Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
File: HW2cywJxWEmzoey800toh_ZJlA8.mft (raw, json)
Hash identifier: g7j/xnc8tqFcO7GlHXwZVa+iIIyoP8VVOyFwTdkQMQM=
Subject key identifier: D2:BB:1E:72:9A:0D:A3:88:CF:19:2A:D7:59:B8:3A:61:85:B3:AE:63
Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
Certificate issuer: /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Certificate serial: 0198D54E39773F61BCE31DBBD152369197C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
Manifest number: 12DE
Signing time: Sat 23 Aug 2025 05:02:10 +0000
Manifest this update: Sat 23 Aug 2025 05:02:10 +0000
Manifest next update: Sun 24 Aug 2025 05:02:10 +0000
Files and hashes: 1: HW2cywJxWEmzoey800toh_ZJlA8.crl (hash: zhScglFuUTXRl+dwKASa2C+2v/t87uHgfXQUNTKK8v0=)
2: z8_8mqLcOJtNw1DMnUMLdxcYTMM.roa (hash: 9R0oeP72aK5DRkFYUsVyQ3Stx8OTGpY7qc7OKrRI9JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:39:77:3f:61:bc:e3:1d:bb:d1:52:36:91:97:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Validity
Not Before: Aug 23 05:02:10 2025 GMT
Not After : Aug 24 05:02:10 2025 GMT
Subject: CN=d2bb1e729a0da388cf192ad759b83a6185b3ae63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:14:0b:14:42:9d:87:14:64:08:6e:c7:66:
91:f2:70:ae:53:3e:4a:41:aa:be:3c:ae:63:ad:41:
86:97:4b:30:18:50:7f:67:54:2b:85:ac:44:db:b0:
71:c9:49:8c:e4:62:89:41:ed:d4:1e:ae:9b:9c:e7:
96:e4:17:6e:74:b1:f6:86:ef:29:2c:d7:80:be:a5:
0d:d0:5c:f6:c6:da:cd:5d:41:97:72:da:8a:0e:2a:
e9:0d:66:f2:81:51:0f:03:7c:21:d8:07:ae:be:15:
92:c5:73:3b:17:e5:5d:29:79:d8:8c:0d:9c:3f:ca:
99:85:60:fd:a9:11:13:3e:53:f8:01:68:3b:ba:18:
f7:7f:58:a6:7b:8b:9f:f0:83:88:ce:96:a8:dc:c6:
91:e4:5a:fb:8d:0c:83:6c:75:46:38:17:75:40:46:
a3:fc:1a:31:c7:e4:42:56:c3:8a:7b:93:3f:d1:19:
20:ac:fe:43:7a:ac:06:6c:1d:90:c0:f8:dc:fd:90:
fe:a5:e0:f5:9e:92:3d:ae:06:9c:d2:57:4c:5a:22:
06:6c:4a:31:1a:92:3b:92:26:08:e0:dc:a6:6d:7b:
44:92:18:0c:36:93:a5:67:e1:67:f4:96:ec:38:eb:
06:52:ab:92:96:b3:9b:b8:5b:46:ec:e2:aa:7f:68:
fd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BB:1E:72:9A:0D:A3:88:CF:19:2A:D7:59:B8:3A:61:85:B3:AE:63
X509v3 Authority Key Identifier:
keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fe:b2:28:b6:c9:fb:84:cd:1c:a1:f6:15:85:0b:8e:eb:9e:
da:54:92:3c:5c:b7:cf:b8:b2:c2:ec:63:5c:de:db:92:9e:57:
28:5b:c2:76:d7:f2:87:40:b0:21:f9:1e:c2:64:27:a9:6c:a4:
58:e7:75:95:63:d0:cf:ce:fd:0f:31:4b:a7:ae:17:03:72:2c:
0c:52:4e:b7:cb:4c:76:83:6d:e4:fb:7c:c5:79:fc:5d:07:e7:
37:1a:10:46:a4:c5:2e:db:70:7f:b7:10:8f:d6:93:97:28:c2:
cc:ed:8a:3c:9b:25:bc:f7:fe:57:1f:29:52:7a:62:70:9a:83:
97:88:23:fc:8e:2a:31:3a:aa:e0:f3:a5:cf:7e:ad:5e:44:dc:
1b:b0:c1:c4:49:f0:90:fc:6c:1b:2c:ba:27:b4:cb:bd:7c:de:
27:25:d6:fa:91:e6:1e:e9:5d:92:02:21:b9:b8:66:a1:1c:13:
24:fd:3e:52:b8:11:e0:00:2c:7e:77:65:31:ca:7b:a4:88:ba:
0a:48:bd:66:0c:ee:eb:67:e2:fc:56:05:e1:82:c3:f5:f0:25:
b7:47:58:0f:03:f5:01:e5:55:db:f7:80:2c:db:74:eb:6a:8c:
ad:28:29:b5:43:fe:72:16:0f:ae:7e:3d:1d:59:f3:4c:07:37:
57:3e:a1:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTjl3P2G84x270VI2kZfCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNmQ5Y2NiMDI3MTU4NDliM2ExZWNiY2QzNGI2ODg3ZjY0
OTk0MGYwHhcNMjUwODIzMDUwMjEwWhcNMjUwODI0MDUwMjEwWjAzMTEwLwYDVQQD
EyhkMmJiMWU3MjlhMGRhMzg4Y2YxOTJhZDc1OWI4M2E2MTg1YjNhZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur4UCxRCnYcUZAhux2aR8nCuUz5K
Qaq+PK5jrUGGl0swGFB/Z1QrhaxE27BxyUmM5GKJQe3UHq6bnOeW5BdudLH2hu8p
LNeAvqUN0Fz2xtrNXUGXctqKDirpDWbygVEPA3wh2AeuvhWSxXM7F+VdKXnYjA2c
P8qZhWD9qRETPlP4AWg7uhj3f1ime4uf8IOIzpao3MaR5Fr7jQyDbHVGOBd1QEaj
/Boxx+RCVsOKe5M/0RkgrP5DeqwGbB2QwPjc/ZD+peD1npI9rgac0ldMWiIGbEox
GpI7kiYI4NymbXtEkhgMNpOlZ+Fn9JbsOOsGUquSlrObuFtG7OKqf2j90QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNK7HnKaDaOIzxkq11m4OmGFs65jMB8GA1UdIwQY
MBaAFB1tnMsCcVhJs6HsvNNLaIf2SZQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wZWY2ZGUtYjNmMS00NDMwLThiNDkt
MTE0ZmZjMjBmOWFhLzEvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8wZWY2ZGUtYjNmMS00NDMwLThiNDktMTE0ZmZjMjBmOWFh
LzEvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdP6yKLbJ
+4TNHKH2FYULjuue2lSSPFy3z7iywuxjXN7bkp5XKFvCdtfyh0CwIfkewmQnqWyk
WOd1lWPQz879DzFLp64XA3IsDFJOt8tMdoNt5Pt8xXn8XQfnNxoQRqTFLttwf7cQ
j9aTlyjCzO2KPJslvPf+Vx8pUnpicJqDl4gj/I4qMTqq4POlz36tXkTcG7DBxEnw
kPxsGyy6J7TLvXzeJyXW+pHmHuldkgIhubhmoRwTJP0+UrgR4AAsfndlMcp7pIi6
Cki9Zgzu62fi/FYF4YLD9fAlt0dYDwP1AeVV2/eALNt062qMrSgptUP+chYPrn49
HVnzTAc3Vz6hHg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:37 2025 by rpki-client