Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
File: HRxS8VUvbqDwZNejt521wc8Wa9A.mft (raw, json)
Hash identifier: nm+yc2pNvsp+9saWisK3DtGI/fSS6Jpl3hgrLvHapJc=
Subject key identifier: 21:BE:80:9A:4B:BB:A3:7B:91:C9:1A:91:6C:7C:8C:A3:1E:E7:1C:A1
Authority key identifier: 1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
Certificate issuer: /CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Certificate serial: 0198D58403B304F3BBD5586CA15C0242AAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 06:00:55 +0000
Manifest this update: Sat 23 Aug 2025 06:00:55 +0000
Manifest next update: Sun 24 Aug 2025 06:00:55 +0000
Files and hashes: 1: HRxS8VUvbqDwZNejt521wc8Wa9A.crl (hash: i30YmkmASi5l3ylrMYPqn2iQj+LmIoGK6rs36JolMFM=)
2: OqLUCxtgxChqlU1u5DSrV7o7hUE.roa (hash: 137N4QJ5LT3R5FaNUW+c79pvczICoEGACd1IGeCfKGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:84:03:b3:04:f3:bb:d5:58:6c:a1:5c:02:42:aa:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Validity
Not Before: Aug 23 06:00:55 2025 GMT
Not After : Aug 24 06:00:55 2025 GMT
Subject: CN=21be809a4bbba37b91c91a916c7c8ca31ee71ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1f:26:da:4e:61:78:ae:71:ff:12:ba:e3:ef:
ba:6e:9e:ca:06:e2:03:66:44:46:30:1a:95:ba:cb:
21:98:99:52:83:48:85:19:da:0c:80:dd:fe:44:22:
27:78:3b:6a:be:26:a1:08:eb:54:f5:cf:33:82:97:
bf:52:f7:13:44:e2:37:84:d4:ed:d6:b7:48:63:1a:
44:a2:9a:67:7d:ac:fe:f8:6a:8a:f8:d3:70:bc:bd:
d2:84:20:c8:e0:4c:8e:06:0b:e5:29:50:4b:40:12:
d5:a8:45:73:3a:20:4d:34:f4:58:ed:78:80:51:4a:
93:e5:c8:f5:06:72:e3:8c:8c:9b:93:69:47:97:f2:
10:12:25:07:c5:9e:71:81:81:fe:2a:df:d5:6d:b0:
ea:ef:65:51:ba:1f:63:50:f3:a1:f3:d6:68:3c:2c:
df:0b:50:55:0e:96:fb:1c:f5:19:f2:43:a1:5a:44:
e5:02:65:07:cf:2d:3d:56:08:34:3a:b6:60:f6:74:
6e:d5:13:e1:f0:d5:bc:f6:cd:d1:0d:bc:21:31:c9:
29:57:ea:0e:16:65:ce:b6:68:02:b8:e9:33:f2:10:
ac:fc:8c:61:9d:06:4e:08:14:69:46:9e:21:c8:06:
9c:cb:09:cf:48:f0:85:89:0d:f6:2a:b1:b6:b4:16:
e7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BE:80:9A:4B:BB:A3:7B:91:C9:1A:91:6C:7C:8C:A3:1E:E7:1C:A1
X509v3 Authority Key Identifier:
keyid:1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ec:26:cc:8a:bb:38:5d:e8:26:5e:49:92:e2:c1:36:b2:48:
44:29:fd:15:03:b5:c1:cd:5a:dc:c5:7e:46:30:64:b5:fe:98:
68:aa:95:d2:5d:db:27:0e:d8:e2:9e:ee:a6:28:27:8c:01:63:
03:c7:36:eb:0a:d2:10:20:f9:31:8a:d6:33:7e:63:fb:a4:3a:
e3:80:29:39:af:29:98:6c:d1:e1:82:9b:b4:70:e6:fd:88:fc:
27:57:57:1a:90:d0:72:65:3a:35:12:e7:f7:3c:9f:7c:27:79:
f0:b7:70:fc:a4:ac:4a:95:57:29:58:51:75:8b:54:92:73:56:
38:a7:6b:2a:e2:72:9a:bf:65:8b:22:36:7b:5d:28:4a:5f:f6:
09:15:0e:c9:4c:26:b0:bb:7e:25:87:39:99:a9:1b:bc:1f:0d:
27:5b:0c:e2:33:89:ea:49:01:99:cc:2f:3f:cf:11:a9:7b:03:
b6:2f:37:2c:1d:42:8c:97:1f:ad:57:0e:a8:14:65:1e:f6:a2:
fd:6a:c6:02:33:a8:84:fe:91:75:f3:52:eb:bc:ee:d2:4a:a8:
80:94:c2:3a:c5:ac:e9:c8:b1:26:a1:d5:48:8b:85:30:31:d5:
11:c8:8f:d0:54:23:31:2c:8c:2c:d1:d4:76:db:b8:68:3e:96:
5d:29:d4:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVhAOzBPO71VhsoVwCQqrDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMWM1MmYxNTUyZjZlYTBmMDY0ZDdhM2I3OWRiNWMxY2Yx
NjZiZDAwHhcNMjUwODIzMDYwMDU1WhcNMjUwODI0MDYwMDU1WjAzMTEwLwYDVQQD
EygyMWJlODA5YTRiYmJhMzdiOTFjOTFhOTE2YzdjOGNhMzFlZTcxY2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx8m2k5heK5x/xK64++6bp7KBuID
ZkRGMBqVusshmJlSg0iFGdoMgN3+RCIneDtqviahCOtU9c8zgpe/UvcTROI3hNTt
1rdIYxpEoppnfaz++GqK+NNwvL3ShCDI4EyOBgvlKVBLQBLVqEVzOiBNNPRY7XiA
UUqT5cj1BnLjjIybk2lHl/IQEiUHxZ5xgYH+Kt/VbbDq72VRuh9jUPOh89ZoPCzf
C1BVDpb7HPUZ8kOhWkTlAmUHzy09Vgg0OrZg9nRu1RPh8NW89s3RDbwhMckpV+oO
FmXOtmgCuOkz8hCs/IxhnQZOCBRpRp4hyAacywnPSPCFiQ32KrG2tBbnVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCG+gJpLu6N7kckakWx8jKMe5xyhMB8GA1UdIwQY
MBaAFB0cUvFVL26g8GTXo7edtcHPFmvQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJ4UzhWVXZicUR3Wk5lanQ1MjF3YzhXYTlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82NGY1MzktZmVkYS00OWZjLWE5MjIt
MjAxZDVhOWJiOGFhLzEvSFJ4UzhWVXZicUR3Wk5lanQ1MjF3YzhXYTlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82NGY1MzktZmVkYS00OWZjLWE5MjItMjAxZDVhOWJiOGFh
LzEvSFJ4UzhWVXZicUR3Wk5lanQ1MjF3YzhXYTlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOwmzIq7
OF3oJl5JkuLBNrJIRCn9FQO1wc1a3MV+RjBktf6YaKqV0l3bJw7Y4p7upignjAFj
A8c26wrSECD5MYrWM35j+6Q644ApOa8pmGzR4YKbtHDm/Yj8J1dXGpDQcmU6NRLn
9zyffCd58Ldw/KSsSpVXKVhRdYtUknNWOKdrKuJymr9liyI2e10oSl/2CRUOyUwm
sLt+JYc5makbvB8NJ1sM4jOJ6kkBmcwvP88RqXsDti83LB1CjJcfrVcOqBRlHvai
/WrGAjOohP6RdfNS67zu0kqogJTCOsWs6cixJqHVSIuFMDHVEciP0FQjMSyMLNHU
dtu4aD6WXSnUMQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:31 2025 by rpki-client