Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier: 2yUTx2HIUkG94EK/cQKFBlYeWdXEn/HaBZI1O2NPMdc=
Subject key identifier: EF:C7:EA:36:70:CB:3E:CA:06:12:C9:FA:C1:C2:57:51:37:33:4A:7C
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 0198D4DFD790AE24C4E1D08C1E8B33126B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number: 0328
Signing time: Sat 23 Aug 2025 03:01:36 +0000
Manifest this update: Sat 23 Aug 2025 03:01:36 +0000
Manifest next update: Sun 24 Aug 2025 03:01:36 +0000
Files and hashes: 1: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: IhL/h4VUOn2EEz8xtY78QGZxkIdQFV4g/J539gD9jNU=)
2: nKTvZPJPqdCXiSwzyA9j5IjgzXg.roa (hash: IlnUSzXgTeo7Aecj19DyZcjG2TpAU9jXATfOU6kk97U=)
3: zNxBSM9LhOTwYtAP52MRH2hzZ_o.roa (hash: 51C5X4gm2WkYmwXfFe/uw6oyIL71jLkdgjDOyTD+5rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d7:90:ae:24:c4:e1:d0:8c:1e:8b:33:12:6b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Aug 23 03:01:36 2025 GMT
Not After : Aug 24 03:01:36 2025 GMT
Subject: CN=efc7ea3670cb3eca0612c9fac1c2575137334a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:5d:76:b9:cc:3c:9e:c3:4b:0f:e2:68:6a:
7d:bb:f9:ac:99:a6:63:c2:93:1f:a9:1b:77:95:a6:
7d:f1:36:b4:8d:d4:b9:23:47:fe:e1:ad:79:97:7f:
26:be:26:53:ac:dc:8f:c9:7b:c8:f7:fa:db:ff:56:
80:33:84:b0:c7:a4:2c:c6:26:e8:dc:52:3b:cd:7f:
a3:2e:95:f7:9b:e5:16:19:7a:fb:1f:1e:1c:76:4b:
44:87:1f:1d:f9:7f:47:57:0b:81:1e:26:49:2e:fe:
19:17:17:57:e4:d0:b1:19:c6:10:f1:3e:25:99:63:
19:e6:01:c9:ff:f6:7e:6f:8e:d2:e1:f5:2b:c8:d5:
67:fc:06:b5:de:56:83:3b:35:b2:9c:14:d2:ed:b4:
d8:6d:de:93:35:1c:90:48:e4:99:22:61:94:1f:8d:
ea:bf:9d:e1:c8:80:72:91:36:7f:4f:df:ca:73:98:
6c:22:fb:df:19:05:60:b2:e5:16:06:62:9f:b8:8e:
43:42:32:69:a0:d1:32:86:35:33:de:4f:32:90:97:
19:79:3d:4f:20:93:6c:c4:dd:6b:5f:37:6b:63:c9:
68:1c:d2:08:22:d5:57:98:0c:5c:a0:4f:ab:58:3b:
1a:07:8d:34:95:f0:26:e1:8f:b2:a5:bf:66:2a:57:
0b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C7:EA:36:70:CB:3E:CA:06:12:C9:FA:C1:C2:57:51:37:33:4A:7C
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0a:1e:03:cd:ad:a5:70:2e:d0:c9:c9:d6:27:08:cb:23:2d:
18:42:fa:87:02:f0:cc:f1:ba:d0:34:ec:1d:23:0f:70:27:da:
26:db:ac:f4:f0:90:1e:d5:66:fa:11:bf:01:5e:34:d9:f5:f0:
7f:45:86:f8:fa:1f:c6:f3:37:05:f7:9a:66:7e:dc:42:c7:0e:
9a:e7:1a:77:84:ce:10:dd:4c:62:ab:fb:08:b3:26:75:8b:f1:
57:59:6c:16:65:a4:63:00:d8:c1:03:88:42:a7:27:3a:9d:53:
a0:1c:82:85:26:da:2b:ec:cf:6c:73:f3:cf:fa:93:f5:f5:35:
c7:ca:1d:96:d6:05:91:c4:8d:bf:49:a4:79:0c:a1:cc:32:65:
99:52:72:c8:06:08:c9:17:8a:92:1e:6b:97:54:82:da:c7:77:
5c:93:6d:56:4a:ed:5d:83:ba:11:f7:40:cf:c7:cb:53:08:fb:
49:43:72:38:2e:d6:67:89:42:35:64:43:1f:a2:16:09:27:7b:
3d:82:19:29:22:7f:45:d5:af:f4:e4:09:c5:51:94:49:73:6e:
97:2b:42:f0:30:b7:b3:7f:13:06:63:e4:be:8f:51:a4:4d:1d:
fd:a5:0b:cc:23:17:91:da:ab:76:56:8b:af:74:56:72:dc:f5:
54:18:1d:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU39eQriTE4dCMHoszEmsaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGUyYTIwN2Y2OTc3MjE0YTk1N2E4ZTE0OGQxZjhiNWE1
Y2QwODIwHhcNMjUwODIzMDMwMTM2WhcNMjUwODI0MDMwMTM2WjAzMTEwLwYDVQQD
EyhlZmM3ZWEzNjcwY2IzZWNhMDYxMmM5ZmFjMWMyNTc1MTM3MzM0YTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi5ddrnMPJ7DSw/iaGp9u/msmaZj
wpMfqRt3laZ98Ta0jdS5I0f+4a15l38mviZTrNyPyXvI9/rb/1aAM4Swx6Qsxibo
3FI7zX+jLpX3m+UWGXr7Hx4cdktEhx8d+X9HVwuBHiZJLv4ZFxdX5NCxGcYQ8T4l
mWMZ5gHJ//Z+b47S4fUryNVn/Aa13laDOzWynBTS7bTYbd6TNRyQSOSZImGUH43q
v53hyIBykTZ/T9/Kc5hsIvvfGQVgsuUWBmKfuI5DQjJpoNEyhjUz3k8ykJcZeT1P
IJNsxN1rXzdrY8loHNIIItVXmAxcoE+rWDsaB400lfAm4Y+ypb9mKlcLywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/H6jZwyz7KBhLJ+sHCV1E3M0p8MB8GA1UdIwQY
MBaAFIcOKiB/aXchSpV6jhSNH4taXNCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80MjExNTgtZjBjNi00NjE5LWFmYTUt
OGE5NDY4N2RiYTZmLzEvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi80MjExNTgtZjBjNi00NjE5LWFmYTUtOGE5NDY4N2RiYTZm
LzEvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApAoeA82t
pXAu0MnJ1icIyyMtGEL6hwLwzPG60DTsHSMPcCfaJtus9PCQHtVm+hG/AV402fXw
f0WG+PofxvM3BfeaZn7cQscOmucad4TOEN1MYqv7CLMmdYvxV1lsFmWkYwDYwQOI
QqcnOp1ToByChSbaK+zPbHPzz/qT9fU1x8odltYFkcSNv0mkeQyhzDJlmVJyyAYI
yReKkh5rl1SC2sd3XJNtVkrtXYO6EfdAz8fLUwj7SUNyOC7WZ4lCNWRDH6IWCSd7
PYIZKSJ/RdWv9OQJxVGUSXNulytC8DC3s38TBmPkvo9RpE0d/aULzCMXkdqrdlaL
r3RWctz1VBgdAg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:32 2025 by rpki-client