Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier: hBYvrntvBAbC5NwWkxcGAsdDXd3Iyv7bAeOwTxuskEI=
Subject key identifier: E7:C3:B0:03:20:ED:F9:2E:FC:E2:CC:65:A6:BE:1D:7E:13:F4:DA:AB
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 0198D5F197CB61AD982559F0F4EC4A1FF709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number: 138B
Signing time: Sat 23 Aug 2025 08:00:36 +0000
Manifest this update: Sat 23 Aug 2025 08:00:36 +0000
Manifest next update: Sun 24 Aug 2025 08:00:36 +0000
Files and hashes: 1: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: CzzYKn8iZ4F5A/9Uyfx+r9zh7Xiu2QQU3zDZxycvPA4=)
2: _TB_DSwnuCOKtWool6QsRH-BI2c.roa (hash: IfCRqnm3tSTnJ1oqOSYusfB1IFZQtEWpYBfMbK20Izo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:97:cb:61:ad:98:25:59:f0:f4:ec:4a:1f:f7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Aug 23 08:00:36 2025 GMT
Not After : Aug 24 08:00:36 2025 GMT
Subject: CN=e7c3b00320edf92efce2cc65a6be1d7e13f4daab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:00:0d:c0:8a:7b:7b:a0:58:ca:41:3b:4b:d1:
91:36:b6:48:da:5b:bd:ae:d4:1c:da:5b:02:70:30:
e8:25:fe:2c:7a:8c:c3:1a:dd:45:a0:66:eb:60:29:
eb:f5:07:ef:f1:68:21:c2:9b:15:75:fb:86:af:aa:
94:b9:5f:86:e2:9c:9f:fd:d4:f5:b9:88:49:be:10:
89:4c:65:9b:2d:73:1f:05:8b:dd:9e:8b:b0:3e:fe:
bb:f5:d5:75:16:b6:49:fd:b3:c2:6d:d6:92:35:ac:
c2:1b:96:84:ab:9a:84:34:d5:e4:9a:c9:67:ef:c6:
63:55:ca:82:15:22:15:66:92:ad:33:c9:c4:1b:eb:
e9:eb:e0:a9:c1:52:a5:19:cf:2d:ac:15:3c:76:c8:
e1:bb:25:f3:36:68:5b:f4:b5:f9:1c:e9:e3:42:98:
f9:ab:c0:6f:74:68:35:3f:b1:22:74:67:cd:97:fa:
95:71:a1:eb:df:8c:96:a1:b6:98:55:d6:56:5b:15:
a3:59:ca:1b:c1:c5:e3:3f:38:01:c4:71:33:ed:b5:
ac:d2:01:da:f4:4b:30:ef:f1:b5:ce:0b:d9:02:43:
bb:96:65:2e:9d:ff:39:5c:54:ff:d0:a6:cd:d1:c2:
d8:ae:ab:d4:aa:55:41:12:f2:56:aa:43:5b:c0:53:
af:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C3:B0:03:20:ED:F9:2E:FC:E2:CC:65:A6:BE:1D:7E:13:F4:DA:AB
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ca:72:67:57:c4:32:4d:f7:38:a9:84:08:3c:5a:9e:9f:47:
41:3e:1c:15:de:a3:b6:69:1a:ce:c3:b6:ac:d5:9f:67:91:cf:
53:88:99:5e:ec:dd:8d:1d:48:fc:d1:6a:e5:1a:d7:bd:7b:26:
a5:37:14:2c:a2:12:b5:9f:11:9d:78:c1:d3:3b:62:ef:46:4f:
f8:3a:56:c2:f4:6e:43:45:4c:7a:50:e1:33:1d:40:9c:b7:c6:
a1:b9:d5:86:8e:a9:7b:b6:93:7b:cb:27:a8:3d:6b:bd:16:81:
b3:d7:11:b7:81:a5:c8:93:4c:62:f1:c3:0d:2b:c6:0f:00:d0:
25:35:fc:1a:b4:2a:36:b2:98:39:17:a4:8a:7c:5d:c5:9e:9c:
bd:e8:ff:f1:88:0c:8d:ed:c9:08:27:d0:25:1b:f3:ff:7d:66:
14:2a:69:02:57:62:c6:3b:97:59:aa:00:35:80:e1:76:03:6e:
60:13:47:4a:dc:bb:06:32:2a:6b:4f:17:e1:fd:17:ee:88:18:
32:83:4e:50:aa:38:97:21:73:f8:df:71:92:b3:19:32:3d:14:
8e:9b:8e:18:31:76:47:a0:b0:b3:ce:bc:ad:be:34:a2:d3:64:
ee:ab:58:f4:4b:c9:ea:e5:0a:d0:e1:94:64:e2:59:0a:5e:45:
75:31:08:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8ZfLYa2YJVnw9OxKH/cJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjliY2JkNWNmY2MxOTVlNzZiNzBhMWJmMGRkOTkxZWM3
ZTMzZDQwHhcNMjUwODIzMDgwMDM2WhcNMjUwODI0MDgwMDM2WjAzMTEwLwYDVQQD
EyhlN2MzYjAwMzIwZWRmOTJlZmNlMmNjNjVhNmJlMWQ3ZTEzZjRkYWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gANwIp7e6BYykE7S9GRNrZI2lu9
rtQc2lsCcDDoJf4seozDGt1FoGbrYCnr9Qfv8WghwpsVdfuGr6qUuV+G4pyf/dT1
uYhJvhCJTGWbLXMfBYvdnouwPv679dV1FrZJ/bPCbdaSNazCG5aEq5qENNXkmsln
78ZjVcqCFSIVZpKtM8nEG+vp6+CpwVKlGc8trBU8dsjhuyXzNmhb9LX5HOnjQpj5
q8BvdGg1P7EidGfNl/qVcaHr34yWobaYVdZWWxWjWcobwcXjPzgBxHEz7bWs0gHa
9Esw7/G1zgvZAkO7lmUunf85XFT/0KbN0cLYrqvUqlVBEvJWqkNbwFOvowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfDsAMg7fku/OLMZaa+HX4T9NqrMB8GA1UdIwQY
MBaAFB8pvL1c/MGV52twob8N2ZHsfjPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEt
ZDRkMzVkOTk5ODFkLzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEtZDRkMzVkOTk5ODFk
LzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMpyZ1fE
Mk33OKmECDxanp9HQT4cFd6jtmkazsO2rNWfZ5HPU4iZXuzdjR1I/NFq5RrXvXsm
pTcULKIStZ8RnXjB0zti70ZP+DpWwvRuQ0VMelDhMx1AnLfGobnVho6pe7aTe8sn
qD1rvRaBs9cRt4GlyJNMYvHDDSvGDwDQJTX8GrQqNrKYORekinxdxZ6cvej/8YgM
je3JCCfQJRvz/31mFCppAldixjuXWaoANYDhdgNuYBNHSty7BjIqa08X4f0X7ogY
MoNOUKo4lyFz+N9xkrMZMj0UjpuOGDF2R6Cws868rb40otNk7qtY9EvJ6uUK0OGU
ZOJZCl5FdTEIdw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:22 2025 by rpki-client