Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: lqqnYDzHAoW1mPHsTiDftoEuelBsNazHD2X6tuaC0yk=
Subject key identifier: 89:88:92:E5:79:1B:7E:1B:44:84:6F:72:66:D1:75:CC:1F:9E:1D:88
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 0197CF16BAC4BFC1092EB4001EC88A3544D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 0F51
Signing time: Thu 03 Jul 2025 07:01:02 +0000
Manifest this update: Thu 03 Jul 2025 07:01:02 +0000
Manifest next update: Fri 04 Jul 2025 07:01:02 +0000
Files and hashes: 1: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: 8/cx+tf22me09pikqADjus8LfLNHvJED82CW1AE5eO4=)
2: kDscGP6Kvv2ErG5ZiDcwGfJJgOo.roa (hash: sDpLdqtWZqa+OqK0PcGk2ZySrrYvy+43dMtNOAb22Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:16:ba:c4:bf:c1:09:2e:b4:00:1e:c8:8a:35:44:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: Jul 3 07:01:02 2025 GMT
Not After : Jul 4 07:01:02 2025 GMT
Subject: CN=898892e5791b7e1b44846f7266d175cc1f9e1d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:55:a5:33:07:94:53:74:84:6e:78:4a:fa:
1b:a0:83:6a:c8:3e:e8:c7:ea:cb:8e:fd:95:bc:08:
96:0c:2d:36:9a:fe:26:e8:7c:66:b9:fc:32:37:98:
27:dd:5b:cd:70:6a:c7:8e:17:5d:7e:c7:cc:e2:16:
9c:27:10:fc:50:69:ed:0d:81:9a:c5:da:61:8f:2e:
44:c5:88:97:89:76:b3:35:44:c2:c8:28:33:9e:18:
f2:9d:0b:81:cd:7b:b0:f8:45:ef:96:be:88:98:f8:
0c:4d:c6:36:a2:cd:46:d9:e3:f2:ec:0b:4c:5d:f3:
b4:e8:9a:97:af:bd:c5:86:dd:e9:66:15:9b:f0:5e:
66:21:80:1a:3d:42:87:9b:2b:3b:06:cc:f9:27:48:
36:f7:2d:d2:fb:b5:25:3b:01:f9:22:67:28:da:c2:
b2:f9:1a:4d:c3:4a:f9:36:3c:2b:56:8b:54:16:bc:
55:46:d8:55:ab:c7:85:8d:c7:b2:db:bd:57:a4:3f:
c4:48:bb:cd:c0:83:93:d3:d9:aa:92:86:6a:0f:b1:
b7:e1:71:47:b4:4c:b3:9f:b3:21:d5:81:30:6c:ad:
74:b8:22:cb:a6:ee:4f:6f:97:cf:fe:36:f4:89:5d:
43:72:0e:e8:5c:7c:20:cb:f3:43:c7:ae:07:4b:31:
08:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:88:92:E5:79:1B:7E:1B:44:84:6F:72:66:D1:75:CC:1F:9E:1D:88
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:47:d4:d3:bd:2f:2e:ee:b2:2a:f1:10:01:ce:e3:a1:3f:f3:
45:9b:41:c5:ad:10:76:e7:2e:22:a6:e1:72:8b:9a:7e:95:03:
e7:87:93:a1:8c:9a:73:b7:52:fe:8b:14:df:6c:7d:8a:a1:29:
35:78:03:83:a0:33:2e:7d:71:c2:1b:7b:76:6e:62:c5:68:2c:
4c:2e:cb:f0:26:5a:a8:e8:a6:e0:18:0d:34:15:fe:a6:be:b9:
d9:19:24:30:f3:05:96:63:70:64:e9:0e:3d:e8:5e:77:63:19:
09:d0:8b:7b:52:b8:4e:39:0d:53:c5:88:fd:dc:31:44:a0:71:
ae:5d:25:59:7d:5a:e1:0f:db:67:6e:9f:50:8f:8b:d5:9e:74:
b2:97:bc:20:a9:61:ca:4e:94:62:0c:f0:19:2e:a9:04:dd:4a:
27:98:8e:1e:d0:31:bd:6d:40:c2:94:66:9d:5b:2b:c9:e5:8d:
e9:d9:02:5c:4b:cb:18:70:56:51:c1:29:91:f8:22:33:b0:99:
2d:be:63:ad:76:97:95:4d:73:b1:02:cc:fa:ac:5f:91:70:3e:
ae:8c:f6:13:fb:85:77:d6:4f:60:e2:fc:73:2f:78:90:44:ab:
a5:8f:67:67:6b:99:2d:13:79:d9:28:f6:ba:32:ee:9c:fe:6e:
e2:7c:fb:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfPFrrEv8EJLrQAHsiKNUTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZjQxMjlhZjg2OWY2ZjVjODVhNzM4ODgwOGFhZDBhYzBi
YTljNGYwHhcNMjUwNzAzMDcwMTAyWhcNMjUwNzA0MDcwMTAyWjAzMTEwLwYDVQQD
Eyg4OTg4OTJlNTc5MWI3ZTFiNDQ4NDZmNzI2NmQxNzVjYzFmOWUxZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujBVpTMHlFN0hG54SvoboINqyD7o
x+rLjv2VvAiWDC02mv4m6HxmufwyN5gn3VvNcGrHjhddfsfM4hacJxD8UGntDYGa
xdphjy5ExYiXiXazNUTCyCgznhjynQuBzXuw+EXvlr6ImPgMTcY2os1G2ePy7AtM
XfO06JqXr73Fht3pZhWb8F5mIYAaPUKHmys7Bsz5J0g29y3S+7UlOwH5Imco2sKy
+RpNw0r5NjwrVotUFrxVRthVq8eFjcey271XpD/ESLvNwIOT09mqkoZqD7G34XFH
tEyzn7Mh1YEwbK10uCLLpu5Pb5fP/jb0iV1Dcg7oXHwgy/NDx64HSzEIKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImIkuV5G34bRIRvcmbRdcwfnh2IMB8GA1UdIwQY
MBaAFIb0Epr4afb1yFpziICKrQrAupxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAt
Y2M1MDEwN2VhMTQ2LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAtY2M1MDEwN2VhMTQ2
LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEfU070v
Lu6yKvEQAc7joT/zRZtBxa0QducuIqbhcouafpUD54eToYyac7dS/osU32x9iqEp
NXgDg6AzLn1xwht7dm5ixWgsTC7L8CZaqOim4BgNNBX+pr652RkkMPMFlmNwZOkO
Pehed2MZCdCLe1K4TjkNU8WI/dwxRKBxrl0lWX1a4Q/bZ26fUI+L1Z50spe8IKlh
yk6UYgzwGS6pBN1KJ5iOHtAxvW1AwpRmnVsryeWN6dkCXEvLGHBWUcEpkfgiM7CZ
Lb5jrXaXlU1zsQLM+qxfkXA+roz2E/uFd9ZPYOL8cy94kESrpY9nZ2uZLRN52Sj2
ujLunP5u4nz7wQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 09:16:26 2025 by rpki-client