Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
File: HGnHYzivyQhbj71mm4t0vXqS1DE.mft (raw, json)
Hash identifier: /05hUtOckWVZcHaexynV+7ZAaPe8EmwohDDylV3vYbs=
Subject key identifier: AD:B8:1B:2A:ED:1E:79:50:4B:9A:73:33:88:74:E6:D2:5C:FF:3E:0E
Authority key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Certificate issuer: /CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Certificate serial: 0197CA5E1A058C69E68C456ADC7CAAE3AEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
Manifest number: 12AC
Signing time: Wed 02 Jul 2025 09:00:53 +0000
Manifest this update: Wed 02 Jul 2025 09:00:53 +0000
Manifest next update: Thu 03 Jul 2025 09:00:53 +0000
Files and hashes: 1: Biv2qTrQNJJYQlmIhX2GXCsPh8k.roa (hash: qgzc+HC1Pbq5Sym5wnfMxLGpd7cCm/TouNcPCVsFEcM=)
2: HGnHYzivyQhbj71mm4t0vXqS1DE.crl (hash: 5ltW37uFOf1BoVl0rQC9BuV0MHeYzTkv9wtSM1VMjZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:1a:05:8c:69:e6:8c:45:6a:dc:7c:aa:e3:ae:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Validity
Not Before: Jul 2 09:00:53 2025 GMT
Not After : Jul 3 09:00:53 2025 GMT
Subject: CN=adb81b2aed1e79504b9a73338874e6d25cff3e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:c5:b7:4c:db:ca:cc:b8:12:c4:3c:55:00:
02:17:17:f1:5e:2d:da:48:13:f5:65:e4:32:60:21:
55:c0:f6:ad:42:f0:7d:87:ed:e2:97:dd:6d:c6:29:
ec:2c:d9:12:ff:f9:0a:f9:56:3e:4c:10:f2:79:7f:
50:c4:3f:63:dc:33:a1:d9:8b:fc:f6:d8:69:dc:12:
4b:6a:76:2b:f1:9b:9e:d5:7b:ff:57:71:83:18:83:
cb:4a:80:6e:3c:73:f2:0c:1a:80:8d:6c:9c:8f:f9:
68:a7:66:ba:3f:62:49:12:99:4f:ae:fd:cf:02:07:
7e:02:6c:fb:ce:2e:6f:b8:65:bf:48:f3:80:81:9a:
be:9a:3f:80:60:69:5d:4f:1d:a3:75:1d:5a:10:41:
76:c3:12:ad:e9:63:2b:36:fd:0b:b0:e4:72:24:09:
e3:50:fc:f8:0f:5c:36:73:5c:0b:3f:76:42:c9:4a:
f0:84:3f:b9:58:f6:ff:e3:4d:9f:a9:b6:8a:8f:b1:
cc:56:7c:86:ac:3b:63:d1:35:03:50:66:6a:29:ba:
0b:e5:a7:f7:f6:0c:ca:c8:25:79:ee:26:35:3e:71:
e2:7a:be:46:fe:ea:21:ce:94:aa:9a:92:dd:eb:63:
40:7b:ae:cf:d7:15:b0:4b:40:00:b5:20:96:e2:bf:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B8:1B:2A:ED:1E:79:50:4B:9A:73:33:88:74:E6:D2:5C:FF:3E:0E
X509v3 Authority Key Identifier:
keyid:1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e6:47:fb:82:ae:31:d7:48:5b:a2:de:de:c7:93:b1:95:26:
7d:ec:55:60:91:33:5d:88:d1:7b:6c:a0:8c:4d:a1:d7:55:85:
6f:4d:38:3c:fa:3c:c0:3d:b5:fd:b4:2a:30:1d:92:b8:d8:6c:
cf:a3:71:c4:89:7a:ff:4b:c8:e1:f0:e5:8a:76:bf:d7:8b:54:
09:fa:3b:dc:31:94:3d:7e:1b:a2:46:f1:fa:bd:d8:24:e3:ae:
a6:5d:7a:2f:f4:43:a7:1b:80:bf:0f:92:c3:bd:0b:6d:ec:5f:
81:da:41:52:73:d5:cc:e4:95:28:08:32:7c:8c:aa:fc:9e:84:
b1:54:18:9b:f7:78:51:c7:51:9d:b7:5e:38:dc:37:ba:3b:64:
aa:80:61:a4:41:20:0b:34:c4:c7:ef:09:3c:0f:26:6c:58:2d:
fa:3e:79:39:a9:07:f0:20:24:55:b5:1f:27:8c:ea:d5:f0:79:
a0:f9:bb:95:fa:8a:b9:99:f4:a4:bb:26:c1:f9:22:58:14:07:
cd:38:d4:ea:f5:f3:22:47:5c:81:ab:7a:b1:cf:0b:16:25:a5:
8c:09:f0:1a:bc:d3:72:58:e6:28:44:47:e9:e8:04:7d:b2:f6:
cd:6d:36:8f:59:db:49:00:51:f5:89:03:2d:31:38:01:03:f2:
99:7c:a4:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKXhoFjGnmjEVq3Hyq467IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNjljNzYzMzhhZmM5MDg1YjhmYmQ2NjliOGI3NGJkN2E5
MmQ0MzEwHhcNMjUwNzAyMDkwMDUzWhcNMjUwNzAzMDkwMDUzWjAzMTEwLwYDVQQD
EyhhZGI4MWIyYWVkMWU3OTUwNGI5YTczMzM4ODc0ZTZkMjVjZmYzZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj3Ft0zbysy4EsQ8VQACFxfxXi3a
SBP1ZeQyYCFVwPatQvB9h+3il91txinsLNkS//kK+VY+TBDyeX9QxD9j3DOh2Yv8
9thp3BJLanYr8Zue1Xv/V3GDGIPLSoBuPHPyDBqAjWycj/lop2a6P2JJEplPrv3P
Agd+Amz7zi5vuGW/SPOAgZq+mj+AYGldTx2jdR1aEEF2wxKt6WMrNv0LsORyJAnj
UPz4D1w2c1wLP3ZCyUrwhD+5WPb/402fqbaKj7HMVnyGrDtj0TUDUGZqKboL5af3
9gzKyCV57iY1PnHier5G/uohzpSqmpLd62NAe67P1xWwS0AAtSCW4r8eKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK24GyrtHnlQS5pzM4h05tJc/z4OMB8GA1UdIwQY
MBaAFBxpx2M4r8kIW4+9ZpuLdL16ktQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEduSFl6aXZ5UWhiajcxbW00dDB2WHFTMURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9hMjA4OGItYTEyNi00YmE2LTg3MWMt
NTc1OWI0MjdmNGQxLzEvSEduSFl6aXZ5UWhiajcxbW00dDB2WHFTMURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9hMjA4OGItYTEyNi00YmE2LTg3MWMtNTc1OWI0MjdmNGQx
LzEvSEduSFl6aXZ5UWhiajcxbW00dDB2WHFTMURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOZH+4Ku
MddIW6Le3seTsZUmfexVYJEzXYjRe2ygjE2h11WFb004PPo8wD21/bQqMB2SuNhs
z6NxxIl6/0vI4fDlina/14tUCfo73DGUPX4bokbx+r3YJOOupl16L/RDpxuAvw+S
w70LbexfgdpBUnPVzOSVKAgyfIyq/J6EsVQYm/d4UcdRnbdeONw3ujtkqoBhpEEg
CzTEx+8JPA8mbFgt+j55OakH8CAkVbUfJ4zq1fB5oPm7lfqKuZn0pLsmwfkiWBQH
zTjU6vXzIkdcgat6sc8LFiWljAnwGrzTcljmKERH6egEfbL2zW02j1nbSQBR9YkD
LTE4AQPymXykLg==
-----END CERTIFICATE-----
Generated at Wed Jul 2 16:16:37 2025 by rpki-client