Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
File: 1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json)
Hash identifier: QUhUoGcbQD0TFQsY4XHZbDM9tKGpvAyIn9RJaGKYx5Y=
Subject key identifier: 77:6C:22:72:E6:71:EB:CB:F1:94:99:57:B5:3B:C4:41:B5:4F:76:95
Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
Certificate issuer: /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Certificate serial: 0198D6CD9843AC10352E9F22FA2A1E1DEBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
Manifest number: 098C
Signing time: Sat 23 Aug 2025 12:00:54 +0000
Manifest this update: Sat 23 Aug 2025 12:00:54 +0000
Manifest next update: Sun 24 Aug 2025 12:00:54 +0000
Files and hashes: 1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: mrh0Syfq9F35dmtAL1W63e7ExBT/c743ebrwY00oZDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:98:43:ac:10:35:2e:9f:22:fa:2a:1e:1d:eb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Validity
Not Before: Aug 23 12:00:54 2025 GMT
Not After : Aug 24 12:00:54 2025 GMT
Subject: CN=776c2272e671ebcbf1949957b53bc441b54f7695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:65:d5:03:59:06:6b:43:92:ce:7a:06:3a:
17:20:21:2b:01:8e:8c:dc:16:2c:ea:69:c3:70:b8:
49:d5:65:17:51:7a:a8:d9:dc:8b:de:b6:14:17:8b:
4f:43:4b:f5:11:cf:42:31:6a:2b:8b:83:4b:b2:54:
cd:fd:21:a0:20:77:1e:3a:e4:eb:95:c1:a1:aa:56:
d7:9d:f6:8b:21:4b:d7:88:57:55:e3:6d:c3:a6:47:
d8:b5:51:99:6f:f4:56:25:69:cd:e8:4b:d4:b2:6b:
6e:27:ba:f5:03:7e:ba:8c:08:28:99:b5:26:44:15:
a5:ef:e4:3e:8f:09:35:9a:91:b9:5b:0f:f7:1c:04:
d4:d9:47:45:0f:4b:bb:1f:10:c3:cb:a4:ed:eb:30:
46:93:3c:cc:fd:a3:30:89:d9:b0:31:09:29:03:b4:
0a:7f:9e:cc:24:f2:9f:d3:52:94:06:b8:7f:24:12:
00:22:9f:5f:9c:0c:de:86:b2:24:2e:19:95:f8:83:
d0:55:a3:c5:20:86:e9:87:27:67:8a:ea:e0:45:0e:
95:82:3b:c6:9c:30:dc:36:82:bc:8f:de:c1:5f:26:
7b:1f:2b:d3:7d:f4:4c:7a:a8:34:6c:86:10:ff:0d:
2d:15:36:ee:1a:08:8d:14:ba:0a:b8:a9:dd:c9:9f:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6C:22:72:E6:71:EB:CB:F1:94:99:57:B5:3B:C4:41:B5:4F:76:95
X509v3 Authority Key Identifier:
keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c8:ea:8a:7c:0d:37:6a:c6:52:b8:f7:b9:05:10:8b:18:58:
c0:0e:1e:34:36:fd:04:6d:ef:f6:86:c1:53:c9:c7:1e:bf:0c:
1d:ab:f6:06:c4:71:98:3b:09:8d:a0:4b:29:45:7e:d2:c2:16:
19:46:c5:d2:93:f8:98:53:4a:25:37:8c:96:da:a1:d9:4d:18:
18:65:5c:8f:99:50:4f:12:43:ad:e0:86:77:41:e8:c0:7e:bf:
14:1d:b7:da:4b:8c:71:bc:d0:52:6a:79:6c:35:14:00:01:8d:
e6:13:b3:71:b2:2c:31:e4:e8:b1:4c:67:3d:61:82:2d:c4:be:
1d:dc:cd:b6:37:16:3d:2a:d2:47:91:3e:06:68:1f:f5:c1:87:
fe:32:2d:d4:2d:01:64:36:d0:14:de:bf:b0:78:7e:e2:ac:9d:
12:fd:d9:c8:7c:17:d5:df:cd:3e:97:6d:a4:53:0a:88:07:64:
cd:ec:d7:57:b9:b2:49:a2:72:1d:85:0f:d5:ce:14:42:06:15:
33:22:23:8f:7a:c4:fc:3e:1b:33:a8:6c:e7:72:6d:f1:84:40:
08:fb:4f:e7:13:f0:a1:fc:99:31:c7:16:09:dc:23:15:ae:c1:
6c:01:b9:16:d1:97:1a:b3:14:82:87:3d:78:d5:77:fd:94:58:
06:ca:f3:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzZhDrBA1Lp8i+ioeHevTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MWExYzNjMjU5MDcxYzJiY2JjMjdmNzkxZmQxZTIwZjU4
MGE5NmEwHhcNMjUwODIzMTIwMDU0WhcNMjUwODI0MTIwMDU0WjAzMTEwLwYDVQQD
Eyg3NzZjMjI3MmU2NzFlYmNiZjE5NDk5NTdiNTNiYzQ0MWI1NGY3Njk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvell1QNZBmtDks56BjoXICErAY6M
3BYs6mnDcLhJ1WUXUXqo2dyL3rYUF4tPQ0v1Ec9CMWori4NLslTN/SGgIHceOuTr
lcGhqlbXnfaLIUvXiFdV423DpkfYtVGZb/RWJWnN6EvUsmtuJ7r1A366jAgombUm
RBWl7+Q+jwk1mpG5Ww/3HATU2UdFD0u7HxDDy6Tt6zBGkzzM/aMwidmwMQkpA7QK
f57MJPKf01KUBrh/JBIAIp9fnAzehrIkLhmV+IPQVaPFIIbphydniurgRQ6VgjvG
nDDcNoK8j97BXyZ7HyvTffRMeqg0bIYQ/w0tFTbuGgiNFLoKuKndyZ/E2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdsInLmcevL8ZSZV7U7xEG1T3aVMB8GA1UdIwQY
MBaAFNYaHDwlkHHCvLwn95H9HiD1gKlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhvY1BDV1FjY0s4dkNmM2tmMGVJUFdBcVdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80NmNkODYtNmRlMS00YzNkLWIwZjct
ODU3MTQwNjY5N2FkLzEvMWhvY1BDV1FjY0s4dkNmM2tmMGVJUFdBcVdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80NmNkODYtNmRlMS00YzNkLWIwZjctODU3MTQwNjY5N2Fk
LzEvMWhvY1BDV1FjY0s4dkNmM2tmMGVJUFdBcVdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcjqinwN
N2rGUrj3uQUQixhYwA4eNDb9BG3v9obBU8nHHr8MHav2BsRxmDsJjaBLKUV+0sIW
GUbF0pP4mFNKJTeMltqh2U0YGGVcj5lQTxJDreCGd0HowH6/FB232kuMcbzQUmp5
bDUUAAGN5hOzcbIsMeTosUxnPWGCLcS+HdzNtjcWPSrSR5E+Bmgf9cGH/jIt1C0B
ZDbQFN6/sHh+4qydEv3ZyHwX1d/NPpdtpFMKiAdkzezXV7mySaJyHYUP1c4UQgYV
MyIjj3rE/D4bM6hs53Jt8YRACPtP5xPwofyZMccWCdwjFa7BbAG5FtGXGrMUgoc9
eNV3/ZRYBsrzSg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:25 2025 by rpki-client