Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: rCYW1IstQNyAI/6G7KYDKPM+ZdQ4utHrCpUEyRQf8qc=
Subject key identifier: F5:02:0B:50:B8:35:F0:A8:4C:9C:53:2F:14:65:7C:CB:25:29:A7:E6
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 0197B7B373D9507FDB113FE1A56E5CF72483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 1242
Signing time: Sat 28 Jun 2025 18:01:20 +0000
Manifest this update: Sat 28 Jun 2025 18:01:20 +0000
Manifest next update: Sun 29 Jun 2025 18:01:20 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: xebX8CkWV5YtJI+fmNPMudxycoDTDwmY5lq5MpV3mCs=)
2: vOY7PB5NDzFxhVih037o9jJ1bUc.roa (hash: 8OCsn1+9HWmViC4NQ7DEHa7bN4pK4rZb0B/Nsp5g6gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:73:d9:50:7f:db:11:3f:e1:a5:6e:5c:f7:24:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Jun 28 18:01:20 2025 GMT
Not After : Jun 29 18:01:20 2025 GMT
Subject: CN=f5020b50b835f0a84c9c532f14657ccb2529a7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c5:25:99:06:1e:11:b3:d8:01:60:08:88:6d:
d7:ad:86:5d:85:54:9a:df:bb:12:ce:ec:1d:40:d9:
b0:10:a0:ad:4b:cb:7a:82:86:44:f4:3b:8b:9b:df:
67:7e:93:d6:57:81:3a:a0:d7:a0:70:76:27:53:30:
77:80:4f:7d:eb:f3:16:0d:f7:d7:06:65:2a:1a:54:
d4:60:e3:86:c5:7e:d8:c1:55:32:7e:3b:14:c8:07:
41:bc:93:88:58:bd:ed:7f:30:8c:0c:22:72:d1:a2:
ef:d9:d3:89:71:24:2b:d4:69:bf:bb:da:00:3f:01:
6a:6c:cb:aa:08:90:20:5b:71:07:30:62:ed:0a:37:
bd:c2:2a:2f:ac:30:7d:d4:2d:5b:28:9c:51:48:3a:
0d:73:50:d3:09:39:bb:00:71:dd:ad:34:ba:b3:15:
10:bb:99:4f:70:07:10:94:f3:79:0a:94:e3:a3:af:
0b:74:35:58:7d:41:53:c3:9d:a0:92:e1:a6:25:40:
2c:e3:d2:eb:3b:f2:5b:53:f9:07:80:95:70:90:50:
14:22:ac:49:84:8e:05:b6:a7:71:e6:1f:7a:1c:7e:
a3:3d:85:46:9f:b3:6e:6c:18:b6:07:85:e8:77:c5:
89:e3:9e:15:ef:fa:da:2f:82:b0:35:13:b0:5d:10:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:02:0B:50:B8:35:F0:A8:4C:9C:53:2F:14:65:7C:CB:25:29:A7:E6
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:24:98:8b:8d:34:e5:8f:97:8f:c1:d4:67:2b:20:66:c3:87:
a6:90:f9:f3:a8:a2:34:05:75:ea:c5:5d:ca:cb:51:e0:41:fd:
5d:54:36:57:6e:d6:84:05:27:9e:09:3f:a9:98:45:8d:95:85:
af:46:b4:3f:f8:f5:da:73:ed:30:92:1e:51:57:b5:ca:c3:0f:
5c:d8:2a:91:59:30:b1:a8:bb:7f:61:d8:08:8c:51:25:f2:73:
70:53:b6:ea:69:1a:2f:f6:b9:58:37:5f:29:1b:8e:0f:f6:25:
b0:cb:54:fa:d7:c0:c0:cf:5e:47:96:13:35:76:b4:02:b4:4a:
a7:e7:54:9b:5d:0d:60:2a:84:8f:e1:7b:ee:97:0e:a1:d6:e6:
b0:a9:e6:a9:07:e4:62:cb:44:4b:d8:1e:0a:0e:84:ce:b2:1b:
7b:e5:a5:f2:98:9b:3d:f4:e1:fb:29:b3:e5:f4:6c:a6:84:96:
87:39:d7:32:83:25:2e:46:11:df:4d:65:1d:94:1d:09:af:4d:
96:a1:8e:73:ef:c9:de:dd:87:17:b6:e9:99:6c:0b:ae:30:f9:
f4:e9:b9:37:3c:27:7f:13:1e:58:b4:45:18:7f:7b:a9:da:33:
4b:de:d5:e4:54:c5:89:3b:7d:8d:21:57:e2:67:48:80:76:1a:
05:fd:d0:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s3PZUH/bET/hpW5c9ySDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZGM3NjMyN2U5MmYyNWZjNDcxYjM0NWEzN2QyNDNjYzgz
OTM1MDAwHhcNMjUwNjI4MTgwMTIwWhcNMjUwNjI5MTgwMTIwWjAzMTEwLwYDVQQD
EyhmNTAyMGI1MGI4MzVmMGE4NGM5YzUzMmYxNDY1N2NjYjI1MjlhN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sUlmQYeEbPYAWAIiG3XrYZdhVSa
37sSzuwdQNmwEKCtS8t6goZE9DuLm99nfpPWV4E6oNegcHYnUzB3gE996/MWDffX
BmUqGlTUYOOGxX7YwVUyfjsUyAdBvJOIWL3tfzCMDCJy0aLv2dOJcSQr1Gm/u9oA
PwFqbMuqCJAgW3EHMGLtCje9wiovrDB91C1bKJxRSDoNc1DTCTm7AHHdrTS6sxUQ
u5lPcAcQlPN5CpTjo68LdDVYfUFTw52gkuGmJUAs49LrO/JbU/kHgJVwkFAUIqxJ
hI4Ftqdx5h96HH6jPYVGn7NubBi2B4Xod8WJ454V7/raL4KwNROwXRA3mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUCC1C4NfCoTJxTLxRlfMslKafmMB8GA1UdIwQY
MBaAFBzcdjJ+kvJfxHGzRaN9JDzIOTUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYt
ODA3MzY5NTBhYTk0LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYtODA3MzY5NTBhYTk0
LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiSYi400
5Y+Xj8HUZysgZsOHppD586iiNAV16sVdystR4EH9XVQ2V27WhAUnngk/qZhFjZWF
r0a0P/j12nPtMJIeUVe1ysMPXNgqkVkwsai7f2HYCIxRJfJzcFO26mkaL/a5WDdf
KRuOD/YlsMtU+tfAwM9eR5YTNXa0ArRKp+dUm10NYCqEj+F77pcOodbmsKnmqQfk
YstES9geCg6EzrIbe+Wl8pibPfTh+ymz5fRspoSWhznXMoMlLkYR301lHZQdCa9N
lqGOc+/J3t2HF7bpmWwLrjD59Om5NzwnfxMeWLRFGH97qdozS97V5FTFiTt9jSFX
4mdIgHYaBf3Qmw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:30 2025 by rpki-client