Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
File: HDepAm5Fto_kc1pGm3VjYTCtElw.mft (raw, json)
Hash identifier: OUMBgYI67guWcuOmLU2/+BIDFJjZhMKwu/RgqtHQYt4=
Subject key identifier: B3:B0:5E:0D:A2:2B:6D:04:F1:F9:29:5E:8E:C7:40:70:AD:10:24:C2
Authority key identifier: 1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
Certificate issuer: /CN=1c37a9026e45b68fe4735a469b75636130ad125c
Certificate serial: 019845F6BDD200B1644AD944DFC50AD27141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
Manifest number: 0938
Signing time: Sat 26 Jul 2025 09:00:55 +0000
Manifest this update: Sat 26 Jul 2025 09:00:55 +0000
Manifest next update: Sun 27 Jul 2025 09:00:55 +0000
Files and hashes: 1: HDepAm5Fto_kc1pGm3VjYTCtElw.crl (hash: SGC4HHZhSuw1uC52IlKILxYSMYqgSc/xtxF6295lsSU=)
2: uaDvodSl9Qqt6SU3QvEP4PKpm0c.roa (hash: KfFNiihZ95ffen8bkT+elj9FXLgX4E04ZxK55q4T9Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:bd:d2:00:b1:64:4a:d9:44:df:c5:0a:d2:71:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c37a9026e45b68fe4735a469b75636130ad125c
Validity
Not Before: Jul 26 09:00:55 2025 GMT
Not After : Jul 27 09:00:55 2025 GMT
Subject: CN=b3b05e0da22b6d04f1f9295e8ec74070ad1024c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:45:99:50:b9:da:4c:3b:eb:00:d7:4c:d2:be:
25:08:44:f1:d2:09:b2:22:50:cb:55:9a:fe:bd:e1:
ec:a2:65:79:11:f6:f5:ba:b3:3f:b7:b6:81:1e:e7:
a2:e5:5b:45:d6:82:f8:96:f4:96:f8:91:88:03:7c:
26:a4:b5:be:7e:f2:9e:c3:fd:f9:cd:5e:bd:3e:b7:
20:5f:f3:13:da:e9:ff:f7:d2:1c:dc:74:78:1b:ca:
1c:64:53:2b:ba:ac:7e:a2:3f:21:a9:21:fa:38:a9:
3a:8b:0d:b0:da:ee:d1:ff:4b:be:1c:0c:3f:d2:9b:
aa:64:fa:f4:35:ab:17:80:01:32:a8:97:e2:2a:22:
81:4b:0b:6c:c5:b3:b8:1a:91:06:52:0e:23:f0:68:
a2:ff:b5:4e:51:7f:20:9c:f9:4a:80:98:dd:bb:3a:
52:50:65:e9:cb:6d:72:21:ac:66:96:5b:b7:9d:4b:
21:4d:a6:54:35:b1:c5:0d:e1:57:35:8e:ab:aa:e3:
13:1d:f6:2e:21:fa:bc:58:2f:76:11:2e:e2:f6:99:
87:07:d4:19:51:34:9a:4a:59:e8:ee:7d:0e:fb:f2:
06:3e:9a:51:b5:37:da:a3:0b:01:49:e2:df:bb:b9:
36:42:b9:01:7b:42:77:ef:96:f8:a5:36:1b:e7:22:
c5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B0:5E:0D:A2:2B:6D:04:F1:F9:29:5E:8E:C7:40:70:AD:10:24:C2
X509v3 Authority Key Identifier:
keyid:1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:4f:8d:50:65:60:40:b6:71:53:df:00:2a:0c:9e:25:d9:ce:
d8:51:fb:d6:ee:42:1b:7c:5f:d1:e1:b1:a1:0e:be:2a:42:79:
a9:af:43:9e:68:8b:90:74:39:b4:d7:65:cf:24:7d:da:57:a4:
5e:f9:01:ed:fd:ce:ba:7d:e6:cf:3f:fe:de:d7:a5:f1:04:a3:
4e:0d:3b:1f:84:3d:56:03:54:ba:d7:89:c2:c0:07:e4:b4:ba:
54:de:79:bf:21:ae:6b:4d:7e:a2:07:3c:a5:92:dc:62:2e:88:
86:a5:d4:9f:cc:21:fb:c4:70:b2:02:7a:24:a5:b4:77:a8:9d:
b8:d2:36:89:69:b8:d4:da:4f:34:01:a3:fa:9d:e5:23:63:b9:
df:33:70:68:c6:26:13:29:91:2c:4b:a1:a2:89:5d:2d:2f:9a:
fa:e4:09:35:b5:75:31:d4:19:86:13:26:8a:3b:3f:2e:8d:cd:
00:ce:94:6e:4f:92:06:b0:b8:de:a2:05:08:81:f3:a2:04:35:
cf:37:5f:85:bf:98:22:5d:3e:f6:02:a3:59:73:36:1d:89:52:
7c:21:97:46:06:18:34:ae:6e:6e:dc:97:2b:cf:57:6c:8c:9f:
5e:46:e3:1f:c8:01:d9:4a:e7:b4:cc:32:42:1f:a5:03:f8:7f:
ee:d0:40:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhF9r3SALFkStlE38UK0nFBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMzdhOTAyNmU0NWI2OGZlNDczNWE0NjliNzU2MzYxMzBh
ZDEyNWMwHhcNMjUwNzI2MDkwMDU1WhcNMjUwNzI3MDkwMDU1WjAzMTEwLwYDVQQD
EyhiM2IwNWUwZGEyMmI2ZDA0ZjFmOTI5NWU4ZWM3NDA3MGFkMTAyNGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EWZULnaTDvrANdM0r4lCETx0gmy
IlDLVZr+veHsomV5Efb1urM/t7aBHuei5VtF1oL4lvSW+JGIA3wmpLW+fvKew/35
zV69PrcgX/MT2un/99Ic3HR4G8ocZFMruqx+oj8hqSH6OKk6iw2w2u7R/0u+HAw/
0puqZPr0NasXgAEyqJfiKiKBSwtsxbO4GpEGUg4j8Gii/7VOUX8gnPlKgJjduzpS
UGXpy21yIaxmllu3nUshTaZUNbHFDeFXNY6rquMTHfYuIfq8WC92ES7i9pmHB9QZ
UTSaSlno7n0O+/IGPppRtTfaowsBSeLfu7k2QrkBe0J375b4pTYb5yLF0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOwXg2iK20E8fkpXo7HQHCtECTCMB8GA1UdIwQY
MBaAFBw3qQJuRbaP5HNaRpt1Y2EwrRJcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSERlcEFtNUZ0b19rYzFwR20zVmpZVEN0RWx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yYmI2MDMtZjQ3OS00MGNiLTgyZDQt
NDhkNjcyOTczYjEzLzEvSERlcEFtNUZ0b19rYzFwR20zVmpZVEN0RWx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8yYmI2MDMtZjQ3OS00MGNiLTgyZDQtNDhkNjcyOTczYjEz
LzEvSERlcEFtNUZ0b19rYzFwR20zVmpZVEN0RWx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx0+NUGVg
QLZxU98AKgyeJdnO2FH71u5CG3xf0eGxoQ6+KkJ5qa9DnmiLkHQ5tNdlzyR92lek
XvkB7f3Oun3mzz/+3tel8QSjTg07H4Q9VgNUuteJwsAH5LS6VN55vyGua01+ogc8
pZLcYi6IhqXUn8wh+8RwsgJ6JKW0d6iduNI2iWm41NpPNAGj+p3lI2O53zNwaMYm
EymRLEuhooldLS+a+uQJNbV1MdQZhhMmijs/Lo3NAM6Ubk+SBrC43qIFCIHzogQ1
zzdfhb+YIl0+9gKjWXM2HYlSfCGXRgYYNK5ubtyXK89XbIyfXkbjH8gB2UrntMwy
Qh+lA/h/7tBASA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:13:32 2025 by rpki-client