Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
File: HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json)
Hash identifier: nHAmoC+jBk7QCmRL9mXwBZ9h3RpdZV/RGdFbh5nRb5s=
Subject key identifier: 32:C0:CD:08:07:EE:EE:B4:BE:43:64:07:C9:ED:53:2D:25:C9:EE:25
Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Certificate serial: 0198D583E541FDCDEF9D21C635AB23671E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
Manifest number: 098D
Signing time: Sat 23 Aug 2025 06:00:47 +0000
Manifest this update: Sat 23 Aug 2025 06:00:47 +0000
Manifest next update: Sun 24 Aug 2025 06:00:47 +0000
Files and hashes: 1: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: JHRkAWGJiWB9A5pr8bPCFoM5dINQxWlTFpeF52c0T50=)
2: lyeOPA3Hi3kUGDVfoF3VE8weizo.roa (hash: SK0Hu8MdGQh3m28Nprb3+ZaMXzQS8vnNx8UerT7YIyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e5:41:fd:cd:ef:9d:21:c6:35:ab:23:67:1e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Validity
Not Before: Aug 23 06:00:47 2025 GMT
Not After : Aug 24 06:00:47 2025 GMT
Subject: CN=32c0cd0807eeeeb4be436407c9ed532d25c9ee25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:ab:40:4f:c9:e3:aa:47:6b:93:fc:58:12:
6c:22:f8:97:04:b6:6f:84:38:46:0b:9c:b9:bb:ec:
9a:10:f6:02:f4:81:6f:62:84:cf:f9:59:06:fc:65:
c9:ea:97:0d:d4:91:39:65:12:27:ed:70:27:e4:17:
0b:48:13:4f:73:a9:87:ab:d9:6f:87:12:1b:92:09:
1c:24:83:b0:56:bb:1c:f4:be:b3:83:bc:6e:95:94:
4b:2f:5d:19:81:41:5d:ca:90:50:2e:7f:2a:e5:08:
5d:69:4a:60:15:b2:04:82:51:cb:e6:3e:f5:fd:bd:
88:71:cb:7b:0d:2c:5d:55:b3:98:b2:95:00:92:b8:
ba:6a:5a:1c:bf:33:71:d7:d6:3c:fb:6c:01:48:9a:
47:1a:ad:27:24:a1:2b:ee:39:14:e6:8c:9e:5d:75:
85:6e:43:37:88:cd:42:b5:0c:0a:c2:9b:1b:e2:f2:
e5:e4:25:0a:6e:e2:ce:d2:58:41:b5:1f:30:2f:b7:
9b:a0:8a:24:dd:54:ba:0a:6b:0f:21:92:b9:75:3d:
c2:01:ae:1c:f8:e2:3b:1f:b4:42:91:14:f8:50:86:
01:e5:a5:d8:d6:74:6b:2e:b7:40:a7:35:80:97:09:
db:a9:ca:97:6d:f1:2a:de:0f:a5:e7:dd:74:7e:ff:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C0:CD:08:07:EE:EE:B4:BE:43:64:07:C9:ED:53:2D:25:C9:EE:25
X509v3 Authority Key Identifier:
keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:89:76:d1:d4:49:f3:9f:5f:c9:cf:4a:73:15:0b:51:73:54:
74:53:95:53:f7:67:a4:2a:44:58:87:8a:fc:8b:42:df:b9:5c:
4a:92:91:81:d2:66:0c:7e:23:7b:1e:82:4b:79:18:c6:e8:37:
82:17:97:e0:d7:f2:fc:8b:0c:c5:03:62:31:a2:e4:1e:3e:76:
1d:46:1c:31:b9:01:38:a0:a9:bf:d0:49:b7:20:1d:aa:d3:ed:
ea:94:3f:7a:db:79:c5:3d:8e:ed:3a:2a:19:59:68:7e:f1:cd:
19:2f:53:ad:e1:37:1f:9f:17:2a:b5:c1:89:94:a0:49:1d:50:
34:04:94:1a:53:87:6d:3d:46:a6:5f:dd:dc:48:65:8b:73:24:
67:52:6f:8c:0b:50:11:05:f2:d3:e8:8e:d2:c3:a9:d2:6d:ac:
81:49:94:81:eb:e6:3e:8d:86:60:0e:71:d6:72:2b:63:2f:f9:
36:b5:da:7c:fe:39:22:72:67:d5:62:0a:ad:c7:99:0f:cc:65:
c2:c6:c2:72:7b:b7:a4:2e:2c:d9:3e:c5:60:73:ba:49:08:8f:
c4:6d:c5:b6:c6:38:ea:e4:79:9d:b6:4b:d3:67:a2:c6:8a:68:
ce:cf:80:68:01:e3:36:e4:ad:cd:28:69:86:fc:0b:90:fd:70:
c5:00:e0:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg+VB/c3vnSHGNasjZx4zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjQyZjJlOTQ1YzZhNzJlZTI4ZjhjODBlODBkNDg4NDMz
ZTM3YTMwHhcNMjUwODIzMDYwMDQ3WhcNMjUwODI0MDYwMDQ3WjAzMTEwLwYDVQQD
EygzMmMwY2QwODA3ZWVlZWI0YmU0MzY0MDdjOWVkNTMyZDI1YzllZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6irQE/J46pHa5P8WBJsIviXBLZv
hDhGC5y5u+yaEPYC9IFvYoTP+VkG/GXJ6pcN1JE5ZRIn7XAn5BcLSBNPc6mHq9lv
hxIbkgkcJIOwVrsc9L6zg7xulZRLL10ZgUFdypBQLn8q5QhdaUpgFbIEglHL5j71
/b2Icct7DSxdVbOYspUAkri6alocvzNx19Y8+2wBSJpHGq0nJKEr7jkU5oyeXXWF
bkM3iM1CtQwKwpsb4vLl5CUKbuLO0lhBtR8wL7eboIok3VS6CmsPIZK5dT3CAa4c
+OI7H7RCkRT4UIYB5aXY1nRrLrdApzWAlwnbqcqXbfEq3g+l5910fv91qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLAzQgH7u60vkNkB8ntUy0lye4lMB8GA1UdIwQY
MBaAFBwkLy6UXGpy7ij4yA6A1IhDPjejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEt
Y2E3OGVmNTgyNmNhLzEvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEtY2E3OGVmNTgyNmNh
LzEvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuYl20dRJ
859fyc9KcxULUXNUdFOVU/dnpCpEWIeK/ItC37lcSpKRgdJmDH4jex6CS3kYxug3
gheX4Nfy/IsMxQNiMaLkHj52HUYcMbkBOKCpv9BJtyAdqtPt6pQ/ett5xT2O7Toq
GVlofvHNGS9TreE3H58XKrXBiZSgSR1QNASUGlOHbT1Gpl/d3Ehli3MkZ1JvjAtQ
EQXy0+iO0sOp0m2sgUmUgevmPo2GYA5x1nIrYy/5NrXafP45InJn1WIKrceZD8xl
wsbCcnu3pC4s2T7FYHO6SQiPxG3FtsY46uR5nbZL02eixopozs+AaAHjNuStzShp
hvwLkP1wxQDguA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:24 2025 by rpki-client