Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File: HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier: AI3Ei9/BCv6JOS5VuJGMLM2y5i5iMlrmfPAM25qTpYg=
Subject key identifier: EC:54:E4:25:24:F3:73:49:FC:69:4A:FF:C2:10:C8:C2:9A:29:5A:B5
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 0198277E5924D29C02DC2FF112A4BC8AE017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number: 0B9A
Signing time: Sun 20 Jul 2025 11:00:48 +0000
Manifest this update: Sun 20 Jul 2025 11:00:48 +0000
Manifest next update: Mon 21 Jul 2025 11:00:48 +0000
Files and hashes: 1: 89ZdTmp7S2NunnuoGSf_2vtgPY8.roa (hash: bPa9rSCPFw03d28VXPa3N71Ifao0FpVDusG0bNmLxwE=)
2: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: nLzEgWtiR7PBDRWkeMBRGnmSO8eMbHpWwPjszgRSz1w=)
3: f9__0EOOD2bbqws_SYovsEadu64.roa (hash: rdpqu3t3b72JgKQs0LjFSsEK4eL5Gx3rtjq221xpO1U=)
4: fTWM1zKEU10CvPHR7x8xLqGMmBk.roa (hash: SLdOjrmdsiTj6gBhRX9Fmq3urmuPys2J1yZIBUXb9kE=)
5: kc5iSTCS2Wj8DpgYXFD3Z8kI0-w.roa (hash: uGP+3hnsQtTfTdEoExGqurh/AYLhmRguK0+ycdKSTRo=)
6: ozQ0B3nPhW9yGj6eBSj3bv5_jKQ.roa (hash: 52z0loKl64IpfsA33HSHXJF3VKeUhqS7Sku5ZE137X0=)
7: rZWoVR8go-ETzcAh50MLSM8Nmkw.roa (hash: cgavxAlOshWtjoy57HjDWJFVrT3Fp0YJu3pSKWnrDaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:7e:59:24:d2:9c:02:dc:2f:f1:12:a4:bc:8a:e0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jul 20 11:00:48 2025 GMT
Not After : Jul 21 11:00:48 2025 GMT
Subject: CN=ec54e42524f37349fc694affc210c8c29a295ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:83:7b:0a:1c:b9:40:f6:67:0d:2c:9c:7f:b6:
c7:1f:91:11:8b:31:ec:b7:ea:8c:1a:d2:34:34:4c:
7b:09:a7:94:d2:e9:2e:8f:58:6d:7e:ab:53:5d:96:
7e:4d:7d:f8:88:ef:91:f0:f3:47:4b:4c:a0:03:a0:
2e:8f:6c:4c:d1:97:38:e7:78:83:92:98:e4:19:1c:
fa:a6:e5:23:e8:e4:89:3c:74:82:0c:f4:9e:7c:59:
69:ba:60:5f:f9:1d:61:92:a2:35:49:c2:98:40:d9:
7c:dc:df:32:22:79:52:0e:ef:54:7b:17:6c:f5:17:
c1:c2:b2:42:e9:03:8c:9b:6b:b8:d9:86:b3:70:d1:
e0:89:a5:1c:81:81:88:f7:d6:7b:e7:41:25:00:31:
0f:ce:3b:49:54:dd:61:42:0a:98:40:4d:06:8b:07:
a9:49:13:ad:96:f4:74:49:c9:a1:1f:75:09:2b:40:
4f:21:23:13:74:11:0c:72:f1:91:3a:27:eb:b3:e4:
28:e8:a7:fa:26:d8:ba:ec:e6:a7:68:50:9b:83:1f:
db:b6:fe:3f:ea:02:8a:3a:b8:31:29:b1:39:81:0a:
9f:39:ae:63:e9:12:89:f8:8e:50:b7:d2:65:db:c4:
6f:13:97:f3:c2:5b:54:f4:5a:89:ad:4b:41:b7:70:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:54:E4:25:24:F3:73:49:FC:69:4A:FF:C2:10:C8:C2:9A:29:5A:B5
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:77:34:ed:91:17:eb:a3:9a:13:4c:19:c6:b7:57:15:77:92:
cf:7a:37:b7:ac:1c:16:ee:01:d2:40:9b:50:fc:e2:0f:6f:e8:
65:7d:7f:c1:79:78:d9:5f:25:4d:19:8f:9b:cc:b6:1c:31:ee:
28:bd:08:8c:a9:93:33:dc:a2:c4:a9:98:ea:39:3b:36:72:f9:
12:de:32:8c:73:ae:45:dd:b7:d9:89:86:d5:f1:63:38:8a:b9:
12:3b:33:2e:6d:37:57:20:08:31:2d:0e:c4:28:1e:e5:13:db:
17:88:5f:2c:a6:88:71:ac:0a:67:c5:bc:12:09:5e:ca:1e:18:
72:47:c4:8f:5b:b7:e3:9a:62:4e:fa:74:62:08:f6:b1:11:15:
65:22:b9:6b:f0:04:fe:09:6e:3a:8d:92:ac:d7:ff:f5:21:5e:
80:83:fe:38:e0:0c:05:cc:59:64:62:b9:af:d0:47:cb:e5:e1:
c8:f3:d7:74:2d:ae:16:8f:45:80:5e:00:f2:b2:04:ab:51:05:
34:d5:f5:48:70:82:36:cc:97:33:eb:a3:91:78:c5:23:d0:62:
c3:6e:5b:33:e5:99:a0:8e:32:0f:7c:33:2c:8a:df:7d:45:47:
1b:12:41:1c:4d:d4:0d:83:30:b3:be:a4:07:46:2d:de:24:2e:
72:88:3c:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgnflkk0pwC3C/xEqS8iuAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1
NDEyNTUwHhcNMjUwNzIwMTEwMDQ4WhcNMjUwNzIxMTEwMDQ4WjAzMTEwLwYDVQQD
EyhlYzU0ZTQyNTI0ZjM3MzQ5ZmM2OTRhZmZjMjEwYzhjMjlhMjk1YWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioN7Chy5QPZnDSycf7bHH5ERizHs
t+qMGtI0NEx7CaeU0ukuj1htfqtTXZZ+TX34iO+R8PNHS0ygA6Auj2xM0Zc453iD
kpjkGRz6puUj6OSJPHSCDPSefFlpumBf+R1hkqI1ScKYQNl83N8yInlSDu9Uexds
9RfBwrJC6QOMm2u42YazcNHgiaUcgYGI99Z750ElADEPzjtJVN1hQgqYQE0Giwep
SROtlvR0ScmhH3UJK0BPISMTdBEMcvGROifrs+Qo6Kf6Jti67OanaFCbgx/btv4/
6gKKOrgxKbE5gQqfOa5j6RKJ+I5Qt9Jl28RvE5fzwltU9FqJrUtBt3DZXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxU5CUk83NJ/GlK/8IQyMKaKVq1MB8GA1UdIwQY
MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt
ZGY3OTNhOTQwYmFiLzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi
LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHc07ZEX
66OaE0wZxrdXFXeSz3o3t6wcFu4B0kCbUPziD2/oZX1/wXl42V8lTRmPm8y2HDHu
KL0IjKmTM9yixKmY6jk7NnL5Et4yjHOuRd232YmG1fFjOIq5EjszLm03VyAIMS0O
xCge5RPbF4hfLKaIcawKZ8W8Egleyh4YckfEj1u345piTvp0Ygj2sREVZSK5a/AE
/gluOo2SrNf/9SFegIP+OOAMBcxZZGK5r9BHy+XhyPPXdC2uFo9FgF4A8rIEq1EF
NNX1SHCCNsyXM+ujkXjFI9Biw25bM+WZoI4yD3wzLIrffUVHGxJBHE3UDYMws76k
B0Yt3iQucog88g==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:26 2025 by rpki-client