Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
File: Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft (raw, json)
Hash identifier: +ua9xSYpBwPSQToiNSbntXYyRFiuauYSETNBVYbsPuY=
Subject key identifier: C1:65:B7:A9:BF:3F:9D:71:41:1E:B4:13:10:52:4A:49:37:2A:39:D9
Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
Certificate issuer: /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Certificate serial: 0197B7B2F6ABF3A8FF35EE6A3541BA1A444D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
Manifest number: 0C98
Signing time: Sat 28 Jun 2025 18:00:48 +0000
Manifest this update: Sat 28 Jun 2025 18:00:48 +0000
Manifest next update: Sun 29 Jun 2025 18:00:48 +0000
Files and hashes: 1: Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl (hash: Rg7M2NcOZ5r5jLZ2jGTX661l4AahHnXdEM3D/VIMHTk=)
2: aaN1Qn5xjEIJMdhSHXNcsvHXN84.roa (hash: SX27c8/0wfmzPnQt08w0ppx8WZVSTmUYcQpFOXOsbTk=)
3: o6rhv_3B72g00uq2IPDaZ2Jd1ks.roa (hash: Fo46CBCFKZszIDa+exG/2GR8P/sXWsoYlOaHRAWOGNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f6:ab:f3:a8:ff:35:ee:6a:35:41:ba:1a:44:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Validity
Not Before: Jun 28 18:00:48 2025 GMT
Not After : Jun 29 18:00:48 2025 GMT
Subject: CN=c165b7a9bf3f9d71411eb41310524a49372a39d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:6c:0c:3c:39:b9:4d:01:79:4f:1b:ba:6e:
c1:9f:88:07:88:b5:3d:da:c8:e7:b8:d6:85:6a:1d:
b4:2a:fe:d9:af:60:d0:87:63:f8:56:fe:dd:fa:01:
0c:c8:b3:b8:a4:22:c3:d3:68:9f:17:90:b9:2c:17:
3c:3d:0d:0b:b4:57:d4:96:26:34:c5:8b:02:85:07:
fa:83:97:cb:d9:ef:fa:55:d7:fc:e8:2b:88:d0:0e:
96:52:b7:e9:33:c5:29:91:f5:cb:56:22:3b:3d:4c:
c2:de:91:eb:e5:ba:6f:e4:13:65:4a:60:fb:33:fd:
c0:cc:c9:1a:a6:56:e1:57:cb:16:7a:75:6d:e9:3f:
53:93:00:cd:ad:6c:64:43:ef:69:90:ec:65:69:54:
24:5e:f0:df:83:5e:2d:4d:24:cb:e7:67:34:2e:50:
d4:62:37:82:f5:f5:67:c0:ad:84:1b:95:3c:66:02:
e1:c8:49:7b:86:6c:79:29:63:52:8b:73:e0:a1:67:
6b:35:13:11:fc:27:b1:de:75:56:38:6d:12:5d:02:
e5:51:a1:ec:bd:57:30:8a:26:0b:45:4c:55:4a:04:
68:3f:a1:a6:cb:a5:ba:37:27:74:46:c0:34:f8:5f:
34:e0:77:32:1c:b3:b8:a2:b8:cd:63:12:34:49:a9:
a5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:65:B7:A9:BF:3F:9D:71:41:1E:B4:13:10:52:4A:49:37:2A:39:D9
X509v3 Authority Key Identifier:
keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1b:f7:64:f4:6f:e1:ac:19:46:9a:29:1e:90:79:11:3e:c3:
60:d6:ec:7c:0b:6b:47:e6:5b:56:26:81:ef:bd:84:64:8c:15:
75:48:e3:fe:d2:f1:6d:24:ab:90:b7:5d:ea:9a:23:3b:78:1d:
f0:21:90:f4:83:fc:53:d4:a0:cb:11:70:7d:3c:45:f9:5c:00:
31:02:4f:1a:fd:70:ef:66:32:e3:34:f3:73:4d:fe:3e:0f:c4:
1c:6d:f9:c7:20:07:6c:9d:9b:8b:c1:b5:29:93:79:13:fb:de:
be:a7:5b:8b:31:a7:87:b7:fc:ff:1d:8e:66:da:7c:14:25:3a:
95:39:46:d2:18:10:84:f3:22:da:7f:a8:26:69:a4:eb:1b:b6:
0e:5a:0f:38:9c:44:3a:b8:e1:69:1e:64:3d:ef:52:76:bb:61:
88:3e:05:e4:b6:f1:92:f3:64:78:5c:54:d2:dc:52:fe:49:79:
44:3c:7d:ef:ae:16:cf:f8:89:15:98:35:10:5b:7e:7b:ea:80:
aa:24:a6:de:05:25:15:8f:2d:9f:c8:6e:c9:f2:9c:f6:d6:fa:
e6:12:8c:be:c5:54:61:9d:2b:0e:bc:97:7c:d7:83:98:5f:44:
61:d1:94:97:31:fe:84:94:20:18:20:42:af:c2:25:98:a8:90:
0b:bc:f8:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3svar86j/Ne5qNUG6GkRNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZjg3OTFkYzNhYTZmZWEzMjhhNWUxMzkwY2UyNmU5ODJk
ZjM3MmQwHhcNMjUwNjI4MTgwMDQ4WhcNMjUwNjI5MTgwMDQ4WjAzMTEwLwYDVQQD
EyhjMTY1YjdhOWJmM2Y5ZDcxNDExZWI0MTMxMDUyNGE0OTM3MmEzOWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ9sDDw5uU0BeU8bum7Bn4gHiLU9
2sjnuNaFah20Kv7Zr2DQh2P4Vv7d+gEMyLO4pCLD02ifF5C5LBc8PQ0LtFfUliY0
xYsChQf6g5fL2e/6Vdf86CuI0A6WUrfpM8UpkfXLViI7PUzC3pHr5bpv5BNlSmD7
M/3AzMkaplbhV8sWenVt6T9TkwDNrWxkQ+9pkOxlaVQkXvDfg14tTSTL52c0LlDU
YjeC9fVnwK2EG5U8ZgLhyEl7hmx5KWNSi3PgoWdrNRMR/Cex3nVWOG0SXQLlUaHs
vVcwiiYLRUxVSgRoP6Gmy6W6Nyd0RsA0+F804HcyHLO4orjNYxI0SamljQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFlt6m/P51xQR60ExBSSkk3KjnZMB8GA1UdIwQY
MBaAFB74eR3Dqm/qMopeE5DOJumC3zctMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lMTc4MTMtMTg0NS00ZmYyLWI5NWEt
ODMzZWU5Y2IzOTgwLzEvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lMTc4MTMtMTg0NS00ZmYyLWI5NWEtODMzZWU5Y2IzOTgw
LzEvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBv3ZPRv
4awZRpopHpB5ET7DYNbsfAtrR+ZbViaB772EZIwVdUjj/tLxbSSrkLdd6pojO3gd
8CGQ9IP8U9SgyxFwfTxF+VwAMQJPGv1w72Yy4zTzc03+Pg/EHG35xyAHbJ2bi8G1
KZN5E/vevqdbizGnh7f8/x2OZtp8FCU6lTlG0hgQhPMi2n+oJmmk6xu2DloPOJxE
OrjhaR5kPe9SdrthiD4F5LbxkvNkeFxU0txS/kl5RDx9764Wz/iJFZg1EFt+e+qA
qiSm3gUlFY8tn8huyfKc9tb65hKMvsVUYZ0rDryXfNeDmF9EYdGUlzH+hJQgGCBC
r8IlmKiQC7z4Hw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:42 2025 by rpki-client