Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: rtH1WN+3MZn4sWysZu8CDlLjZHy6SkxUjTgLceCnNc8=
Subject key identifier: 93:54:C3:04:CA:6B:61:5F:D9:2C:DB:0E:59:7B:95:84:DC:52:DF:DC
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 0197C802F4FA4C6B779D3743C69757E91C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 01B3
Signing time: Tue 01 Jul 2025 22:02:06 +0000
Manifest this update: Tue 01 Jul 2025 22:02:06 +0000
Manifest next update: Wed 02 Jul 2025 22:02:06 +0000
Files and hashes: 1: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: HJJZCVEQoPEeiCHKljYwCPR2IwMxUuOJ47rcKKVWLdI=)
2: M29MZHaUVWtK3najarc1yezWgKc.roa (hash: DgsfcRzAIkNIxHuMwWB3b5pmyNDgSLwh6M/sC1bq7QQ=)
3: S1nE70948dC5DoQ6HvBbscWKaKw.roa (hash: rrKy+sC3QNlyr1Y5CMFJM8t+NCjq84nz7sTi50q+o50=)
4: g6q7q2HLmrL68PDSTTyRIYBNcJY.roa (hash: eTY6Q+eiIrBv9YE0+f1h1CVgS/oOAfzZcA42kSmU6+0=)
5: tVe9NnJO2Z95ZTZ1L61RChKUAa0.roa (hash: f4jqfRGm53uIrMSNBpcr7YiVL+9kyYDEvd948D1JBYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 22:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:02:f4:fa:4c:6b:77:9d:37:43:c6:97:57:e9:1c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Jul 1 22:02:06 2025 GMT
Not After : Jul 2 22:02:06 2025 GMT
Subject: CN=9354c304ca6b615fd92cdb0e597b9584dc52dfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:dd:f1:d9:eb:62:aa:80:e6:12:85:3f:cf:
2d:c9:be:40:6f:fc:cd:ff:a7:af:c3:7d:f0:1c:7d:
6e:92:d7:4b:bb:ac:ee:b2:81:68:03:66:52:4b:46:
67:d0:ff:c5:b7:32:80:93:d3:3f:d1:c3:14:d7:2c:
fc:1d:40:42:a5:80:88:81:61:f6:d7:85:c3:e5:58:
f6:5b:7d:f2:a5:68:11:8b:22:e4:8e:e8:a5:46:ae:
7b:c4:ab:e2:bb:eb:37:4e:38:eb:35:f9:fd:f3:d0:
9c:77:b1:06:32:0a:48:6c:8f:73:68:dd:57:cc:8a:
14:05:17:e6:3f:ca:9f:f3:69:67:73:8f:e3:aa:b6:
87:9f:e7:11:ff:f2:a2:71:71:b5:ce:31:2f:54:de:
dc:28:9b:65:93:a2:52:93:a0:84:03:c2:84:56:e6:
a5:43:d3:ba:b1:b2:53:d7:9a:13:a7:c2:b7:c1:8f:
5d:18:ae:57:e7:f3:96:eb:ed:76:13:bf:48:9d:59:
37:3a:e8:93:c9:52:97:33:08:81:b0:76:81:7f:b5:
0e:aa:00:13:07:1f:c5:2e:91:99:b1:75:93:0f:d0:
0c:b7:c3:ce:af:ee:f4:d1:5b:84:2f:8a:01:a8:7a:
12:91:b1:10:76:8c:dd:e2:39:d9:bd:88:ed:6e:ea:
a9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:54:C3:04:CA:6B:61:5F:D9:2C:DB:0E:59:7B:95:84:DC:52:DF:DC
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8f:cc:21:58:5e:25:f4:33:65:ae:bf:f3:23:86:61:fc:84:
ab:77:d0:fe:b0:16:e5:f3:23:ed:22:1b:ec:47:4d:44:57:10:
d6:b2:e2:79:8f:a1:b7:ae:57:bd:15:c8:49:cf:cc:2e:a8:25:
5a:8d:06:36:49:ca:b9:bc:30:d0:d1:7a:98:70:38:5d:aa:d2:
e4:0b:a4:85:b9:1a:51:4b:e0:17:ad:b1:f5:86:a4:92:55:c6:
a7:4a:b7:ab:ea:26:e1:24:ee:c8:24:da:74:8c:2d:99:af:64:
f9:06:e5:d2:f3:95:33:92:12:64:ea:af:e4:4f:44:1c:8f:d5:
84:2f:b0:51:9e:64:43:c5:ba:19:9d:76:10:cd:9a:29:e6:37:
fd:57:8a:34:55:3d:fd:b1:b1:17:12:1f:79:48:ce:41:b9:e1:
f5:e8:cb:04:37:a0:9f:0c:33:3e:ef:1c:9b:2c:1a:07:d4:d7:
7d:32:c8:0f:c3:4b:60:b2:f5:19:4d:64:79:32:22:72:0e:41:
7e:58:80:2a:ca:73:b1:cc:d5:41:e5:32:52:91:7d:28:c0:a3:
b0:39:95:5f:16:14:1d:8b:e9:e6:ee:c4:be:cc:34:a1:3b:3c:
3c:31:53:8f:52:75:b9:cd:78:71:07:5c:a7:3c:4c:cf:58:cd:
2f:6a:2a:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfIAvT6TGt3nTdDxpdX6RyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMWUyZWFhZWYwNzAxNTk1YWMyNzU0ZDAxMjEyMTdlN2I5
MWQ3MzkwHhcNMjUwNzAxMjIwMjA2WhcNMjUwNzAyMjIwMjA2WjAzMTEwLwYDVQQD
Eyg5MzU0YzMwNGNhNmI2MTVmZDkyY2RiMGU1OTdiOTU4NGRjNTJkZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJvd8dnrYqqA5hKFP88tyb5Ab/zN
/6evw33wHH1uktdLu6zusoFoA2ZSS0Zn0P/FtzKAk9M/0cMU1yz8HUBCpYCIgWH2
14XD5Vj2W33ypWgRiyLkjuilRq57xKviu+s3TjjrNfn989Ccd7EGMgpIbI9zaN1X
zIoUBRfmP8qf82lnc4/jqraHn+cR//KicXG1zjEvVN7cKJtlk6JSk6CEA8KEVual
Q9O6sbJT15oTp8K3wY9dGK5X5/OW6+12E79InVk3OuiTyVKXMwiBsHaBf7UOqgAT
Bx/FLpGZsXWTD9AMt8POr+700VuEL4oBqHoSkbEQdozd4jnZvYjtbuqpVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNUwwTKa2Ff2SzbDll7lYTcUt/cMB8GA1UdIwQY
MBaAFB8eLqrvBwFZWsJ1TQEhIX57kdc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMt
MmIzNGI4NDMzYmI1LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMtMmIzNGI4NDMzYmI1
LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYo/MIVhe
JfQzZa6/8yOGYfyEq3fQ/rAW5fMj7SIb7EdNRFcQ1rLieY+ht65XvRXISc/MLqgl
Wo0GNknKubww0NF6mHA4XarS5AukhbkaUUvgF62x9YakklXGp0q3q+om4STuyCTa
dIwtma9k+Qbl0vOVM5ISZOqv5E9EHI/VhC+wUZ5kQ8W6GZ12EM2aKeY3/VeKNFU9
/bGxFxIfeUjOQbnh9ejLBDegnwwzPu8cmywaB9TXfTLID8NLYLL1GU1keTIicg5B
fliAKspzsczVQeUyUpF9KMCjsDmVXxYUHYvp5u7Evsw0oTs8PDFTj1J1uc14cQdc
pzxMz1jNL2oqdQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 06:42:20 2025 by rpki-client