Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
File: HTJVXGHT0inixKIzfXX6U_bysrw.mft (raw, json)
Hash identifier: t++S99EZ8pHTrvOClAjKVu+CI17/FXyiPbXCLugGWMw=
Subject key identifier: 3E:82:4B:95:B9:5F:D5:27:28:D9:DF:A6:65:2D:23:DB:4A:DF:45:23
Authority key identifier: 1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
Certificate issuer: /CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Certificate serial: 0197B6A0AB80F1DC9DB15F7C0F949BD64686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
Manifest number: 0494
Signing time: Sat 28 Jun 2025 13:01:12 +0000
Manifest this update: Sat 28 Jun 2025 13:01:12 +0000
Manifest next update: Sun 29 Jun 2025 13:01:12 +0000
Files and hashes: 1: HTJVXGHT0inixKIzfXX6U_bysrw.crl (hash: 09HUndE3lVSr84vFfLM5wruwgqN4rI+9n2jQN8BoXIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ab:80:f1:dc:9d:b1:5f:7c:0f:94:9b:d6:46:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Validity
Not Before: Jun 28 13:01:12 2025 GMT
Not After : Jun 29 13:01:12 2025 GMT
Subject: CN=3e824b95b95fd52728d9dfa6652d23db4adf4523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:fa:21:f3:e7:6e:c6:3e:d4:c4:69:83:c9:
a6:a1:91:74:a6:f2:2b:ac:31:91:b7:60:84:a0:a3:
d9:b2:16:33:0b:86:2a:a9:de:b4:10:f8:05:59:7b:
0e:38:b3:95:2f:89:da:c4:45:e5:df:fa:46:c4:5c:
12:f5:64:35:2a:c8:25:d6:7c:55:fb:60:db:ef:e6:
cf:03:fd:c4:81:2e:63:05:ae:8a:9a:d6:39:42:cd:
34:1a:47:04:6a:a4:60:92:f1:99:97:83:f3:62:5b:
12:62:e7:72:c4:b6:9e:db:06:21:5f:2e:b1:ee:8e:
c4:c3:06:0e:8f:88:5b:ac:a1:03:84:fd:e7:db:20:
ea:3e:f1:fc:5e:62:e2:e2:69:92:b4:0f:cb:1d:40:
eb:36:59:3e:98:db:7b:7d:3e:c0:bf:13:1b:b7:da:
8c:c4:15:be:c3:40:b3:1d:8d:3f:04:64:ba:3c:55:
2c:83:04:22:7a:90:fe:bb:f6:b8:4d:64:9d:18:2b:
23:b7:7b:bc:67:19:f7:ca:a9:d0:69:92:5e:c1:21:
b3:4f:3d:61:03:82:dc:02:c4:53:fc:fe:c3:6d:66:
5b:ab:c8:cb:a9:1d:4f:ae:49:f5:16:3c:c9:3a:13:
cd:88:22:28:9d:d5:b6:05:1d:1f:6b:cf:f9:38:43:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:82:4B:95:B9:5F:D5:27:28:D9:DF:A6:65:2D:23:DB:4A:DF:45:23
X509v3 Authority Key Identifier:
keyid:1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:12:46:92:24:c7:38:52:52:9b:07:5e:48:34:55:97:95:92:
e8:a0:1f:2b:c9:3b:d9:6d:bb:9f:18:f1:53:a9:84:d9:1a:1f:
04:0e:b1:55:2a:2f:ee:09:3f:5a:66:4a:19:5f:4b:17:0a:b3:
0c:bf:21:d2:6d:ae:43:1d:60:54:c9:33:2f:93:d2:bb:26:7d:
ae:d3:28:09:cd:a5:11:29:cc:78:8e:1e:64:6c:c0:20:9b:a1:
4c:05:ab:7e:c2:f8:eb:49:4c:39:17:c2:5d:05:ca:61:b3:ba:
a7:89:3e:aa:ac:8d:1e:81:3a:2a:f6:d6:30:a8:c6:ec:62:20:
39:f0:4b:5d:07:1c:ab:24:ce:b5:b0:45:a1:a5:a7:13:b3:3d:
66:a3:0e:f0:58:f6:91:2a:4e:83:4c:91:52:c0:ce:04:a1:16:
eb:73:9e:02:50:eb:ea:04:c7:81:2c:3c:14:ed:70:f4:d7:4c:
a4:06:89:46:21:41:98:d3:e8:23:27:6c:2f:91:27:05:db:bf:
96:38:00:9e:09:cb:f1:88:47:39:63:c2:e6:14:04:09:49:33:
0d:bf:3e:11:46:8b:bf:bc:37:4d:60:5b:a1:ac:c0:1f:7e:7b:
6f:d7:2b:f2:55:12:b0:fe:2f:a1:71:d5:de:cd:9f:39:50:f0:
45:5a:65:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oKuA8dydsV98D5Sb1kaGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMzI1NTVjNjFkM2QyMjllMmM0YTIzMzdkNzVmYTUzZjZm
MmIyYmMwHhcNMjUwNjI4MTMwMTEyWhcNMjUwNjI5MTMwMTEyWjAzMTEwLwYDVQQD
EygzZTgyNGI5NWI5NWZkNTI3MjhkOWRmYTY2NTJkMjNkYjRhZGY0NTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy76IfPnbsY+1MRpg8mmoZF0pvIr
rDGRt2CEoKPZshYzC4Yqqd60EPgFWXsOOLOVL4naxEXl3/pGxFwS9WQ1Ksgl1nxV
+2Db7+bPA/3EgS5jBa6KmtY5Qs00GkcEaqRgkvGZl4PzYlsSYudyxLae2wYhXy6x
7o7EwwYOj4hbrKEDhP3n2yDqPvH8XmLi4mmStA/LHUDrNlk+mNt7fT7AvxMbt9qM
xBW+w0CzHY0/BGS6PFUsgwQiepD+u/a4TWSdGCsjt3u8Zxn3yqnQaZJewSGzTz1h
A4LcAsRT/P7DbWZbq8jLqR1Prkn1FjzJOhPNiCIondW2BR0fa8/5OEOkjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6CS5W5X9UnKNnfpmUtI9tK30UjMB8GA1UdIwQY
MBaAFB0yVVxh09Ip4sSiM311+lP28rK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFRKVlhHSFQwaW5peEtJemZYWDZVX2J5c3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NDYxZDItMzc2YS00NDIwLWE5MjAt
YTc5ZjlmZWVmMDBhLzEvSFRKVlhHSFQwaW5peEtJemZYWDZVX2J5c3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83NDYxZDItMzc2YS00NDIwLWE5MjAtYTc5ZjlmZWVmMDBh
LzEvSFRKVlhHSFQwaW5peEtJemZYWDZVX2J5c3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBJGkiTH
OFJSmwdeSDRVl5WS6KAfK8k72W27nxjxU6mE2RofBA6xVSov7gk/WmZKGV9LFwqz
DL8h0m2uQx1gVMkzL5PSuyZ9rtMoCc2lESnMeI4eZGzAIJuhTAWrfsL460lMORfC
XQXKYbO6p4k+qqyNHoE6KvbWMKjG7GIgOfBLXQccqyTOtbBFoaWnE7M9ZqMO8Fj2
kSpOg0yRUsDOBKEW63OeAlDr6gTHgSw8FO1w9NdMpAaJRiFBmNPoIydsL5EnBdu/
ljgAngnL8YhHOWPC5hQECUkzDb8+EUaLv7w3TWBboazAH357b9cr8lUSsP4voXHV
3s2fOVDwRVploQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:38 2025 by rpki-client