Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier: qeDA0I/Rw8eGLY6yQ6U6knnH6qYLIh2dbHZJbm9GvSA=
Subject key identifier: 47:08:45:D1:64:68:2D:66:F4:26:CD:FE:02:0E:E4:3E:50:51:47:04
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial: 01983CBC5D6729B9B3B5CF27D2754A1B93B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number: 1601
Signing time: Thu 24 Jul 2025 14:00:34 +0000
Manifest this update: Thu 24 Jul 2025 14:00:34 +0000
Manifest next update: Fri 25 Jul 2025 14:00:34 +0000
Files and hashes: 1: UzSEdJBP2Gqr1z-0qx79WTsLauw.roa (hash: vl1ow4mOIeKlrrAdbJAJQJmVxWS6mp39VC/9XaCz00U=)
2: XebRYOITfzcAbcv2WQiIUJzp9IY.roa (hash: /LlV1c2jBHdUzm3m7BbrQfvi7DnfI/2A+wzHJz5/0Eg=)
3: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: WTDmpeECGBkNrWUKRW+O3DxZS2aUtbXl1l2w2v8oLbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:bc:5d:67:29:b9:b3:b5:cf:27:d2:75:4a:1b:93:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Validity
Not Before: Jul 24 14:00:34 2025 GMT
Not After : Jul 25 14:00:34 2025 GMT
Subject: CN=470845d164682d66f426cdfe020ee43e50514704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:05:c2:be:5c:6f:5c:e9:a9:45:81:76:88:4f:
47:e6:00:8a:18:ef:2d:e5:55:13:a8:33:92:4a:cd:
3a:ae:24:5d:d2:fe:cc:1a:a9:00:b1:30:65:89:dc:
b5:b0:e7:3b:bc:34:86:7f:4a:9c:8d:73:ba:42:29:
97:77:d9:a6:c3:a0:ed:40:c2:ab:09:01:a3:e2:1d:
48:da:48:bd:bb:28:e2:8f:54:d5:f8:37:b3:db:f3:
49:cc:19:93:da:ae:d8:a3:8e:ed:08:72:9a:68:16:
55:05:9e:0b:b0:9f:6c:01:38:f9:1b:19:1f:14:26:
80:1b:4d:db:90:e2:98:ce:0d:ca:67:24:8a:57:0a:
ac:fb:ac:2f:77:af:48:93:9c:48:45:c6:03:8c:eb:
c7:57:5e:3b:9a:58:a6:9e:b0:13:92:a7:5a:c8:f2:
46:53:12:e1:44:04:e5:28:6b:b4:99:ed:60:59:7a:
80:b5:ac:31:6e:23:ae:71:73:98:de:17:25:8f:06:
70:20:fc:c9:32:7c:aa:96:bc:2e:42:7c:96:a2:cc:
02:41:57:a6:6c:02:e4:dd:fd:41:56:5b:17:62:db:
fc:a4:18:8d:02:71:e9:c2:40:c8:6a:43:6c:c2:a1:
07:7d:07:c3:b7:3d:f0:48:90:cd:72:28:48:78:04:
a7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:08:45:D1:64:68:2D:66:F4:26:CD:FE:02:0E:E4:3E:50:51:47:04
X509v3 Authority Key Identifier:
keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d5:4b:9a:07:46:8c:8c:65:b6:87:10:83:db:f9:19:2f:83:
04:ce:ff:aa:e3:26:2d:62:18:66:9f:ca:19:75:14:5f:e0:ff:
2b:56:1e:65:0b:9c:1f:62:9a:af:df:b5:bd:82:e9:34:d9:04:
b3:87:5d:76:2f:83:c1:34:a6:57:89:05:f6:cb:9e:22:32:95:
97:70:91:2a:ac:9c:56:d4:71:be:3b:ce:8e:fb:52:40:88:bb:
db:80:90:aa:b0:0b:46:37:ed:73:6f:3c:46:20:dd:6f:7b:1e:
7f:47:7c:e3:b9:69:38:90:be:a6:07:b9:9f:fa:a9:06:c2:cd:
79:c2:de:55:07:c3:d1:88:38:e7:1c:56:7a:5e:27:e4:f2:01:
df:59:5d:49:03:52:ea:4d:2f:de:8d:ae:fc:3e:0f:77:fc:a2:
15:b5:d7:4b:73:75:17:d6:a2:2f:71:14:52:36:be:b1:2f:0e:
00:6f:e7:7b:36:90:0c:21:89:f8:82:59:56:32:a9:40:27:65:
36:20:75:a2:e1:12:e4:37:01:ed:43:8b:68:9a:45:2e:20:f1:
d8:bc:17:c7:8e:b0:a7:25:d0:6a:da:ee:f5:cd:5c:ab:c8:15:
47:24:ea:16:5d:46:46:52:d3:52:d9:10:89:ff:15:a7:c0:ad:
be:cc:67:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg8vF1nKbmztc8n0nVKG5O1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZTE0MjlhNTNlNjQ2M2IzYzc0ZjVhM2YxN2M1ZDRhNTFl
YmQwYjgwHhcNMjUwNzI0MTQwMDM0WhcNMjUwNzI1MTQwMDM0WjAzMTEwLwYDVQQD
Eyg0NzA4NDVkMTY0NjgyZDY2ZjQyNmNkZmUwMjBlZTQzZTUwNTE0NzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQXCvlxvXOmpRYF2iE9H5gCKGO8t
5VUTqDOSSs06riRd0v7MGqkAsTBlidy1sOc7vDSGf0qcjXO6QimXd9mmw6DtQMKr
CQGj4h1I2ki9uyjij1TV+Dez2/NJzBmT2q7Yo47tCHKaaBZVBZ4LsJ9sATj5Gxkf
FCaAG03bkOKYzg3KZySKVwqs+6wvd69Ik5xIRcYDjOvHV147mlimnrATkqdayPJG
UxLhRATlKGu0me1gWXqAtawxbiOucXOY3hcljwZwIPzJMnyqlrwuQnyWoswCQVem
bALk3f1BVlsXYtv8pBiNAnHpwkDIakNswqEHfQfDtz3wSJDNcihIeASnSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcIRdFkaC1m9CbN/gIO5D5QUUcEMB8GA1UdIwQY
MBaAFIThQppT5kY7PHT1o/F8XUpR69C4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE9GQ21sUG1SanM4ZFBXajhYeGRTbEhyMExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83MmRiZGYtYzcxZC00ZTU5LTgwNzYt
YzQxZGNjYThiNzc1LzEvaE9GQ21sUG1SanM4ZFBXajhYeGRTbEhyMExnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83MmRiZGYtYzcxZC00ZTU5LTgwNzYtYzQxZGNjYThiNzc1
LzEvaE9GQ21sUG1SanM4ZFBXajhYeGRTbEhyMExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsNVLmgdG
jIxltocQg9v5GS+DBM7/quMmLWIYZp/KGXUUX+D/K1YeZQucH2Kar9+1vYLpNNkE
s4dddi+DwTSmV4kF9sueIjKVl3CRKqycVtRxvjvOjvtSQIi724CQqrALRjftc288
RiDdb3sef0d847lpOJC+pge5n/qpBsLNecLeVQfD0Yg45xxWel4n5PIB31ldSQNS
6k0v3o2u/D4Pd/yiFbXXS3N1F9aiL3EUUja+sS8OAG/nezaQDCGJ+IJZVjKpQCdl
NiB1ouES5DcB7UOLaJpFLiDx2LwXx46wpyXQatru9c1cq8gVRyTqFl1GRlLTUtkQ
if8Vp8CtvsxnXw==
-----END CERTIFICATE-----
Generated at Thu Jul 24 22:59:42 2025 by rpki-client