Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: yCV856OSM305h4UAcfNJm2Ij4PdAdqJCxh4J6K1WBMc=
Subject key identifier: D9:7D:09:AF:EE:19:57:AB:7B:BE:72:75:C5:47:DE:B8:C5:ED:8B:A3
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 0198D5F142E91A94D82EB77D94B10B6CD374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 0B0D
Signing time: Sat 23 Aug 2025 08:00:14 +0000
Manifest this update: Sat 23 Aug 2025 08:00:14 +0000
Manifest next update: Sun 24 Aug 2025 08:00:14 +0000
Files and hashes: 1: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: NNUhQvtKRqbqD8uwVNgySKgf/YMIaejMvsLJ/iw7whI=)
2: IGa7QfhbXaDsGCT9xJOI5gdu6yw.roa (hash: X0y8/lBS1BHPwzQ2lfqfjmgEWEXvXO2MftnVLJbE6FY=)
3: VwEoUNw-ez0MhDo9hKLki2sD7x8.roa (hash: hJNorU0BhP7KaHlsAZlKF465rhSAsAGROKIAje3NnsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:42:e9:1a:94:d8:2e:b7:7d:94:b1:0b:6c:d3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: Aug 23 08:00:14 2025 GMT
Not After : Aug 24 08:00:14 2025 GMT
Subject: CN=d97d09afee1957ab7bbe7275c547deb8c5ed8ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:4c:5c:f3:af:13:27:29:fb:0c:17:02:15:
7b:ce:1b:45:cf:e6:fc:98:62:c0:67:3e:db:6b:8e:
ab:88:74:0f:10:57:1a:e7:4d:40:f5:11:78:da:2d:
32:75:bd:50:c0:54:d4:70:14:79:44:24:da:05:24:
d9:11:9d:d4:72:12:14:95:4a:0d:48:e3:10:e1:7b:
45:31:89:30:a8:13:3a:03:40:23:91:b1:97:e5:d7:
36:ed:89:78:33:41:29:cf:04:c3:81:16:b3:4c:54:
4b:ad:95:e7:72:f1:ce:5e:be:0a:06:84:81:22:87:
c6:9b:a4:6c:d0:0c:1d:25:09:6d:b4:88:9d:1a:e4:
3b:59:63:bb:74:a5:47:ba:a7:df:f7:9d:6d:28:27:
d6:95:a5:c9:e1:50:38:e9:a0:b5:31:30:99:6c:a1:
77:09:9b:94:26:d7:cc:6c:b5:7d:b5:1e:66:37:e9:
59:e5:31:78:e7:5a:0b:42:8b:4d:4e:d4:66:a2:77:
b6:97:96:3f:08:d5:7a:e6:87:e2:f2:a2:3c:cc:37:
03:21:2a:71:e9:a0:64:41:2a:e9:07:77:4d:2e:1c:
28:1b:de:31:8c:ad:62:2f:70:9f:a3:05:4f:c9:be:
c1:6b:1a:e6:c5:f8:ac:11:20:00:69:dd:a2:a6:83:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7D:09:AF:EE:19:57:AB:7B:BE:72:75:C5:47:DE:B8:C5:ED:8B:A3
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:88:da:8d:e4:b6:dd:3c:b3:d8:cc:64:ad:e2:81:e2:2c:55:
86:6a:07:d1:6b:1c:84:f3:68:6e:33:d7:c2:52:b2:e3:ff:a8:
db:84:de:e8:ae:41:1c:60:88:fe:0d:fd:6e:38:02:1c:71:7e:
ca:bd:d0:af:3f:5b:2c:e0:15:08:33:9e:7d:dc:0f:10:f1:b7:
a2:ee:c9:6b:23:a3:ef:02:39:54:44:60:c4:7e:29:57:a4:f5:
8e:ff:53:1a:0c:ca:13:2d:df:5b:38:7f:af:f7:53:ed:99:4a:
0e:07:26:8f:7f:71:6e:7e:fe:36:dc:50:20:3c:be:42:05:49:
7f:73:74:57:61:28:a1:8c:c9:6d:39:b8:1a:3a:26:9f:b6:7a:
ec:40:06:ab:73:45:97:e9:82:da:35:19:b4:2e:bb:98:bc:90:
1e:9d:64:a4:c8:70:64:ae:a5:b9:9b:79:26:66:d9:ad:63:38:
45:cb:b1:a8:6a:00:be:ed:bd:e6:d5:cb:3e:78:6d:7f:dc:9e:
65:8a:6f:c2:96:7d:ef:7e:87:36:ba:29:3b:bb:ed:ee:bf:ce:
06:ca:77:a1:4b:19:50:17:da:a7:9b:f2:49:aa:01:4d:ee:30:
d4:7d:1f:c9:18:86:38:64:fe:a7:aa:e2:f4:17:b2:b0:f1:7f:
0b:c7:c2:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8ULpGpTYLrd9lLELbNN0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlN2IyZTI0M2Y4YWE5NTQ1OTc5MzJiY2RjZDlhZjY1NjBk
Y2U1MTYwHhcNMjUwODIzMDgwMDE0WhcNMjUwODI0MDgwMDE0WjAzMTEwLwYDVQQD
EyhkOTdkMDlhZmVlMTk1N2FiN2JiZTcyNzVjNTQ3ZGViOGM1ZWQ4YmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMlMXPOvEycp+wwXAhV7zhtFz+b8
mGLAZz7ba46riHQPEFca501A9RF42i0ydb1QwFTUcBR5RCTaBSTZEZ3UchIUlUoN
SOMQ4XtFMYkwqBM6A0AjkbGX5dc27Yl4M0EpzwTDgRazTFRLrZXncvHOXr4KBoSB
IofGm6Rs0AwdJQlttIidGuQ7WWO7dKVHuqff951tKCfWlaXJ4VA46aC1MTCZbKF3
CZuUJtfMbLV9tR5mN+lZ5TF451oLQotNTtRmone2l5Y/CNV65ofi8qI8zDcDISpx
6aBkQSrpB3dNLhwoG94xjK1iL3CfowVPyb7BaxrmxfisESAAad2ipoOdSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNl9Ca/uGVere75ydcVH3rjF7YujMB8GA1UdIwQY
MBaAFB57LiQ/iqlUWXkyvNzZr2Vg3OUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMt
ZDU0OTU1NjQzY2Q5LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMtZDU0OTU1NjQzY2Q5
LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4jajeS2
3Tyz2MxkreKB4ixVhmoH0WschPNobjPXwlKy4/+o24Te6K5BHGCI/g39bjgCHHF+
yr3Qrz9bLOAVCDOefdwPEPG3ou7JayOj7wI5VERgxH4pV6T1jv9TGgzKEy3fWzh/
r/dT7ZlKDgcmj39xbn7+NtxQIDy+QgVJf3N0V2EooYzJbTm4Gjomn7Z67EAGq3NF
l+mC2jUZtC67mLyQHp1kpMhwZK6luZt5JmbZrWM4RcuxqGoAvu295tXLPnhtf9ye
ZYpvwpZ9736HNropO7vt7r/OBsp3oUsZUBfap5vySaoBTe4w1H0fyRiGOGT+p6ri
9BeysPF/C8fChw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:56 2025 by rpki-client