Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
File: Hw94pVpb5cAduAP0OMphG38VAwc.mft (raw, json)
Hash identifier: SxYGBwVMlpi19X3vicZtbYzk9wxvsVhx8Qnm9qw7x10=
Subject key identifier: AC:F0:72:80:69:9E:6D:F9:33:EB:A1:CB:E5:86:09:04:E6:29:39:21
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Certificate issuer: /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial: 019923A05ED92B76C8131C07CD0677395CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
Manifest number: 0D4D
Signing time: Sun 07 Sep 2025 10:02:16 +0000
Manifest this update: Sun 07 Sep 2025 10:02:16 +0000
Manifest next update: Mon 08 Sep 2025 10:02:16 +0000
Files and hashes: 1: Hw94pVpb5cAduAP0OMphG38VAwc.crl (hash: veBaWPCsYYMsBFLckbCnqUnbDSVBudWBqYWxWeIHZzg=)
2: eCBuvHT7IMaBXPivvQ3l-YdKsf4.roa (hash: o8SV6r5/m90uv9RNHtmHfhH9wPKwfjIhitnoqSV/JH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:5e:d9:2b:76:c8:13:1c:07:cd:06:77:39:5c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Validity
Not Before: Sep 7 10:02:16 2025 GMT
Not After : Sep 8 10:02:16 2025 GMT
Subject: CN=acf07280699e6df933eba1cbe5860904e6293921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fb:59:56:d9:8a:0c:8a:22:33:98:c1:ac:1e:
80:7b:72:4a:f3:06:d4:76:6f:04:17:43:d4:2a:19:
89:17:71:32:05:cc:73:ce:51:65:3f:fb:0c:79:c2:
01:22:02:fc:bf:a9:35:52:70:6c:98:88:8f:99:a1:
14:e6:ef:8d:c0:70:c5:54:f0:87:bc:10:42:75:ab:
56:b2:b4:15:0c:b0:b5:d6:ae:a6:55:a1:46:3b:e4:
14:95:c9:21:73:5b:94:47:dc:c8:0d:0b:2c:97:05:
8e:f6:bd:87:93:15:88:2a:17:27:4b:d3:c0:5a:15:
20:ac:56:06:f3:29:65:a5:bb:0a:94:ea:78:48:e2:
ea:6f:c5:1d:e3:32:f0:d8:69:43:ae:12:e0:e6:ae:
43:70:43:e6:76:18:01:57:7a:e7:7a:ff:f8:c1:b9:
d3:05:f4:bc:a7:7b:c6:90:b5:4d:5f:fc:42:4c:7d:
f1:dd:7f:58:f6:c1:a0:8f:3b:2d:e6:b2:15:ad:63:
cd:83:d4:a4:8e:3d:c3:01:eb:94:d8:46:61:9d:2d:
38:b0:57:a3:ad:86:75:33:a5:91:9b:d7:d1:6d:a6:
e9:9c:88:af:9c:e3:f1:71:71:02:b4:aa:80:58:ee:
76:65:d1:0f:dd:ad:9b:68:22:55:00:c3:86:43:f8:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F0:72:80:69:9E:6D:F9:33:EB:A1:CB:E5:86:09:04:E6:29:39:21
X509v3 Authority Key Identifier:
keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7d:0e:7e:45:e9:04:c8:5b:29:ff:0a:57:ff:51:fa:da:cb:
50:4d:af:1c:d9:5b:ee:0f:c1:cf:50:8f:ae:e2:81:04:06:3e:
a8:95:8a:2d:0f:7c:fb:1e:78:a5:6d:a0:0a:f0:bd:95:27:95:
a5:ce:4e:03:ac:64:58:9a:31:47:86:58:4f:51:ba:14:16:ea:
da:b0:4a:1d:b8:25:f2:9e:03:9d:39:c9:5c:9f:a9:e1:75:a8:
20:5b:e2:f3:6b:3a:f8:0a:8b:3c:25:dd:82:b0:b3:26:67:6b:
a9:cb:fc:88:08:18:b9:71:24:2a:a3:89:67:c5:57:56:ac:0a:
42:1d:82:fd:90:50:ba:41:a5:90:5a:ba:7a:1d:e1:27:0a:a5:
de:8b:ae:54:e0:7d:c4:46:41:7c:ea:22:e1:46:d3:9c:0e:86:
44:1f:a8:54:fe:d3:75:5c:3d:f1:db:52:fd:0c:f8:c9:7b:44:
c7:c6:c9:61:f8:47:32:b5:da:3f:d6:bb:84:81:af:d1:b9:13:
4d:e0:16:61:7f:29:48:32:ee:89:77:ac:05:d8:f2:ba:ad:44:
be:d8:12:bd:70:f6:8c:57:04:9c:e3:19:bd:fb:ef:6b:2f:4d:
87:a5:c2:17:34:17:b7:28:4b:a9:8e:d5:bd:56:51:e1:86:d2:
44:3c:1a:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoF7ZK3bIExwHzQZ3OVzYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMGY3OGE1NWE1YmU1YzAxZGI4MDNmNDM4Y2E2MTFiN2Yx
NTAzMDcwHhcNMjUwOTA3MTAwMjE2WhcNMjUwOTA4MTAwMjE2WjAzMTEwLwYDVQQD
EyhhY2YwNzI4MDY5OWU2ZGY5MzNlYmExY2JlNTg2MDkwNGU2MjkzOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vtZVtmKDIoiM5jBrB6Ae3JK8wbU
dm8EF0PUKhmJF3EyBcxzzlFlP/sMecIBIgL8v6k1UnBsmIiPmaEU5u+NwHDFVPCH
vBBCdatWsrQVDLC11q6mVaFGO+QUlckhc1uUR9zIDQsslwWO9r2HkxWIKhcnS9PA
WhUgrFYG8yllpbsKlOp4SOLqb8Ud4zLw2GlDrhLg5q5DcEPmdhgBV3rnev/4wbnT
BfS8p3vGkLVNX/xCTH3x3X9Y9sGgjzst5rIVrWPNg9Skjj3DAeuU2EZhnS04sFej
rYZ1M6WRm9fRbabpnIivnOPxcXECtKqAWO52ZdEP3a2baCJVAMOGQ/hDcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzwcoBpnm35M+uhy+WGCQTmKTkhMB8GA1UdIwQY
MBaAFB8PeKVaW+XAHbgD9DjKYRt/FQMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hNTBjN2MtODc4YS00N2ZkLTgxMDct
NzlmMTA1YWVmOGQ2LzEvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hNTBjN2MtODc4YS00N2ZkLTgxMDctNzlmMTA1YWVmOGQ2
LzEvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHH0OfkXp
BMhbKf8KV/9R+trLUE2vHNlb7g/Bz1CPruKBBAY+qJWKLQ98+x54pW2gCvC9lSeV
pc5OA6xkWJoxR4ZYT1G6FBbq2rBKHbgl8p4DnTnJXJ+p4XWoIFvi82s6+AqLPCXd
grCzJmdrqcv8iAgYuXEkKqOJZ8VXVqwKQh2C/ZBQukGlkFq6eh3hJwql3ouuVOB9
xEZBfOoi4UbTnA6GRB+oVP7TdVw98dtS/Qz4yXtEx8bJYfhHMrXaP9a7hIGv0bkT
TeAWYX8pSDLuiXesBdjyuq1EvtgSvXD2jFcEnOMZvfvvay9Nh6XCFzQXtyhLqY7V
vVZR4YbSRDwaHQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:41 2025 by rpki-client