Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
File: HRxS8VUvbqDwZNejt521wc8Wa9A.mft (raw, json)
Hash identifier: R+nZpEshCLWHRdivJCdQ3S6q+W/hHho5Zz08npl7L4Y=
Subject key identifier: 8F:4B:3A:96:53:94:5F:86:7E:23:F6:6F:74:7B:FA:15:92:D4:F4:82
Authority key identifier: 1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
Certificate issuer: /CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Certificate serial: 0197B5C48E2465A9C2967569C3758195159F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 09:00:46 +0000
Manifest this update: Sat 28 Jun 2025 09:00:46 +0000
Manifest next update: Sun 29 Jun 2025 09:00:46 +0000
Files and hashes: 1: HRxS8VUvbqDwZNejt521wc8Wa9A.crl (hash: TnG3wNHzMv4VX4PbziE1h4GTU6sW6dObCThqAJ7R2pU=)
2: OqLUCxtgxChqlU1u5DSrV7o7hUE.roa (hash: 137N4QJ5LT3R5FaNUW+c79pvczICoEGACd1IGeCfKGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:8e:24:65:a9:c2:96:75:69:c3:75:81:95:15:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Validity
Not Before: Jun 28 09:00:46 2025 GMT
Not After : Jun 29 09:00:46 2025 GMT
Subject: CN=8f4b3a9653945f867e23f66f747bfa1592d4f482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4e:a2:2b:37:c7:75:17:65:07:dd:cc:bc:78:
c7:6f:9e:56:a2:f1:f1:87:fe:e9:2b:71:0e:8e:e0:
53:6c:c1:2f:bb:64:95:44:76:99:fd:12:8f:0f:bf:
26:ef:fd:ac:9c:58:74:f5:71:87:7e:b4:6f:7c:d3:
1f:3a:62:1f:95:ec:b9:64:1c:e6:83:93:45:2e:70:
3a:40:39:6a:92:ea:27:19:68:62:68:c7:51:c0:a4:
9c:dd:be:c1:47:f2:bc:4b:a2:b5:71:14:84:b5:8c:
65:e8:42:88:bf:06:5f:52:d9:21:77:e3:87:49:e4:
c0:72:5d:f2:ee:e1:55:b4:8c:0e:4a:07:a9:15:a9:
1b:6b:b1:33:49:3a:b4:69:71:b1:ee:fe:4b:34:c9:
54:68:45:b1:73:00:b2:8e:f6:c0:f8:2c:5d:af:46:
95:50:2b:54:8d:08:43:1f:ba:71:ca:74:65:54:56:
ad:62:fc:29:9f:62:3a:15:74:ab:ab:a1:af:3c:58:
ff:12:f3:ad:da:6d:32:a9:72:8a:2d:4c:10:3a:1c:
de:5c:65:13:8f:85:5b:66:52:45:56:51:bb:4b:7a:
8b:58:30:5e:9b:35:b8:6d:7a:8f:8b:3a:a1:cc:d6:
b1:6e:9a:e6:bb:0f:ed:49:42:a9:69:fa:cc:80:33:
f4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4B:3A:96:53:94:5F:86:7E:23:F6:6F:74:7B:FA:15:92:D4:F4:82
X509v3 Authority Key Identifier:
keyid:1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ba:7f:a1:37:9e:ca:da:42:81:a0:5d:04:79:3f:c3:16:b9:
d8:7b:84:eb:a0:02:c2:c6:53:a8:20:ef:46:9a:1a:08:20:6f:
b3:25:8c:1d:ca:c9:b7:0c:43:03:7c:be:7c:0c:52:27:3b:9c:
f7:a0:87:5b:48:80:fb:c9:05:e2:f0:ce:72:a2:7e:f7:2f:6e:
b7:05:a4:ad:1b:b5:88:06:5c:86:89:6c:ef:f7:36:53:58:5f:
9a:fe:0c:52:ce:a4:fe:cd:a5:3c:93:ba:37:10:ff:bf:47:1e:
83:75:fc:3f:1f:0c:4e:22:94:35:b8:40:f6:05:e6:49:cd:a1:
59:00:28:72:68:b6:5c:1e:f3:42:d9:85:cf:f8:5d:ac:87:6d:
75:e4:16:24:62:e2:91:f9:b1:78:9c:b0:07:ca:1d:d9:7c:0b:
31:58:38:c1:39:1a:b6:fe:7e:a2:3e:29:50:9d:c6:7a:a7:82:
63:92:c5:1c:55:9a:5a:ed:e6:75:eb:0b:8c:a2:67:84:e7:27:
55:b0:f9:6e:dd:18:4c:01:55:26:ba:94:f4:ff:be:bf:c1:43:
79:5c:de:b6:3c:a3:06:c0:10:7d:b6:94:03:87:0b:63:a1:2d:
59:bd:58:bc:8d:f0:ea:4a:47:20:2b:89:7f:71:49:8f:7f:19:
ee:a0:95:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xI4kZanClnVpw3WBlRWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMWM1MmYxNTUyZjZlYTBmMDY0ZDdhM2I3OWRiNWMxY2Yx
NjZiZDAwHhcNMjUwNjI4MDkwMDQ2WhcNMjUwNjI5MDkwMDQ2WjAzMTEwLwYDVQQD
Eyg4ZjRiM2E5NjUzOTQ1Zjg2N2UyM2Y2NmY3NDdiZmExNTkyZDRmNDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE6iKzfHdRdlB93MvHjHb55WovHx
h/7pK3EOjuBTbMEvu2SVRHaZ/RKPD78m7/2snFh09XGHfrRvfNMfOmIfley5ZBzm
g5NFLnA6QDlqkuonGWhiaMdRwKSc3b7BR/K8S6K1cRSEtYxl6EKIvwZfUtkhd+OH
SeTAcl3y7uFVtIwOSgepFakba7EzSTq0aXGx7v5LNMlUaEWxcwCyjvbA+Cxdr0aV
UCtUjQhDH7pxynRlVFatYvwpn2I6FXSrq6GvPFj/EvOt2m0yqXKKLUwQOhzeXGUT
j4VbZlJFVlG7S3qLWDBemzW4bXqPizqhzNaxbprmuw/tSUKpafrMgDP0/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9LOpZTlF+GfiP2b3R7+hWS1PSCMB8GA1UdIwQY
MBaAFB0cUvFVL26g8GTXo7edtcHPFmvQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJ4UzhWVXZicUR3Wk5lanQ1MjF3YzhXYTlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82NGY1MzktZmVkYS00OWZjLWE5MjIt
MjAxZDVhOWJiOGFhLzEvSFJ4UzhWVXZicUR3Wk5lanQ1MjF3YzhXYTlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82NGY1MzktZmVkYS00OWZjLWE5MjItMjAxZDVhOWJiOGFh
LzEvSFJ4UzhWVXZicUR3Wk5lanQ1MjF3YzhXYTlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirp/oTee
ytpCgaBdBHk/wxa52HuE66ACwsZTqCDvRpoaCCBvsyWMHcrJtwxDA3y+fAxSJzuc
96CHW0iA+8kF4vDOcqJ+9y9utwWkrRu1iAZchols7/c2U1hfmv4MUs6k/s2lPJO6
NxD/v0ceg3X8Px8MTiKUNbhA9gXmSc2hWQAocmi2XB7zQtmFz/hdrIdtdeQWJGLi
kfmxeJywB8od2XwLMVg4wTkatv5+oj4pUJ3GeqeCY5LFHFWaWu3mdesLjKJnhOcn
VbD5bt0YTAFVJrqU9P++v8FDeVzetjyjBsAQfbaUA4cLY6EtWb1YvI3w6kpHICuJ
f3FJj38Z7qCVIA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:29 2025 by rpki-client