
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
File: hVBZemBkyIKuKvP6V1nxP4vR3fw.mft (raw, json)
Hash identifier: w96ellXIrOWqLFbUSmVskQJIopS5XIwEebtVKhfVy/k=
Subject key identifier: 0D:39:39:25:16:FC:4D:3F:A7:D7:C9:0D:CB:15:6E:7C:89:5C:DF:36
Authority key identifier: 85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
Certificate issuer: /CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Certificate serial: 019846D215CF49B13E127F64FE586A02B3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
Manifest number: 1034
Signing time: Sat 26 Jul 2025 13:00:29 +0000
Manifest this update: Sat 26 Jul 2025 13:00:29 +0000
Manifest next update: Sun 27 Jul 2025 13:00:29 +0000
Files and hashes: 1: Nnh8TxyMB33fgGngdO7IhueAOsU.roa (hash: R28y5tSNBK4A6wEp0RdvkAdrsGgoMExqmSzBUnD9C9E=)
2: hVBZemBkyIKuKvP6V1nxP4vR3fw.crl (hash: EBCvo1uUCvLqJUEChMT7bkdCkm3NyLqydcHw+4oP7sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:15:cf:49:b1:3e:12:7f:64:fe:58:6a:02:b3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Validity
Not Before: Jul 26 13:00:29 2025 GMT
Not After : Jul 27 13:00:29 2025 GMT
Subject: CN=0d39392516fc4d3fa7d7c90dcb156e7c895cdf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:20:d6:b8:d1:41:8a:d8:52:cf:4d:5f:4d:
7a:1a:c8:35:ef:0e:b6:cc:aa:c0:7b:8b:e4:06:d1:
0a:d2:18:08:d6:90:a0:c9:6e:c5:28:54:05:39:85:
6a:b7:7b:93:65:74:5b:c1:e1:e4:80:7c:a5:dd:7d:
d7:5e:05:45:ac:ff:6b:04:b7:01:2c:31:ed:7d:c6:
1a:4d:f6:20:68:a7:02:b3:75:63:df:92:21:c0:dc:
04:57:31:4a:2a:19:f3:51:64:f0:a3:cc:04:90:4f:
12:af:4a:f1:4e:70:07:27:49:38:1c:a1:5f:55:61:
c8:7d:ad:ba:60:98:dd:ca:30:a7:d3:d1:46:97:a0:
de:a3:94:b9:48:37:5d:6e:38:46:ea:12:5c:1f:7c:
a7:fe:fe:4a:24:9c:0e:7e:5d:c5:92:31:87:d9:4e:
eb:e0:30:8b:87:81:da:a0:eb:2c:92:29:23:4c:d8:
b3:5e:89:cf:ef:c1:c6:d0:fe:0c:33:47:96:aa:6c:
e7:97:6c:2b:bd:c2:dc:df:34:a6:b7:01:47:d4:ef:
ed:bb:35:af:04:1b:70:7d:56:6d:20:6c:f4:1c:9e:
5b:e6:a3:e5:65:c7:79:eb:de:33:a5:71:29:42:75:
0b:12:ac:cb:f6:b9:05:85:95:e9:0d:48:6d:7a:e7:
3d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:39:39:25:16:FC:4D:3F:A7:D7:C9:0D:CB:15:6E:7C:89:5C:DF:36
X509v3 Authority Key Identifier:
keyid:85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fc:2e:7d:ca:d6:5e:d3:12:de:9b:1c:f6:c1:d4:51:59:1f:
3f:02:dc:db:9f:62:cf:75:0e:f6:73:ef:9a:ef:5f:77:98:82:
32:39:e3:6b:0b:75:d1:79:b1:06:e7:60:3e:52:a3:42:cb:7f:
9b:f6:37:33:ab:9d:cb:89:21:62:bd:9f:e4:33:f2:c1:4e:cb:
48:d5:b2:57:a6:8e:56:60:e0:af:75:4a:ac:e9:ab:3a:ee:e2:
d8:85:84:c2:40:84:d1:28:dc:63:9d:92:5c:ce:d8:9b:99:fe:
f8:50:ef:89:9d:c3:8e:5e:5c:bf:0e:1d:d0:a9:58:78:5a:23:
93:30:c0:60:01:37:4f:d3:2c:24:20:b1:5d:84:4b:8f:db:6a:
1a:5f:42:76:52:a9:d5:e0:8e:26:5e:f6:73:3f:29:64:5a:88:
c2:28:5f:35:11:5c:92:0c:df:8e:92:02:d1:d9:91:f5:68:b1:
70:94:aa:c5:d3:68:2d:20:34:bf:d1:fb:29:b7:ac:34:1e:cb:
35:e5:a1:54:f5:06:4a:1a:36:12:a5:f3:d8:6d:13:2e:74:e2:
37:9f:6f:85:e1:e5:e2:e1:e0:f8:3f:3f:03:c4:2f:f5:fe:20:
8b:e8:a8:c5:ec:3f:f6:42:cc:87:fd:af:ea:16:05:4e:66:cc:
de:fa:a2:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhG0hXPSbE+En9k/lhqArO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NTA1OTdhNjA2NGM4ODJhZTJhZjNmYTU3NTlmMTNmOGJk
MWRkZmMwHhcNMjUwNzI2MTMwMDI5WhcNMjUwNzI3MTMwMDI5WjAzMTEwLwYDVQQD
EygwZDM5MzkyNTE2ZmM0ZDNmYTdkN2M5MGRjYjE1NmU3Yzg5NWNkZjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu8g1rjRQYrYUs9NX016Gsg17w62
zKrAe4vkBtEK0hgI1pCgyW7FKFQFOYVqt3uTZXRbweHkgHyl3X3XXgVFrP9rBLcB
LDHtfcYaTfYgaKcCs3Vj35IhwNwEVzFKKhnzUWTwo8wEkE8Sr0rxTnAHJ0k4HKFf
VWHIfa26YJjdyjCn09FGl6Deo5S5SDddbjhG6hJcH3yn/v5KJJwOfl3FkjGH2U7r
4DCLh4HaoOsskikjTNizXonP78HG0P4MM0eWqmznl2wrvcLc3zSmtwFH1O/tuzWv
BBtwfVZtIGz0HJ5b5qPlZcd5694zpXEpQnULEqzL9rkFhZXpDUhteuc96QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA05OSUW/E0/p9fJDcsVbnyJXN82MB8GA1UdIwQY
MBaAFIVQWXpgZMiCrirz+ldZ8T+L0d38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZCWmVtQmt5SUt1S3ZQNlYxbnhQNHZSM2Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8xYzcyYzUtMjk5YS00ZjcwLTgxMmMt
MjVjNWYwNWFlYjVmLzEvaFZCWmVtQmt5SUt1S3ZQNlYxbnhQNHZSM2Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8xYzcyYzUtMjk5YS00ZjcwLTgxMmMtMjVjNWYwNWFlYjVm
LzEvaFZCWmVtQmt5SUt1S3ZQNlYxbnhQNHZSM2Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/wufcrW
XtMS3psc9sHUUVkfPwLc259iz3UO9nPvmu9fd5iCMjnjawt10XmxBudgPlKjQst/
m/Y3M6udy4khYr2f5DPywU7LSNWyV6aOVmDgr3VKrOmrOu7i2IWEwkCE0SjcY52S
XM7Ym5n++FDviZ3Djl5cvw4d0KlYeFojkzDAYAE3T9MsJCCxXYRLj9tqGl9CdlKp
1eCOJl72cz8pZFqIwihfNRFckgzfjpIC0dmR9WixcJSqxdNoLSA0v9H7KbesNB7L
NeWhVPUGSho2EqXz2G0TLnTiN59vheHl4uHg+D8/A8Qv9f4gi+ioxew/9kLMh/2v
6hYFTmbM3vqirw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:00:00 2025 by rpki-client