Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
File: HjmCheIngn2PLFHx6plzV1VL5hI.mft (raw, json)
Hash identifier: J1UwYt2/M3eER+VP3vBJ+wyYZpuXWp32Alx5kMemhkE=
Subject key identifier: A7:BA:81:05:7A:DD:E2:D5:CC:64:C1:47:77:AC:8D:02:2E:BA:6D:AD
Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
Certificate issuer: /CN=1e398285e227827d8f2c51f1ea997357554be612
Certificate serial: 0198D4A7FA8237BE72B9F2B4AF1AA258E2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 02:00:34 +0000
Manifest this update: Sat 23 Aug 2025 02:00:34 +0000
Manifest next update: Sun 24 Aug 2025 02:00:34 +0000
Files and hashes: 1: HjmCheIngn2PLFHx6plzV1VL5hI.crl (hash: MyWmolVQfKW0LnAxaQbVrQ6vJ6/5k+b5VM5cUVA49UI=)
2: gq0u0nuGqZ56yv0huU0NYxq2Tuw.roa (hash: BWs37rngd3jbS0e8ne6CGjqZDK9zmWcTutRQQlknGKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:fa:82:37:be:72:b9:f2:b4:af:1a:a2:58:e2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612
Validity
Not Before: Aug 23 02:00:34 2025 GMT
Not After : Aug 24 02:00:34 2025 GMT
Subject: CN=a7ba81057adde2d5cc64c14777ac8d022eba6dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b2:dd:bd:6a:7d:ae:d0:a0:de:c3:12:5b:af:
4f:25:ec:e6:d3:9b:18:ab:36:02:ec:78:2e:be:83:
8d:4a:2e:b8:13:84:39:92:6d:3b:4b:33:42:65:d0:
69:d9:8a:c8:05:4c:7b:cb:fc:02:af:37:ea:91:5f:
13:27:06:d2:d0:a5:5c:02:c3:0f:99:3e:35:16:69:
55:7a:4d:0b:19:5c:5a:d6:8a:08:dc:04:b6:fb:08:
a0:ab:75:94:57:0c:64:44:80:81:27:29:1b:8a:9d:
58:fb:46:af:85:ac:f2:09:a8:8f:ee:9a:ef:70:0e:
7e:c8:4a:23:e8:62:99:2b:1a:91:23:ff:67:99:98:
e8:21:24:2b:18:dd:c5:65:42:59:90:ca:d4:0a:1b:
05:3c:b0:85:35:19:db:d5:79:da:d9:91:e0:b9:9e:
8b:65:1a:66:dd:6a:d9:5a:92:99:4b:1a:56:25:22:
bc:cf:b9:6b:a7:e3:dc:99:24:83:85:88:4d:e9:17:
1d:8c:bc:eb:16:7a:66:18:c2:89:a5:a5:c0:00:85:
de:74:49:dd:a2:06:3a:0a:ef:ff:99:f0:e9:cf:5d:
40:27:dc:3b:02:c3:37:be:ad:96:82:35:40:aa:9e:
ea:86:a9:22:92:79:e2:78:f6:81:0c:1f:e0:4e:3f:
72:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BA:81:05:7A:DD:E2:D5:CC:64:C1:47:77:AC:8D:02:2E:BA:6D:AD
X509v3 Authority Key Identifier:
keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:78:27:f6:08:4d:9e:e9:d6:20:b1:3b:45:43:a8:8e:6c:c8:
69:1d:d6:ca:f8:75:ac:50:2f:25:3b:64:4d:c5:99:3f:84:0a:
ea:17:5d:0d:af:dc:be:d8:dc:a3:20:50:2f:d7:b7:87:39:b3:
a9:09:1f:f6:ea:0a:9d:de:b4:8c:fa:e1:12:e0:db:17:c9:04:
b3:42:52:28:ba:e5:11:2a:a8:7d:e5:43:f3:06:4e:6a:fd:0d:
aa:85:a2:47:e3:f1:ad:8d:4c:f2:3d:a7:11:cf:9a:6c:9c:b7:
ff:55:3d:7e:f2:6f:00:d2:ba:e0:4b:2a:47:67:3f:ad:69:82:
5f:e2:34:b1:ba:fb:3c:80:d2:bb:2b:cb:21:92:67:83:5b:85:
56:c9:92:df:7d:08:72:31:0d:03:a7:a2:c4:5b:0c:8d:2d:bf:
a8:57:08:3e:c3:e1:ce:1a:e2:a4:a0:ca:e6:65:99:10:00:4d:
67:8f:b1:85:02:2b:47:db:9a:c1:d8:ae:d5:02:2b:6f:af:a1:
bf:62:8a:7b:79:b7:7b:87:80:4e:59:22:db:a6:f8:69:21:06:
e2:9c:23:44:16:b4:a0:1e:22:fa:f2:d9:ab:3a:22:8f:86:70:
40:d0:e3:f6:59:27:19:37:40:5b:c0:cd:60:bb:4f:2d:44:60:
27:ae:35:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp/qCN75yufK0rxqiWOKyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMzk4Mjg1ZTIyNzgyN2Q4ZjJjNTFmMWVhOTk3MzU3NTU0
YmU2MTIwHhcNMjUwODIzMDIwMDM0WhcNMjUwODI0MDIwMDM0WjAzMTEwLwYDVQQD
EyhhN2JhODEwNTdhZGRlMmQ1Y2M2NGMxNDc3N2FjOGQwMjJlYmE2ZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LLdvWp9rtCg3sMSW69PJezm05sY
qzYC7HguvoONSi64E4Q5km07SzNCZdBp2YrIBUx7y/wCrzfqkV8TJwbS0KVcAsMP
mT41FmlVek0LGVxa1ooI3AS2+wigq3WUVwxkRICBJykbip1Y+0avhazyCaiP7prv
cA5+yEoj6GKZKxqRI/9nmZjoISQrGN3FZUJZkMrUChsFPLCFNRnb1Xna2ZHguZ6L
ZRpm3WrZWpKZSxpWJSK8z7lrp+PcmSSDhYhN6RcdjLzrFnpmGMKJpaXAAIXedEnd
ogY6Cu//mfDpz11AJ9w7AsM3vq2WgjVAqp7qhqkiknniePaBDB/gTj9y2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKe6gQV63eLVzGTBR3esjQIuum2tMB8GA1UdIwQY
MBaAFB45goXiJ4J9jyxR8eqZc1dVS+YSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zMDk5ODAtYWZkNy00NTY5LWEyNWIt
ZTkwOWU0MWEwN2U1LzEvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8zMDk5ODAtYWZkNy00NTY5LWEyNWItZTkwOWU0MWEwN2U1
LzEvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHgn9ghN
nunWILE7RUOojmzIaR3Wyvh1rFAvJTtkTcWZP4QK6hddDa/cvtjcoyBQL9e3hzmz
qQkf9uoKnd60jPrhEuDbF8kEs0JSKLrlESqofeVD8wZOav0NqoWiR+PxrY1M8j2n
Ec+abJy3/1U9fvJvANK64EsqR2c/rWmCX+I0sbr7PIDSuyvLIZJng1uFVsmS330I
cjENA6eixFsMjS2/qFcIPsPhzhripKDK5mWZEABNZ4+xhQIrR9uawdiu1QIrb6+h
v2KKe3m3e4eATlki26b4aSEG4pwjRBa0oB4i+vLZqzoij4ZwQNDj9lknGTdAW8DN
YLtPLURgJ641Sw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:28 2025 by rpki-client