Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
File: hHi3bGnJkVKU_cORNeINrHN2IiU.mft (raw, json)
Hash identifier: zkxpDAE/j9pK0wGTpG32/nQk1VTOhk8WX4kl41m9jRU=
Subject key identifier: FB:6A:DD:A4:99:14:52:DE:AE:16:81:65:2A:65:20:8A:7F:F0:15:24
Authority key identifier: 84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
Certificate issuer: /CN=8478b76c69c9915294fdc39135e20dac73762225
Certificate serial: 0198D5BC4C5BD676813A5D6034B1033092B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
Manifest number: 15E2
Signing time: Sat 23 Aug 2025 07:02:23 +0000
Manifest this update: Sat 23 Aug 2025 07:02:23 +0000
Manifest next update: Sun 24 Aug 2025 07:02:23 +0000
Files and hashes: 1: hHi3bGnJkVKU_cORNeINrHN2IiU.crl (hash: 6TROfTiLDAyBzrpSdsEWzytAtVgh0ea92Uq7YMe+9O8=)
2: kclE4AGa3IQ3ANoqx8hNmFyyOPc.roa (hash: era/rLdikRzOubIlTwlZQUllh2OgF4bxbh9GfJNQo5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:4c:5b:d6:76:81:3a:5d:60:34:b1:03:30:92:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8478b76c69c9915294fdc39135e20dac73762225
Validity
Not Before: Aug 23 07:02:23 2025 GMT
Not After : Aug 24 07:02:23 2025 GMT
Subject: CN=fb6adda4991452deae1681652a65208a7ff01524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1b:13:67:70:7c:9e:ab:a6:06:1b:04:80:ee:
12:4a:ef:aa:f3:49:c1:2c:71:72:d5:ea:71:23:58:
60:78:f0:ce:09:e3:98:84:80:e1:aa:37:0f:66:76:
15:a1:4c:e2:3d:77:33:7d:2a:62:01:9d:77:23:ac:
fe:28:74:5e:b6:48:8c:7e:4b:f1:73:9e:65:11:bc:
d9:52:2a:77:aa:c7:7b:95:5c:96:22:40:b6:08:e7:
b5:91:48:50:68:b7:d4:d3:0d:55:63:ea:28:f1:1b:
56:12:47:b5:95:f3:39:a1:6c:47:d9:62:af:76:56:
da:4f:4a:b4:3a:83:98:ec:dd:1f:7b:fb:c0:3f:2c:
c3:6a:83:db:12:cd:75:48:58:3e:40:ea:ae:ef:ac:
63:ac:1f:8b:1c:da:e8:60:73:3a:6a:f9:0c:11:87:
93:1b:57:fc:8d:e5:84:08:01:1e:7f:52:d7:62:80:
8c:f6:30:96:26:00:11:90:b6:b9:4c:be:a4:29:36:
38:0d:69:f8:d3:66:0c:fb:0c:90:3a:c7:b7:5b:dc:
9e:48:d1:62:7b:8b:22:1c:5d:a5:d8:05:01:38:85:
34:cd:8c:e4:05:a6:bb:02:e5:0f:f0:0a:58:40:5b:
1a:38:cb:d6:bf:63:00:0f:9c:a9:54:83:83:5a:d3:
8f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6A:DD:A4:99:14:52:DE:AE:16:81:65:2A:65:20:8A:7F:F0:15:24
X509v3 Authority Key Identifier:
keyid:84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:82:52:ab:c1:5c:66:4a:77:f8:76:fb:91:ac:a2:5d:7d:04:
ad:d0:f7:ac:de:74:08:b1:8f:4d:38:00:5a:5f:5e:94:53:fa:
c3:3e:cb:9c:ec:01:6f:49:0f:7f:9f:d6:71:e0:c9:f6:92:78:
6e:04:ad:05:f6:cb:eb:71:7c:68:06:dc:58:35:00:4e:a1:72:
ea:65:ef:51:c6:cc:51:96:6a:f5:e0:82:7a:87:3d:6d:81:59:
4e:e3:d7:08:66:f0:77:d1:78:ac:3a:17:09:ad:41:6b:6e:ec:
da:0a:0d:81:52:af:cd:63:d4:05:ce:9b:12:3d:84:2d:25:09:
32:d1:10:40:de:a9:86:77:5b:a3:9c:e0:10:73:da:ea:fc:74:
b0:b1:a1:d2:23:25:bc:8e:f9:2e:76:55:ce:36:ae:e1:3f:f8:
5f:d6:f1:cc:06:43:83:72:55:91:33:cf:9c:b7:f0:4e:87:55:
69:e9:fb:2d:8d:25:e5:c1:a9:e1:bd:c5:c7:7b:d8:dc:d8:67:
be:f3:c2:ce:58:15:b1:5d:76:36:55:4d:4d:46:4f:55:73:d0:
e6:cc:6b:60:47:f4:07:ff:a5:34:43:62:7f:ba:c2:8f:6f:fa:
4c:39:a8:aa:70:0c:2a:e1:65:37:51:a2:52:e7:c1:94:33:f9:
11:e5:b9:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvExb1naBOl1gNLEDMJKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NzhiNzZjNjljOTkxNTI5NGZkYzM5MTM1ZTIwZGFjNzM3
NjIyMjUwHhcNMjUwODIzMDcwMjIzWhcNMjUwODI0MDcwMjIzWjAzMTEwLwYDVQQD
EyhmYjZhZGRhNDk5MTQ1MmRlYWUxNjgxNjUyYTY1MjA4YTdmZjAxNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBsTZ3B8nqumBhsEgO4SSu+q80nB
LHFy1epxI1hgePDOCeOYhIDhqjcPZnYVoUziPXczfSpiAZ13I6z+KHRetkiMfkvx
c55lEbzZUip3qsd7lVyWIkC2COe1kUhQaLfU0w1VY+oo8RtWEke1lfM5oWxH2WKv
dlbaT0q0OoOY7N0fe/vAPyzDaoPbEs11SFg+QOqu76xjrB+LHNroYHM6avkMEYeT
G1f8jeWECAEef1LXYoCM9jCWJgARkLa5TL6kKTY4DWn402YM+wyQOse3W9yeSNFi
e4siHF2l2AUBOIU0zYzkBaa7AuUP8ApYQFsaOMvWv2MAD5ypVIODWtOPJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtq3aSZFFLerhaBZSplIIp/8BUkMB8GA1UdIwQY
MBaAFIR4t2xpyZFSlP3DkTXiDaxzdiIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEhpM2JHbkprVktVX2NPUk5lSU5ySE4ySWlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8yODk2MDYtOWY1Yi00ZDM0LWFhY2Yt
MmZkNjUwY2VmZDIxLzEvaEhpM2JHbkprVktVX2NPUk5lSU5ySE4ySWlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8yODk2MDYtOWY1Yi00ZDM0LWFhY2YtMmZkNjUwY2VmZDIx
LzEvaEhpM2JHbkprVktVX2NPUk5lSU5ySE4ySWlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEoJSq8Fc
Zkp3+Hb7kayiXX0ErdD3rN50CLGPTTgAWl9elFP6wz7LnOwBb0kPf5/WceDJ9pJ4
bgStBfbL63F8aAbcWDUATqFy6mXvUcbMUZZq9eCCeoc9bYFZTuPXCGbwd9F4rDoX
Ca1Ba27s2goNgVKvzWPUBc6bEj2ELSUJMtEQQN6phndbo5zgEHPa6vx0sLGh0iMl
vI75LnZVzjau4T/4X9bxzAZDg3JVkTPPnLfwTodVaen7LY0l5cGp4b3Fx3vY3Nhn
vvPCzlgVsV12NlVNTUZPVXPQ5sxrYEf0B/+lNENif7rCj2/6TDmoqnAMKuFlN1Gi
UufBlDP5EeW54Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:18 2025 by rpki-client