Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
File: hcNSXWi2ERZWThbh3U5WywNcnIU.mft (raw, json)
Hash identifier: dsBkCVsS9oUdw8FHd+PTPuJ5Rc2TsD1rQg8Vqi0RXi4=
Subject key identifier: DA:C2:17:98:B2:55:6A:53:EC:9C:AF:76:30:D2:F9:7E:45:B3:91:C6
Authority key identifier: 85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
Certificate issuer: /CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Certificate serial: 0198D5F1C869683DF7C667D7EE60F8C34619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 08:00:49 +0000
Manifest this update: Sat 23 Aug 2025 08:00:49 +0000
Manifest next update: Sun 24 Aug 2025 08:00:49 +0000
Files and hashes: 1: hEPXQgU_4RM48GU6YHvdaeu2Uew.roa (hash: Y8wvnBW02yBGPfnw7ReZF8CB9IAoGOhz+Y/sJITIMzc=)
2: hcNSXWi2ERZWThbh3U5WywNcnIU.crl (hash: rLOS2KJN9XETvbdxVzhnsNNj8xpiqN3kdYW6b4yvM5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c8:69:68:3d:f7:c6:67:d7:ee:60:f8:c3:46:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Validity
Not Before: Aug 23 08:00:49 2025 GMT
Not After : Aug 24 08:00:49 2025 GMT
Subject: CN=dac21798b2556a53ec9caf7630d2f97e45b391c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:a0:2d:57:d6:37:bc:69:15:dc:50:b2:e1:
61:74:8b:2c:5f:65:15:1d:cc:74:4b:65:1a:41:58:
97:ed:18:6e:4a:0c:d2:e6:ed:b1:a7:92:ff:27:50:
71:b2:29:00:ed:27:17:e2:68:4f:d6:b3:8d:90:fa:
96:54:a6:3f:cb:6e:fd:9a:c6:7f:fe:97:1a:96:70:
19:bd:db:16:4f:25:43:04:76:6c:39:9d:36:00:d8:
63:45:3b:50:f1:0b:4c:68:2b:0a:d5:9d:60:d6:d9:
2e:22:b4:9f:51:50:61:cc:b9:24:15:97:1c:05:12:
61:d6:dc:82:09:00:c4:6d:c7:47:89:53:1d:47:22:
60:27:e7:15:ac:8b:02:91:8c:e8:8e:15:54:77:5b:
5c:6e:5d:02:d3:68:da:1d:fe:8f:dd:cf:41:7c:17:
a9:19:a6:85:80:08:97:a4:e8:3e:c2:9d:fc:6c:48:
11:59:03:e4:94:8d:4c:5b:d4:d9:ed:5f:5a:ce:b8:
a2:00:c1:fb:5e:9e:8d:ef:de:d0:75:c0:59:90:9f:
52:28:ce:c0:0e:b3:6e:b6:58:69:80:d2:1a:dd:20:
57:9e:85:84:b8:28:9d:b8:3f:95:ca:7c:de:d2:ad:
61:f7:d8:6e:35:53:e4:30:44:b9:73:1a:7a:ab:e6:
59:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C2:17:98:B2:55:6A:53:EC:9C:AF:76:30:D2:F9:7E:45:B3:91:C6
X509v3 Authority Key Identifier:
keyid:85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5a:4b:32:fe:ef:68:f1:2b:35:67:9f:3e:b1:c7:b5:50:2c:
cd:07:d2:cb:82:93:73:36:25:80:e6:a7:0a:83:00:45:67:c3:
bb:11:a4:86:00:fa:75:38:e5:f6:e7:70:55:c6:99:cc:ea:af:
c3:1f:ee:3a:9f:20:da:81:6d:1b:59:cc:93:89:eb:85:1c:2b:
43:10:20:05:08:40:02:62:9d:0e:94:7e:58:26:27:0c:7e:ef:
23:b3:1f:8d:48:ff:94:50:7f:b1:46:d2:e2:91:fd:2d:42:71:
a1:82:1c:8e:1e:59:ea:70:f6:70:0b:93:3b:3c:b3:fe:aa:dc:
1c:6d:01:68:cc:ba:de:2e:5a:e6:62:5d:4d:12:6d:aa:e3:84:
cc:0a:d9:45:3a:e6:ba:18:09:0b:51:94:2c:f4:71:20:67:d9:
16:53:7f:06:9c:17:00:29:a6:ec:c3:3c:18:6f:66:b8:4e:54:
41:6c:de:68:64:28:d1:d5:96:5c:05:cb:e2:28:80:32:9c:eb:
0c:45:bb:eb:c8:7b:4f:b4:a7:2f:01:28:a1:5a:96:05:19:9f:
c7:1a:ea:80:30:aa:c9:68:44:48:e8:67:31:20:00:91:63:43:
ce:a9:ec:fd:40:38:95:f7:43:c7:f3:16:e2:e7:d2:e7:6b:9b:
d6:7f:59:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8chpaD33xmfX7mD4w0YZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YzM1MjVkNjhiNjExMTY1NjRlMTZlMWRkNGU1NmNiMDM1
YzljODUwHhcNMjUwODIzMDgwMDQ5WhcNMjUwODI0MDgwMDQ5WjAzMTEwLwYDVQQD
EyhkYWMyMTc5OGIyNTU2YTUzZWM5Y2FmNzYzMGQyZjk3ZTQ1YjM5MWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYagLVfWN7xpFdxQsuFhdIssX2UV
Hcx0S2UaQViX7RhuSgzS5u2xp5L/J1BxsikA7ScX4mhP1rONkPqWVKY/y279msZ/
/pcalnAZvdsWTyVDBHZsOZ02ANhjRTtQ8QtMaCsK1Z1g1tkuIrSfUVBhzLkkFZcc
BRJh1tyCCQDEbcdHiVMdRyJgJ+cVrIsCkYzojhVUd1tcbl0C02jaHf6P3c9BfBep
GaaFgAiXpOg+wp38bEgRWQPklI1MW9TZ7V9azriiAMH7Xp6N797QdcBZkJ9SKM7A
DrNutlhpgNIa3SBXnoWEuCiduD+Vynze0q1h99huNVPkMES5cxp6q+ZZ2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrCF5iyVWpT7JyvdjDS+X5Fs5HGMB8GA1UdIwQY
MBaAFIXDUl1othEWVk4W4d1OVssDXJyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGNOU1hXaTJFUlpXVGhiaDNVNVd5d05jbklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85ZmJlYzEtZWJkMi00MWJhLTgzZDkt
Njk0ZGJmYWRkYjhmLzEvaGNOU1hXaTJFUlpXVGhiaDNVNVd5d05jbklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi85ZmJlYzEtZWJkMi00MWJhLTgzZDktNjk0ZGJmYWRkYjhm
LzEvaGNOU1hXaTJFUlpXVGhiaDNVNVd5d05jbklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVpLMv7v
aPErNWefPrHHtVAszQfSy4KTczYlgOanCoMARWfDuxGkhgD6dTjl9udwVcaZzOqv
wx/uOp8g2oFtG1nMk4nrhRwrQxAgBQhAAmKdDpR+WCYnDH7vI7MfjUj/lFB/sUbS
4pH9LUJxoYIcjh5Z6nD2cAuTOzyz/qrcHG0BaMy63i5a5mJdTRJtquOEzArZRTrm
uhgJC1GULPRxIGfZFlN/BpwXACmm7MM8GG9muE5UQWzeaGQo0dWWXAXL4iiAMpzr
DEW768h7T7SnLwEooVqWBRmfxxrqgDCqyWhESOhnMSAAkWNDzqns/UA4lfdDx/MW
4ufS52ub1n9ZtA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:41 2025 by rpki-client