Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
File: HDP7O3JSC4FpopKNU4LknWda0GA.mft (raw, json)
Hash identifier: yN9cVwhic55LAL0w2S7D5ghoXG3qZ6JcGP01UzKx9HY=
Subject key identifier: A8:75:D3:25:81:D7:10:25:40:7D:06:25:F9:62:17:D6:D4:AA:62:D0
Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
Certificate issuer: /CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Certificate serial: 0197466719775D5387E9AA97CBD998E33897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
Manifest number: 1328
Signing time: Fri 06 Jun 2025 18:00:51 +0000
Manifest this update: Fri 06 Jun 2025 18:00:51 +0000
Manifest next update: Sat 07 Jun 2025 18:00:51 +0000
Files and hashes: 1: HDP7O3JSC4FpopKNU4LknWda0GA.crl (hash: 63UoRjujH/LvrTUyIWnvbOjos/5w0UsLR/GLKUbrfFM=)
2: jHj1kA03qC8i8hguuEC8ASnj4XQ.roa (hash: 6J5ezyoc/LI46xWXhW/cUUltYyOZg4CBJG0jaVAl1nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:19:77:5d:53:87:e9:aa:97:cb:d9:98:e3:38:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Validity
Not Before: Jun 6 18:00:51 2025 GMT
Not After : Jun 7 18:00:51 2025 GMT
Subject: CN=a875d32581d71025407d0625f96217d6d4aa62d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:41:29:df:a1:4f:12:51:6f:a6:35:74:37:
21:31:a8:ae:19:15:79:fe:61:78:56:11:40:53:a0:
38:71:12:f0:84:de:02:9d:05:e9:9c:9d:7d:8b:c0:
40:b7:ed:2c:a6:07:a5:d7:fa:7b:fd:9a:d0:78:82:
67:52:35:c5:5c:2f:05:00:48:6b:1c:22:49:e5:72:
68:07:c9:62:b8:ac:4d:71:e5:07:18:bc:db:1a:66:
7e:46:79:8e:a9:23:6a:07:f2:99:b6:fe:9e:6a:82:
96:08:6f:e1:70:9f:ef:ea:bf:9a:73:8b:7a:4e:6b:
9f:d7:ab:b1:a3:8f:bc:17:b9:9a:2e:e7:b6:ab:7e:
f6:9d:8f:44:49:bf:a2:5c:fa:b8:36:f4:09:31:e1:
fc:a3:f6:1b:75:96:20:52:a2:93:f8:d8:cb:ab:36:
77:07:9b:21:7f:c2:da:48:1d:d4:2d:64:f3:2e:b6:
e8:45:72:64:73:ab:87:f4:b7:9b:23:27:62:03:6e:
e8:81:02:99:02:cc:dc:f5:98:50:ef:c1:41:57:c3:
c0:84:f7:bc:a4:f7:30:7d:16:2e:28:63:6e:62:fd:
de:df:7d:74:c3:cd:76:f6:2e:2e:5b:c0:c3:b9:ee:
99:c8:7f:c0:aa:f6:63:21:b1:e4:d9:d9:f5:70:04:
03:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:75:D3:25:81:D7:10:25:40:7D:06:25:F9:62:17:D6:D4:AA:62:D0
X509v3 Authority Key Identifier:
keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:64:5c:57:db:29:6b:13:de:20:fa:47:df:ef:42:eb:60:99:
6e:60:bb:41:45:a4:06:56:10:8b:05:41:02:bc:67:63:73:d7:
64:40:2d:e4:f7:86:b5:4b:22:9b:7d:bf:eb:eb:ce:22:f1:c9:
ad:c0:87:7a:ab:2c:02:19:03:3a:22:74:fb:4b:b1:8b:9d:f8:
20:f0:d4:ee:93:80:bf:b9:3f:9e:8d:45:34:b9:4b:f2:20:09:
96:d8:f6:aa:3a:bb:d0:7d:3c:7f:91:43:96:bb:4d:e4:7a:ab:
1e:e7:fc:d6:c1:02:ca:d1:ad:d3:1b:68:88:ac:13:48:54:a4:
f5:d9:e7:d1:6e:ec:a1:84:09:03:bc:d8:15:2b:28:29:41:2f:
b6:2f:2e:21:7d:cd:be:f3:a3:e4:e9:cd:07:11:9f:4b:ef:be:
e7:94:f9:7b:54:2a:28:12:f7:83:e1:78:a9:ba:bd:78:39:96:
39:7d:cc:d6:5c:06:0f:7d:bc:12:20:64:b5:d0:40:f7:96:f4:
fc:58:43:31:2c:e6:47:ce:bc:09:58:19:2c:76:77:b5:3c:04:
82:b5:8f:36:46:80:bb:2e:24:b9:88:d0:aa:84:10:df:6d:cb:
9a:80:79:83:b5:56:fd:b9:9f:e9:07:66:d2:0b:52:df:5c:b8:
af:30:07:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZxl3XVOH6aqXy9mY4ziXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMzNmYjNiNzI1MjBiODE2OWEyOTI4ZDUzODJlNDlkNjc1
YWQwNjAwHhcNMjUwNjA2MTgwMDUxWhcNMjUwNjA3MTgwMDUxWjAzMTEwLwYDVQQD
EyhhODc1ZDMyNTgxZDcxMDI1NDA3ZDA2MjVmOTYyMTdkNmQ0YWE2MmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8NBKd+hTxJRb6Y1dDchMaiuGRV5
/mF4VhFAU6A4cRLwhN4CnQXpnJ19i8BAt+0spgel1/p7/ZrQeIJnUjXFXC8FAEhr
HCJJ5XJoB8liuKxNceUHGLzbGmZ+RnmOqSNqB/KZtv6eaoKWCG/hcJ/v6r+ac4t6
Tmuf16uxo4+8F7maLue2q372nY9ESb+iXPq4NvQJMeH8o/YbdZYgUqKT+NjLqzZ3
B5shf8LaSB3ULWTzLrboRXJkc6uH9LebIydiA27ogQKZAszc9ZhQ78FBV8PAhPe8
pPcwfRYuKGNuYv3e3310w8129i4uW8DDue6ZyH/AqvZjIbHk2dn1cAQDvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKh10yWB1xAlQH0GJfliF9bUqmLQMB8GA1UdIwQY
MBaAFBwz+ztyUguBaaKSjVOC5J1nWtBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MjFlOWUtNTI0My00ZDIwLWI0NDct
OTUwNDU1ODY4MDJlLzEvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80MjFlOWUtNTI0My00ZDIwLWI0NDctOTUwNDU1ODY4MDJl
LzEvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWRcV9sp
axPeIPpH3+9C62CZbmC7QUWkBlYQiwVBArxnY3PXZEAt5PeGtUsim32/6+vOIvHJ
rcCHeqssAhkDOiJ0+0uxi534IPDU7pOAv7k/no1FNLlL8iAJltj2qjq70H08f5FD
lrtN5HqrHuf81sECytGt0xtoiKwTSFSk9dnn0W7soYQJA7zYFSsoKUEvti8uIX3N
vvOj5OnNBxGfS+++55T5e1QqKBL3g+F4qbq9eDmWOX3M1lwGD328EiBktdBA95b0
/FhDMSzmR868CVgZLHZ3tTwEgrWPNkaAuy4kuYjQqoQQ323LmoB5g7VW/bmf6Qdm
0gtS31y4rzAH+A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:17 2025 by rpki-client