Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/95ba48-f188-4d2c-88ff-f05afcc02800/1/HOQzXucbfY2fH_ye5ardH6-UXGU.mft
File: HOQzXucbfY2fH_ye5ardH6-UXGU.mft (raw, json)
Hash identifier: wj+hQA93Eo9Fni/guRCrZOPeV1YWmN+YhjT9Nh5gdVM=
Subject key identifier: 11:9A:C2:75:F5:E1:8F:91:25:D9:08:AD:0D:DB:56:0C:AC:36:32:12
Authority key identifier: 1C:E4:33:5E:E7:1B:7D:8D:9F:1F:FC:9E:E5:AA:DD:1F:AF:94:5C:65
Certificate issuer: /CN=1ce4335ee71b7d8d9f1ffc9ee5aadd1faf945c65
Certificate serial: 019922C366BC1D727889B33CC18A3E27EC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOQzXucbfY2fH_ye5ardH6-UXGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/95ba48-f188-4d2c-88ff-f05afcc02800/1/HOQzXucbfY2fH_ye5ardH6-UXGU.mft
Manifest number: 1C
Signing time: Sun 07 Sep 2025 06:00:54 +0000
Manifest this update: Sun 07 Sep 2025 06:00:54 +0000
Manifest next update: Mon 08 Sep 2025 06:00:54 +0000
Files and hashes: 1: HOQzXucbfY2fH_ye5ardH6-UXGU.crl (hash: DDFELSKr4iddX28h969E3saSAW05teZqlI63KObDuH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/95ba48-f188-4d2c-88ff-f05afcc02800/1/HOQzXucbfY2fH_ye5ardH6-UXGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/95ba48-f188-4d2c-88ff-f05afcc02800/1/HOQzXucbfY2fH_ye5ardH6-UXGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOQzXucbfY2fH_ye5ardH6-UXGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:66:bc:1d:72:78:89:b3:3c:c1:8a:3e:27:ec:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ce4335ee71b7d8d9f1ffc9ee5aadd1faf945c65
Validity
Not Before: Sep 7 06:00:54 2025 GMT
Not After : Sep 8 06:00:54 2025 GMT
Subject: CN=119ac275f5e18f9125d908ad0ddb560cac363212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:e0:72:35:4b:d1:f2:e9:9a:96:c4:15:1d:
fb:3f:55:9f:50:58:51:78:86:f9:5f:53:3e:2f:d3:
d4:67:b3:ae:a1:c3:a4:02:ca:3a:c4:14:45:33:25:
0f:46:23:5f:91:d2:14:ca:5c:01:3b:6f:46:a3:7c:
c1:33:01:c5:63:77:a1:76:2c:16:9b:db:3b:8f:2b:
4a:c3:13:e2:34:c3:71:76:83:c3:18:c9:85:e1:c6:
b3:7a:c4:c3:9f:b3:a8:44:3e:f8:94:9f:27:10:97:
cd:f4:dc:03:fe:46:c3:40:df:5b:b8:0f:2f:8c:de:
5c:5c:d8:d9:13:fd:b5:92:b9:71:d5:0a:65:e2:fa:
26:57:a1:c6:9c:ac:fa:c6:76:76:89:4e:a3:88:5a:
bf:92:90:e2:73:4d:58:ad:30:29:9e:c9:2a:ab:a1:
ee:19:7a:a4:e7:75:a4:bb:ee:7a:bb:75:5c:96:a0:
54:af:32:c7:c4:99:c3:3d:08:9a:d7:20:c0:4b:9f:
d2:1c:2f:f9:49:0f:be:d5:dd:38:63:5e:ef:ac:19:
84:77:f4:56:90:3b:30:c0:9e:49:2a:cd:f6:84:cc:
79:e9:52:7a:ec:65:a5:53:0a:f8:6d:f7:b9:91:8a:
13:ea:c8:a8:78:4c:1e:0b:54:6f:4b:d3:13:ca:ec:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9A:C2:75:F5:E1:8F:91:25:D9:08:AD:0D:DB:56:0C:AC:36:32:12
X509v3 Authority Key Identifier:
keyid:1C:E4:33:5E:E7:1B:7D:8D:9F:1F:FC:9E:E5:AA:DD:1F:AF:94:5C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOQzXucbfY2fH_ye5ardH6-UXGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/95ba48-f188-4d2c-88ff-f05afcc02800/1/HOQzXucbfY2fH_ye5ardH6-UXGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/95ba48-f188-4d2c-88ff-f05afcc02800/1/HOQzXucbfY2fH_ye5ardH6-UXGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2a:bb:4e:dd:d5:02:3b:cf:58:a1:40:89:4d:40:7b:7f:86:
dd:19:53:7f:4b:f6:a8:5d:34:74:59:82:73:6a:82:f0:de:23:
73:78:52:e3:eb:a2:a6:29:53:e2:93:e0:b1:d6:27:e1:a2:0c:
fe:28:d7:a9:d3:0d:35:37:19:36:37:4a:15:54:22:61:04:e7:
04:f8:78:83:e4:a3:3c:46:cc:a0:5c:16:72:6b:b6:90:40:7a:
bc:04:da:a6:46:ae:48:d6:ca:e8:3b:53:97:93:20:e5:e0:ea:
e7:7f:e3:1e:5a:97:08:5e:62:25:5f:09:33:d1:a5:ec:d8:c6:
c6:cd:22:50:fd:85:6d:2f:f5:bb:1c:96:0a:0b:b2:b1:e1:11:
b2:f1:47:f9:c4:54:0e:5a:ce:24:42:80:2d:6b:90:c9:8a:81:
ef:70:f4:b7:b8:f4:e0:10:80:32:b8:f3:32:e0:4d:6a:f3:f2:
6e:68:b5:8c:c1:b2:48:d7:fc:61:d0:29:8d:56:67:ba:3f:2c:
07:30:bf:17:db:d6:b0:c6:ba:7f:22:06:72:91:ce:a8:ac:91:
14:6c:11:7f:9f:19:c9:34:3e:11:ff:ab:f2:47:9b:4a:9c:4e:
c7:cb:ed:4a:30:e4:1d:25:a6:4b:37:5b:66:0a:3d:8b:65:b8:
10:24:84:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw2a8HXJ4ibM8wYo+J+wMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZTQzMzVlZTcxYjdkOGQ5ZjFmZmM5ZWU1YWFkZDFmYWY5
NDVjNjUwHhcNMjUwOTA3MDYwMDU0WhcNMjUwOTA4MDYwMDU0WjAzMTEwLwYDVQQD
EygxMTlhYzI3NWY1ZTE4ZjkxMjVkOTA4YWQwZGRiNTYwY2FjMzYzMjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpHgcjVL0fLpmpbEFR37P1WfUFhR
eIb5X1M+L9PUZ7OuocOkAso6xBRFMyUPRiNfkdIUylwBO29Go3zBMwHFY3ehdiwW
m9s7jytKwxPiNMNxdoPDGMmF4cazesTDn7OoRD74lJ8nEJfN9NwD/kbDQN9buA8v
jN5cXNjZE/21krlx1Qpl4vomV6HGnKz6xnZ2iU6jiFq/kpDic01YrTApnskqq6Hu
GXqk53Wku+56u3VclqBUrzLHxJnDPQia1yDAS5/SHC/5SQ++1d04Y17vrBmEd/RW
kDswwJ5JKs32hMx56VJ67GWlUwr4bfe5kYoT6sioeEweC1RvS9MTyuwPrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGawnX14Y+RJdkIrQ3bVgysNjISMB8GA1UdIwQY
MBaAFBzkM17nG32Nnx/8nuWq3R+vlFxlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE9Relh1Y2JmWTJmSF95ZTVhcmRINi1VWEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi85NWJhNDgtZjE4OC00ZDJjLTg4ZmYt
ZjA1YWZjYzAyODAwLzEvSE9Relh1Y2JmWTJmSF95ZTVhcmRINi1VWEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi85NWJhNDgtZjE4OC00ZDJjLTg4ZmYtZjA1YWZjYzAyODAw
LzEvSE9Relh1Y2JmWTJmSF95ZTVhcmRINi1VWEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSq7Tt3V
AjvPWKFAiU1Ae3+G3RlTf0v2qF00dFmCc2qC8N4jc3hS4+uipilT4pPgsdYn4aIM
/ijXqdMNNTcZNjdKFVQiYQTnBPh4g+SjPEbMoFwWcmu2kEB6vATapkauSNbK6DtT
l5Mg5eDq53/jHlqXCF5iJV8JM9Gl7NjGxs0iUP2FbS/1uxyWCguyseERsvFH+cRU
DlrOJEKALWuQyYqB73D0t7j04BCAMrjzMuBNavPybmi1jMGySNf8YdApjVZnuj8s
BzC/F9vWsMa6fyIGcpHOqKyRFGwRf58ZyTQ+Ef+r8kebSpxOx8vtSjDkHSWmSzdb
Zgo9i2W4ECSE3g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:20 2025 by rpki-client