Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: sKAtuc4i6lrO3fnQtzANcCGaW8cSvmNhJOeK5+f8lHw=
Subject key identifier: D8:9E:33:08:20:1F:3E:6A:5F:45:67:68:92:1F:0E:11:7D:62:9C:7A
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 0198D404A7D64D6967F2F38BF8BF7CDC41BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 164C
Signing time: Fri 22 Aug 2025 23:02:11 +0000
Manifest this update: Fri 22 Aug 2025 23:02:11 +0000
Manifest next update: Sat 23 Aug 2025 23:02:11 +0000
Files and hashes: 1: 0EXTA2fh52m_pdzndlQONOR-ALo.roa (hash: 6rMWco6WBnZhVNOyIqX9uMPGJDuagIsvvOicEopd/aI=)
2: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: OXeDHQPWD7mBg1LkHa3sG9AIp5fGmiO6Yl1YASFBK/A=)
3: pdSwS3q_Aq9iIM8JVjDKkb9Kesw.roa (hash: Ci1NRJKdqWSbaDsRVp57BbXUB2naGLYnO5kSwluYKxo=)
4: ztoXV0czkggEzKpWeBIPpNx7Y00.roa (hash: MW72dY631rN8xBMa8x273b/yH8cBTnl1fp+7hzq29aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:a7:d6:4d:69:67:f2:f3:8b:f8:bf:7c:dc:41:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Aug 22 23:02:11 2025 GMT
Not After : Aug 23 23:02:11 2025 GMT
Subject: CN=d89e3308201f3e6a5f456768921f0e117d629c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:48:f8:3d:a9:45:28:ee:60:2f:fd:57:61:
cf:61:ab:9a:27:14:fb:3a:9f:15:0b:05:e8:3d:4d:
4d:4c:a4:62:9e:ff:72:5a:f2:01:19:01:b4:96:cb:
60:76:d1:08:f4:be:1b:35:10:57:7d:16:a7:24:d8:
bf:96:da:76:4e:8f:e8:71:3c:fb:7f:18:96:16:47:
8a:d2:c5:6b:a8:04:05:d0:ab:6e:83:70:e1:07:f7:
76:20:96:d9:a5:20:fd:bb:66:93:42:6b:15:f8:99:
1b:a7:08:68:7f:97:3e:db:40:b1:82:4b:d1:f7:60:
11:dc:13:a5:cc:35:8f:68:45:0d:a3:86:25:f7:19:
d9:c0:94:4c:6b:56:0d:fb:49:27:26:f2:f0:55:73:
03:6a:ea:b0:16:16:d2:47:d7:19:81:35:ec:2f:13:
07:ea:5c:b6:27:a1:46:21:22:ed:56:74:55:87:c0:
ce:87:3a:20:31:45:bc:0c:84:b7:70:34:aa:61:48:
59:df:44:fb:13:6d:7c:66:13:56:26:07:fd:63:88:
7a:de:b9:75:c1:6b:73:ba:5c:62:d4:53:83:97:cc:
c4:79:e1:8d:81:6d:0b:71:ff:d4:ee:0b:0c:ee:e1:
a5:f1:a8:f3:0b:d6:06:7b:41:da:d3:e6:e9:2c:ea:
3c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9E:33:08:20:1F:3E:6A:5F:45:67:68:92:1F:0E:11:7D:62:9C:7A
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:dc:49:f0:7d:86:5c:1f:d2:63:4f:dd:1d:75:c9:81:34:19:
26:d8:db:e4:be:67:63:52:7a:64:f6:5b:d7:10:23:73:a9:3e:
06:76:ed:42:7d:07:96:4c:25:a0:20:c5:32:51:ac:b4:91:b5:
61:ea:38:a7:4f:6c:e7:e6:22:ca:bf:26:30:88:d4:c8:ac:be:
27:d9:ab:3e:0c:36:9f:70:2a:76:39:d5:39:45:93:7c:4e:1a:
0e:d4:80:85:0d:c1:f8:bf:49:b9:d2:d8:da:1a:2f:a3:29:91:
53:be:8a:ed:26:ee:1f:3c:f0:18:ca:ed:e3:5d:f6:6c:1b:4e:
4c:23:58:16:e3:9f:ae:68:7b:da:80:ae:65:9e:9a:d4:61:21:
9e:e7:61:3c:9f:45:46:72:9d:21:77:c9:f1:93:a3:4d:0d:27:
1b:89:61:10:e7:d0:9c:b5:bb:09:7b:2d:95:84:1d:fa:cc:20:
fe:77:69:06:01:2e:0f:c9:9d:3b:cd:ef:dd:a4:ab:72:3d:66:
f1:21:09:47:b1:e7:a8:0e:bc:5d:a3:45:dd:a0:78:3b:a1:be:
33:0d:0c:0b:35:4c:a8:7e:62:2b:be:e7:f6:26:2d:06:47:fc:
d3:f5:28:41:ad:20:16:dd:91:b6:fb:4a:57:07:5e:00:85:bf:
39:e5:8e:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBKfWTWln8vOL+L983EG9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNTE0MDk4YTVhOTczNmNkYTQzMDNlMDQ5NWU5NDY1MjM5
MGFhOTEwHhcNMjUwODIyMjMwMjExWhcNMjUwODIzMjMwMjExWjAzMTEwLwYDVQQD
EyhkODllMzMwODIwMWYzZTZhNWY0NTY3Njg5MjFmMGUxMTdkNjI5YzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN9I+D2pRSjuYC/9V2HPYauaJxT7
Op8VCwXoPU1NTKRinv9yWvIBGQG0lstgdtEI9L4bNRBXfRanJNi/ltp2To/ocTz7
fxiWFkeK0sVrqAQF0Ktug3DhB/d2IJbZpSD9u2aTQmsV+Jkbpwhof5c+20CxgkvR
92AR3BOlzDWPaEUNo4Yl9xnZwJRMa1YN+0knJvLwVXMDauqwFhbSR9cZgTXsLxMH
6ly2J6FGISLtVnRVh8DOhzogMUW8DIS3cDSqYUhZ30T7E218ZhNWJgf9Y4h63rl1
wWtzulxi1FODl8zEeeGNgW0Lcf/U7gsM7uGl8ajzC9YGe0Ha0+bpLOo8swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNieMwggHz5qX0VnaJIfDhF9Ypx6MB8GA1UdIwQY
MBaAFB5RQJilqXNs2kMD4ElelGUjkKqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxGQW1LV3BjMnphUXdQZ1NWNlVaU09RcXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNWRmY2ItZDkyZC00OGZlLTlkYWQt
ODU0MzgxNjg2YzdiLzEvSGxGQW1LV3BjMnphUXdQZ1NWNlVaU09RcXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8zNWRmY2ItZDkyZC00OGZlLTlkYWQtODU0MzgxNjg2Yzdi
LzEvSGxGQW1LV3BjMnphUXdQZ1NWNlVaU09RcXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdxJ8H2G
XB/SY0/dHXXJgTQZJtjb5L5nY1J6ZPZb1xAjc6k+BnbtQn0HlkwloCDFMlGstJG1
Yeo4p09s5+Yiyr8mMIjUyKy+J9mrPgw2n3AqdjnVOUWTfE4aDtSAhQ3B+L9JudLY
2hovoymRU76K7SbuHzzwGMrt4132bBtOTCNYFuOfrmh72oCuZZ6a1GEhnudhPJ9F
RnKdIXfJ8ZOjTQ0nG4lhEOfQnLW7CXstlYQd+swg/ndpBgEuD8mdO83v3aSrcj1m
8SEJR7HnqA68XaNF3aB4O6G+Mw0MCzVMqH5iK77n9iYtBkf80/UoQa0gFt2RtvtK
VwdeAIW/OeWOvg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:11 2025 by rpki-client