Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
File: HNPDCTm5BqRRWhxlwIg2gptqMok.mft (raw, json)
Hash identifier: CyE3Q3VKRe2VMS27Pg3s+heQYHrHkmoeSLxl6W7omM4=
Subject key identifier: 81:A8:06:29:EC:40:95:A7:AA:B7:DB:51:8A:D4:8B:CD:B0:51:CB:A2
Authority key identifier: 1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89
Certificate issuer: /CN=1cd3c30939b906a4515a1c65c08836829b6a3289
Certificate serial: 019921E73CA1669BD1AC8146E67DD2C969E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 02:00:26 +0000
Manifest this update: Sun 07 Sep 2025 02:00:26 +0000
Manifest next update: Mon 08 Sep 2025 02:00:26 +0000
Files and hashes: 1: HNPDCTm5BqRRWhxlwIg2gptqMok.crl (hash: AIuuSt3jPpzeu/GwzQ+t7xPLm35JiC347e9SZEKe+2k=)
2: zraU6JUbMiPLRortKHmXEnAo1OE.roa (hash: HMXC6yKtO8g8Ym91NRBLoqlps2ZqE/0U22YJBVZue4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:3c:a1:66:9b:d1:ac:81:46:e6:7d:d2:c9:69:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd3c30939b906a4515a1c65c08836829b6a3289
Validity
Not Before: Sep 7 02:00:26 2025 GMT
Not After : Sep 8 02:00:26 2025 GMT
Subject: CN=81a80629ec4095a7aab7db518ad48bcdb051cba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:01:1b:d2:2c:5e:7f:39:06:be:35:8e:0d:
39:89:2e:9f:16:f3:9d:e5:be:b3:dd:00:df:36:b2:
ac:fc:20:90:91:50:47:93:27:ed:d5:ba:98:9f:19:
49:07:41:78:01:1d:41:99:a4:f8:ea:ac:ea:43:3d:
6c:71:41:ef:d3:7f:cc:ae:cc:3a:1c:cb:74:b4:0a:
24:ff:19:0e:81:42:57:aa:92:db:76:a4:4f:e0:b8:
cd:3e:85:d1:ab:f0:21:b6:84:e9:3e:d2:51:85:68:
ef:16:8c:7b:d1:9a:57:be:f8:f9:f0:59:ee:51:09:
64:0c:b2:3d:ab:84:33:5c:5a:5f:89:c8:8f:9b:eb:
6c:98:9d:73:52:50:99:ed:1e:ed:b8:00:e9:fe:42:
b4:6a:90:8a:b1:87:2a:ff:5c:3a:9d:f9:05:73:f5:
ff:66:2a:57:53:82:6c:18:88:1e:ae:c6:61:d7:8e:
cf:49:5d:e6:ba:72:74:b7:6c:06:3c:2c:cd:f2:64:
bb:dc:0f:df:91:06:71:15:9e:58:b5:4c:0a:e0:ef:
70:68:0e:b0:2a:d0:81:a8:54:f4:90:35:a6:2a:27:
4f:b5:90:67:96:6d:2e:7e:37:1a:41:eb:20:1e:6a:
bb:25:a8:ea:26:47:7a:9f:f9:ea:23:14:60:f7:18:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A8:06:29:EC:40:95:A7:AA:B7:DB:51:8A:D4:8B:CD:B0:51:CB:A2
X509v3 Authority Key Identifier:
keyid:1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:7f:0b:35:de:4f:df:09:6c:6c:f5:92:c0:c2:93:48:d1:89:
04:22:56:ca:ae:7a:8f:c3:b4:30:8a:59:1e:fd:00:eb:af:ce:
c0:cc:51:3c:19:41:ef:23:77:87:27:28:f9:ea:1b:d0:79:42:
33:11:51:4a:7b:96:7d:94:cb:e3:2d:08:86:13:3a:6e:06:1e:
cc:6b:4e:ba:dc:17:80:e7:d1:1b:10:5f:da:5d:bb:1b:78:61:
27:68:f5:17:ce:07:a1:28:f9:42:9a:0d:31:5a:1f:43:73:d3:
33:3b:93:5d:7a:ac:81:58:c7:94:df:99:7c:c9:16:2b:10:b8:
79:e8:29:95:a6:d1:f1:57:59:64:74:42:7d:6c:b2:20:3d:99:
b2:0f:34:ce:64:e5:fa:8e:7b:53:e1:31:65:43:a0:0d:91:9f:
a1:c2:06:d3:e3:c1:79:ec:50:76:e9:eb:f3:27:af:cc:b9:37:
66:75:dd:e3:43:b9:e4:70:45:f9:5d:76:95:cd:d1:d3:c9:bf:
54:13:48:d3:37:dd:74:00:f0:28:dc:d9:e9:d8:cb:34:c7:28:
f3:1d:25:a1:f6:c2:40:be:80:a9:ac:c0:6f:74:fc:d8:bd:28:
72:af:4e:d7:d1:d0:51:b7:6d:74:8a:c7:12:db:b5:19:2b:37:
aa:58:dc:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh5zyhZpvRrIFG5n3SyWnhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZDNjMzA5MzliOTA2YTQ1MTVhMWM2NWMwODgzNjgyOWI2
YTMyODkwHhcNMjUwOTA3MDIwMDI2WhcNMjUwOTA4MDIwMDI2WjAzMTEwLwYDVQQD
Eyg4MWE4MDYyOWVjNDA5NWE3YWFiN2RiNTE4YWQ0OGJjZGIwNTFjYmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt00BG9IsXn85Br41jg05iS6fFvOd
5b6z3QDfNrKs/CCQkVBHkyft1bqYnxlJB0F4AR1BmaT46qzqQz1scUHv03/Mrsw6
HMt0tAok/xkOgUJXqpLbdqRP4LjNPoXRq/AhtoTpPtJRhWjvFox70ZpXvvj58Fnu
UQlkDLI9q4QzXFpficiPm+tsmJ1zUlCZ7R7tuADp/kK0apCKsYcq/1w6nfkFc/X/
ZipXU4JsGIgersZh147PSV3munJ0t2wGPCzN8mS73A/fkQZxFZ5YtUwK4O9waA6w
KtCBqFT0kDWmKidPtZBnlm0ufjcaQesgHmq7JajqJkd6n/nqIxRg9xjY3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGoBinsQJWnqrfbUYrUi82wUcuiMB8GA1UdIwQY
MBaAFBzTwwk5uQakUVocZcCINoKbajKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YzU3NjgtZTgwYS00MTEwLWE0NmQt
MGZmODZlZjk1ZTBmLzEvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85YzU3NjgtZTgwYS00MTEwLWE0NmQtMGZmODZlZjk1ZTBm
LzEvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArH8LNd5P
3wlsbPWSwMKTSNGJBCJWyq56j8O0MIpZHv0A66/OwMxRPBlB7yN3hyco+eob0HlC
MxFRSnuWfZTL4y0IhhM6bgYezGtOutwXgOfRGxBf2l27G3hhJ2j1F84HoSj5QpoN
MVofQ3PTMzuTXXqsgVjHlN+ZfMkWKxC4eegplabR8VdZZHRCfWyyID2Zsg80zmTl
+o57U+ExZUOgDZGfocIG0+PBeexQdunr8yevzLk3ZnXd40O55HBF+V12lc3R08m/
VBNI0zfddADwKNzZ6djLNMco8x0lofbCQL6AqazAb3T82L0ocq9O19HQUbdtdIrH
Etu1GSs3qljcSg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:27 2025 by rpki-client