Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: GiFrUngd4x4P9zgm6nYGVa+XhDy3TkScp6yiRjIGCA8=
Subject key identifier: FC:95:4C:12:64:61:3C:E0:EA:6C:E4:D9:BB:32:30:85:85:19:78:D5
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 019848C01C51301E7C269144F02ABE01FB0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 22:00:06 +0000
Manifest this update: Sat 26 Jul 2025 22:00:06 +0000
Manifest next update: Sun 27 Jul 2025 22:00:06 +0000
Files and hashes: 1: hItmJgKobNdHEWAlF-4cCZue6Aw.roa (hash: DNC0yvlzkLonuwJuzoEr0sbbal1ihEVkJ/p6BrvVIIc=)
2: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: BdVov4dAQLCHdUiTIq2bIifayfmSsm+PebYmUpzVdPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:1c:51:30:1e:7c:26:91:44:f0:2a:be:01:fb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Jul 26 22:00:06 2025 GMT
Not After : Jul 27 22:00:06 2025 GMT
Subject: CN=fc954c1264613ce0ea6ce4d9bb323085851978d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:c5:84:18:01:82:4c:61:98:99:3d:22:3c:
48:c4:9e:f2:0c:c7:26:11:7a:e8:46:07:77:88:03:
03:c1:cd:98:32:17:59:b1:2b:97:9d:2a:4a:3b:6c:
60:5c:4c:10:28:e5:fe:fc:8f:af:04:37:02:fc:3d:
e3:1f:de:f0:79:26:65:d2:5d:b0:ba:55:d3:63:27:
f5:f7:78:94:dd:5e:49:e0:33:5f:26:ee:84:3d:34:
ea:39:fd:7c:1b:4f:e5:fb:f6:37:b5:d0:a7:2c:37:
5c:99:64:cb:cb:1a:8a:17:e1:d2:9a:f6:64:c4:d8:
33:28:1b:89:c5:6d:8a:97:07:7f:2f:65:a5:44:79:
95:16:a3:29:06:9a:2d:89:2f:cf:36:ba:ed:87:df:
e7:93:68:77:d8:4e:fb:dc:d7:1d:c9:95:8f:0f:05:
1d:07:74:62:75:ec:82:ff:e6:67:56:9b:8a:fb:97:
23:7f:07:e5:c9:81:26:e3:75:eb:30:2d:d2:9e:a6:
55:b6:83:41:38:0d:92:98:2d:7a:0c:00:9e:45:cf:
df:15:d3:39:d7:e1:57:d6:42:fb:aa:42:aa:02:78:
15:5a:8a:e5:e8:f2:31:af:9a:08:9b:10:6d:98:3e:
dc:1c:66:c9:b3:53:f5:69:96:fc:ca:22:f6:58:cc:
d5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:95:4C:12:64:61:3C:E0:EA:6C:E4:D9:BB:32:30:85:85:19:78:D5
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3b:4e:41:f5:19:72:9e:10:94:69:2a:39:06:27:ac:4a:11:
f3:43:36:0e:37:ba:e8:7d:e6:c6:e4:e3:6b:bc:79:09:e0:7f:
83:d6:e1:3a:02:2e:3d:65:bc:58:81:ce:6c:ee:30:c7:2a:b7:
ec:f6:92:c1:4c:25:1d:e1:7a:a1:75:ab:84:38:1a:d5:8e:db:
9a:f0:3c:26:1f:9e:4f:2c:e8:33:4a:f0:a9:59:49:83:b9:e7:
d9:9d:22:24:fb:8a:57:62:58:af:bd:c5:55:e0:b4:76:0b:7a:
a5:0a:a1:7d:dc:d8:ac:82:4a:3f:10:03:7f:47:e2:ed:0d:45:
94:83:50:2d:58:6a:f5:7f:9b:0c:71:19:72:5b:90:3e:91:a7:
21:75:6d:a6:a7:82:d4:50:e1:c0:a7:46:58:ce:f7:cc:4a:cd:
1a:83:44:e5:f5:71:bc:e4:94:0f:6e:3c:a8:3c:ef:76:cb:d6:
4d:99:85:de:48:86:a3:ff:83:11:38:ea:47:63:63:3e:c8:97:
36:2d:fd:47:61:b1:bc:8b:99:6c:ad:20:57:0c:2e:6a:25:28:
aa:5c:1c:f6:d8:10:1c:65:5a:b5:53:87:d4:9b:bf:a8:7f:06:
3c:b9:56:34:89:7c:cd:a4:19:04:d1:90:80:8b:88:45:c4:e7:
b5:4c:47:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwBxRMB58JpFE8Cq+AfsOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OWQ1YzFjYTg2NWIwNGI2ZjJiM2NjZDkwMTZlOTJkZGFk
OTlhYWIwHhcNMjUwNzI2MjIwMDA2WhcNMjUwNzI3MjIwMDA2WjAzMTEwLwYDVQQD
EyhmYzk1NGMxMjY0NjEzY2UwZWE2Y2U0ZDliYjMyMzA4NTg1MTk3OGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH/FhBgBgkxhmJk9IjxIxJ7yDMcm
EXroRgd3iAMDwc2YMhdZsSuXnSpKO2xgXEwQKOX+/I+vBDcC/D3jH97weSZl0l2w
ulXTYyf193iU3V5J4DNfJu6EPTTqOf18G0/l+/Y3tdCnLDdcmWTLyxqKF+HSmvZk
xNgzKBuJxW2Klwd/L2WlRHmVFqMpBpotiS/PNrrth9/nk2h32E773NcdyZWPDwUd
B3RideyC/+ZnVpuK+5cjfwflyYEm43XrMC3SnqZVtoNBOA2SmC16DACeRc/fFdM5
1+FX1kL7qkKqAngVWorl6PIxr5oImxBtmD7cHGbJs1P1aZb8yiL2WMzVQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyVTBJkYTzg6mzk2bsyMIWFGXjVMB8GA1UdIwQY
MBaAFISdXByoZbBLbys8zZAW6S3a2ZqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzQxOGItZWM3ZC00NmQyLTk5ZDUt
ZGRlMGQxMjczNWM2LzEvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xYzQxOGItZWM3ZC00NmQyLTk5ZDUtZGRlMGQxMjczNWM2
LzEvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtTtOQfUZ
cp4QlGkqOQYnrEoR80M2Dje66H3mxuTja7x5CeB/g9bhOgIuPWW8WIHObO4wxyq3
7PaSwUwlHeF6oXWrhDga1Y7bmvA8Jh+eTyzoM0rwqVlJg7nn2Z0iJPuKV2JYr73F
VeC0dgt6pQqhfdzYrIJKPxADf0fi7Q1FlINQLVhq9X+bDHEZcluQPpGnIXVtpqeC
1FDhwKdGWM73zErNGoNE5fVxvOSUD248qDzvdsvWTZmF3kiGo/+DETjqR2NjPsiX
Ni39R2GxvIuZbK0gVwwuaiUoqlwc9tgQHGVatVOH1Ju/qH8GPLlWNIl8zaQZBNGQ
gIuIRcTntUxHxw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:29:31 2025 by rpki-client