Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
File: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft (raw, json)
Hash identifier: TGyc1FehzMhXxq+tIbPMe63zdvrvGNKE1jeVJ/GwJ/s=
Subject key identifier: 60:23:1D:6E:BF:34:FF:30:1D:FC:21:8C:1C:72:64:1A:45:24:C0:10
Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
Certificate issuer: /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Certificate serial: 0198D58403F904ECD9D6E892EF7CF9C44426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:55 +0000
Manifest this update: Sat 23 Aug 2025 06:00:55 +0000
Manifest next update: Sun 24 Aug 2025 06:00:55 +0000
Files and hashes: 1: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl (hash: 1Wxw3Zewe5Wfp69tr/sFPhKRv4MNTZ2cIiBEhC5A5pI=)
2: iEKvPS8SPLhC7hkJanIn7-E66Ko.roa (hash: uTaTvTMzaWdAm9ayVhgfeDfN1emMfvXMmA8i6uXhGqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:84:03:f9:04:ec:d9:d6:e8:92:ef:7c:f9:c4:44:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Validity
Not Before: Aug 23 06:00:55 2025 GMT
Not After : Aug 24 06:00:55 2025 GMT
Subject: CN=60231d6ebf34ff301dfc218c1c72641a4524c010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:f0:0f:9b:9f:6c:35:b7:cc:21:c1:85:5d:
0a:0d:e6:d7:88:a9:29:8e:a1:c6:89:2f:57:b5:c7:
dd:74:75:a3:61:a5:75:11:26:38:3d:67:c4:22:67:
32:7a:8b:00:2c:ea:82:09:6e:33:dc:df:51:88:fb:
c7:a5:ff:5a:6d:cc:f3:c4:47:0e:c2:84:6e:89:8d:
16:28:07:2d:41:8b:7b:40:34:43:db:81:41:1e:e5:
c8:0b:d0:ef:a1:47:d9:51:5b:e3:e7:16:cb:4c:0e:
58:c7:e6:e2:7d:1e:82:b0:90:98:3f:66:1f:a4:c4:
0d:10:29:59:0f:4e:49:ca:1d:15:a2:73:21:cc:c4:
0a:0b:21:e1:45:83:ab:3e:57:ab:32:83:46:85:ce:
d9:14:d5:78:0b:82:21:d4:3e:90:be:d5:c0:68:0a:
39:2d:ae:6f:60:02:18:f6:1f:3f:b7:8f:43:2c:78:
88:95:f3:4d:ea:42:88:13:ae:1d:fb:d5:25:b5:e1:
0e:00:b1:72:3f:27:20:84:3c:78:78:fc:70:0a:64:
2d:f5:b7:cf:a0:88:be:e2:9a:04:49:fa:71:71:a5:
86:d0:0e:e2:d8:97:b9:e1:cb:98:9d:ac:a3:08:b6:
5a:18:e6:c6:6e:90:4c:43:af:c6:c9:dc:2f:bb:8d:
75:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:23:1D:6E:BF:34:FF:30:1D:FC:21:8C:1C:72:64:1A:45:24:C0:10
X509v3 Authority Key Identifier:
keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:71:5b:91:5f:45:5d:cb:63:b5:b1:04:14:4a:43:1a:b8:0e:
7a:2e:89:f3:5b:e3:0f:db:f3:1c:b4:b9:be:90:82:6a:aa:fb:
aa:73:09:fc:ea:cc:c0:3a:14:a9:17:0b:25:70:81:eb:0e:5f:
21:f1:6c:ab:d1:5c:9c:12:4e:97:72:d2:66:29:8e:6c:a4:34:
fb:58:24:c2:40:b5:b8:cd:a3:53:73:58:e3:3b:4d:d3:8d:8d:
f4:2c:aa:5c:23:01:b3:ad:e0:50:2f:4b:a4:07:46:d5:c9:a7:
41:98:63:4a:dc:a9:ce:04:43:a1:b1:5e:99:3e:66:7a:18:30:
93:63:75:6f:af:a9:de:62:03:9d:80:97:02:5f:64:e9:16:ab:
70:42:07:37:10:22:a4:45:15:eb:6b:48:2b:a5:71:ea:1f:7f:
3f:18:33:71:f2:27:c7:e7:56:f4:0d:ec:4a:7a:53:fb:a2:a1:
c4:bd:67:65:86:c0:36:bd:32:1d:0c:fd:fe:a3:58:e9:8f:ae:
56:58:ca:93:85:05:34:ae:c0:e2:81:12:f6:92:5c:ec:55:06:
a2:ab:de:27:42:8c:62:40:41:34:95:f5:2d:17:32:b1:13:f2:
0e:23:b7:96:c6:14:bf:dc:f6:9b:ad:34:87:cd:21:ae:9f:0d:
54:58:a9:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVhAP5BOzZ1uiS73z5xEQmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0Yjg3YWY1MzM0YzVjNDUxNDFiNjY3NWE5ZWQ0NmU1N2I3
OTc2YWMwHhcNMjUwODIzMDYwMDU1WhcNMjUwODI0MDYwMDU1WjAzMTEwLwYDVQQD
Eyg2MDIzMWQ2ZWJmMzRmZjMwMWRmYzIxOGMxYzcyNjQxYTQ1MjRjMDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20rwD5ufbDW3zCHBhV0KDebXiKkp
jqHGiS9XtcfddHWjYaV1ESY4PWfEImcyeosALOqCCW4z3N9RiPvHpf9abczzxEcO
woRuiY0WKActQYt7QDRD24FBHuXIC9DvoUfZUVvj5xbLTA5Yx+bifR6CsJCYP2Yf
pMQNEClZD05Jyh0VonMhzMQKCyHhRYOrPlerMoNGhc7ZFNV4C4Ih1D6QvtXAaAo5
La5vYAIY9h8/t49DLHiIlfNN6kKIE64d+9UlteEOALFyPycghDx4ePxwCmQt9bfP
oIi+4poESfpxcaWG0A7i2Je54cuYnayjCLZaGObGbpBMQ6/Gydwvu411AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAjHW6/NP8wHfwhjBxyZBpFJMAQMB8GA1UdIwQY
MBaAFIS4evUzTFxFFBtmdantRuV7eXasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iN2JhYzMtZjYyZC00MTQyLWFmM2Mt
MmU5ODRmYmZmOGIxLzEvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iN2JhYzMtZjYyZC00MTQyLWFmM2MtMmU5ODRmYmZmOGIx
LzEvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnFbkV9F
XctjtbEEFEpDGrgOei6J81vjD9vzHLS5vpCCaqr7qnMJ/OrMwDoUqRcLJXCB6w5f
IfFsq9FcnBJOl3LSZimObKQ0+1gkwkC1uM2jU3NY4ztN042N9CyqXCMBs63gUC9L
pAdG1cmnQZhjStypzgRDobFemT5mehgwk2N1b6+p3mIDnYCXAl9k6RarcEIHNxAi
pEUV62tIK6Vx6h9/PxgzcfInx+dW9A3sSnpT+6KhxL1nZYbANr0yHQz9/qNY6Y+u
VljKk4UFNK7A4oES9pJc7FUGoqveJ0KMYkBBNJX1LRcysRPyDiO3lsYUv9z2m600
h80hrp8NVFipwQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:17:26 2025 by rpki-client