Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
File: HvNtbboJfqbUsq2k52PoTss9gXo.mft (raw, json)
Hash identifier: DFu9tcb1h3LW6J9iSWLNkTfBEU2u6MGvrFgJ1BX0oX4=
Subject key identifier: 1B:8B:85:98:64:D8:AA:13:8B:71:F2:AE:26:E6:3F:03:59:8C:F5:2A
Authority key identifier: 1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
Certificate issuer: /CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Certificate serial: 01984061F1E7B59547ADA0EA8ED61E2A7137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
Manifest number: 04E7
Signing time: Fri 25 Jul 2025 07:00:17 +0000
Manifest this update: Fri 25 Jul 2025 07:00:17 +0000
Manifest next update: Sat 26 Jul 2025 07:00:17 +0000
Files and hashes: 1: 1-fDLqnKfMZzfosw8Gra-kuHRukQ.roa (hash: 91Wi2oW4Wdmr3Kf24VCGVEfXWacp6jcVuiTMlTsIcZQ=)
2: HvNtbboJfqbUsq2k52PoTss9gXo.crl (hash: oagU5AhuODfOKhq6Ds3pb+7HeCMk/oQ6hlfLRd26qPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:61:f1:e7:b5:95:47:ad:a0:ea:8e:d6:1e:2a:71:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Validity
Not Before: Jul 25 07:00:17 2025 GMT
Not After : Jul 26 07:00:17 2025 GMT
Subject: CN=1b8b859864d8aa138b71f2ae26e63f03598cf52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:c7:9d:f9:75:51:48:4d:55:c6:2e:8c:24:
10:11:56:31:56:0c:c6:74:9d:6b:66:fb:0c:2c:2f:
0f:7c:1d:60:bb:8a:e2:5d:47:ae:f7:c7:e3:87:21:
6c:c1:fa:cf:6d:da:ca:6d:fe:ff:ae:52:1e:85:a9:
af:0a:06:a2:e7:e0:a8:5e:09:12:64:24:da:f0:17:
aa:13:9a:7f:e9:d8:9b:43:1a:3e:f3:9e:ef:5a:7b:
ba:28:a3:bc:4b:0e:07:a4:9b:ee:05:e0:72:60:6d:
2b:0e:43:ae:37:bb:39:7b:f9:0c:4c:2f:fd:a7:eb:
4e:27:53:1b:c6:1e:63:f0:f8:33:50:a0:93:33:43:
a4:35:99:cd:6b:5a:7a:08:45:15:9f:84:dc:73:cb:
d9:4e:e2:7c:9f:93:87:cf:59:76:17:78:bb:90:12:
fb:30:7d:1c:6e:ee:34:ed:0f:16:a8:34:76:f9:f3:
91:2c:c6:27:b3:01:ce:4a:1f:84:0c:84:3e:65:60:
7f:a5:62:af:d8:97:18:6e:d4:06:60:e9:e9:fb:87:
83:c0:fe:79:ca:58:2c:3b:2c:5c:7a:67:f6:2c:29:
fc:63:a4:3b:79:19:92:a0:08:e3:65:08:e2:3d:ef:
c1:b8:90:73:93:e8:99:34:fe:43:8e:ec:e8:bc:b4:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8B:85:98:64:D8:AA:13:8B:71:F2:AE:26:E6:3F:03:59:8C:F5:2A
X509v3 Authority Key Identifier:
keyid:1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:42:8d:23:bd:48:41:68:ec:e5:a0:fd:d7:44:f1:51:8b:40:
b1:a8:e1:1e:f9:e0:0c:e1:f4:97:33:bd:83:ee:ac:37:b7:88:
14:81:60:63:21:27:02:db:83:89:7a:20:34:07:e0:bc:90:be:
09:ef:e9:3c:e5:e8:26:e2:7e:38:70:93:25:f0:19:d0:fe:78:
98:20:6d:89:8d:14:e5:aa:e3:1f:7d:53:5c:ae:97:a6:db:e8:
70:ba:6e:f2:09:82:8c:fa:1d:de:69:f3:80:4d:db:37:6f:d8:
3a:a1:ed:d3:4e:f7:cb:b4:46:d3:83:1a:f5:a8:8d:5f:ed:7e:
54:aa:08:65:0f:15:2c:5d:e6:c1:19:95:fe:d3:6a:27:6b:19:
9b:c7:51:1e:f1:7a:f9:ae:d4:dd:5b:e2:df:85:84:dd:bb:ec:
80:44:bb:a1:84:c1:04:a2:48:ca:13:03:4b:9f:f9:ac:c7:44:
fa:4c:4c:79:73:c0:9e:ca:b5:2a:0e:c8:2a:dd:1e:52:80:d4:
02:c9:b2:46:a5:97:bd:3d:3e:df:19:27:3d:d0:21:40:75:24:
3d:55:8c:d8:c9:89:d6:ad:17:4c:21:66:0f:bd:e8:ef:6c:06:
ee:6f:f1:35:7e:3a:c9:1d:fb:bd:fa:9c:c3:70:58:b0:18:0f:
5c:ed:43:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhAYfHntZVHraDqjtYeKnE3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZjM2ZDZkYmEwOTdlYTZkNGIyYWRhNGU3NjNlODRlY2Iz
ZDgxN2EwHhcNMjUwNzI1MDcwMDE3WhcNMjUwNzI2MDcwMDE3WjAzMTEwLwYDVQQD
EygxYjhiODU5ODY0ZDhhYTEzOGI3MWYyYWUyNmU2M2YwMzU5OGNmNTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBXHnfl1UUhNVcYujCQQEVYxVgzG
dJ1rZvsMLC8PfB1gu4riXUeu98fjhyFswfrPbdrKbf7/rlIehamvCgai5+CoXgkS
ZCTa8BeqE5p/6dibQxo+857vWnu6KKO8Sw4HpJvuBeByYG0rDkOuN7s5e/kMTC/9
p+tOJ1Mbxh5j8PgzUKCTM0OkNZnNa1p6CEUVn4Tcc8vZTuJ8n5OHz1l2F3i7kBL7
MH0cbu407Q8WqDR2+fORLMYnswHOSh+EDIQ+ZWB/pWKv2JcYbtQGYOnp+4eDwP55
ylgsOyxcemf2LCn8Y6Q7eRmSoAjjZQjiPe/BuJBzk+iZNP5DjuzovLR1jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuLhZhk2KoTi3HyribmPwNZjPUqMB8GA1UdIwQY
MBaAFB7zbW26CX6m1LKtpOdj6E7LPYF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZOdGJib0pmcWJVc3EyazUyUG9Uc3M5Z1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8zZWQzN2ItYjgwYS00YjEwLTkxNGIt
NTdjOTI0MzFkM2QzLzEvSHZOdGJib0pmcWJVc3EyazUyUG9Uc3M5Z1hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8zZWQzN2ItYjgwYS00YjEwLTkxNGItNTdjOTI0MzFkM2Qz
LzEvSHZOdGJib0pmcWJVc3EyazUyUG9Uc3M5Z1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUKNI71I
QWjs5aD910TxUYtAsajhHvngDOH0lzO9g+6sN7eIFIFgYyEnAtuDiXogNAfgvJC+
Ce/pPOXoJuJ+OHCTJfAZ0P54mCBtiY0U5arjH31TXK6XptvocLpu8gmCjPod3mnz
gE3bN2/YOqHt0073y7RG04Ma9aiNX+1+VKoIZQ8VLF3mwRmV/tNqJ2sZm8dRHvF6
+a7U3Vvi34WE3bvsgES7oYTBBKJIyhMDS5/5rMdE+kxMeXPAnsq1Kg7IKt0eUoDU
AsmyRqWXvT0+3xknPdAhQHUkPVWM2MmJ1q0XTCFmD73o72wG7m/xNX46yR37vfqc
w3BYsBgPXO1DIQ==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:40:14 2025 by rpki-client