Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier: pO2KOrwFAS7SSVdaRb6sIFo64pwRprHCmMOiqIoF2kQ=
Subject key identifier: B3:52:5D:6D:2D:15:F8:55:24:8C:04:DB:C6:B2:F2:66:DD:D2:F8:C9
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial: 0198D515EAFAC378FBCC86DBA88B7FECF5FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number: 0771
Signing time: Sat 23 Aug 2025 04:00:40 +0000
Manifest this update: Sat 23 Aug 2025 04:00:40 +0000
Manifest next update: Sun 24 Aug 2025 04:00:40 +0000
Files and hashes: 1: 00q_V9fiuxK8x1J5dDf6heEWqpM.roa (hash: XdV8RV4SCz2Bjb29weutw1xlx9C6MC3WoiwiAcbHJHU=)
2: 0DRjjmcZlOUPV43RadORGLY5fAU.roa (hash: OsLSdbKdwCfPfb6fa3q09CVq+CXKI7ScoH/tLbYmOyY=)
3: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: lXNSl/xU1pLk4o93csC3QkDG9xAF+PbV9KF0xLtvoxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ea:fa:c3:78:fb:cc:86:db:a8:8b:7f:ec:f5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Validity
Not Before: Aug 23 04:00:40 2025 GMT
Not After : Aug 24 04:00:40 2025 GMT
Subject: CN=b3525d6d2d15f855248c04dbc6b2f266ddd2f8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:05:e3:44:1c:85:58:33:23:4c:05:22:41:
67:b7:61:aa:96:30:87:92:1a:85:50:af:a0:0c:2d:
47:5d:59:47:91:c0:5c:e7:4c:50:65:3c:3d:d7:0f:
86:82:9b:e6:60:10:8c:d6:c8:7f:dd:9a:6e:a2:71:
61:6a:b2:d0:65:8c:04:41:6d:fd:dd:bd:4e:c1:ef:
44:29:55:48:33:76:bf:67:c6:68:f2:1f:42:e6:e0:
68:1b:dd:4e:d9:7c:8e:98:e8:2b:0b:93:d1:73:6c:
0a:6a:d8:85:7a:76:40:72:73:9b:3f:09:fb:e9:66:
52:62:9d:75:35:ea:89:da:cd:ea:31:47:d5:22:4e:
03:ff:cd:d6:31:08:5d:89:27:be:73:a3:91:c1:93:
a3:8c:4c:68:09:4e:81:70:f7:6b:48:1f:b4:8e:2c:
72:bb:60:37:46:97:e1:0d:3a:01:20:57:51:33:42:
de:82:c2:e2:72:4c:f6:8c:34:b2:a8:36:85:03:2e:
6d:39:f0:e8:8d:1b:29:1f:fc:c4:14:15:b9:ba:11:
7a:ca:e2:65:8d:6b:64:4e:c0:ba:1d:98:e4:9b:08:
e7:6c:2b:eb:b8:a5:99:2c:a2:59:99:b0:25:f2:a6:
ef:09:be:d6:15:71:d0:6e:11:15:8d:d2:a2:f1:6d:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:52:5D:6D:2D:15:F8:55:24:8C:04:DB:C6:B2:F2:66:DD:D2:F8:C9
X509v3 Authority Key Identifier:
keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:32:92:b5:0d:ad:18:f0:39:64:c5:3f:cd:13:c5:42:60:4a:
8d:6d:9b:8d:6b:af:a8:f9:dc:ea:95:43:fa:be:30:ac:53:ee:
5b:7e:f7:0b:ab:c2:34:5c:d9:48:65:dd:da:79:07:4b:7b:a6:
44:91:a9:3e:c4:a4:84:44:92:4d:16:9a:53:66:cf:97:6d:d9:
3d:fc:00:8d:c6:af:15:d6:63:b0:aa:91:2f:68:5a:54:17:14:
5e:4d:6b:20:4b:ac:9b:3c:d2:6b:c6:c9:c7:12:11:ad:d9:59:
4d:ee:3e:2b:ef:82:1f:59:c7:85:6a:e5:e9:16:12:d7:95:50:
b5:ec:f6:09:76:0e:8b:94:62:40:32:0f:da:91:a3:77:4e:cd:
9c:7f:f0:55:c6:5e:ea:9e:0b:79:41:54:b9:00:74:c6:35:b9:
9e:c6:df:bc:6b:61:a3:2d:a7:5c:41:42:63:5f:c2:75:32:cf:
8c:40:f7:eb:87:16:3a:c3:c5:12:48:e1:b2:5f:f9:c3:48:0c:
6c:37:c4:3d:38:c4:a6:aa:8a:e1:91:fc:6a:d6:a7:8d:1c:1e:
8f:4d:c0:6d:d0:3e:43:b9:c7:03:a3:79:9e:0e:c7:f2:e0:9f:
ae:03:20:9b:56:c5:9c:ad:7d:86:f3:8f:18:86:89:cf:08:13:
b2:68:e9:55
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjVFer6w3j7zIbbqIt/7PX8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMWIyNDc4ZGZlMGYzM2EyNzhiMTNmNDJkZDMxOTYwMWQ2
Mzc4YTgwHhcNMjUwODIzMDQwMDQwWhcNMjUwODI0MDQwMDQwWjAzMTEwLwYDVQQD
EyhiMzUyNWQ2ZDJkMTVmODU1MjQ4YzA0ZGJjNmIyZjI2NmRkZDJmOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwEF40QchVgzI0wFIkFnt2GqljCH
khqFUK+gDC1HXVlHkcBc50xQZTw91w+GgpvmYBCM1sh/3ZpuonFharLQZYwEQW39
3b1Owe9EKVVIM3a/Z8Zo8h9C5uBoG91O2XyOmOgrC5PRc2wKatiFenZAcnObPwn7
6WZSYp11NeqJ2s3qMUfVIk4D/83WMQhdiSe+c6ORwZOjjExoCU6BcPdrSB+0jixy
u2A3RpfhDToBIFdRM0LegsLickz2jDSyqDaFAy5tOfDojRspH/zEFBW5uhF6yuJl
jWtkTsC6HZjkmwjnbCvruKWZLKJZmbAl8qbvCb7WFXHQbhEVjdKi8W0ntwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLNSXW0tFfhVJIwE28ay8mbd0vjJMB8GA1UdIwQY
MBaAFPobJHjf4PM6J4sT9C3TGWAdY3ioMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oc2tlTl9nOHpvbml4UDBMZE1aWUIxamVLZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvMDhhOWM4LTRiZTMtNDY4Mi1hZjgy
LTJhMWNjZTdkMmM2NS8xLzEtaHNrZU5fZzh6b25peFAwTGRNWllCMWplS2cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FmLzA4YTljOC00YmUzLTQ2ODItYWY4Mi0yYTFjY2U3ZDJj
NjUvMS8xLWhza2VOX2c4em9uaXhQMExkTVpZQjFqZUtnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzKS
tQ2tGPA5ZMU/zRPFQmBKjW2bjWuvqPnc6pVD+r4wrFPuW373C6vCNFzZSGXd2nkH
S3umRJGpPsSkhESSTRaaU2bPl23ZPfwAjcavFdZjsKqRL2haVBcUXk1rIEusmzzS
a8bJxxIRrdlZTe4+K++CH1nHhWrl6RYS15VQtez2CXYOi5RiQDIP2pGjd07NnH/w
VcZe6p4LeUFUuQB0xjW5nsbfvGthoy2nXEFCY1/CdTLPjED364cWOsPFEkjhsl/5
w0gMbDfEPTjEpqqK4ZH8atanjRwej03AbdA+Q7nHA6N5ng7H8uCfrgMgm1bFnK19
hvOPGIaJzwgTsmjpVQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:24 2025 by rpki-client