Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: tDMBr5xL7y47aMqRtqDCIFxnEun2s1K4FfCR0OV3I3w=
Subject key identifier: D4:22:B5:49:44:69:45:4E:05:D2:8D:2B:3E:49:6B:55:EA:AE:D1:F5
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 01984A77C5B4DAA2E5E944CF34B33151B3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 0650
Signing time: Sun 27 Jul 2025 06:00:20 +0000
Manifest this update: Sun 27 Jul 2025 06:00:20 +0000
Manifest next update: Mon 28 Jul 2025 06:00:20 +0000
Files and hashes: 1: XOOVHbvdi1PyG7OFqAlrThvaXr0.roa (hash: FXkyjiQc3j4OAi/BA8pdWLXnVuKz/SxHMWNuTxG6YRs=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: He75HpWbzCRu5PYVVvtUNMTcAnsuYxChNZzWTuyQO8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:c5:b4:da:a2:e5:e9:44:cf:34:b3:31:51:b3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Jul 27 06:00:20 2025 GMT
Not After : Jul 28 06:00:20 2025 GMT
Subject: CN=d422b5494469454e05d28d2b3e496b55eaaed1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:32:a5:9a:2a:3b:12:4d:fa:ea:88:81:32:1c:
d7:6d:11:46:1c:83:ec:59:5e:48:12:31:ed:90:38:
3f:bc:dd:5a:eb:01:df:5b:ed:24:72:14:4e:9c:77:
f0:31:72:ff:12:8b:f7:b0:76:0f:bd:49:30:58:98:
c7:b8:b3:50:8e:72:38:da:1f:e1:07:cb:78:8d:11:
c8:2c:75:71:2f:9c:6d:5c:76:0f:18:7d:af:a3:01:
2e:5b:fb:66:1d:7c:3f:1a:dd:04:39:e0:ed:dd:f4:
fb:0a:dd:f8:69:87:42:e6:9d:20:a0:06:f6:52:de:
47:b4:52:a6:1c:6c:d5:6e:7f:72:15:5d:8f:68:37:
d8:e2:8f:0c:a4:b6:27:42:b5:b0:f4:6c:a8:41:90:
43:f6:bd:37:d9:3c:6a:a1:d2:da:f3:99:11:1a:20:
32:a3:dc:b8:16:10:9b:cf:d7:13:3a:0e:2c:20:46:
30:23:12:41:b5:a3:c6:6b:99:1e:45:e2:dc:eb:5b:
ec:31:92:d3:53:dd:5d:e2:20:59:ba:b2:f7:51:b4:
f9:d9:2b:9e:d2:3b:ca:8f:d3:63:0a:71:55:ca:74:
5c:06:e4:58:28:b3:30:da:f6:1a:4d:bb:a7:e6:5c:
48:85:c0:a0:f2:4f:93:f1:51:e4:1f:b6:b8:55:ed:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:22:B5:49:44:69:45:4E:05:D2:8D:2B:3E:49:6B:55:EA:AE:D1:F5
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e8:57:fb:91:b8:82:d1:ce:49:02:e1:ae:df:d6:97:f5:b9:
fc:3f:28:bf:12:2e:64:f7:8c:2b:9f:5a:e4:b4:98:ff:0b:dc:
35:f0:4c:e1:92:e1:29:fb:da:a6:3e:3f:60:5e:7e:27:92:d1:
a2:b3:d3:32:c8:0f:45:9e:32:ea:ab:de:45:7e:e3:7d:9c:eb:
12:36:ad:8a:00:dc:fb:b5:b5:84:fb:1f:09:71:30:93:24:a6:
3c:24:16:4d:e3:60:df:cc:40:f3:c2:ae:71:e6:37:eb:f0:5d:
d7:4a:10:b8:69:a8:18:9d:35:7e:81:97:c1:cd:9a:6c:9e:c3:
f3:f6:21:e0:41:18:4d:cd:d3:90:11:fd:4e:5a:df:d1:35:01:
91:c0:ec:6c:4a:49:10:15:a7:d2:ca:2a:65:dc:80:4b:a3:68:
58:35:17:fb:de:27:63:d6:51:dd:38:3d:98:df:47:d5:87:63:
02:5d:8a:56:3d:cd:7b:97:db:60:47:01:29:f7:f6:f5:08:2a:
f8:37:7d:10:31:16:77:86:1b:2b:0f:25:69:99:be:52:0b:83:
a8:de:ed:7a:10:b5:68:00:61:44:11:ce:60:af:bf:89:43:cf:
02:81:5c:2a:27:a3:5d:ae:85:db:79:33:a4:19:93:b5:de:64:
ef:92:77:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKd8W02qLl6UTPNLMxUbPuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OThjYmM0ZThkZmYxODUyNDA0YTk5Mjc1ZDIzMGE1NjEx
MTA1NWYwHhcNMjUwNzI3MDYwMDIwWhcNMjUwNzI4MDYwMDIwWjAzMTEwLwYDVQQD
EyhkNDIyYjU0OTQ0Njk0NTRlMDVkMjhkMmIzZTQ5NmI1NWVhYWVkMWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizKlmio7Ek366oiBMhzXbRFGHIPs
WV5IEjHtkDg/vN1a6wHfW+0kchROnHfwMXL/Eov3sHYPvUkwWJjHuLNQjnI42h/h
B8t4jRHILHVxL5xtXHYPGH2vowEuW/tmHXw/Gt0EOeDt3fT7Ct34aYdC5p0goAb2
Ut5HtFKmHGzVbn9yFV2PaDfY4o8MpLYnQrWw9GyoQZBD9r032TxqodLa85kRGiAy
o9y4FhCbz9cTOg4sIEYwIxJBtaPGa5keReLc61vsMZLTU91d4iBZurL3UbT52Sue
0jvKj9NjCnFVynRcBuRYKLMw2vYaTbun5lxIhcCg8k+T8VHkH7a4Ve2SfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQitUlEaUVOBdKNKz5Ja1XqrtH1MB8GA1UdIwQY
MBaAFIWYy8To3/GFJASpknXSMKVhEQVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEt
NTFlNGE1ZWFmYzhlLzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEtNTFlNGE1ZWFmYzhl
LzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuhX+5G4
gtHOSQLhrt/Wl/W5/D8ovxIuZPeMK59a5LSY/wvcNfBM4ZLhKfvapj4/YF5+J5LR
orPTMsgPRZ4y6qveRX7jfZzrEjatigDc+7W1hPsfCXEwkySmPCQWTeNg38xA88Ku
ceY36/Bd10oQuGmoGJ01foGXwc2abJ7D8/Yh4EEYTc3TkBH9Tlrf0TUBkcDsbEpJ
EBWn0soqZdyAS6NoWDUX+94nY9ZR3Tg9mN9H1YdjAl2KVj3Ne5fbYEcBKff29Qgq
+Dd9EDEWd4YbKw8laZm+UguDqN7tehC1aABhRBHOYK+/iUPPAoFcKiejXa6F23kz
pBmTtd5k75J3xw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:47:14 2025 by rpki-client