Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json)
Hash identifier: PpYwAysVSLLLWajxs83jNrC5uo1pFFHkLXqtWKd+sFo=
Subject key identifier: 51:7B:5A:64:1B:50:38:37:02:37:3D:6A:7D:62:27:88:91:10:A2:39
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 0198D6987DEA71D244F0750F4DAC82EF53CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
Manifest number: 1619
Signing time: Sat 23 Aug 2025 11:02:54 +0000
Manifest this update: Sat 23 Aug 2025 11:02:54 +0000
Manifest next update: Sun 24 Aug 2025 11:02:54 +0000
Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: tesjmVF7ZM9jApv9eTq+EFNOQM3S2FVwtDk8IEzIk00=)
2: t2I34y0ofKpembvBe1b_-CyvIM8.roa (hash: mSrCvo09CP/j+cfORar+o3HK77VwUvlajzCQ530vifA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:7d:ea:71:d2:44:f0:75:0f:4d:ac:82:ef:53:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: Aug 23 11:02:54 2025 GMT
Not After : Aug 24 11:02:54 2025 GMT
Subject: CN=517b5a641b50383702373d6a7d6227889110a239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d0:d4:f3:ab:d8:ee:ce:80:0d:3a:32:ad:d9:
e5:d1:d3:43:e5:c1:e0:09:67:f4:f9:30:d5:14:07:
a4:ae:d7:ed:69:7d:1d:d1:65:41:81:ee:c2:62:57:
59:d7:9e:e5:6b:5c:ce:d7:22:39:a7:47:e9:8c:7f:
dc:62:ca:6a:e2:fe:6c:45:2a:f0:b8:cd:7f:c0:1a:
c7:ec:c8:84:b2:08:21:10:a9:26:aa:da:1a:b2:31:
3e:7a:91:a3:05:e5:91:54:8c:e0:4e:2e:6b:d5:90:
b0:90:7f:75:8b:e7:1c:bb:a6:fa:e8:c5:3b:79:fe:
a6:df:9e:7b:25:51:27:98:b3:fd:6e:f9:ff:ac:1b:
75:45:25:16:6a:5d:d6:d7:41:b0:f5:16:cb:94:59:
d3:be:e7:53:c3:33:a6:7b:ca:e9:a2:66:dd:cb:f7:
ba:59:1f:2c:3c:c8:a5:43:fa:49:bf:43:ee:21:2b:
74:79:34:38:3c:ca:e5:df:d5:fb:2b:ae:9a:1a:dd:
10:99:68:df:b5:0d:16:fe:4b:98:b9:0a:c1:6c:91:
63:81:6d:8f:5c:64:39:83:77:3e:73:62:62:64:20:
eb:10:40:3f:ea:2a:99:48:a5:5f:4e:4f:da:ba:56:
2d:e2:27:13:49:e4:55:dd:0d:bb:fe:ca:7c:62:e5:
c2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7B:5A:64:1B:50:38:37:02:37:3D:6A:7D:62:27:88:91:10:A2:39
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:70:97:08:4c:3e:83:bb:4f:25:52:ee:a2:0f:88:70:f2:0e:
bf:67:7f:d2:f2:49:9a:49:53:3a:48:1e:2d:c3:9d:6f:3b:7f:
fe:fd:91:b2:7d:d2:78:a8:85:d6:f7:f9:4b:05:10:19:29:d4:
25:d3:f9:15:96:ff:8d:0a:63:6e:08:2c:27:ea:e2:ed:63:6a:
98:23:89:c7:2b:d5:1c:ca:bc:50:eb:5b:4b:87:f0:a0:b6:bf:
ca:a5:57:47:2f:ff:ff:a0:7a:df:62:12:0b:b9:2b:12:44:be:
ac:bc:5c:75:4e:33:e0:c0:aa:2a:a0:a9:a8:82:52:83:43:7b:
cd:13:5b:0c:25:c8:b2:33:40:c9:ab:03:47:4f:ed:f9:9f:ac:
1a:ea:49:7e:c3:76:0e:b3:fd:49:3c:09:e6:ed:0a:d1:94:bb:
e5:32:1c:51:32:47:49:55:a4:4b:c0:58:81:46:0e:f4:9a:45:
b5:c0:37:d0:5b:c1:82:cf:35:19:a0:d9:39:80:a1:82:e7:50:
c3:75:b2:bd:8a:dc:e3:de:6a:f7:6b:21:ae:2c:bb:40:84:88:
80:59:38:70:10:85:ce:ec:ac:f9:6d:73:82:65:43:a3:1e:8f:
ab:78:7d:f4:f0:49:1d:f7:13:66:d7:18:8d:c6:91:04:11:79:
bf:20:58:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmH3qcdJE8HUPTayC71PPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MGU5ZDAzOGYxYmMwMDVmM2IwOWM1ZGNhODIwYWQ4MTA5
NDhiM2UwHhcNMjUwODIzMTEwMjU0WhcNMjUwODI0MTEwMjU0WjAzMTEwLwYDVQQD
Eyg1MTdiNWE2NDFiNTAzODM3MDIzNzNkNmE3ZDYyMjc4ODkxMTBhMjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dDU86vY7s6ADToyrdnl0dND5cHg
CWf0+TDVFAekrtftaX0d0WVBge7CYldZ157la1zO1yI5p0fpjH/cYspq4v5sRSrw
uM1/wBrH7MiEsgghEKkmqtoasjE+epGjBeWRVIzgTi5r1ZCwkH91i+ccu6b66MU7
ef6m3557JVEnmLP9bvn/rBt1RSUWal3W10Gw9RbLlFnTvudTwzOme8rpombdy/e6
WR8sPMilQ/pJv0PuISt0eTQ4PMrl39X7K66aGt0QmWjftQ0W/kuYuQrBbJFjgW2P
XGQ5g3c+c2JiZCDrEEA/6iqZSKVfTk/aulYt4icTSeRV3Q27/sp8YuXCjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFF7WmQbUDg3Ajc9an1iJ4iREKI5MB8GA1UdIwQY
MBaAFIQOnQOPG8AF87CcXcqCCtgQlIs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMt
Y2U5ZTFiODI5NjdkLzEvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMtY2U5ZTFiODI5Njdk
LzEvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnCXCEw+
g7tPJVLuog+IcPIOv2d/0vJJmklTOkgeLcOdbzt//v2Rsn3SeKiF1vf5SwUQGSnU
JdP5FZb/jQpjbggsJ+ri7WNqmCOJxyvVHMq8UOtbS4fwoLa/yqVXRy///6B632IS
C7krEkS+rLxcdU4z4MCqKqCpqIJSg0N7zRNbDCXIsjNAyasDR0/t+Z+sGupJfsN2
DrP9STwJ5u0K0ZS75TIcUTJHSVWkS8BYgUYO9JpFtcA30FvBgs81GaDZOYChgudQ
w3WyvYrc495q92shriy7QISIgFk4cBCFzuys+W1zgmVDox6Pq3h99PBJHfcTZtcY
jcaRBBF5vyBYRQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:36 2025 by rpki-client