Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
File: HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft (raw, json)
Hash identifier: hw9tF5AOLu9h74tlq0tVl5CzXMnJ6saCvDO231HZRMA=
Subject key identifier: 87:B7:24:73:CF:55:63:9C:B4:06:13:F7:69:90:BA:26:25:82:EB:EE
Authority key identifier: 1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
Certificate issuer: /CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Certificate serial: 0198D84F9A560F7F6130E8B5D11626867760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
Manifest number: 15A5
Signing time: Sat 23 Aug 2025 19:02:32 +0000
Manifest this update: Sat 23 Aug 2025 19:02:32 +0000
Manifest next update: Sun 24 Aug 2025 19:02:32 +0000
Files and hashes: 1: HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl (hash: GrDhiA3uQQpjXH45HLSrwYpiV2pi28gj3aghPl4XHjw=)
2: bDOy4M4R57nj8_Sff5gfBKz-LP0.roa (hash: vm1SQ0etoIa7LbOonRtmj5Ah0LoPLSlL7NdxQSQ76i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:9a:56:0f:7f:61:30:e8:b5:d1:16:26:86:77:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Validity
Not Before: Aug 23 19:02:32 2025 GMT
Not After : Aug 24 19:02:32 2025 GMT
Subject: CN=87b72473cf55639cb40613f76990ba262582ebee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:c3:09:7f:74:c5:23:ea:7e:45:60:73:3b:
7e:58:73:a3:17:89:86:2a:47:8f:2d:47:cc:b8:ee:
d8:80:98:f9:c9:17:d5:8a:c8:37:85:90:61:2d:7a:
4d:d1:d7:b3:5c:73:dc:36:38:7a:79:99:fb:f7:9e:
37:6c:38:44:40:53:0c:fc:d0:52:07:ef:12:d0:7c:
01:1a:7f:bd:29:08:c8:2c:bd:c0:67:12:c9:09:8e:
82:62:51:7e:e7:ae:a7:ff:dd:3a:ca:5a:ef:c0:1e:
42:34:37:f3:5b:2d:10:fd:e3:fd:e1:5e:e4:29:10:
2b:fc:da:43:ba:6b:02:92:a5:c4:c8:29:db:c4:21:
ad:6a:47:32:2a:45:1b:f7:2e:8a:d1:9b:7b:85:e2:
31:df:ec:d3:4b:32:b3:08:30:b6:cb:ab:6e:15:ec:
ed:2a:33:6f:e8:79:2f:69:07:fe:e3:4c:78:d8:a6:
9d:97:69:ac:4b:e8:34:e5:ed:26:b6:fe:e3:12:95:
7e:a6:9a:2b:a0:b8:81:80:c6:0d:29:5d:d9:83:bf:
73:13:81:81:38:6c:63:88:c9:50:a9:50:b8:40:5c:
bc:0d:92:2b:74:2b:05:84:e4:c6:7d:4e:5e:48:6b:
37:6c:2d:54:b9:a7:b6:a0:c2:08:32:6e:a9:ce:37:
8d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B7:24:73:CF:55:63:9C:B4:06:13:F7:69:90:BA:26:25:82:EB:EE
X509v3 Authority Key Identifier:
keyid:1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6e:f6:a6:31:55:3b:0b:9e:c8:1d:c1:9c:51:de:cb:5a:55:
e1:52:5e:41:5b:66:33:bb:3e:9d:e5:3c:11:84:09:24:bc:ca:
a1:41:49:c7:4b:5c:a2:30:b3:0e:20:fa:8c:d4:72:48:3d:5b:
a6:55:fe:2b:0e:71:19:74:b7:34:67:79:9b:56:d3:30:3b:f1:
2e:37:8e:43:88:46:51:14:a2:17:3e:43:ed:f9:fd:5e:e8:d7:
7f:97:9b:30:a4:bb:17:e3:78:54:fd:8d:fa:18:51:af:51:fc:
0d:0b:7d:ba:a0:8c:0c:2f:75:d4:79:7f:d9:8f:1e:1a:56:8b:
15:7c:39:47:82:9c:89:cc:c1:14:7e:19:81:51:ff:6e:de:3a:
ae:b5:07:2e:74:8b:82:1c:a4:68:ac:55:35:a7:3b:e1:ad:01:
3a:32:87:06:5b:de:7a:2c:ad:a8:0b:a6:f0:d4:c3:89:7b:e3:
80:7d:d2:fe:50:3b:db:68:17:fb:57:c5:2c:ce:a7:ec:ad:73:
d2:70:33:72:6a:9b:d6:c3:2b:c8:56:5b:59:43:79:e3:af:e5:
01:eb:bf:e2:24:2c:00:d2:08:b7:b3:1f:97:db:3e:a4:68:52:
35:a9:2f:76:57:db:37:1e:45:cb:b8:cc:08:6c:a6:d2:8f:95:
c2:e5:dd:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYT5pWD39hMOi10RYmhndgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmFjMTI0NmEyZTBlYTk3YTBjMjI5NWI3M2RkYmUwMDZk
MGVkMmMwHhcNMjUwODIzMTkwMjMyWhcNMjUwODI0MTkwMjMyWjAzMTEwLwYDVQQD
Eyg4N2I3MjQ3M2NmNTU2MzljYjQwNjEzZjc2OTkwYmEyNjI1ODJlYmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTrDCX90xSPqfkVgczt+WHOjF4mG
KkePLUfMuO7YgJj5yRfVisg3hZBhLXpN0dezXHPcNjh6eZn79543bDhEQFMM/NBS
B+8S0HwBGn+9KQjILL3AZxLJCY6CYlF+566n/906ylrvwB5CNDfzWy0Q/eP94V7k
KRAr/NpDumsCkqXEyCnbxCGtakcyKkUb9y6K0Zt7heIx3+zTSzKzCDC2y6tuFezt
KjNv6HkvaQf+40x42Kadl2msS+g05e0mtv7jEpV+pporoLiBgMYNKV3Zg79zE4GB
OGxjiMlQqVC4QFy8DZIrdCsFhOTGfU5eSGs3bC1Uuae2oMIIMm6pzjeNAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIe3JHPPVWOctAYT92mQuiYlguvuMB8GA1UdIwQY
MBaAFBwqwSRqLg6pegwilbc92+AG0O0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENyQkpHb3VEcWw2RENLVnR6M2I0QWJRN1N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wZGU3ZTEtYmY3Zi00MzRmLTk1OTEt
OGQ0NmUwOWRmOWYzLzEvSENyQkpHb3VEcWw2RENLVnR6M2I0QWJRN1N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wZGU3ZTEtYmY3Zi00MzRmLTk1OTEtOGQ0NmUwOWRmOWYz
LzEvSENyQkpHb3VEcWw2RENLVnR6M2I0QWJRN1N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALW72pjFV
OwueyB3BnFHey1pV4VJeQVtmM7s+neU8EYQJJLzKoUFJx0tcojCzDiD6jNRySD1b
plX+Kw5xGXS3NGd5m1bTMDvxLjeOQ4hGURSiFz5D7fn9XujXf5ebMKS7F+N4VP2N
+hhRr1H8DQt9uqCMDC911Hl/2Y8eGlaLFXw5R4KciczBFH4ZgVH/bt46rrUHLnSL
ghykaKxVNac74a0BOjKHBlveeiytqAum8NTDiXvjgH3S/lA722gX+1fFLM6n7K1z
0nAzcmqb1sMryFZbWUN546/lAeu/4iQsANIIt7Mfl9s+pGhSNakvdlfbNx5Fy7jM
CGym0o+VwuXd2g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:51:41 2025 by rpki-client