Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File: HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier: elBic69I59bLcI+UvQQIR024NWW62XlA8fsTYEdONJ4=
Subject key identifier: B1:07:B1:7E:F0:87:82:73:E7:F4:E4:E9:A7:64:90:6F:8C:62:39:66
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial: 0197B6A1E622252DC435C3BC83E1CAD6E6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:32 +0000
Manifest this update: Sat 28 Jun 2025 13:02:32 +0000
Manifest next update: Sun 29 Jun 2025 13:02:32 +0000
Files and hashes: 1: 2p9UhZ4f1RpCso5_KIEAEmFd_Cs.roa (hash: oRMeyyuTPK9dSZ9MmutE2TkHWIxlWdCs8LlZr1bRdaE=)
2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: 4SH0m81yuj9TzOngYtHW6Eer4Xj9VftkpVyrUUlQbwA=)
3: IJNfARVzI865AIKgN_3yjxJwMgI.roa (hash: fusPL7W50hSr1S5X6R9RazY+w4yFVSYD9+IMtNP9M5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e6:22:25:2d:c4:35:c3:bc:83:e1:ca:d6:e6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Validity
Not Before: Jun 28 13:02:32 2025 GMT
Not After : Jun 29 13:02:32 2025 GMT
Subject: CN=b107b17ef0878273e7f4e4e9a764906f8c623966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:ba:63:f8:f7:71:0c:08:12:ab:09:54:1d:
4c:3b:8d:5d:d5:d6:09:2c:68:9d:a7:70:f0:13:d2:
9c:e5:00:6d:0a:e9:c1:f9:b2:25:88:59:03:68:47:
52:e5:ff:8f:dd:57:93:cf:0f:39:48:88:ed:89:07:
86:93:77:6a:40:47:3a:5b:08:a0:42:1a:50:1a:9e:
a1:eb:1a:0d:73:62:f4:df:2b:60:00:d6:94:f1:8d:
ee:b1:7d:06:fb:2d:c2:bc:db:7a:cd:13:b4:bb:83:
c6:f1:d8:aa:28:a5:80:c5:13:d9:4c:50:65:8e:81:
c6:1d:d2:07:ab:ba:cf:5a:65:a5:1f:3a:93:5c:84:
73:f6:eb:4f:0b:87:cd:f8:58:38:3a:ff:fd:24:8c:
01:77:48:81:47:b5:26:99:66:ed:2d:50:7e:8f:38:
86:52:72:74:7d:1b:ed:ea:70:42:12:b6:97:02:4e:
f4:9c:92:77:68:2e:90:08:28:62:b9:16:de:96:3a:
af:9e:03:b0:66:fc:70:6d:f7:33:c1:fa:35:9a:e2:
45:37:14:cb:a4:2f:d7:00:10:f6:5e:83:4a:8a:b0:
9b:7b:19:9b:92:54:05:59:e2:00:bd:99:75:66:82:
4f:82:13:bd:57:e8:0d:53:7e:35:8c:f2:db:fd:dd:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:07:B1:7E:F0:87:82:73:E7:F4:E4:E9:A7:64:90:6F:8C:62:39:66
X509v3 Authority Key Identifier:
keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:bf:50:e4:5b:a6:bb:e4:33:78:de:f5:07:a2:f1:da:2c:f6:
fd:42:67:6f:93:7c:25:bd:6d:f8:c8:51:a1:6d:68:3b:dd:41:
e1:5c:57:2e:a8:16:05:f7:b0:a9:f3:53:9f:18:2b:23:f8:84:
ff:81:ff:15:4f:a8:a7:c4:b7:7b:0b:12:77:05:98:9b:60:95:
6d:af:a9:93:e9:4b:37:cf:84:b0:4e:54:35:2d:8d:66:b2:00:
20:04:2f:bc:36:03:46:f4:39:2e:23:f6:cc:2d:2c:23:a6:ed:
53:f3:a3:0c:8e:f1:af:7a:63:8f:02:cc:39:36:ef:76:d8:16:
40:12:5f:61:3e:9e:17:e3:5e:cb:8b:9c:72:c4:8e:09:a5:b1:
a8:4d:7b:14:93:f8:48:19:b7:60:87:0b:ae:f7:48:6b:6b:bb:
fb:96:63:9f:49:79:2a:f2:d2:eb:15:ba:d8:b2:d6:76:8b:c1:
30:22:d8:a0:84:b0:e7:af:2b:20:64:05:c2:45:83:1a:8e:cb:
6d:4d:f5:d0:19:11:01:64:2a:7a:c4:e6:f6:4a:11:90:e9:dc:
9b:0a:e3:7f:f7:b3:6e:e6:08:9d:c9:bb:80:da:78:cf:ee:d6:
93:72:20:65:e2:27:01:4c:20:ec:14:fa:a5:96:aa:3b:f1:0b:
bc:53:99:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oeYiJS3ENcO8g+HK1ubgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNjgzZjk1Yzk4ZDJjZmU5ZDc5Y2RkM2RiOGVlODEzOGJi
MzU3NzIwHhcNMjUwNjI4MTMwMjMyWhcNMjUwNjI5MTMwMjMyWjAzMTEwLwYDVQQD
EyhiMTA3YjE3ZWYwODc4MjczZTdmNGU0ZTlhNzY0OTA2ZjhjNjIzOTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue66Y/j3cQwIEqsJVB1MO41d1dYJ
LGidp3DwE9Kc5QBtCunB+bIliFkDaEdS5f+P3VeTzw85SIjtiQeGk3dqQEc6Wwig
QhpQGp6h6xoNc2L03ytgANaU8Y3usX0G+y3CvNt6zRO0u4PG8diqKKWAxRPZTFBl
joHGHdIHq7rPWmWlHzqTXIRz9utPC4fN+Fg4Ov/9JIwBd0iBR7UmmWbtLVB+jziG
UnJ0fRvt6nBCEraXAk70nJJ3aC6QCChiuRbeljqvngOwZvxwbfczwfo1muJFNxTL
pC/XABD2XoNKirCbexmbklQFWeIAvZl1ZoJPghO9V+gNU341jPLb/d2DGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEHsX7wh4Jz5/Tk6adkkG+MYjlmMB8GA1UdIwQY
MBaAFBxoP5XJjSz+nXnN09uO6BOLs1dyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81MDZmM2QtYzg2My00NjJmLTg3ZWIt
YjNhZTFlNGMzMmI3LzEvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81MDZmM2QtYzg2My00NjJmLTg3ZWItYjNhZTFlNGMzMmI3
LzEvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARr9Q5Fum
u+QzeN71B6Lx2iz2/UJnb5N8Jb1t+MhRoW1oO91B4VxXLqgWBfewqfNTnxgrI/iE
/4H/FU+op8S3ewsSdwWYm2CVba+pk+lLN8+EsE5UNS2NZrIAIAQvvDYDRvQ5LiP2
zC0sI6btU/OjDI7xr3pjjwLMOTbvdtgWQBJfYT6eF+Ney4uccsSOCaWxqE17FJP4
SBm3YIcLrvdIa2u7+5Zjn0l5KvLS6xW62LLWdovBMCLYoISw568rIGQFwkWDGo7L
bU310BkRAWQqesTm9koRkOncmwrjf/ezbuYIncm7gNp4z+7Wk3IgZeInAUwg7BT6
pZaqO/ELvFOZhw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:39 2025 by rpki-client