Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier: d2wviAVwjZ4ymew4uUY3lYbqVCm6aclzbeQXTV+QHyc=
Subject key identifier: 83:96:0E:37:5E:F9:A0:74:CD:F5:BE:E5:12:23:88:99:9C:EC:79:5C
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial: 0198D404781B44BEE8EAC4246AE16DB02FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number: 04DC
Signing time: Fri 22 Aug 2025 23:01:59 +0000
Manifest this update: Fri 22 Aug 2025 23:01:59 +0000
Manifest next update: Sat 23 Aug 2025 23:01:59 +0000
Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: QxVoudBulvOXarlfw+iQKYdY611HqOmvYTQWWZ/YRt0=)
2: KnSUOMU4LVOd-681gUpAeZxW9tU.roa (hash: T8JMOCVoClcG2l35uDfqB6bKR7EcaF1TmNNZKykQwnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:78:1b:44:be:e8:ea:c4:24:6a:e1:6d:b0:2f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Validity
Not Before: Aug 22 23:01:59 2025 GMT
Not After : Aug 23 23:01:59 2025 GMT
Subject: CN=83960e375ef9a074cdf5bee5122388999cec795c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:6b:ef:28:74:75:b2:c9:ff:65:54:02:7e:
0d:29:ab:03:0d:a9:3d:c8:36:a0:0d:52:ea:3e:9d:
bf:e5:15:b2:b1:9c:04:9f:c6:3e:a6:b1:9d:5e:f3:
9a:41:c2:26:86:d7:79:bb:cd:55:d2:da:0f:53:2b:
86:46:e2:2f:4d:0b:88:c3:ae:dd:3a:f4:4a:74:dc:
01:99:42:dd:fa:da:ec:9d:72:f1:c1:59:55:a8:ba:
e7:5a:26:9e:e3:f3:85:3e:fe:b9:ee:2c:2f:a8:4b:
b3:cc:3e:e6:60:ab:df:d4:0e:f6:3f:65:b5:18:24:
f1:00:58:79:69:40:06:8b:7e:3e:eb:18:8e:6e:f5:
9b:ec:7b:3e:04:e0:e3:cc:c7:93:33:b5:0b:a4:32:
88:f9:0c:7b:8a:92:00:57:a0:9d:90:86:50:bd:64:
88:5b:0f:1a:0c:4c:eb:53:07:f6:12:e0:75:e2:19:
3e:e2:73:52:d1:a8:28:34:70:59:46:e3:1e:a9:96:
e2:8b:8d:00:a1:08:45:36:1b:c0:f7:01:dc:80:77:
53:86:39:07:c3:7b:a4:37:ae:67:ee:a4:72:4b:69:
cf:d4:1e:a5:03:0b:7d:29:52:5f:d0:62:6d:35:61:
80:48:57:c7:0f:fc:67:b4:bf:c1:01:f3:61:f1:1f:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:96:0E:37:5E:F9:A0:74:CD:F5:BE:E5:12:23:88:99:9C:EC:79:5C
X509v3 Authority Key Identifier:
keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4e:e0:72:6a:be:50:41:ad:e3:a3:63:cb:f0:b7:e7:98:0d:
3b:1b:c6:27:f8:fb:26:b9:19:0d:18:ee:cf:18:95:7f:ff:a2:
ea:92:b5:77:b5:90:d1:05:27:69:a1:50:ff:a5:06:96:96:5c:
c7:5f:57:5e:2c:9c:49:c0:af:c3:b0:51:1c:08:b4:47:5e:97:
48:b9:20:dd:ff:74:07:40:5d:fa:c8:97:8e:1f:44:5b:7e:82:
e6:b9:0d:24:6f:94:44:d3:93:3a:5a:f2:a9:5e:be:db:b6:82:
77:49:65:b5:17:f9:ce:4c:77:24:d7:6f:48:01:68:47:34:bf:
5e:cc:96:ec:f9:6d:c3:5f:e6:2f:18:e7:aa:96:34:c2:5f:a6:
98:17:c9:2b:1a:69:26:44:22:72:11:cc:5e:10:7b:98:3b:15:
5f:17:5d:e2:eb:81:e8:b1:9c:b5:6e:8e:28:c8:7a:f9:19:da:
9a:3a:fa:9d:0e:69:c8:bd:9c:b8:6a:d4:66:ab:24:03:72:92:
41:fa:80:3c:be:36:a2:d8:dc:40:b8:38:74:1a:70:42:46:47:
c9:ee:89:18:e6:30:dc:29:67:0b:37:9f:d7:94:60:e1:e8:9f:
40:2d:e8:82:ca:81:34:9b:9a:62:ec:32:f1:94:a7:30:ff:d2:
15:e9:98:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBHgbRL7o6sQkauFtsC/IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjY2FhYjBiMGRlZmM5M2MzMmY4MGM0NGIwODJmYjI5MDVm
MjNjNjIwHhcNMjUwODIyMjMwMTU5WhcNMjUwODIzMjMwMTU5WjAzMTEwLwYDVQQD
Eyg4Mzk2MGUzNzVlZjlhMDc0Y2RmNWJlZTUxMjIzODg5OTljZWM3OTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjxr7yh0dbLJ/2VUAn4NKasDDak9
yDagDVLqPp2/5RWysZwEn8Y+prGdXvOaQcImhtd5u81V0toPUyuGRuIvTQuIw67d
OvRKdNwBmULd+trsnXLxwVlVqLrnWiae4/OFPv657iwvqEuzzD7mYKvf1A72P2W1
GCTxAFh5aUAGi34+6xiObvWb7Hs+BODjzMeTM7ULpDKI+Qx7ipIAV6CdkIZQvWSI
Ww8aDEzrUwf2EuB14hk+4nNS0agoNHBZRuMeqZbii40AoQhFNhvA9wHcgHdThjkH
w3ukN65n7qRyS2nP1B6lAwt9KVJf0GJtNWGASFfHD/xntL/BAfNh8R/5LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOWDjde+aB0zfW+5RIjiJmc7HlcMB8GA1UdIwQY
MBaAFBzKqwsN78k8MvgMRLCC+ykF8jxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ODdhYWUtMTEzMS00ZDljLTg1OTQt
Njk0N2YwMmFjNmFmLzEvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83ODdhYWUtMTEzMS00ZDljLTg1OTQtNjk0N2YwMmFjNmFm
LzEvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARU7gcmq+
UEGt46Njy/C355gNOxvGJ/j7JrkZDRjuzxiVf/+i6pK1d7WQ0QUnaaFQ/6UGlpZc
x19XXiycScCvw7BRHAi0R16XSLkg3f90B0Bd+siXjh9EW36C5rkNJG+URNOTOlry
qV6+27aCd0lltRf5zkx3JNdvSAFoRzS/XsyW7Pltw1/mLxjnqpY0wl+mmBfJKxpp
JkQichHMXhB7mDsVXxdd4uuB6LGctW6OKMh6+Rnamjr6nQ5pyL2cuGrUZqskA3KS
QfqAPL42otjcQLg4dBpwQkZHye6JGOYw3ClnCzef15Rg4eifQC3ogsqBNJuaYuwy
8ZSnMP/SFemYww==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:53 2025 by rpki-client