Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
File: HCz1cnHCuPBLqn5jqbgQPVID1_g.mft (raw, json)
Hash identifier: j2QkrNkyKckB5n9nfUoQo8X6z1liMHVhmWd0biZo92s=
Subject key identifier: D9:C5:5C:B0:D3:B0:B7:E0:B3:D8:79:0C:BD:28:06:65:C3:42:D3:5A
Authority key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
Certificate issuer: /CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Certificate serial: 0198D4A7A9FBE8C700F0643BBB329F504496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
Manifest number: 0EA4
Signing time: Sat 23 Aug 2025 02:00:14 +0000
Manifest this update: Sat 23 Aug 2025 02:00:14 +0000
Manifest next update: Sun 24 Aug 2025 02:00:14 +0000
Files and hashes: 1: HCz1cnHCuPBLqn5jqbgQPVID1_g.crl (hash: xNBG5RgY3Idv8tnFzOgEle677lMSjestkou7Fg+E/BQ=)
2: vH3uZ08iyiY8zb-A3dRrracn6LQ.roa (hash: zmUAFJf99C5ECEtVBxVkr25oo8bxiW5B47UWFtDZGZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a9:fb:e8:c7:00:f0:64:3b:bb:32:9f:50:44:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Validity
Not Before: Aug 23 02:00:14 2025 GMT
Not After : Aug 24 02:00:14 2025 GMT
Subject: CN=d9c55cb0d3b0b7e0b3d8790cbd280665c342d35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:61:67:40:82:3c:71:c0:54:a9:90:bf:3c:43:
4c:86:17:9f:c1:06:9d:65:ea:e9:76:33:6b:77:ac:
88:03:75:d8:f8:c9:d7:0c:4e:8d:76:09:ba:04:96:
22:d3:98:ce:13:58:e0:dc:f9:7e:98:a5:de:26:92:
1e:00:1a:84:31:96:23:16:d5:5f:e6:db:67:b6:7d:
c5:cc:86:5b:d7:e8:ca:70:db:ba:d3:2c:c9:82:51:
98:da:75:d7:29:b1:1d:7b:ff:7e:ca:8b:4b:a2:1b:
0f:af:e0:0e:ac:86:a1:4c:88:44:56:e4:bb:ba:f4:
cf:0f:b7:8e:3a:c8:6e:9a:3a:65:8a:aa:d2:5c:83:
89:82:21:9b:29:8e:6c:bb:98:6d:18:26:97:ac:e9:
0c:c8:dd:d9:fc:fd:68:8d:60:a6:57:f2:6b:8e:4d:
44:7b:ef:b1:a5:67:ff:f6:d2:0c:36:40:ab:5d:a2:
e0:b3:cd:db:46:3f:32:69:ac:ce:03:2b:5a:65:60:
0f:a8:2c:41:7d:21:d3:33:e8:ed:7b:be:9b:a3:4a:
48:41:a6:84:66:54:68:be:82:f0:f4:df:c3:cd:59:
d7:e5:11:95:ee:97:59:0e:56:1d:a9:68:1d:0c:24:
03:84:3f:24:0f:a2:0c:0a:56:c6:d7:7a:67:65:67:
b2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C5:5C:B0:D3:B0:B7:E0:B3:D8:79:0C:BD:28:06:65:C3:42:D3:5A
X509v3 Authority Key Identifier:
keyid:1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f6:86:4e:35:15:3f:3a:c5:e5:31:1e:dd:fd:09:8b:85:7b:
cb:1b:5c:4f:38:9d:48:e2:da:ce:c7:ff:a1:8f:54:a7:4b:7c:
49:cf:aa:29:71:59:ec:58:ac:bb:b0:2c:29:c8:97:d9:4f:cc:
cd:b5:f7:a0:69:72:06:06:ba:22:4b:5c:fd:bd:98:c1:18:8d:
d1:55:0e:80:76:93:87:a9:69:dd:21:6a:a1:af:43:ca:64:9e:
65:d7:d1:09:71:9e:d9:bc:24:dd:d9:d5:39:e9:07:26:d8:4f:
58:f8:44:06:aa:e9:f4:8e:d2:6c:00:5e:de:82:e2:0a:3c:6f:
e2:d7:33:87:72:fb:fc:e9:85:65:4e:b9:0c:fb:82:96:48:b3:
23:34:31:b2:45:52:4f:f6:dd:d1:a6:fe:39:48:ba:fe:4e:46:
ba:c6:54:15:49:bb:fa:d4:9e:51:36:1d:8a:2f:9d:d5:6c:97:
f7:8e:a3:c2:e4:ec:09:1a:ff:c7:88:8a:80:72:d0:7c:fe:0e:
bb:70:4d:62:e0:79:29:e3:ba:a8:25:12:39:38:c7:63:d0:ad:
1b:30:d1:0f:f4:a9:e6:c7:23:f7:a6:ae:b3:fa:31:47:a0:3c:
a3:f8:5d:d4:c8:0e:fc:15:ef:72:c1:9e:8d:9c:f4:3c:1f:c8:
e1:fd:73:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp6n76McA8GQ7uzKfUESWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmNmNTcyNzFjMmI4ZjA0YmFhN2U2M2E5YjgxMDNkNTIw
M2Q3ZjgwHhcNMjUwODIzMDIwMDE0WhcNMjUwODI0MDIwMDE0WjAzMTEwLwYDVQQD
EyhkOWM1NWNiMGQzYjBiN2UwYjNkODc5MGNiZDI4MDY2NWMzNDJkMzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22FnQII8ccBUqZC/PENMhhefwQad
ZerpdjNrd6yIA3XY+MnXDE6Ndgm6BJYi05jOE1jg3Pl+mKXeJpIeABqEMZYjFtVf
5ttntn3FzIZb1+jKcNu60yzJglGY2nXXKbEde/9+yotLohsPr+AOrIahTIhEVuS7
uvTPD7eOOshumjpliqrSXIOJgiGbKY5su5htGCaXrOkMyN3Z/P1ojWCmV/Jrjk1E
e++xpWf/9tIMNkCrXaLgs83bRj8yaazOAytaZWAPqCxBfSHTM+jte76bo0pIQaaE
ZlRovoLw9N/DzVnX5RGV7pdZDlYdqWgdDCQDhD8kD6IMClbG13pnZWeyHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnFXLDTsLfgs9h5DL0oBmXDQtNaMB8GA1UdIwQY
MBaAFBws9XJxwrjwS6p+Y6m4ED1SA9f4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEN6MWNuSEN1UEJMcW41anFiZ1FQVklEMV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81YWJjOTItZjU1YS00NTQ4LTlhMDAt
NWI0NTM2YTc5ZTgyLzEvSEN6MWNuSEN1UEJMcW41anFiZ1FQVklEMV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy81YWJjOTItZjU1YS00NTQ4LTlhMDAtNWI0NTM2YTc5ZTgy
LzEvSEN6MWNuSEN1UEJMcW41anFiZ1FQVklEMV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvaGTjUV
PzrF5TEe3f0Ji4V7yxtcTzidSOLazsf/oY9Up0t8Sc+qKXFZ7Fisu7AsKciX2U/M
zbX3oGlyBga6Iktc/b2YwRiN0VUOgHaTh6lp3SFqoa9DymSeZdfRCXGe2bwk3dnV
OekHJthPWPhEBqrp9I7SbABe3oLiCjxv4tczh3L7/OmFZU65DPuClkizIzQxskVS
T/bd0ab+OUi6/k5GusZUFUm7+tSeUTYdii+d1WyX946jwuTsCRr/x4iKgHLQfP4O
u3BNYuB5KeO6qCUSOTjHY9CtGzDRD/Sp5scj96aus/oxR6A8o/hd1MgO/BXvcsGe
jZz0PB/I4f1zWQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:08 2025 by rpki-client