Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
File: HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft (raw, json)
Hash identifier: h7lQl7nH3KcXpd4AimAqjSHo3NwcMijroAPYjLcUebA=
Subject key identifier: C2:78:7E:25:D1:97:0E:70:C9:A1:35:34:9C:DA:DC:A2:52:57:17:32
Authority key identifier: 1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
Certificate issuer: /CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Certificate serial: 019864DD53DEEE236AD48F3877F0A563BBB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
Manifest number: 0DA1
Signing time: Fri 01 Aug 2025 09:01:22 +0000
Manifest this update: Fri 01 Aug 2025 09:01:22 +0000
Manifest next update: Sat 02 Aug 2025 09:01:22 +0000
Files and hashes: 1: HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl (hash: QzIts2llNLdkM4Hdm18banby9N24wpresutwGqZDodA=)
2: IwEBndBJay-42UjStrqkUigiaxw.roa (hash: K30WoUV1lkACaXc+c2n1S5YA0J82XCcvxybes+V2uGY=)
3: U2aJyBd8P_eUVY58McQwjVpYLjA.roa (hash: LuVboNkBf5MvVMVqL/wxb5E/X4ZkELwqjAYKuZW9FEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:64:dd:53:de:ee:23:6a:d4:8f:38:77:f0:a5:63:bb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Validity
Not Before: Aug 1 09:01:22 2025 GMT
Not After : Aug 2 09:01:22 2025 GMT
Subject: CN=c2787e25d1970e70c9a135349cdadca252571732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:d0:23:f0:19:6e:0d:61:25:00:19:cf:57:
c7:5b:fa:ff:c9:db:57:05:4f:37:ec:a3:17:4a:0e:
a2:98:77:85:31:18:48:66:c7:ca:28:22:43:0c:75:
73:00:4e:3b:d5:02:ed:76:26:34:cd:b2:cd:2b:d6:
36:7a:1a:64:b4:5a:ed:c1:b6:a1:25:43:4d:e7:02:
84:30:f9:2f:75:22:c7:af:8f:3c:62:e5:d4:08:d0:
09:32:65:fa:01:f9:c9:b3:4e:6b:40:41:3f:94:48:
1e:c9:2f:73:36:16:6f:af:ff:9a:a4:63:6e:41:35:
ee:e3:0e:97:75:ac:78:61:1f:cf:f2:5a:82:b2:07:
86:dc:2a:52:49:a4:62:cd:a2:89:ee:6c:3d:b8:1b:
17:2a:37:0e:10:c4:06:af:6f:72:1f:c9:9f:8b:48:
4b:75:b4:8f:3e:79:9f:43:9c:79:59:48:2b:55:7e:
b0:46:60:6c:12:1e:25:a4:c0:48:fc:75:6f:44:5f:
17:01:d2:40:a6:51:32:be:eb:72:cd:de:4b:b5:8b:
98:e7:fc:83:f4:d4:4f:68:22:54:86:bc:6f:26:91:
cc:3a:b5:64:5c:59:52:3d:89:81:c9:82:98:55:70:
f0:96:95:e0:43:46:fa:31:6f:ab:8e:5d:ca:e5:1d:
76:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:78:7E:25:D1:97:0E:70:C9:A1:35:34:9C:DA:DC:A2:52:57:17:32
X509v3 Authority Key Identifier:
keyid:1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:b3:a4:3d:32:85:b8:b6:76:f6:42:92:e6:50:1e:33:ab:9e:
00:e1:5d:93:a6:17:86:a9:35:6c:2e:bd:d3:a9:15:da:c3:b4:
87:af:6c:c5:a3:91:d5:3f:81:41:14:f5:94:f0:b7:3e:a6:39:
70:6b:66:d5:af:e0:b3:db:8c:46:1b:e9:1e:72:ca:7c:b9:1d:
b4:75:62:4b:b7:6d:74:bc:b1:55:3c:73:7f:04:27:1f:74:9a:
ed:4b:66:67:1b:33:99:6c:3e:10:5a:c1:17:78:cf:b4:be:98:
92:ff:20:de:df:da:68:e3:f3:9f:b6:09:3c:53:46:5f:51:2e:
b2:d9:5f:2b:55:a3:5c:80:7f:66:97:28:24:6f:8c:21:9e:d1:
a6:28:28:dc:c6:0f:7d:93:3e:ba:52:31:30:49:d0:f7:c8:22:
e3:57:ef:56:c9:09:06:de:60:ba:63:ab:9d:8d:05:9a:85:a5:
d3:56:fb:d2:ec:eb:05:bd:b8:62:aa:2b:76:55:0b:f6:ea:5f:
c0:60:e6:55:42:93:1a:7d:ba:e6:85:68:91:39:88:8b:50:6c:
c5:d3:c2:68:df:e4:0f:ee:8b:14:b7:c5:46:83:5d:aa:f2:1d:
d3:e9:75:ac:52:67:b4:a9:ca:de:aa:44:a0:cf:30:da:09:dd:
4d:75:ff:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhk3VPe7iNq1I84d/ClY7u5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZWNlZmQ5ZWFkYjJkNTI4NGQ3MTNiOTRiNTZkM2FiYmMx
MGU5ZTUwHhcNMjUwODAxMDkwMTIyWhcNMjUwODAyMDkwMTIyWjAzMTEwLwYDVQQD
EyhjMjc4N2UyNWQxOTcwZTcwYzlhMTM1MzQ5Y2RhZGNhMjUyNTcxNzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKrQI/AZbg1hJQAZz1fHW/r/ydtX
BU837KMXSg6imHeFMRhIZsfKKCJDDHVzAE471QLtdiY0zbLNK9Y2ehpktFrtwbah
JUNN5wKEMPkvdSLHr488YuXUCNAJMmX6AfnJs05rQEE/lEgeyS9zNhZvr/+apGNu
QTXu4w6Xdax4YR/P8lqCsgeG3CpSSaRizaKJ7mw9uBsXKjcOEMQGr29yH8mfi0hL
dbSPPnmfQ5x5WUgrVX6wRmBsEh4lpMBI/HVvRF8XAdJAplEyvutyzd5LtYuY5/yD
9NRPaCJUhrxvJpHMOrVkXFlSPYmByYKYVXDwlpXgQ0b6MW+rjl3K5R12iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJ4fiXRlw5wyaE1NJza3KJSVxcyMB8GA1UdIwQY
MBaAFBzs79nq2y1ShNcTuUtW06u8EOnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE96djJlcmJMVktFMXhPNVMxYlRxN3dRNmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xZWViYTgtNzM5OS00YmNhLTkzNDEt
Y2U4ODJhNTA1NGM2LzEvSE96djJlcmJMVktFMXhPNVMxYlRxN3dRNmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8xZWViYTgtNzM5OS00YmNhLTkzNDEtY2U4ODJhNTA1NGM2
LzEvSE96djJlcmJMVktFMXhPNVMxYlRxN3dRNmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwbOkPTKF
uLZ29kKS5lAeM6ueAOFdk6YXhqk1bC6906kV2sO0h69sxaOR1T+BQRT1lPC3PqY5
cGtm1a/gs9uMRhvpHnLKfLkdtHViS7dtdLyxVTxzfwQnH3Sa7UtmZxszmWw+EFrB
F3jPtL6Ykv8g3t/aaOPzn7YJPFNGX1EustlfK1WjXIB/ZpcoJG+MIZ7Rpigo3MYP
fZM+ulIxMEnQ98gi41fvVskJBt5gumOrnY0FmoWl01b70uzrBb24YqordlUL9upf
wGDmVUKTGn265oVokTmIi1BsxdPCaN/kD+6LFLfFRoNdqvId0+l1rFJntKnK3qpE
oM8w2gndTXX/UA==
-----END CERTIFICATE-----
Generated at Fri Aug 1 19:07:06 2025 by rpki-client