Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
File: HJnOvgzwmQOQPRnBygrmJCF2SFk.mft (raw, json)
Hash identifier: AU1C9zJXh8ykeE2G9UaKJPufsyATp89fa/7GwUVn5D0=
Subject key identifier: 78:82:12:F5:72:BA:B8:4D:17:6D:DF:C1:9A:89:76:04:52:A8:A6:A7
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial: 0198D5159A917786D65398596650DBEE634C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
Manifest number: 147F
Signing time: Sat 23 Aug 2025 04:00:19 +0000
Manifest this update: Sat 23 Aug 2025 04:00:19 +0000
Manifest next update: Sun 24 Aug 2025 04:00:19 +0000
Files and hashes: 1: HJnOvgzwmQOQPRnBygrmJCF2SFk.crl (hash: r2ujkmJVgXo5exBcJpslKC1iZfAVGCmsOnqDYvTOSkU=)
2: IfJsnDvBjhqNyvQwy7Sj6pVTE48.roa (hash: 72JQ+BiVOGXtzrf0r97edI+poiwfkKBvn0dEoFn6Vjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:9a:91:77:86:d6:53:98:59:66:50:db:ee:63:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Validity
Not Before: Aug 23 04:00:19 2025 GMT
Not After : Aug 24 04:00:19 2025 GMT
Subject: CN=788212f572bab84d176ddfc19a89760452a8a6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:72:78:22:ed:22:4e:be:40:4b:b5:18:cf:c8:
1f:97:6a:a3:48:d6:57:b7:ad:6e:5b:a6:c9:74:bb:
40:b9:e0:a6:56:77:85:59:cd:f6:22:c1:c4:8f:e6:
4c:64:89:56:e0:57:0b:e7:c4:d1:54:99:9f:c0:ab:
b6:a3:32:50:2a:1d:18:4d:50:3c:09:4a:3a:11:13:
8b:1d:f7:33:7d:0f:d3:68:be:00:7f:13:91:05:d1:
57:16:a7:63:f2:23:0f:56:8d:90:62:00:55:b0:81:
4a:29:01:28:5d:05:e0:01:20:18:b0:a8:65:64:5a:
cc:9e:e0:83:1d:62:67:49:2d:c9:9f:c8:70:f6:7c:
5f:85:76:41:ab:3b:84:e2:82:3d:b1:c8:75:45:fb:
c9:c1:f2:b1:3c:64:dc:0d:cc:74:3f:15:e5:b4:25:
4d:11:d4:81:eb:ef:a5:f0:26:3c:b4:0e:8b:6b:4d:
15:ee:2d:98:06:94:73:f5:08:f3:72:fa:45:4a:44:
9d:c2:69:d5:6d:a9:b7:a1:e5:e8:06:c9:24:d0:4d:
23:67:f5:07:ba:26:b9:c9:c2:39:fa:5c:0d:71:bc:
81:66:bf:43:a4:11:3f:77:49:68:9e:48:3f:4a:81:
ce:95:78:61:50:5d:c7:01:f7:8e:30:f0:68:7f:de:
06:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:82:12:F5:72:BA:B8:4D:17:6D:DF:C1:9A:89:76:04:52:A8:A6:A7
X509v3 Authority Key Identifier:
keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6d:54:f8:e6:ef:c5:68:08:b6:e5:8e:57:24:52:75:af:ea:
68:63:8b:fb:b0:c6:88:81:70:d0:61:fc:5b:92:6b:c7:46:fd:
34:35:eb:2a:a0:7a:cf:9b:0e:0d:60:ed:75:83:3e:0b:22:4f:
14:1d:a9:7f:10:1a:ca:7b:64:cb:42:05:63:b2:46:48:11:cd:
93:d0:32:3c:95:d4:d8:32:d3:4a:38:ca:c5:9c:64:bb:a3:d4:
77:e3:94:4e:4f:3a:0f:8f:d3:8f:6e:90:2d:4f:7a:cf:bb:39:
be:4e:9c:56:3f:2d:ce:ec:b1:6d:f0:32:d2:78:d8:0c:e9:ef:
a7:6f:2a:e6:c9:53:9f:d6:fe:de:09:98:5f:96:52:70:fc:bd:
ec:00:23:b6:b4:1c:b9:61:5f:9f:34:3a:9c:8e:9d:6c:f8:6a:
db:86:db:ff:b7:0d:1d:f8:d5:a9:c3:94:1c:d7:a5:0a:38:29:
ed:fe:da:3e:18:ec:9a:61:31:f6:05:42:43:f7:96:68:98:b3:
69:51:98:12:8f:29:a3:cb:02:d0:3d:fa:82:78:41:dd:44:95:
9d:65:ce:77:f4:dc:6b:6a:30:3f:2a:6e:41:ea:dd:03:99:71:
63:cb:bb:29:04:26:ef:b4:03:57:22:b7:8f:19:23:85:2c:a3:
e9:f0:06:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFZqRd4bWU5hZZlDb7mNMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTljZWJlMGNmMDk5MDM5MDNkMTljMWNhMGFlNjI0MjE3
NjQ4NTkwHhcNMjUwODIzMDQwMDE5WhcNMjUwODI0MDQwMDE5WjAzMTEwLwYDVQQD
Eyg3ODgyMTJmNTcyYmFiODRkMTc2ZGRmYzE5YTg5NzYwNDUyYThhNmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HJ4Iu0iTr5AS7UYz8gfl2qjSNZX
t61uW6bJdLtAueCmVneFWc32IsHEj+ZMZIlW4FcL58TRVJmfwKu2ozJQKh0YTVA8
CUo6EROLHfczfQ/TaL4AfxORBdFXFqdj8iMPVo2QYgBVsIFKKQEoXQXgASAYsKhl
ZFrMnuCDHWJnSS3Jn8hw9nxfhXZBqzuE4oI9sch1RfvJwfKxPGTcDcx0PxXltCVN
EdSB6++l8CY8tA6La00V7i2YBpRz9QjzcvpFSkSdwmnVbam3oeXoBskk0E0jZ/UH
uia5ycI5+lwNcbyBZr9DpBE/d0lonkg/SoHOlXhhUF3HAfeOMPBof94GNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiCEvVyurhNF23fwZqJdgRSqKanMB8GA1UdIwQY
MBaAFByZzr4M8JkDkD0ZwcoK5iQhdkhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zZmVhMWEtNTdiYy00OTNhLTlhM2Ut
OGMyNWI1ZmIyNzZmLzEvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8zZmVhMWEtNTdiYy00OTNhLTlhM2UtOGMyNWI1ZmIyNzZm
LzEvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABG1U+Obv
xWgItuWOVyRSda/qaGOL+7DGiIFw0GH8W5Jrx0b9NDXrKqB6z5sODWDtdYM+CyJP
FB2pfxAayntky0IFY7JGSBHNk9AyPJXU2DLTSjjKxZxku6PUd+OUTk86D4/Tj26Q
LU96z7s5vk6cVj8tzuyxbfAy0njYDOnvp28q5slTn9b+3gmYX5ZScPy97AAjtrQc
uWFfnzQ6nI6dbPhq24bb/7cNHfjVqcOUHNelCjgp7f7aPhjsmmEx9gVCQ/eWaJiz
aVGYEo8po8sC0D36gnhB3USVnWXOd/Tca2owPypuQerdA5lxY8u7KQQm77QDVyK3
jxkjhSyj6fAG9A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:35 2025 by rpki-client