Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File: hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier: T8yprv7qcoaug0cHNVdK/GsBqiY5X23q1Gh7pAgVHtQ=
Subject key identifier: 3D:DB:C9:E6:D3:93:A8:74:9E:9F:AB:30:50:CD:1E:4E:0A:24:8D:1D
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer: /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial: 0197B77CD0F7FE0220BDF334508885785AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number: 155F
Signing time: Sat 28 Jun 2025 17:01:39 +0000
Manifest this update: Sat 28 Jun 2025 17:01:39 +0000
Manifest next update: Sun 29 Jun 2025 17:01:39 +0000
Files and hashes: 1: E5_9p_TGg2FNMpZSH1jH4wJ3rfA.roa (hash: GcTlxtoi4GEP2bLooVydD/oQvGI42+1RU87/9gjgDvc=)
2: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: Zi+7tN+wZMOx+lNoiE1J2m/1MBsnUFynEQ9ruWDzLRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d0:f7:fe:02:20:bd:f3:34:50:88:85:78:5a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Validity
Not Before: Jun 28 17:01:39 2025 GMT
Not After : Jun 29 17:01:39 2025 GMT
Subject: CN=3ddbc9e6d393a8749e9fab3050cd1e4e0a248d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:dd:2e:69:5f:cb:51:7a:db:a7:d8:dc:11:
f8:0b:fa:1a:24:e5:b4:de:f3:d0:2f:5f:36:c0:6e:
4a:ea:27:e2:fd:d4:35:f8:07:b9:97:f4:75:3a:8e:
a3:52:a4:fe:d7:df:25:ac:e6:56:81:b2:80:52:74:
69:78:a3:44:68:45:59:c7:5b:22:ce:f3:f7:11:81:
fc:dd:88:11:af:b7:eb:f9:81:a0:38:1b:4d:6e:13:
63:d3:f9:ed:db:9f:4a:5b:15:b3:37:c5:c2:6a:f7:
4f:e0:49:f2:66:bc:54:aa:39:33:17:14:a7:66:67:
ca:9a:ef:3c:70:9e:a0:84:bb:6a:54:e6:0c:78:e5:
9a:6f:b5:00:95:25:04:78:75:87:77:af:54:ad:66:
06:7b:45:3b:30:43:e9:2b:6e:6f:a7:c4:42:b9:ea:
85:ae:d5:5e:a5:cf:27:8f:6c:58:63:e3:2e:ff:e7:
bb:47:05:49:75:b2:1e:3a:d2:22:06:f1:6b:a2:2e:
d5:78:b7:28:b2:ee:0f:a2:98:a4:13:a6:da:29:21:
9e:dc:52:97:ae:1e:48:3a:dc:a2:ee:15:38:3c:45:
60:ab:02:41:89:5b:b3:41:4e:62:ea:e0:9b:64:db:
47:d2:67:90:a0:f2:f0:ab:d1:f2:68:71:97:d4:55:
2b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DB:C9:E6:D3:93:A8:74:9E:9F:AB:30:50:CD:1E:4E:0A:24:8D:1D
X509v3 Authority Key Identifier:
keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7d:e2:63:f7:45:28:06:bd:f6:72:d6:95:8a:77:7c:46:ff:
c2:74:da:92:95:e0:b4:05:39:bb:17:98:ad:f9:5f:39:9e:bc:
c2:de:42:d4:d8:36:53:44:cd:86:dd:cd:84:cd:62:68:6e:fe:
b1:95:e2:55:a4:a3:b5:17:48:b8:f7:4a:41:43:13:7e:71:ed:
96:e4:31:de:0d:0c:46:6a:34:b3:cf:cf:5e:99:c6:8e:cb:a3:
88:40:1e:96:1b:2d:cf:fe:e2:c3:70:80:8c:b2:d3:88:2c:eb:
d9:c1:e9:c3:2d:63:9c:10:90:59:e1:54:30:f8:a1:9a:70:c1:
21:0b:d6:87:77:72:71:e2:fa:61:43:17:c8:c0:24:84:1e:ee:
71:ba:96:81:41:35:d6:95:25:f5:8d:26:f3:a8:5c:d3:87:87:
49:af:e8:76:15:8c:7b:5d:60:97:bc:35:de:fa:19:df:1a:dd:
79:f9:9e:17:b3:79:6f:11:01:fa:3f:6f:89:39:da:6f:b1:49:
fe:56:7c:d1:cc:38:89:dd:1b:b9:86:27:9f:fa:c5:43:5f:b2:
94:78:ef:98:02:e0:9f:a5:8e:be:e6:e5:f0:13:55:27:25:6f:
73:1e:76:51:42:a6:a7:8d:fe:45:ed:60:3d:d4:08:2f:f9:92:
02:21:16:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fND3/gIgvfM0UIiFeFqiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjlmMjEwMGMyZmM0NTRhZDA3YWRlYzc5NmI5ZTZmNjM2
NmYwNzEwHhcNMjUwNjI4MTcwMTM5WhcNMjUwNjI5MTcwMTM5WjAzMTEwLwYDVQQD
EygzZGRiYzllNmQzOTNhODc0OWU5ZmFiMzA1MGNkMWU0ZTBhMjQ4ZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKfdLmlfy1F626fY3BH4C/oaJOW0
3vPQL182wG5K6ifi/dQ1+Ae5l/R1Oo6jUqT+198lrOZWgbKAUnRpeKNEaEVZx1si
zvP3EYH83YgRr7fr+YGgOBtNbhNj0/nt259KWxWzN8XCavdP4EnyZrxUqjkzFxSn
ZmfKmu88cJ6ghLtqVOYMeOWab7UAlSUEeHWHd69UrWYGe0U7MEPpK25vp8RCueqF
rtVepc8nj2xYY+Mu/+e7RwVJdbIeOtIiBvFroi7VeLcosu4PopikE6baKSGe3FKX
rh5IOtyi7hU4PEVgqwJBiVuzQU5i6uCbZNtH0meQoPLwq9HyaHGX1FUrywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3byebTk6h0np+rMFDNHk4KJI0dMB8GA1UdIwQY
MBaAFIVp8hAML8RUrQet7Hlrnm9jZvBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEt
MjMzNmNkYjliYTlmLzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEtMjMzNmNkYjliYTlm
LzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN33iY/dF
KAa99nLWlYp3fEb/wnTakpXgtAU5uxeYrflfOZ68wt5C1Ng2U0TNht3NhM1iaG7+
sZXiVaSjtRdIuPdKQUMTfnHtluQx3g0MRmo0s8/PXpnGjsujiEAelhstz/7iw3CA
jLLTiCzr2cHpwy1jnBCQWeFUMPihmnDBIQvWh3dyceL6YUMXyMAkhB7ucbqWgUE1
1pUl9Y0m86hc04eHSa/odhWMe11gl7w13voZ3xrdefmeF7N5bxEB+j9viTnab7FJ
/lZ80cw4id0buYYnn/rFQ1+ylHjvmALgn6WOvubl8BNVJyVvcx52UUKmp43+Re1g
PdQIL/mSAiEWMg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:13:29 2025 by rpki-client