Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
File: Hqemr7IbsUh0L2FV0aOa_I_H55w.mft (raw, json)
Hash identifier: TCs6sGTB76WKvczAJtINF4QtGne7R5D34lYvkNTR2qg=
Subject key identifier: BD:76:FE:3A:E2:67:F8:88:12:1A:77:A3:8A:76:DF:90:17:ED:22:2D
Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
Certificate issuer: /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Certificate serial: 019921E793AD79969C99B27CB34F178110D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
Manifest number: 0FB4
Signing time: Sun 07 Sep 2025 02:00:48 +0000
Manifest this update: Sun 07 Sep 2025 02:00:48 +0000
Manifest next update: Mon 08 Sep 2025 02:00:48 +0000
Files and hashes: 1: Hqemr7IbsUh0L2FV0aOa_I_H55w.crl (hash: 0+SqfjXHfWa6WCPXp0z1YavfqriOlXExJfnHCpaCLeg=)
2: SAqPRmB-G6msTnaXyr7m6jyG5Ko.roa (hash: 2YxDfMO4o3RvNMQXIEtYRv7ty5CdsK9saG6EToUsNdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:93:ad:79:96:9c:99:b2:7c:b3:4f:17:81:10:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Validity
Not Before: Sep 7 02:00:48 2025 GMT
Not After : Sep 8 02:00:48 2025 GMT
Subject: CN=bd76fe3ae267f888121a77a38a76df9017ed222d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:6b:5b:8e:54:c2:47:52:a0:5c:db:68:c2:
fd:6c:41:1c:44:95:f3:61:a7:f6:f8:17:e8:06:2c:
ca:97:64:ce:e7:e9:c8:25:3a:68:2a:7b:86:07:3f:
43:ea:15:38:bc:87:86:2d:57:85:5e:05:cb:05:fc:
96:6b:d2:a6:a2:5f:83:dd:ae:d1:30:56:61:4e:4e:
a5:a8:d5:bf:71:43:87:6e:d5:18:c3:dc:de:3d:7d:
92:ed:d1:60:2b:fa:74:66:8c:60:d7:64:d6:e1:f6:
a2:d7:4b:d0:5b:15:28:03:67:5d:e6:ad:06:0b:2b:
d9:95:38:04:82:4c:fb:2f:e7:91:d4:54:e1:81:66:
9f:29:f1:23:85:60:32:5b:d9:0c:ab:e2:11:4a:79:
ac:39:c1:61:fb:40:24:0d:e5:d6:99:f3:63:a8:f3:
20:00:29:7c:6d:01:3e:b3:0e:11:1f:c3:62:9f:23:
15:b8:35:7a:dd:22:6f:ae:de:ad:31:3c:0d:4e:49:
ef:6b:e8:e2:0b:4e:24:89:eb:e3:80:f3:67:a5:47:
92:38:0f:67:6a:98:79:d2:f4:69:36:8e:97:cd:25:
c4:05:46:f7:71:1b:6b:ac:78:a9:d4:00:c8:52:72:
c1:9e:b8:e1:6b:a3:72:26:f2:1a:38:d7:2b:6a:0a:
43:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:76:FE:3A:E2:67:F8:88:12:1A:77:A3:8A:76:DF:90:17:ED:22:2D
X509v3 Authority Key Identifier:
keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2c:b3:f4:36:1c:71:7d:58:b5:27:5b:63:5d:1d:71:74:8a:
9c:a1:11:4e:ae:3a:80:54:9e:12:16:be:60:18:74:c5:bb:2e:
2c:0b:17:03:f5:f2:89:35:21:56:e5:77:9a:2d:1b:1d:23:9a:
dc:c9:ca:4c:73:7c:d8:e6:fc:0b:c4:d9:6b:6b:ba:21:cb:0f:
ea:52:58:8f:fd:19:f1:12:32:23:b8:88:25:e1:3b:50:bd:48:
8c:93:55:56:a3:ad:db:2f:6c:a3:6e:75:4b:cc:dc:0f:ab:44:
7e:4c:87:3a:12:6d:bf:08:96:af:60:6d:9c:fb:61:d0:78:77:
b4:0a:45:f4:1a:32:32:6c:cb:42:cf:a8:b9:20:b0:b7:e3:26:
8b:a4:49:1b:57:07:ae:1f:41:f7:ca:30:43:f3:bc:8c:71:10:
5b:54:28:c8:66:7c:03:bb:1b:1b:27:10:37:f4:39:00:b9:e7:
f4:e3:41:1e:d8:9e:09:58:da:ba:cc:34:4a:89:8a:1b:ea:91:
53:1a:38:96:e5:70:51:a0:3e:3f:f0:f9:95:e8:88:cb:6a:5d:
5d:98:71:08:1f:f6:17:4e:83:72:5c:2d:f1:8a:f7:53:03:10:
28:b6:0f:74:b2:98:6d:20:43:41:ba:18:62:64:fc:0e:96:0e:
a5:f1:6c:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh55OteZacmbJ8s08XgRDQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTdhNmFmYjIxYmIxNDg3NDJmNjE1NWQxYTM5YWZjOGZj
N2U3OWMwHhcNMjUwOTA3MDIwMDQ4WhcNMjUwOTA4MDIwMDQ4WjAzMTEwLwYDVQQD
EyhiZDc2ZmUzYWUyNjdmODg4MTIxYTc3YTM4YTc2ZGY5MDE3ZWQyMjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K9rW45UwkdSoFzbaML9bEEcRJXz
Yaf2+BfoBizKl2TO5+nIJTpoKnuGBz9D6hU4vIeGLVeFXgXLBfyWa9Kmol+D3a7R
MFZhTk6lqNW/cUOHbtUYw9zePX2S7dFgK/p0Zoxg12TW4fai10vQWxUoA2dd5q0G
CyvZlTgEgkz7L+eR1FThgWafKfEjhWAyW9kMq+IRSnmsOcFh+0AkDeXWmfNjqPMg
ACl8bQE+sw4RH8NinyMVuDV63SJvrt6tMTwNTknva+jiC04kievjgPNnpUeSOA9n
aph50vRpNo6XzSXEBUb3cRtrrHip1ADIUnLBnrjha6NyJvIaONcragpDCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL12/jriZ/iIEhp3o4p235AX7SItMB8GA1UdIwQY
MBaAFB6npq+yG7FIdC9hVdGjmvyPx+ecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84ODYxNjMtNjViMy00NTk5LWJmNGIt
ZjM2Y2Q4NzkwYjBhLzEvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84ODYxNjMtNjViMy00NTk5LWJmNGItZjM2Y2Q4NzkwYjBh
LzEvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCyz9DYc
cX1YtSdbY10dcXSKnKERTq46gFSeEha+YBh0xbsuLAsXA/XyiTUhVuV3mi0bHSOa
3MnKTHN82Ob8C8TZa2u6IcsP6lJYj/0Z8RIyI7iIJeE7UL1IjJNVVqOt2y9so251
S8zcD6tEfkyHOhJtvwiWr2BtnPth0Hh3tApF9BoyMmzLQs+ouSCwt+Mmi6RJG1cH
rh9B98owQ/O8jHEQW1QoyGZ8A7sbGycQN/Q5ALnn9ONBHtieCVjausw0SomKG+qR
Uxo4luVwUaA+P/D5leiIy2pdXZhxCB/2F06Dclwt8Yr3UwMQKLYPdLKYbSBDQboY
YmT8DpYOpfFsFQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:21 2025 by rpki-client