Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
File: HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft (raw, json)
Hash identifier: zMHuqTdC8KOAk6R13AdUUbz4DpzjNaJSrNQdKu9HxCc=
Subject key identifier: 0E:58:B8:EA:1A:11:3A:35:77:6F:5C:D0:D8:BB:0E:76:11:C3:DA:D1
Authority key identifier: 1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
Certificate issuer: /CN=1e40ab40e53860871250e9bac4e163339710595d
Certificate serial: 0199240DA09EC476E4D0B9EE37BF4DE737AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
Manifest number: 0D56
Signing time: Sun 07 Sep 2025 12:01:36 +0000
Manifest this update: Sun 07 Sep 2025 12:01:36 +0000
Manifest next update: Mon 08 Sep 2025 12:01:36 +0000
Files and hashes: 1: HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl (hash: GlyZwC+iWzv+5yX8Rq3lESBAPSAw0XdDQObtiLRqdnM=)
2: obxxCWwwodKEQItq-LvA1UofY7E.roa (hash: EDnG/ruD1T9KRKhZcI5dsIBjNgSOpQ6QRSsT8ooYu6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:a0:9e:c4:76:e4:d0:b9:ee:37:bf:4d:e7:37:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e40ab40e53860871250e9bac4e163339710595d
Validity
Not Before: Sep 7 12:01:36 2025 GMT
Not After : Sep 8 12:01:36 2025 GMT
Subject: CN=0e58b8ea1a113a35776f5cd0d8bb0e7611c3dad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:82:4e:89:d0:f9:ab:a8:6a:d7:cf:d5:67:35:
a0:a7:ec:f9:cf:d5:01:dd:0e:bc:05:5f:ec:2c:1b:
3e:91:51:8e:f0:fb:a9:02:4f:2e:d7:97:5e:4b:7c:
b2:6f:10:09:4a:c5:03:70:21:f4:84:24:9d:31:0b:
ff:fd:a0:c2:7a:df:da:88:fb:17:27:09:86:fe:66:
d0:fe:02:2c:32:d2:3d:d0:bd:02:15:ee:3b:0a:2c:
f7:aa:4f:bd:58:16:af:20:8f:e6:7d:e3:69:3a:ee:
f5:4b:d7:91:c8:a0:38:ce:44:02:10:0c:d2:20:c9:
ce:0d:63:49:ae:d6:27:5a:e7:19:4a:de:02:60:03:
e9:fd:0b:b8:c5:90:48:7e:d0:25:7e:26:72:15:0a:
84:26:62:5c:44:43:6e:e7:78:51:90:ac:a5:dd:e3:
3a:7d:94:07:c0:f2:97:3a:55:ad:51:15:2b:21:59:
89:9f:ca:2a:d8:6e:08:58:4a:da:7e:d7:68:b5:d1:
b9:5a:0b:c8:26:da:3b:62:62:21:91:d0:02:03:d6:
5a:5d:56:03:a3:66:f6:16:f9:31:1c:9c:cb:bd:20:
f5:b4:4d:b6:7d:cb:32:4f:e2:91:60:18:bb:3b:f5:
23:90:ce:3c:58:32:60:39:dc:d0:5b:ab:95:54:b1:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:58:B8:EA:1A:11:3A:35:77:6F:5C:D0:D8:BB:0E:76:11:C3:DA:D1
X509v3 Authority Key Identifier:
keyid:1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:65:20:62:c7:91:9e:69:7f:8c:8f:bd:7e:b2:c3:c8:0e:be:
86:32:0a:13:d1:b1:58:78:d4:14:7d:07:2a:fa:57:a5:6e:5f:
bd:7a:14:15:d9:4f:4e:54:8e:ed:72:b1:9b:e7:72:72:3d:53:
07:36:b6:0e:0b:6a:02:43:1c:4c:f0:12:ab:3b:92:0d:04:b3:
6a:01:13:2d:8f:f3:22:77:0b:df:a0:d5:ce:3f:15:57:62:7c:
3a:39:82:93:db:b9:50:c8:be:bc:c3:40:1a:77:7a:bf:66:6a:
3d:d2:0a:b4:8c:64:b8:04:65:24:6d:d9:22:a8:36:1d:53:ac:
dc:c5:ed:81:f2:ef:79:86:51:93:41:40:52:a3:5e:7c:90:9b:
4d:9f:ac:81:05:47:8d:81:e8:4b:c8:34:33:3a:dc:be:65:c8:
d2:94:7a:d6:a1:80:8b:dd:91:ee:97:cf:17:10:68:bc:c0:25:
85:10:56:c0:13:12:0e:3e:f1:a8:79:b8:60:7f:5f:e2:54:f0:
8b:c4:87:3c:67:04:70:69:f1:0f:cc:c3:0b:54:db:06:91:4b:
ea:5a:d2:dc:df:dd:6b:0e:c6:ad:ca:f2:b8:89:92:f6:09:e0:
b4:ee:9d:ca:e9:ac:cd:98:19:dd:f0:43:d3:1f:ae:e5:92:47:
16:d4:7e:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDaCexHbk0LnuN79N5zeuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNDBhYjQwZTUzODYwODcxMjUwZTliYWM0ZTE2MzMzOTcx
MDU5NWQwHhcNMjUwOTA3MTIwMTM2WhcNMjUwOTA4MTIwMTM2WjAzMTEwLwYDVQQD
EygwZTU4YjhlYTFhMTEzYTM1Nzc2ZjVjZDBkOGJiMGU3NjExYzNkYWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YJOidD5q6hq18/VZzWgp+z5z9UB
3Q68BV/sLBs+kVGO8PupAk8u15deS3yybxAJSsUDcCH0hCSdMQv//aDCet/aiPsX
JwmG/mbQ/gIsMtI90L0CFe47Ciz3qk+9WBavII/mfeNpOu71S9eRyKA4zkQCEAzS
IMnODWNJrtYnWucZSt4CYAPp/Qu4xZBIftAlfiZyFQqEJmJcRENu53hRkKyl3eM6
fZQHwPKXOlWtURUrIVmJn8oq2G4IWEraftdotdG5WgvIJto7YmIhkdACA9ZaXVYD
o2b2FvkxHJzLvSD1tE22fcsyT+KRYBi7O/UjkM48WDJgOdzQW6uVVLG47wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5YuOoaETo1d29c0Ni7DnYRw9rRMB8GA1UdIwQY
MBaAFB5Aq0DlOGCHElDpusThYzOXEFldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NTk0ZWQtN2ViOC00MzFlLTkzMGMt
N2Y4NjZkYWE1NDY0LzEvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81NTk0ZWQtN2ViOC00MzFlLTkzMGMtN2Y4NjZkYWE1NDY0
LzEvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGUgYseR
nml/jI+9frLDyA6+hjIKE9GxWHjUFH0HKvpXpW5fvXoUFdlPTlSO7XKxm+dycj1T
Bza2DgtqAkMcTPASqzuSDQSzagETLY/zIncL36DVzj8VV2J8OjmCk9u5UMi+vMNA
Gnd6v2ZqPdIKtIxkuARlJG3ZIqg2HVOs3MXtgfLveYZRk0FAUqNefJCbTZ+sgQVH
jYHoS8g0MzrcvmXI0pR61qGAi92R7pfPFxBovMAlhRBWwBMSDj7xqHm4YH9f4lTw
i8SHPGcEcGnxD8zDC1TbBpFL6lrS3N/daw7GrcryuImS9gngtO6dyumszZgZ3fBD
0x+u5ZJHFtR+sg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:58 2025 by rpki-client