Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
File: Hw94pVpb5cAduAP0OMphG38VAwc.mft (raw, json)
Hash identifier: 0HNhJGS1qWEz/VUbArT6IVtHHbTMOkLMovGyLyV+zRc=
Subject key identifier: CA:17:72:D2:9D:3E:8A:46:64:01:F9:78:E4:86:5C:CE:C4:9C:22:89
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Certificate issuer: /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial: 0197B6A119436AA540BA8C7BD0E185ACA217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
Manifest number: 0C90
Signing time: Sat 28 Jun 2025 13:01:40 +0000
Manifest this update: Sat 28 Jun 2025 13:01:40 +0000
Manifest next update: Sun 29 Jun 2025 13:01:40 +0000
Files and hashes: 1: Hw94pVpb5cAduAP0OMphG38VAwc.crl (hash: bTfJyE11/lO83nKNl+8H4S3Qk185zW02O65jbnPgFt4=)
2: eCBuvHT7IMaBXPivvQ3l-YdKsf4.roa (hash: o8SV6r5/m90uv9RNHtmHfhH9wPKwfjIhitnoqSV/JH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:19:43:6a:a5:40:ba:8c:7b:d0:e1:85:ac:a2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Validity
Not Before: Jun 28 13:01:40 2025 GMT
Not After : Jun 29 13:01:40 2025 GMT
Subject: CN=ca1772d29d3e8a466401f978e4865ccec49c2289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:77:db:91:04:7a:52:75:02:ca:7e:cd:d6:
dd:c8:4f:b1:9a:7c:47:81:39:d2:81:2c:dc:d0:2e:
d8:0c:d0:c6:46:ed:8a:d4:52:55:41:ae:1e:7c:7f:
9a:17:cb:fe:2c:80:6b:b5:fe:6c:44:0b:50:37:10:
c2:51:3c:1d:7d:58:4f:7d:f0:28:3c:6f:39:74:b1:
83:ac:5a:b0:85:53:d3:06:a9:e2:ed:19:70:dc:06:
a9:f6:9e:0f:44:b1:41:9a:a9:c3:9b:37:73:ec:7a:
d7:e8:9b:b6:5b:b9:29:0c:68:be:de:b9:91:3c:ad:
67:15:73:1c:46:69:35:fb:f3:70:40:8d:b3:23:97:
9c:40:90:f9:08:2b:51:70:06:ef:7c:5d:e7:ea:9a:
ac:de:be:fc:92:dd:60:93:12:bb:e7:78:a9:fc:f6:
d7:64:8d:18:ce:80:5b:be:bf:4d:56:06:4f:d2:09:
70:83:56:41:38:1d:5e:8a:32:0e:02:24:2f:c7:f4:
d2:13:2f:68:d4:2d:cb:e6:bf:8b:f8:8b:fc:b1:a0:
f5:25:20:de:4f:98:8c:9d:fe:ce:f2:2c:b8:cc:f1:
45:25:65:46:5f:af:4e:dd:4b:1b:1a:e5:c3:a9:cb:
55:ad:56:aa:1d:a4:65:45:65:fe:3d:bc:48:fd:74:
2d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:17:72:D2:9D:3E:8A:46:64:01:F9:78:E4:86:5C:CE:C4:9C:22:89
X509v3 Authority Key Identifier:
keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b5:06:e8:c3:8d:51:7b:78:2d:de:4d:c5:9c:14:61:f9:b9:
15:c2:fc:d3:59:70:41:8b:b2:cf:cf:ac:e7:b9:4b:f1:32:c9:
1c:9c:1d:7d:87:37:3b:66:82:f8:98:d6:7c:89:d3:b7:98:3c:
44:da:32:db:9d:6e:2d:72:1e:74:56:4d:74:c5:af:f1:f8:73:
a1:9e:9d:1c:38:cf:85:09:41:05:aa:e1:43:4a:72:2a:17:20:
34:ab:ed:bd:c5:1b:b9:a7:60:6d:39:69:52:ba:a6:22:5d:51:
12:a7:62:c1:b4:39:ee:ea:7e:7a:4a:5d:4b:75:e9:1f:6e:c1:
b3:6f:72:b8:92:8a:c2:8f:51:25:cb:7a:28:5d:d5:57:de:98:
77:65:93:f4:d3:6d:76:5f:dc:32:c1:94:3e:c2:0b:41:71:d1:
d2:ef:37:21:50:5b:36:2e:06:9c:14:f5:23:7b:1f:ce:31:65:
e6:a1:e4:9f:d3:90:32:92:9e:a3:c2:ed:d1:53:0c:66:7e:a1:
50:4d:57:8e:4f:fb:e0:4f:f7:af:e5:f0:6e:bf:8b:52:32:bf:
80:38:9d:d7:74:3b:f9:03:11:09:b5:c6:7a:84:1f:9f:85:70:
81:70:cf:24:ec:26:3b:64:89:e8:42:24:62:e6:52:9d:46:ed:
73:e7:ab:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oRlDaqVAuox70OGFrKIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMGY3OGE1NWE1YmU1YzAxZGI4MDNmNDM4Y2E2MTFiN2Yx
NTAzMDcwHhcNMjUwNjI4MTMwMTQwWhcNMjUwNjI5MTMwMTQwWjAzMTEwLwYDVQQD
EyhjYTE3NzJkMjlkM2U4YTQ2NjQwMWY5NzhlNDg2NWNjZWM0OWMyMjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr61325EEelJ1Asp+zdbdyE+xmnxH
gTnSgSzc0C7YDNDGRu2K1FJVQa4efH+aF8v+LIBrtf5sRAtQNxDCUTwdfVhPffAo
PG85dLGDrFqwhVPTBqni7Rlw3Aap9p4PRLFBmqnDmzdz7HrX6Ju2W7kpDGi+3rmR
PK1nFXMcRmk1+/NwQI2zI5ecQJD5CCtRcAbvfF3n6pqs3r78kt1gkxK753ip/PbX
ZI0YzoBbvr9NVgZP0glwg1ZBOB1eijIOAiQvx/TSEy9o1C3L5r+L+Iv8saD1JSDe
T5iMnf7O8iy4zPFFJWVGX69O3UsbGuXDqctVrVaqHaRlRWX+PbxI/XQtdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoXctKdPopGZAH5eOSGXM7EnCKJMB8GA1UdIwQY
MBaAFB8PeKVaW+XAHbgD9DjKYRt/FQMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hNTBjN2MtODc4YS00N2ZkLTgxMDct
NzlmMTA1YWVmOGQ2LzEvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hNTBjN2MtODc4YS00N2ZkLTgxMDctNzlmMTA1YWVmOGQ2
LzEvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLUG6MON
UXt4Ld5NxZwUYfm5FcL801lwQYuyz8+s57lL8TLJHJwdfYc3O2aC+JjWfInTt5g8
RNoy251uLXIedFZNdMWv8fhzoZ6dHDjPhQlBBarhQ0pyKhcgNKvtvcUbuadgbTlp
UrqmIl1REqdiwbQ57up+ekpdS3XpH27Bs29yuJKKwo9RJct6KF3VV96Yd2WT9NNt
dl/cMsGUPsILQXHR0u83IVBbNi4GnBT1I3sfzjFl5qHkn9OQMpKeo8Lt0VMMZn6h
UE1Xjk/74E/3r+Xwbr+LUjK/gDid13Q7+QMRCbXGeoQfn4VwgXDPJOwmO2SJ6EIk
YuZSnUbtc+erGw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:35 2025 by rpki-client