9d:5a:16:
bf:a1:94:e8:ad:89:01:b9:c9:54:56:f1:2b:30:e8:
9d:ce:d7:39:31:42:ba:20:7c:43:88:1c:06:5a:44:
16:b0:24:19:a1:af:c6:81:14:68:0a:3d:88:ac:70:
96:6d:37:0c:db:a7:47:7e:2c:a2:2a:71:d5:38:0c:
01:e0:b3:f8:9b:ee:37:e4:62:ee:c6:69:02:a3:f4:
e5:a8:ae:a4:c5:13:92:5a:7c:35:bb:ab:e0:84:56:
e4:37:98:20:f0:7d:ba:d8:f6:47:f2:da:b7:f4:c2:
28:35:32:4a:34:d6:b5:9a:37:46:e7:1a:05:62:f6:
9c:68:ef:b4:b2:0e:1e:e2:19:5b:50:6e:5e:ac:ce:
b8:89:5a:f9:10:79:04:4d:73:aa:e1:be:7e:85:a9:
2b:5b:2e:bb:f9:0b:61:8e:95:3a:c8:1f:0b:7f:d7:
89:22:8d:cf:17:20:92:8c:97:ef:2a:9e:32:88:5f:
24:19:c5:70:5c:14:66:a0:1f:7e:51:20:bf:f2:2e:
86:f9:0c:b6:5b:a2:8d:6b:25:08:b1:b9:54:8a:67:
21:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BA:57:3B:29:5C:F9:BB:FE:FE:83:0E:F5:B2:9F:21:F5:87:F1:C7
X509v3 Authority Key Identifier:
keyid:D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:47:15:79:01:61:81:b8:83:57:02:1a:3d:6f:08:87:fb:34:
b2:98:43:89:3b:dd:73:2c:91:49:76:c1:9d:3a:0f:ec:a9:a9:
1c:0f:37:55:0f:51:16:ec:21:eb:9d:10:41:eb:18:a3:d5:a9:
82:78:ba:f8:df:71:7e:f0:14:6b:23:92:13:18:95:84:3f:64:
cc:dc:61:55:bd:88:cd:b1:63:fc:a1:8f:fd:05:8d:e7:4d:90:
b1:df:e3:a8:ba:03:d6:c4:b3:b9:8f:56:3f:10:bb:3c:56:c5:
b8:7a:7b:2b:63:ab:85:f3:c6:64:9f:67:05:25:7b:df:5c:6f:
45:1e:5b:1e:62:ad:84:7c:8b:54:35:97:45:ac:b8:ac:ae:6a:
e2:e7:2b:dd:aa:95:0c:1a:67:45:14:95:b9:b6:b8:70:fb:10:
f1:90:3f:c3:12:ab:73:a2:30:69:52:9f:13:85:de:f1:3d:a1:
46:22:4c:c9:c4:d1:6a:18:3c:a0:61:7c:86:65:d8:73:23:2f:
99:28:c8:e7:73:2b:67:53:33:6b:da:d8:47:15:3d:2c:8c:7a:
cd:fb:93:46:7b:ee:fe:07:a2:da:7e:ad:37:1e:28:27:93:bf:
d9:5d:6d:18:70:e0:93:c0:eb:7b:e3:58:8f:8f:4c:9c:de:bd:
95:a0:0e:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgzuZRAZyIQrRE2BKukZJAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNzA5NjBlZDlhMGRhMWM5YjdlMjQ1N2VhYmNiNjYwNDc4
ZDA4YWUwHhcNMjUwNzIyMjAwMDU2WhcNMjUwNzIzMjAwMDU2WjAzMTEwLwYDVQQD
Eyg4NGJhNTczYjI5NWNmOWJiZmVmZTgzMGVmNWIyOWYyMWY1ODdmMWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EXSB4DAC3NhpzfvBnymFQqeT8g+
oa3xIOJ6d/LTr5Fdi08FDxzXf86dWha/oZTorYkBuclUVvErMOidztc5MUK6IHxD
iBwGWkQWsCQZoa/GgRRoCj2IrHCWbTcM26dHfiyiKnHVOAwB4LP4m+435GLuxmkC
o/TlqK6kxROSWnw1u6vghFbkN5gg8H262PZH8tq39MIoNTJKNNa1mjdG5xoFYvac
aO+0sg4e4hlbUG5erM64iVr5EHkETXOq4b5+hakrWy67+QthjpU6yB8Lf9eJIo3P
FyCSjJfvKp4yiF8kGcVwXBRmoB9+USC/8i6G+Qy2W6KNayUIsblUimchUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIS6VzspXPm7/v6DDvWynyH1h/HHMB8GA1UdIwQY
MBaAFNBwlg7ZoNocm34kV+q8tmBHjQiuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEhDV0R0bWcyaHliZmlSWDZyeTJZRWVOQ0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wMzU1OGUtNjg4Zi00ZTFjLWE2NmYt
NmVlZmRhMTEwOGFkLzEvMEhDV0R0bWcyaHliZmlSWDZyeTJZRWVOQ0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8wMzU1OGUtNjg4Zi00ZTFjLWE2NmYtNmVlZmRhMTEwOGFk
LzEvMEhDV0R0bWcyaHliZmlSWDZyeTJZRWVOQ0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0cVeQFh
gbiDVwIaPW8Ih/s0sphDiTvdcyyRSXbBnToP7KmpHA83VQ9RFuwh650QQesYo9Wp
gni6+N9xfvAUayOSExiVhD9kzNxhVb2IzbFj/KGP/QWN502Qsd/jqLoD1sSzuY9W
PxC7PFbFuHp7K2OrhfPGZJ9nBSV731xvRR5bHmKthHyLVDWXRay4rK5q4ucr3aqV
DBpnRRSVuba4cPsQ8ZA/wxKrc6IwaVKfE4Xe8T2hRiJMycTRahg8oGF8hmXYcyMv
mSjI53MrZ1Mza9rYRxU9LIx6zfuTRnvu/gei2n6tNx4oJ5O/2V1tGHDgk8Dre+NY
j49MnN69laAOcg==
-----END CERTIFICATE-----
Generated at Wed Jul 23 06:05:05 2025 by rpki-client