Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File: hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier: 3yFXVuf1wkQc5M355PJhIzRJ61YmYwO59axSO9KHAmw=
Subject key identifier: D9:84:12:11:84:C3:FC:D9:D8:95:A9:70:9F:1B:82:F6:2B:7E:3C:98
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer: /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial: 0197B820C822141CD73A1D8BF44AC8F6576F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 20:00:45 +0000
Manifest this update: Sat 28 Jun 2025 20:00:45 +0000
Manifest next update: Sun 29 Jun 2025 20:00:45 +0000
Files and hashes: 1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: zPvukeHsXcvdTXXTWZuJdHtHqA1s5/Zjnf89qXYl+0k=)
2: jg1_qGOypFs-Omg84eci-XkXn6M.roa (hash: Hutcm4lZFs78dltAQDGy1uUI7H+2kpc6tWhDJ8JMDfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:c8:22:14:1c:d7:3a:1d:8b:f4:4a:c8:f6:57:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Validity
Not Before: Jun 28 20:00:45 2025 GMT
Not After : Jun 29 20:00:45 2025 GMT
Subject: CN=d984121184c3fcd9d895a9709f1b82f62b7e3c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:05:ee:c7:1f:af:94:64:78:b5:87:fc:85:
0b:ee:80:85:f2:bb:65:c6:f4:ba:26:5e:6b:31:9e:
76:0d:5a:28:ec:a1:c5:46:95:87:ea:ca:a5:db:b3:
88:5e:19:a1:dd:bc:63:bc:5f:11:26:1c:6a:9c:7b:
e1:b0:aa:b6:4a:5d:21:f6:c3:09:03:79:36:59:42:
f0:12:48:6f:f5:70:fa:a5:32:24:7e:d6:83:99:3a:
b3:84:7d:ca:4e:b0:d8:f9:4a:1f:c3:7d:06:40:f9:
a3:f7:10:b9:77:73:83:5d:51:24:49:85:f1:60:86:
71:a2:67:0b:b8:fa:8c:b0:9b:ef:c2:30:23:8c:0d:
5f:ed:c4:33:c0:0e:e2:c9:06:38:fb:8e:a6:ab:7f:
02:84:99:d4:d3:7f:35:27:bd:94:f4:50:18:cc:af:
ae:ff:52:8c:b7:f9:f6:e8:d7:ee:8a:bc:28:1b:59:
f3:23:02:e5:3a:36:a8:e4:47:1a:ec:dd:c8:b7:1b:
72:23:64:06:32:d1:68:6e:5a:eb:fb:c2:78:4d:8e:
85:99:c9:5b:33:58:48:aa:f9:a1:be:1e:81:44:56:
fd:80:9e:3d:eb:82:b0:8b:0a:b2:26:9c:dd:1b:60:
d7:84:cb:0d:88:a2:a3:de:62:97:8c:2f:10:00:80:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:84:12:11:84:C3:FC:D9:D8:95:A9:70:9F:1B:82:F6:2B:7E:3C:98
X509v3 Authority Key Identifier:
keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b9:f2:9b:90:e5:df:84:0a:70:5f:d6:9b:84:1c:bb:19:44:
e9:01:bd:08:cd:7c:c3:28:dd:2a:50:b0:05:77:32:01:f4:2f:
ca:a3:8b:f1:c0:77:ee:e6:89:90:9a:5a:2a:0e:d5:7f:d9:57:
02:25:47:56:59:ba:e0:55:78:7c:c5:ad:e0:47:5e:47:cc:af:
b6:9b:14:6e:9e:b8:3a:b3:37:5e:a2:cd:ee:74:3d:29:29:9e:
2b:ac:a8:d8:3a:fa:c0:61:31:0c:2a:6e:70:16:0d:05:1f:28:
02:77:86:9c:30:35:5c:8f:58:77:5b:a1:a4:89:64:2a:93:a1:
a5:c3:88:c0:5f:03:45:1f:40:2d:f7:32:5c:eb:83:00:c2:72:
df:85:2e:5a:ce:cf:70:7c:f5:c0:67:cb:c1:33:13:b9:47:3e:
81:40:bf:7d:65:f8:fd:3d:e8:21:92:f2:1e:24:c4:23:fa:59:
a7:32:d7:05:fc:8d:b3:84:7f:27:24:d5:0f:48:90:44:30:23:
82:33:97:98:79:f7:b3:ef:c3:32:1e:e6:47:3d:84:a5:17:0b:
3c:bd:60:48:31:e5:e2:ac:db:a2:4f:23:6e:9c:69:49:e9:e8:
54:62:c6:cd:39:7d:cb:96:2a:f9:79:e0:28:a3:2f:7a:1b:f8:
05:fa:77:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IMgiFBzXOh2L9ErI9ldvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NDZhZjE4ZjcwNzhhYWMwMGMyZmNkMmNhNjdmOTMyODAy
MTdlMTUwHhcNMjUwNjI4MjAwMDQ1WhcNMjUwNjI5MjAwMDQ1WjAzMTEwLwYDVQQD
EyhkOTg0MTIxMTg0YzNmY2Q5ZDg5NWE5NzA5ZjFiODJmNjJiN2UzYzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnsF7scfr5RkeLWH/IUL7oCF8rtl
xvS6Jl5rMZ52DVoo7KHFRpWH6sql27OIXhmh3bxjvF8RJhxqnHvhsKq2Sl0h9sMJ
A3k2WULwEkhv9XD6pTIkftaDmTqzhH3KTrDY+Uofw30GQPmj9xC5d3ODXVEkSYXx
YIZxomcLuPqMsJvvwjAjjA1f7cQzwA7iyQY4+46mq38ChJnU0381J72U9FAYzK+u
/1KMt/n26NfuirwoG1nzIwLlOjao5Eca7N3ItxtyI2QGMtFoblrr+8J4TY6Fmclb
M1hIqvmhvh6BRFb9gJ4964KwiwqyJpzdG2DXhMsNiKKj3mKXjC8QAIBYAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmEEhGEw/zZ2JWpcJ8bgvYrfjyYMB8GA1UdIwQY
MBaAFIVGrxj3B4qsAML80spn+TKAIX4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYTY4ODgtYjlhZC00YjgxLWI5MzUt
NmJlYWVlNWI1OGEzLzEvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYTY4ODgtYjlhZC00YjgxLWI5MzUtNmJlYWVlNWI1OGEz
LzEvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7nym5Dl
34QKcF/Wm4QcuxlE6QG9CM18wyjdKlCwBXcyAfQvyqOL8cB37uaJkJpaKg7Vf9lX
AiVHVlm64FV4fMWt4EdeR8yvtpsUbp64OrM3XqLN7nQ9KSmeK6yo2Dr6wGExDCpu
cBYNBR8oAneGnDA1XI9Yd1uhpIlkKpOhpcOIwF8DRR9ALfcyXOuDAMJy34UuWs7P
cHz1wGfLwTMTuUc+gUC/fWX4/T3oIZLyHiTEI/pZpzLXBfyNs4R/JyTVD0iQRDAj
gjOXmHn3s+/DMh7mRz2EpRcLPL1gSDHl4qzbok8jbpxpSenoVGLGzTl9y5Yq+Xng
KKMvehv4Bfp3Gw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:25:57 2025 by rpki-client