Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File: hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier: 0E7ifUMchBNG6BiG+4+j0ekQuTJ0OV/gqpBM3qPraIw=
Subject key identifier: 50:DA:D0:20:A1:21:4B:00:65:27:F4:33:8A:B4:55:79:E3:3B:0B:D6
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer: /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial: 019855DFD230423F61F1A8059CD2C59E46D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number: 15B1
Signing time: Tue 29 Jul 2025 11:09:48 +0000
Manifest this update: Tue 29 Jul 2025 11:09:48 +0000
Manifest next update: Wed 30 Jul 2025 11:09:48 +0000
Files and hashes: 1: E5_9p_TGg2FNMpZSH1jH4wJ3rfA.roa (hash: GcTlxtoi4GEP2bLooVydD/oQvGI42+1RU87/9gjgDvc=)
2: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: rFaCvwNOc5h3/LXFnuOyrX/DGRHG0WzZMBjXgZW6Q9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:df:d2:30:42:3f:61:f1:a8:05:9c:d2:c5:9e:46:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Validity
Not Before: Jul 29 11:09:48 2025 GMT
Not After : Jul 30 11:09:48 2025 GMT
Subject: CN=50dad020a1214b006527f4338ab45579e33b0bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ae:84:2f:3f:de:87:32:1c:9a:92:73:e2:0f:
7d:e8:ef:44:37:f0:fb:75:29:c7:16:89:19:f7:03:
cb:c2:34:85:ad:34:47:ad:84:32:be:45:f2:45:cc:
f7:14:a2:b9:d6:64:3d:53:f8:d5:ad:7f:71:dc:4e:
e2:a6:e9:dc:17:ac:a1:b6:e2:c7:06:df:fe:06:b0:
99:8f:85:bd:cf:59:5b:16:75:ef:ca:29:33:60:83:
13:b3:b0:52:bf:d3:1a:56:79:a9:77:1d:dc:c5:67:
13:07:63:c0:0c:50:ce:e7:d3:ad:e4:b9:1a:5e:a2:
af:04:2d:af:f4:ef:7a:a5:da:34:95:5a:26:b6:25:
e4:9b:5d:7a:1d:02:ab:d8:27:f2:ba:52:61:f5:35:
c3:5d:03:07:e2:34:79:76:af:ee:9f:a8:95:fb:ef:
5c:5f:2e:13:8b:b0:e4:9c:12:13:7d:96:c0:f1:f8:
70:fd:4c:5f:cd:52:cd:47:39:3b:9d:2a:f9:75:64:
bc:fa:c3:80:40:e9:ce:7f:db:b7:1e:92:e4:6c:7c:
97:93:a8:8e:83:4f:78:dc:92:c1:97:ee:ad:02:cc:
e7:0a:dd:3b:d3:44:c3:fd:fd:d5:5c:4b:aa:3a:4f:
7e:fd:1d:61:0c:5f:58:90:2c:ba:c1:17:37:9a:be:
40:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DA:D0:20:A1:21:4B:00:65:27:F4:33:8A:B4:55:79:E3:3B:0B:D6
X509v3 Authority Key Identifier:
keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:25:0e:3b:75:86:09:06:e1:e2:54:c1:6a:8d:bc:bf:19:1c:
50:1a:b3:5d:a3:16:2f:7f:fc:95:4d:ad:15:e5:f1:99:a1:fb:
f3:a0:b9:ca:02:07:eb:6c:e1:43:6b:31:a1:21:1f:5b:1d:45:
28:16:a8:e7:b4:49:42:24:06:f6:76:3b:2d:3f:c2:b6:c6:40:
52:21:51:b4:7a:86:66:e0:5b:f8:1c:74:18:69:e9:a2:27:8c:
95:0d:b4:30:d1:80:90:29:69:04:a0:6b:d9:35:08:7a:f9:33:
72:71:80:4a:33:8a:7e:a1:5f:ff:4e:0a:b3:20:dd:62:d1:b5:
12:ea:85:87:df:a3:06:d2:a8:ec:29:67:46:a4:32:97:6a:37:
fd:c2:78:23:f4:fa:c5:87:85:37:50:ed:68:e2:81:b2:79:a1:
48:12:5f:d7:a9:78:7c:97:04:e4:2d:24:46:1d:5e:a9:92:c8:
f0:84:35:8c:c9:2b:51:53:a4:07:98:cb:77:0d:56:5a:87:0a:
3f:e6:80:3a:d2:57:6d:df:a1:eb:9d:62:2d:a6:3d:6e:d0:04:
09:3b:15:eb:b6:5d:6d:bc:08:74:b8:5e:a6:ce:59:a9:ae:22:
35:b7:0f:07:f2:e3:a1:c7:8f:bd:5e:42:fa:5a:b3:d8:8a:22:
4a:3a:a9:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhV39IwQj9h8agFnNLFnkbSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjlmMjEwMGMyZmM0NTRhZDA3YWRlYzc5NmI5ZTZmNjM2
NmYwNzEwHhcNMjUwNzI5MTEwOTQ4WhcNMjUwNzMwMTEwOTQ4WjAzMTEwLwYDVQQD
Eyg1MGRhZDAyMGExMjE0YjAwNjUyN2Y0MzM4YWI0NTU3OWUzM2IwYmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA766ELz/ehzIcmpJz4g996O9EN/D7
dSnHFokZ9wPLwjSFrTRHrYQyvkXyRcz3FKK51mQ9U/jVrX9x3E7ipuncF6yhtuLH
Bt/+BrCZj4W9z1lbFnXvyikzYIMTs7BSv9MaVnmpdx3cxWcTB2PADFDO59Ot5Lka
XqKvBC2v9O96pdo0lVomtiXkm116HQKr2CfyulJh9TXDXQMH4jR5dq/un6iV++9c
Xy4Ti7DknBITfZbA8fhw/UxfzVLNRzk7nSr5dWS8+sOAQOnOf9u3HpLkbHyXk6iO
g0943JLBl+6tAsznCt0700TD/f3VXEuqOk9+/R1hDF9YkCy6wRc3mr5ADQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDa0CChIUsAZSf0M4q0VXnjOwvWMB8GA1UdIwQY
MBaAFIVp8hAML8RUrQet7Hlrnm9jZvBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEt
MjMzNmNkYjliYTlmLzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEtMjMzNmNkYjliYTlm
LzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSUOO3WG
CQbh4lTBao28vxkcUBqzXaMWL3/8lU2tFeXxmaH786C5ygIH62zhQ2sxoSEfWx1F
KBao57RJQiQG9nY7LT/CtsZAUiFRtHqGZuBb+Bx0GGnpoieMlQ20MNGAkClpBKBr
2TUIevkzcnGASjOKfqFf/04KsyDdYtG1EuqFh9+jBtKo7ClnRqQyl2o3/cJ4I/T6
xYeFN1DtaOKBsnmhSBJf16l4fJcE5C0kRh1eqZLI8IQ1jMkrUVOkB5jLdw1WWocK
P+aAOtJXbd+h651iLaY9btAECTsV67ZdbbwIdLheps5Zqa4iNbcPB/LjocePvV5C
+lqz2IoiSjqpPw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:38:39 2025 by rpki-client