Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
File: hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json)
Hash identifier: cpLE9HmvD7wQrzMXyAYA8ALDY8X5j90FOSmUhhXHMWA=
Subject key identifier: C3:D8:58:C7:A1:00:1A:1A:D6:80:DD:82:83:A6:2B:E2:22:03:5D:69
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial: 0198D65FFD09C74237C9CF9190CDFEE42772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
Manifest number: 120C
Signing time: Sat 23 Aug 2025 10:01:11 +0000
Manifest this update: Sat 23 Aug 2025 10:01:11 +0000
Manifest next update: Sun 24 Aug 2025 10:01:11 +0000
Files and hashes: 1: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: nKJHjhYpTUSQ6eWFNhwWxKDThOzP3Y574YH/H0uLDFI=)
2: nUJoZVEyJ7Ch6Htt7Gy_l4EGdUs.roa (hash: DEXI+dom+CuVEOOs+wIFSM6Zic3MADgfCsnWrZCTC3o=)
3: obW6OP_TwhwF5onkjJQKoKfjNUI.roa (hash: l/D/ppG7tJiDZNB6ndliGGQdEPYg23vbQP0qpyOUO3E=)
4: zTErCzfeAqe_qlccgZ6Xz2BpNCc.roa (hash: 9mx99kal+/jXSa14TzN46OzBllqi4wkCOsaAScYXF7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:fd:09:c7:42:37:c9:cf:91:90:cd:fe:e4:27:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
Validity
Not Before: Aug 23 10:01:11 2025 GMT
Not After : Aug 24 10:01:11 2025 GMT
Subject: CN=c3d858c7a1001a1ad680dd8283a62be222035d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:93:e8:68:9b:33:bd:14:a5:93:28:25:7f:
1a:6f:2c:b6:3c:8d:94:33:3c:89:eb:23:7d:2b:63:
48:37:5f:3a:5e:c6:9c:ce:8e:a9:2c:19:82:a4:b8:
cf:f1:be:be:e4:cd:48:e1:2a:bb:77:f2:14:5f:c6:
24:a7:dd:a4:0d:88:c4:26:f2:26:a6:f9:d5:6c:67:
27:94:64:42:bd:7d:53:5d:d0:0f:e2:52:bd:11:e3:
52:a1:3d:07:f0:d6:d0:70:b8:46:83:0c:5c:93:e2:
2a:27:eb:95:d8:9b:06:f0:f2:ac:12:df:e3:00:48:
41:a5:ca:8d:af:a9:5b:90:27:39:f7:9b:33:25:6a:
1b:e6:56:28:3a:6a:11:c3:a6:02:5c:ca:77:a2:94:
1c:6d:6e:e4:70:37:2e:4f:cb:e7:b2:52:84:f5:2f:
17:b8:6a:29:99:57:e0:f0:ba:61:50:8f:b6:32:3d:
49:81:65:3d:1f:bb:88:cf:ff:86:c7:ac:22:65:b2:
84:0e:6c:57:56:35:f4:e0:b3:25:1d:54:e2:1b:d5:
ed:b5:01:56:da:91:20:9b:f2:2b:f2:b5:f0:c3:dc:
9a:ba:f0:07:2f:36:aa:f8:86:8a:3c:ae:8f:d3:c0:
e2:d3:6b:b8:90:16:4b:d6:b5:5a:8a:be:d4:ef:da:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D8:58:C7:A1:00:1A:1A:D6:80:DD:82:83:A6:2B:E2:22:03:5D:69
X509v3 Authority Key Identifier:
keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4d:af:f7:9a:2b:9b:5c:74:12:c1:c7:fe:e5:56:31:33:78:
bc:68:23:45:e5:99:8e:54:ff:16:1e:53:6f:3a:1c:a8:45:8b:
c7:69:c9:e6:d3:7b:0a:df:54:cf:e0:98:11:12:32:d7:d7:d7:
03:73:49:6b:71:e3:84:11:3d:6b:ed:62:a5:c8:31:ae:49:1b:
b8:1f:ef:37:23:c6:71:8b:f5:01:a5:15:e9:fd:88:fb:e3:6a:
94:00:9c:35:ea:51:93:b1:cb:65:40:c0:f0:21:75:90:22:bc:
46:7b:7d:a1:6a:8c:20:1c:00:b1:f5:04:c7:d0:9c:8f:a3:4b:
0a:ac:38:d6:35:13:ba:1b:48:68:0a:fb:f0:14:54:ab:e4:73:
7b:07:83:d3:9a:db:de:3e:11:39:c7:e8:6f:6f:f3:ff:af:10:
56:31:9f:ae:ca:80:8f:3e:e3:4d:7d:98:22:38:3e:30:eb:07:
e7:76:d4:7b:8c:5b:e3:6f:38:42:64:42:47:ce:47:c5:5f:dd:
d4:45:f2:3d:71:91:00:d5:ea:e1:71:45:9f:a3:8f:e6:ef:ee:
a2:25:20:c1:56:b1:c8:69:5d:86:a3:87:c4:30:a5:68:76:ec:
7f:36:02:ef:0b:5f:3a:3f:b1:db:66:31:d2:9a:ca:ac:b1:d7:
88:60:68:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX/0Jx0I3yc+RkM3+5CdyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MDVjMDcxOTJhODEwNmZlZGIwNzYwYjg5NDUwMzJjYTFk
MzA1NGIwHhcNMjUwODIzMTAwMTExWhcNMjUwODI0MTAwMTExWjAzMTEwLwYDVQQD
EyhjM2Q4NThjN2ExMDAxYTFhZDY4MGRkODI4M2E2MmJlMjIyMDM1ZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WaT6GibM70UpZMoJX8abyy2PI2U
MzyJ6yN9K2NIN186Xsaczo6pLBmCpLjP8b6+5M1I4Sq7d/IUX8Ykp92kDYjEJvIm
pvnVbGcnlGRCvX1TXdAP4lK9EeNSoT0H8NbQcLhGgwxck+IqJ+uV2JsG8PKsEt/j
AEhBpcqNr6lbkCc595szJWob5lYoOmoRw6YCXMp3opQcbW7kcDcuT8vnslKE9S8X
uGopmVfg8LphUI+2Mj1JgWU9H7uIz/+Gx6wiZbKEDmxXVjX04LMlHVTiG9XttQFW
2pEgm/Ir8rXww9yauvAHLzaq+IaKPK6P08Di02u4kBZL1rVair7U79r8/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPYWMehABoa1oDdgoOmK+IiA11pMB8GA1UdIwQY
MBaAFIQFwHGSqBBv7bB2C4lFAyyh0wVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNjE1YjAtNGQ5OC00YTNkLThiZDIt
NGM5M2JlZTI3ZDU0LzEvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mNjE1YjAtNGQ5OC00YTNkLThiZDItNGM5M2JlZTI3ZDU0
LzEvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVU2v95or
m1x0EsHH/uVWMTN4vGgjReWZjlT/Fh5TbzocqEWLx2nJ5tN7Ct9Uz+CYERIy19fX
A3NJa3HjhBE9a+1ipcgxrkkbuB/vNyPGcYv1AaUV6f2I++NqlACcNepRk7HLZUDA
8CF1kCK8Rnt9oWqMIBwAsfUEx9Ccj6NLCqw41jUTuhtIaAr78BRUq+RzeweD05rb
3j4ROcfob2/z/68QVjGfrsqAjz7jTX2YIjg+MOsH53bUe4xb4284QmRCR85HxV/d
1EXyPXGRANXq4XFFn6OP5u/uoiUgwVaxyGldhqOHxDClaHbsfzYC7wtfOj+x22Yx
0prKrLHXiGBobg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:25 2025 by rpki-client