Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
File: HRUAB3Kzw_orvXcn09OJORoUYz4.mft (raw, json)
Hash identifier: gKixM0ou40sydJ/rxaNaA6PgaSWibaaq1UwjcLTaSZo=
Subject key identifier: 54:4E:BE:F8:C2:3A:B8:26:3F:41:C5:5D:45:07:5E:A9:E9:49:38:3A
Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Certificate serial: 0197CCBAA6921402F62403F572CECA4392F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
Manifest number: 03E0
Signing time: Wed 02 Jul 2025 20:01:13 +0000
Manifest this update: Wed 02 Jul 2025 20:01:13 +0000
Manifest next update: Thu 03 Jul 2025 20:01:13 +0000
Files and hashes: 1: 94kIYfqeFgknlBrr_TOvpCgSdqU.roa (hash: 81jYnPOJR+qUf9stNF6tQ8TBm+nuWM6vD4G5gF21A04=)
2: HRUAB3Kzw_orvXcn09OJORoUYz4.crl (hash: 0+vXvLQ1dTPvdDv99siYhKU+LSbltXdr7OgXSMlvmVU=)
3: l4DfAejnNf8QL8LGIhGHT7CKlPg.roa (hash: UVDw7ayj2zIkMp75EMvrYNj0kdy6A1Nen9DvYGACBW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:a6:92:14:02:f6:24:03:f5:72:ce:ca:43:92:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Validity
Not Before: Jul 2 20:01:13 2025 GMT
Not After : Jul 3 20:01:13 2025 GMT
Subject: CN=544ebef8c23ab8263f41c55d45075ea9e949383a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:71:7f:c6:9d:61:94:29:e9:87:d5:25:27:
91:7a:9e:9d:d6:27:06:95:c0:e0:b3:31:11:6a:dd:
f9:a0:6b:4e:54:ef:bd:00:c5:e3:8a:f3:8f:8e:01:
9c:5c:a6:f6:57:a5:6c:6a:e7:3a:ae:bc:1b:87:04:
5e:85:76:eb:e3:61:5d:30:9b:e0:54:a1:24:71:68:
c1:a5:27:e7:d0:b4:99:e1:f7:7a:a4:91:59:f3:b4:
eb:c8:88:7e:3b:c7:96:54:23:fc:2b:63:22:cd:2a:
ad:a5:f1:53:af:7b:5e:16:12:4e:21:51:64:49:e5:
6d:64:3f:92:52:85:1d:aa:2d:9b:9f:38:8c:ae:81:
a3:d9:4f:dc:13:88:fe:79:e4:0a:82:f2:47:bf:b4:
9e:8e:ad:60:85:ee:fa:ac:9a:d2:58:47:53:4b:7c:
17:e9:92:2a:7a:17:89:6e:b1:3d:20:d8:fb:3c:67:
75:98:74:f2:0e:06:31:2d:7c:42:04:ba:5e:05:73:
a6:3c:63:af:39:79:22:0a:8d:5a:29:ad:ce:80:0e:
05:0f:87:bf:0c:9b:a2:7f:2a:1e:0e:77:64:05:82:
cb:f2:74:65:b0:c1:dc:93:db:fb:37:3d:fb:2b:06:
9f:10:e9:1a:01:5c:9a:f5:5e:fc:37:e9:7a:34:d3:
48:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4E:BE:F8:C2:3A:B8:26:3F:41:C5:5D:45:07:5E:A9:E9:49:38:3A
X509v3 Authority Key Identifier:
keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:05:e3:ab:99:78:17:23:8e:36:d0:9d:69:fa:6b:b7:3d:2a:
fe:fb:0a:0c:f8:e6:99:2f:07:d3:b0:f0:82:c5:2b:c6:f4:a5:
16:08:81:f7:f3:3f:08:f2:d2:48:70:dc:48:66:4b:72:3c:b8:
bb:87:d5:30:5e:92:7f:13:ba:f1:4f:b5:d8:1d:8a:dd:bc:d5:
39:b7:dc:1e:b8:b6:65:68:a0:62:d3:07:b4:28:53:d2:22:cc:
8a:11:eb:a2:5f:1e:91:4a:f2:ae:d9:1d:aa:a2:06:a2:1b:e1:
45:ea:3b:5e:f0:f0:b3:df:8a:23:9c:c3:67:a0:8c:b9:de:72:
1a:bd:0d:45:4a:fc:a9:56:51:e2:3e:bb:e1:2a:0e:e9:69:dd:
55:d9:7e:df:9a:03:d5:58:26:a0:f8:c0:da:25:f4:6a:94:c1:
c9:43:55:5c:43:c9:a6:6c:18:53:55:01:3b:f4:a9:79:19:71:
0b:4e:d4:0b:8d:f7:41:cf:01:9b:11:b7:4d:15:e9:fa:08:96:
89:39:17:7e:2a:02:91:73:ef:f5:86:db:be:aa:1c:37:3d:2a:
65:29:a3:ea:68:9d:9c:53:c0:80:b8:f2:d0:63:27:70:de:51:
54:75:40:40:44:50:4e:ec:f1:89:c8:92:51:14:12:ae:22:4d:
17:d1:3b:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMuqaSFAL2JAP1cs7KQ5L3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMTUwMDA3NzJiM2MzZmEyYmJkNzcyN2QzZDM4OTM5MWEx
NDYzM2UwHhcNMjUwNzAyMjAwMTEzWhcNMjUwNzAzMjAwMTEzWjAzMTEwLwYDVQQD
Eyg1NDRlYmVmOGMyM2FiODI2M2Y0MWM1NWQ0NTA3NWVhOWU5NDkzODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNhxf8adYZQp6YfVJSeRep6d1icG
lcDgszERat35oGtOVO+9AMXjivOPjgGcXKb2V6Vsauc6rrwbhwRehXbr42FdMJvg
VKEkcWjBpSfn0LSZ4fd6pJFZ87TryIh+O8eWVCP8K2MizSqtpfFTr3teFhJOIVFk
SeVtZD+SUoUdqi2bnziMroGj2U/cE4j+eeQKgvJHv7Sejq1ghe76rJrSWEdTS3wX
6ZIqeheJbrE9INj7PGd1mHTyDgYxLXxCBLpeBXOmPGOvOXkiCo1aKa3OgA4FD4e/
DJuifyoeDndkBYLL8nRlsMHck9v7Nz37KwafEOkaAVya9V78N+l6NNNIWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFROvvjCOrgmP0HFXUUHXqnpSTg6MB8GA1UdIwQY
MBaAFB0VAAdys8P6K713J9PTiTkaFGM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jZDY0NzgtY2VmNi00YTcwLWI0ODgt
YjIxMjlmYjRjYTVhLzEvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9jZDY0NzgtY2VmNi00YTcwLWI0ODgtYjIxMjlmYjRjYTVh
LzEvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAXjq5l4
FyOONtCdafprtz0q/vsKDPjmmS8H07DwgsUrxvSlFgiB9/M/CPLSSHDcSGZLcjy4
u4fVMF6SfxO68U+12B2K3bzVObfcHri2ZWigYtMHtChT0iLMihHrol8ekUryrtkd
qqIGohvhReo7XvDws9+KI5zDZ6CMud5yGr0NRUr8qVZR4j674SoO6WndVdl+35oD
1VgmoPjA2iX0apTByUNVXEPJpmwYU1UBO/SpeRlxC07UC433Qc8BmxG3TRXp+giW
iTkXfioCkXPv9YbbvqocNz0qZSmj6midnFPAgLjy0GMncN5RVHVAQERQTuzxiciS
URQSriJNF9E71Q==
-----END CERTIFICATE-----
Generated at Thu Jul 3 00:23:54 2025 by rpki-client