Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
File: H0qus-K3pD3wHzHVGiDvIlXOr-M.mft (raw, json)
Hash identifier: XeEo6XC0B9rAtPhA+j/Shu9TobIgymW/Umic++3Yghg=
Subject key identifier: 97:70:62:62:63:84:40:20:C2:D0:C6:29:F2:57:C5:B8:24:B3:27:32
Authority key identifier: 1F:4A:AE:B3:E2:B7:A4:3D:F0:1F:31:D5:1A:20:EF:22:55:CE:AF:E3
Certificate issuer: /CN=1f4aaeb3e2b7a43df01f31d51a20ef2255ceafe3
Certificate serial: 019923A0AC32E5B6634695C29FB8F252BAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
Manifest number: 0513
Signing time: Sun 07 Sep 2025 10:02:36 +0000
Manifest this update: Sun 07 Sep 2025 10:02:36 +0000
Manifest next update: Mon 08 Sep 2025 10:02:36 +0000
Files and hashes: 1: H0qus-K3pD3wHzHVGiDvIlXOr-M.crl (hash: 9Nait+8vSSEjgyw1fcOaGbdw04RtgttvZHIZBi89CHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:ac:32:e5:b6:63:46:95:c2:9f:b8:f2:52:ba:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4aaeb3e2b7a43df01f31d51a20ef2255ceafe3
Validity
Not Before: Sep 7 10:02:36 2025 GMT
Not After : Sep 8 10:02:36 2025 GMT
Subject: CN=9770626263844020c2d0c629f257c5b824b32732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:4b:71:9d:e0:ef:fe:d6:82:f8:18:44:d7:
42:b4:75:2f:bd:27:ef:40:ff:a7:26:fb:29:b6:05:
64:92:4d:f4:08:ac:7e:1c:fb:ed:21:13:48:b5:31:
cc:c8:dd:f3:cb:62:c7:05:65:e3:b1:59:b5:72:a7:
ce:e7:ca:4c:04:09:b3:d4:1f:16:71:12:cc:4e:9c:
e8:b0:7a:31:b1:69:c4:00:c2:6e:38:16:b4:bb:83:
b6:d0:77:1d:cc:49:bc:da:bc:9d:97:23:ec:2d:51:
96:15:ba:e2:0a:9b:4e:ea:d0:f2:c9:67:e6:35:ba:
98:2e:46:5e:de:ee:60:26:0e:f2:6f:c3:b9:7e:8d:
d7:7d:7c:1c:ee:d8:33:20:10:bb:c2:cc:a1:90:35:
bb:e7:02:42:32:4c:c7:dd:be:52:e7:6f:1c:0d:dd:
8d:49:33:04:8f:be:64:a4:5f:53:ae:96:fe:09:93:
fb:8a:13:8b:5f:19:d2:57:64:13:b5:f8:b1:f6:ec:
b1:e9:18:04:b4:03:50:47:10:a9:b0:80:89:02:f4:
75:14:be:45:c1:db:8c:fc:9e:2b:76:a7:e9:93:cc:
f5:07:3e:31:f4:8e:2a:f8:5b:a6:ed:48:c7:90:7e:
22:f0:46:55:31:d3:a4:bd:87:2c:5f:f0:4b:58:8a:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:70:62:62:63:84:40:20:C2:D0:C6:29:F2:57:C5:B8:24:B3:27:32
X509v3 Authority Key Identifier:
keyid:1F:4A:AE:B3:E2:B7:A4:3D:F0:1F:31:D5:1A:20:EF:22:55:CE:AF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c1:c2:24:6b:76:f5:32:84:04:40:15:ca:65:41:85:2b:bd:
d0:69:31:ef:31:d7:4f:44:9a:c5:b8:90:2f:88:de:6e:d1:03:
83:b0:26:74:7b:cf:b4:1a:41:54:49:53:ba:db:ff:98:95:ad:
04:b5:6a:00:3a:f5:0b:5e:a8:29:78:ed:65:0a:b0:cd:a0:20:
08:5f:0f:f9:48:4c:15:5b:3f:37:6f:40:2b:1c:60:fe:62:be:
1b:48:26:bd:57:1c:9b:d0:6b:f0:45:14:47:a0:37:5b:6f:0a:
2b:cc:de:55:41:88:36:94:2e:46:82:df:cf:0a:29:a5:9f:bf:
ea:34:d3:1b:be:29:fb:fc:be:6b:14:21:b6:62:71:b6:f6:d9:
2c:c3:cd:f1:a6:62:cf:0f:82:67:a5:57:5a:9d:7d:fa:3c:d7:
3b:3c:a7:b6:66:85:99:a3:2c:a1:55:70:59:a2:d6:35:dc:fb:
3c:4a:85:ab:66:d5:90:25:9d:19:76:f5:d9:36:f2:55:35:42:
96:60:fc:db:ac:d6:f6:d1:db:af:ab:d6:d9:4c:9f:90:4f:df:
19:4f:e2:b6:ae:06:ac:79:0d:cf:3e:09:c4:92:03:61:9f:bc:
38:ac:08:97:cf:93:5c:05:79:c0:8d:d0:20:a9:b5:d8:69:93:
2a:80:ca:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoKwy5bZjRpXCn7jyUrrkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNGFhZWIzZTJiN2E0M2RmMDFmMzFkNTFhMjBlZjIyNTVj
ZWFmZTMwHhcNMjUwOTA3MTAwMjM2WhcNMjUwOTA4MTAwMjM2WjAzMTEwLwYDVQQD
Eyg5NzcwNjI2MjYzODQ0MDIwYzJkMGM2MjlmMjU3YzViODI0YjMyNzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolVLcZ3g7/7WgvgYRNdCtHUvvSfv
QP+nJvsptgVkkk30CKx+HPvtIRNItTHMyN3zy2LHBWXjsVm1cqfO58pMBAmz1B8W
cRLMTpzosHoxsWnEAMJuOBa0u4O20HcdzEm82rydlyPsLVGWFbriCptO6tDyyWfm
NbqYLkZe3u5gJg7yb8O5fo3XfXwc7tgzIBC7wsyhkDW75wJCMkzH3b5S528cDd2N
STMEj75kpF9Trpb+CZP7ihOLXxnSV2QTtfix9uyx6RgEtANQRxCpsICJAvR1FL5F
wduM/J4rdqfpk8z1Bz4x9I4q+Fum7UjHkH4i8EZVMdOkvYcsX/BLWIrUJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdwYmJjhEAgwtDGKfJXxbgksycyMB8GA1UdIwQY
MBaAFB9KrrPit6Q98B8x1Rog7yJVzq/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBxdXMtSzNwRDN3SHpIVkdpRHZJbFhPci1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8zZjNmNTAtMmYzNS00MDdlLWI5OWMt
ZTE4NDJiZTQxMmQxLzEvSDBxdXMtSzNwRDN3SHpIVkdpRHZJbFhPci1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8zZjNmNTAtMmYzNS00MDdlLWI5OWMtZTE4NDJiZTQxMmQx
LzEvSDBxdXMtSzNwRDN3SHpIVkdpRHZJbFhPci1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMHCJGt2
9TKEBEAVymVBhSu90Gkx7zHXT0SaxbiQL4jebtEDg7AmdHvPtBpBVElTutv/mJWt
BLVqADr1C16oKXjtZQqwzaAgCF8P+UhMFVs/N29AKxxg/mK+G0gmvVccm9Br8EUU
R6A3W28KK8zeVUGINpQuRoLfzwoppZ+/6jTTG74p+/y+axQhtmJxtvbZLMPN8aZi
zw+CZ6VXWp19+jzXOzyntmaFmaMsoVVwWaLWNdz7PEqFq2bVkCWdGXb12TbyVTVC
lmD826zW9tHbr6vW2UyfkE/fGU/itq4GrHkNzz4JxJIDYZ+8OKwIl8+TXAV5wI3Q
IKm12GmTKoDKFA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:38 2025 by rpki-client