Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
File: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft (raw, json)
Hash identifier: gNZqh+oZbgCrm9QA8VSa1zSBt/510I/fKJ/v7o84dy0=
Subject key identifier: B2:29:C1:0C:99:62:75:E1:AC:4F:FC:AD:41:44:07:55:D5:C5:9E:69
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Certificate issuer: /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial: 0198D5F195DA3F0BB689EA1503B4578D66BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
Manifest number: 0CF2
Signing time: Sat 23 Aug 2025 08:00:36 +0000
Manifest this update: Sat 23 Aug 2025 08:00:36 +0000
Manifest next update: Sun 24 Aug 2025 08:00:36 +0000
Files and hashes: 1: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl (hash: sXlErRHEvr+Mdo9DyNJeAULhPV57IRDzRdbdipu+jB4=)
2: Z51tk-_RA8tS0qKG579XKDThD1k.roa (hash: jrw3DdxxDeKhPMS6oVcqpTg9EmGuyht4s1KNeKcKW/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:95:da:3f:0b:b6:89:ea:15:03:b4:57:8d:66:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Validity
Not Before: Aug 23 08:00:36 2025 GMT
Not After : Aug 24 08:00:36 2025 GMT
Subject: CN=b229c10c996275e1ac4ffcad41440755d5c59e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:5c:80:56:d3:3b:57:01:f1:7b:16:29:9d:
70:25:53:c1:94:d5:d0:ca:43:c9:9b:cd:84:1d:94:
a1:03:90:cc:c0:7d:4e:47:73:7e:2f:6d:46:62:04:
1f:70:d2:f1:5c:64:6a:62:e7:9f:aa:46:89:f1:d7:
0e:8b:ec:7b:2e:5b:d4:4b:91:dd:e4:43:c1:19:35:
6c:5d:80:df:08:a7:35:b6:5f:04:1d:bb:08:22:bc:
43:8c:2a:86:4a:03:7e:5f:5c:72:c2:53:50:2f:1c:
40:86:5e:22:b3:1c:56:b1:33:3a:bc:eb:ca:3d:d0:
b4:ba:01:5e:3d:db:4c:16:11:98:59:2b:70:14:34:
6b:60:22:2d:c5:90:be:17:1c:fc:45:2c:07:32:a8:
c8:2f:ec:c7:c3:a1:c8:b9:25:67:cb:7c:1e:ec:44:
3b:96:2b:4c:f2:7e:db:fc:c4:2f:a7:62:ab:4b:b8:
9c:a4:12:8d:ce:f0:9a:78:50:7d:ac:74:91:7e:6c:
53:4a:d6:23:6b:18:cb:5e:95:59:95:21:24:71:2b:
56:17:46:97:a3:2a:8f:1a:ed:be:28:fc:ea:ad:1a:
be:a3:e8:e3:ec:b4:6f:fc:1a:11:e7:76:c2:4e:e8:
ab:f9:69:55:7e:98:24:db:29:ec:4b:6e:c3:5a:9a:
28:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:29:C1:0C:99:62:75:E1:AC:4F:FC:AD:41:44:07:55:D5:C5:9E:69
X509v3 Authority Key Identifier:
keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:41:21:d5:6b:77:7a:81:c3:f7:67:5e:6f:46:b0:bc:8f:92:
eb:58:e6:d8:20:55:3a:36:db:fc:18:75:d4:61:d5:e8:bd:77:
c8:5e:dd:9f:51:1f:29:5c:93:e1:76:1e:43:e4:e1:6a:5c:ca:
04:4f:55:2f:96:e1:fd:35:2d:a5:b7:a3:0c:84:6c:a2:b6:94:
db:81:4d:d1:52:7c:96:a7:aa:7c:96:d7:00:46:83:55:90:9b:
28:04:b9:82:ae:03:e4:cb:13:44:38:f0:ae:d4:30:65:bf:1f:
84:2d:1f:f1:04:5c:6d:3c:bc:09:39:cf:eb:a7:50:18:4a:ff:
2f:b1:9a:07:be:ad:45:99:86:9c:38:86:ab:c4:c9:44:9e:ed:
63:ac:db:e8:5d:a7:af:7d:70:20:88:c2:16:ef:4c:90:2c:be:
c6:ef:8d:1f:3a:71:2c:ba:4d:d0:5b:9b:88:81:df:6b:0b:c3:
78:42:d0:65:bc:ec:ef:b2:4e:f1:a7:46:66:98:94:41:34:9a:
1d:6e:b9:83:b9:a0:c1:61:05:5f:df:1d:14:8c:50:cd:da:6a:
11:c9:21:9c:2e:7d:38:21:61:b1:29:15:23:c9:8f:3a:c6:6e:
80:cb:8c:26:40:28:3f:0d:55:06:3f:c7:b0:74:19:96:8d:97:
a5:bb:09:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8ZXaPwu2ieoVA7RXjWa6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYjk5YzEyMGVjOTk0ZjNiNzBkYmZjNWUwMTlhMmU4YjE4
N2NkMGMwHhcNMjUwODIzMDgwMDM2WhcNMjUwODI0MDgwMDM2WjAzMTEwLwYDVQQD
EyhiMjI5YzEwYzk5NjI3NWUxYWM0ZmZjYWQ0MTQ0MDc1NWQ1YzU5ZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1hcgFbTO1cB8XsWKZ1wJVPBlNXQ
ykPJm82EHZShA5DMwH1OR3N+L21GYgQfcNLxXGRqYuefqkaJ8dcOi+x7LlvUS5Hd
5EPBGTVsXYDfCKc1tl8EHbsIIrxDjCqGSgN+X1xywlNQLxxAhl4isxxWsTM6vOvK
PdC0ugFePdtMFhGYWStwFDRrYCItxZC+Fxz8RSwHMqjIL+zHw6HIuSVny3we7EQ7
litM8n7b/MQvp2KrS7icpBKNzvCaeFB9rHSRfmxTStYjaxjLXpVZlSEkcStWF0aX
oyqPGu2+KPzqrRq+o+jj7LRv/BoR53bCTuir+WlVfpgk2ynsS27DWpooyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIpwQyZYnXhrE/8rUFEB1XVxZ5pMB8GA1UdIwQY
MBaAFB65nBIOyZTztw2/xeAZouixh80MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHJtY0VnN0psUE8zRGJfRjRCbWk2TEdIelF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MDg0M2UtNjY2My00ZWUxLWIxZjQt
YTliODhmZGFiNjY4LzEvSHJtY0VnN0psUE8zRGJfRjRCbWk2TEdIelF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MDg0M2UtNjY2My00ZWUxLWIxZjQtYTliODhmZGFiNjY4
LzEvSHJtY0VnN0psUE8zRGJfRjRCbWk2TEdIelF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEEh1Wt3
eoHD92deb0awvI+S61jm2CBVOjbb/Bh11GHV6L13yF7dn1EfKVyT4XYeQ+ThalzK
BE9VL5bh/TUtpbejDIRsoraU24FN0VJ8lqeqfJbXAEaDVZCbKAS5gq4D5MsTRDjw
rtQwZb8fhC0f8QRcbTy8CTnP66dQGEr/L7GaB76tRZmGnDiGq8TJRJ7tY6zb6F2n
r31wIIjCFu9MkCy+xu+NHzpxLLpN0FubiIHfawvDeELQZbzs77JO8adGZpiUQTSa
HW65g7mgwWEFX98dFIxQzdpqEckhnC59OCFhsSkVI8mPOsZugMuMJkAoPw1VBj/H
sHQZlo2XpbsJqA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:10 2025 by rpki-client