Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
File: hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json)
Hash identifier: jxBmv1N/VaLWUAhhuFVnJhhowRngZ4Ml3xKx6OCliw0=
Subject key identifier: B6:A9:3F:D5:FF:F3:5E:16:39:E9:34:18:C1:96:7A:30:D2:0C:93:1C
Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674
Certificate serial: 019853444D46AED5DED9DF919C9AE480C78B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
Manifest number: 0AF7
Signing time: Mon 28 Jul 2025 23:00:41 +0000
Manifest this update: Mon 28 Jul 2025 23:00:41 +0000
Manifest next update: Tue 29 Jul 2025 23:00:41 +0000
Files and hashes: 1: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: Y11rJlHseTJbN6VaUHu0AB0DmrzlViow8YxNm04zZmk=)
2: wWq59skVXk0ZG4IFLK9dggmPZBc.roa (hash: G7C47jomjQ8yRWntSox+zS/AjFvrINeu+2AEHacLP1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:4d:46:ae:d5:de:d9:df:91:9c:9a:e4:80:c7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674
Validity
Not Before: Jul 28 23:00:41 2025 GMT
Not After : Jul 29 23:00:41 2025 GMT
Subject: CN=b6a93fd5fff35e1639e93418c1967a30d20c931c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:19:40:ed:ff:b6:53:65:2f:3d:c3:51:46:c2:
30:c6:ef:7e:1b:15:03:09:f2:d8:7f:83:20:4c:a8:
9f:e0:72:ea:ec:44:aa:ce:23:02:3e:83:1f:36:5d:
26:f8:74:17:37:ae:05:43:6e:cc:27:f3:bb:d1:fb:
a9:05:e0:dc:5f:45:e0:62:bd:72:ab:85:18:ad:cf:
56:1d:f2:16:f8:4a:04:a2:fe:b2:c4:c7:d0:43:e5:
16:ab:35:56:12:00:92:47:0d:b7:bd:a6:55:e3:97:
2f:36:e8:39:b2:40:1e:a7:ab:6d:96:58:26:79:64:
6c:32:3a:11:79:23:73:16:5e:85:07:ce:50:75:85:
fb:5a:00:67:3f:d8:5e:0c:01:a3:0b:b1:e9:60:2f:
c8:74:0c:ab:f6:c2:16:79:bf:06:5b:4c:76:f4:57:
e5:89:c2:16:45:8c:85:02:c4:aa:2a:11:d5:10:b5:
a9:79:ce:a6:58:71:f0:2e:4b:36:9a:a4:71:2c:65:
50:62:26:91:73:11:1b:49:2f:2e:f3:ee:e3:66:e8:
14:d0:2c:87:59:e9:ca:d7:03:ac:18:b5:80:3d:d4:
74:7f:ff:96:61:00:70:2d:a6:1e:e0:bd:59:0d:5a:
47:ff:ad:ce:b5:6f:60:cd:84:3f:92:90:1f:0f:38:
df:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A9:3F:D5:FF:F3:5E:16:39:E9:34:18:C1:96:7A:30:D2:0C:93:1C
X509v3 Authority Key Identifier:
keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6a:42:44:3b:a1:dc:cb:59:cf:9f:6c:39:37:2b:c6:b9:1a:
28:b1:27:47:09:9c:58:7a:78:c3:79:95:38:53:8e:bc:81:09:
5d:73:e8:15:ec:43:27:d2:28:f3:17:78:3a:ca:81:bb:94:d3:
ca:a3:ca:f9:ab:bf:47:f3:6e:60:e7:86:8c:af:c7:7e:19:2e:
06:81:8d:f2:73:f4:4a:06:01:c2:c5:70:aa:36:5b:60:8b:9f:
f4:70:be:56:79:26:bf:b9:74:ac:71:9a:00:8a:c4:3e:d5:a8:
8e:07:9e:60:7e:51:4e:56:d3:48:23:2e:17:d1:a1:a6:96:a1:
38:a7:36:35:7d:c7:08:17:99:a0:48:56:54:09:5e:fe:2a:f9:
38:b8:b2:f2:ca:25:cf:67:5f:04:9b:3f:1e:fe:0a:83:bd:f2:
be:ae:ab:11:f3:4e:24:bd:4a:68:d9:47:0c:fa:93:c1:7e:9c:
d1:95:7a:d7:ae:a0:df:a6:f1:8b:01:ee:6d:24:50:36:4e:dc:
72:17:cd:39:91:79:fe:fe:e1:c3:87:0c:57:07:9b:0a:0f:e6:
c7:ef:f2:35:90:3a:6e:17:93:de:f0:6d:09:74:ee:b8:36:07:
57:5e:89:c7:f6:96:2e:4e:73:dd:65:62:b4:c9:97:cf:46:78:
52:13:7c:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTRE1GrtXe2d+RnJrkgMeLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OWIzNjAwZmQ3MzhlNjk4ZDEyZmVmMjBlMTA2ZTZhOTRl
M2I2NzQwHhcNMjUwNzI4MjMwMDQxWhcNMjUwNzI5MjMwMDQxWjAzMTEwLwYDVQQD
EyhiNmE5M2ZkNWZmZjM1ZTE2MzllOTM0MThjMTk2N2EzMGQyMGM5MzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxlA7f+2U2UvPcNRRsIwxu9+GxUD
CfLYf4MgTKif4HLq7ESqziMCPoMfNl0m+HQXN64FQ27MJ/O70fupBeDcX0XgYr1y
q4UYrc9WHfIW+EoEov6yxMfQQ+UWqzVWEgCSRw23vaZV45cvNug5skAep6ttllgm
eWRsMjoReSNzFl6FB85QdYX7WgBnP9heDAGjC7HpYC/IdAyr9sIWeb8GW0x29Ffl
icIWRYyFAsSqKhHVELWpec6mWHHwLks2mqRxLGVQYiaRcxEbSS8u8+7jZugU0CyH
WenK1wOsGLWAPdR0f/+WYQBwLaYe4L1ZDVpH/63OtW9gzYQ/kpAfDzjfIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLapP9X/814WOek0GMGWejDSDJMcMB8GA1UdIwQY
MBaAFIabNgD9c45pjRL+8g4QbmqU47Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUt
NDI0M2U4OGJkNzZjLzEvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUtNDI0M2U4OGJkNzZj
LzEvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWpCRDuh
3MtZz59sOTcrxrkaKLEnRwmcWHp4w3mVOFOOvIEJXXPoFexDJ9Io8xd4OsqBu5TT
yqPK+au/R/NuYOeGjK/HfhkuBoGN8nP0SgYBwsVwqjZbYIuf9HC+Vnkmv7l0rHGa
AIrEPtWojgeeYH5RTlbTSCMuF9GhppahOKc2NX3HCBeZoEhWVAle/ir5OLiy8sol
z2dfBJs/Hv4Kg73yvq6rEfNOJL1KaNlHDPqTwX6c0ZV6166g36bxiwHubSRQNk7c
chfNOZF5/v7hw4cMVwebCg/mx+/yNZA6bheT3vBtCXTuuDYHV16Jx/aWLk5z3WVi
tMmXz0Z4UhN8YA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 05:58:59 2025 by rpki-client