Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
File: hpA1wxdzT2Ybv4XCGEFVofNhat0.mft (raw, json)
Hash identifier: 3tKGtS3h6wlpooSaDU1jtoAWYlbxy6Ej1iZfmAsSsC4=
Subject key identifier: F9:87:AB:24:BA:4A:0F:D4:6B:FE:25:8A:DA:5E:99:58:71:87:98:F5
Authority key identifier: 86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
Certificate issuer: /CN=869035c317734f661bbf85c2184155a1f3616add
Certificate serial: 0197C614891EE3931E6227264129E01E1C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
Manifest number: 1143
Signing time: Tue 01 Jul 2025 13:02:03 +0000
Manifest this update: Tue 01 Jul 2025 13:02:03 +0000
Manifest next update: Wed 02 Jul 2025 13:02:03 +0000
Files and hashes: 1: AFoF1GuFzHjl8hWS56zz0OT3Bgg.roa (hash: tZKNbZDCtPOdNWQDTedTIFStwLgZ/2vtLmBHU+SWAQk=)
2: hpA1wxdzT2Ybv4XCGEFVofNhat0.crl (hash: re53Tn/uNiDybeI2ykqzHVFPJKtgxHwGnDWNYLbTDmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:89:1e:e3:93:1e:62:27:26:41:29:e0:1e:1c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869035c317734f661bbf85c2184155a1f3616add
Validity
Not Before: Jul 1 13:02:03 2025 GMT
Not After : Jul 2 13:02:03 2025 GMT
Subject: CN=f987ab24ba4a0fd46bfe258ada5e9958718798f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:28:c4:a1:be:9e:b6:a2:f0:67:2a:00:93:
2d:bf:f2:b3:c8:94:02:28:b9:e7:87:31:fc:1a:be:
46:6e:8a:99:2d:d8:50:23:f6:f9:41:35:58:48:46:
c5:84:22:b1:d2:78:57:d7:2e:24:c9:2e:5e:bd:1e:
05:6f:61:ff:ff:fd:10:dc:80:6c:55:30:63:ae:a6:
a3:05:a3:5b:07:19:dd:fb:e0:12:9b:04:6a:ff:54:
79:da:fc:d0:99:c7:f9:5d:2e:fb:3f:c2:ea:9e:64:
64:3a:d0:d0:7e:56:a2:cc:29:a0:26:d1:51:c4:65:
ac:2f:bc:6c:5b:a4:b2:a6:56:7c:54:e8:c0:d4:78:
43:0b:7c:3a:04:58:8b:c8:dc:78:e6:8b:74:03:dd:
7e:81:68:e7:62:d4:37:42:76:f1:29:c9:c5:f9:99:
d8:f2:f8:a5:63:90:e7:f8:e9:f0:fe:e8:59:0a:9b:
3b:5e:fb:76:26:cd:f2:83:c2:ed:92:18:e8:9a:ad:
c2:0d:cc:59:25:74:d4:36:d1:c2:e9:e8:97:49:df:
30:4d:11:1f:76:2d:9b:23:26:f7:49:6d:00:9d:fb:
45:e2:df:fa:10:9c:20:7e:9f:97:5f:14:bb:07:b4:
c8:ef:00:81:10:4a:a3:ad:6b:07:a2:0e:e2:db:4d:
ff:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:87:AB:24:BA:4A:0F:D4:6B:FE:25:8A:DA:5E:99:58:71:87:98:F5
X509v3 Authority Key Identifier:
keyid:86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7d:aa:17:a8:9d:08:e0:d5:2a:16:b3:fd:3a:5e:f3:e1:32:
32:dc:6a:d3:0b:2c:23:5d:af:60:83:ed:bd:92:de:bb:7a:2b:
75:db:de:3d:f9:f6:02:02:b4:c6:2e:9a:46:ae:f6:66:1b:25:
06:ed:93:db:c3:83:fe:70:7c:b6:28:29:40:9c:04:3d:d0:59:
ce:13:02:35:90:db:d3:99:62:c6:5a:34:b5:e3:f6:27:82:6e:
1b:9f:b3:b0:2b:8f:78:37:07:91:73:24:d6:ac:39:cc:8c:58:
07:79:76:8d:0d:d8:b9:55:6c:6c:f4:1e:15:8b:51:3a:aa:66:
e3:ea:d6:29:b4:75:c7:b2:ca:ab:52:a2:2c:7e:96:47:72:4c:
ba:5a:b0:84:e9:ce:bd:9d:2f:1b:25:dc:f1:c7:e8:fe:88:a7:
e5:62:9c:fe:ca:b4:64:bc:5b:b0:e4:44:f3:ba:e2:e6:21:81:
4d:c3:24:fa:da:e1:60:a2:da:6e:fa:e0:e2:f2:30:bb:c7:b8:
9f:b3:c7:f0:e0:2d:b5:b2:83:97:60:27:c0:98:74:1b:76:aa:
d8:b6:ef:7a:09:95:43:e0:03:3f:97:43:2b:53:8b:53:08:f1:
ac:20:a9:d0:f8:7a:6a:90:c0:aa:f8:c9:64:e3:8e:5c:38:e4:
fb:8d:bd:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfGFIke45MeYicmQSngHhxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OTAzNWMzMTc3MzRmNjYxYmJmODVjMjE4NDE1NWExZjM2
MTZhZGQwHhcNMjUwNzAxMTMwMjAzWhcNMjUwNzAyMTMwMjAzWjAzMTEwLwYDVQQD
EyhmOTg3YWIyNGJhNGEwZmQ0NmJmZTI1OGFkYTVlOTk1ODcxODc5OGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysAoxKG+nrai8GcqAJMtv/KzyJQC
KLnnhzH8Gr5GboqZLdhQI/b5QTVYSEbFhCKx0nhX1y4kyS5evR4Fb2H///0Q3IBs
VTBjrqajBaNbBxnd++ASmwRq/1R52vzQmcf5XS77P8LqnmRkOtDQflaizCmgJtFR
xGWsL7xsW6SyplZ8VOjA1HhDC3w6BFiLyNx45ot0A91+gWjnYtQ3QnbxKcnF+ZnY
8vilY5Dn+Onw/uhZCps7Xvt2Js3yg8Ltkhjomq3CDcxZJXTUNtHC6eiXSd8wTREf
di2bIyb3SW0AnftF4t/6EJwgfp+XXxS7B7TI7wCBEEqjrWsHog7i203/qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmHqyS6Sg/Ua/4litpemVhxh5j1MB8GA1UdIwQY
MBaAFIaQNcMXc09mG7+FwhhBVaHzYWrdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBBMXd4ZHpUMllidjRYQ0dFRlZvZk5oYXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zZmQ3NzQtM2Q3OS00NGIxLTg3OGEt
NjAyOGMyNjU0OTQwLzEvaHBBMXd4ZHpUMllidjRYQ0dFRlZvZk5oYXQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8zZmQ3NzQtM2Q3OS00NGIxLTg3OGEtNjAyOGMyNjU0OTQw
LzEvaHBBMXd4ZHpUMllidjRYQ0dFRlZvZk5oYXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkX2qF6id
CODVKhaz/Tpe8+EyMtxq0wssI12vYIPtvZLeu3orddvePfn2AgK0xi6aRq72Zhsl
Bu2T28OD/nB8tigpQJwEPdBZzhMCNZDb05lixlo0teP2J4JuG5+zsCuPeDcHkXMk
1qw5zIxYB3l2jQ3YuVVsbPQeFYtROqpm4+rWKbR1x7LKq1KiLH6WR3JMulqwhOnO
vZ0vGyXc8cfo/oin5WKc/sq0ZLxbsORE87ri5iGBTcMk+trhYKLabvrg4vIwu8e4
n7PH8OAttbKDl2AnwJh0G3aq2LbvegmVQ+ADP5dDK1OLUwjxrCCp0Ph6apDAqvjJ
ZOOOXDjk+4290A==
-----END CERTIFICATE-----
Generated at Tue Jul 1 17:05:58 2025 by rpki-client