Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: EFta7EOtGRtnZr/PAPYFqIneVVK4YUAiZXTPSVO2Pqs=
Subject key identifier: 2C:39:99:D4:85:81:5C:AA:8D:0F:2F:62:00:70:F4:DB:37:5D:7C:80
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 0198D5BBA407EBD3DF5715A6FA33F17E8AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 023F
Signing time: Sat 23 Aug 2025 07:01:40 +0000
Manifest this update: Sat 23 Aug 2025 07:01:40 +0000
Manifest next update: Sun 24 Aug 2025 07:01:40 +0000
Files and hashes: 1: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: DOsmd5qTZhRdsLHo+zgyMkxi4skib3Pf2bDrMH7XS7M=)
2: S1nE70948dC5DoQ6HvBbscWKaKw.roa (hash: rrKy+sC3QNlyr1Y5CMFJM8t+NCjq84nz7sTi50q+o50=)
3: b6ZzKOMlbidIPPMmelSif3w-9QM.roa (hash: 2SCmCkEfpqWs55+MpqiuJcmKP1bT8emMjJpFq+nQcFs=)
4: g6q7q2HLmrL68PDSTTyRIYBNcJY.roa (hash: eTY6Q+eiIrBv9YE0+f1h1CVgS/oOAfzZcA42kSmU6+0=)
5: tVe9NnJO2Z95ZTZ1L61RChKUAa0.roa (hash: f4jqfRGm53uIrMSNBpcr7YiVL+9kyYDEvd948D1JBYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a4:07:eb:d3:df:57:15:a6:fa:33:f1:7e:8a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Aug 23 07:01:40 2025 GMT
Not After : Aug 24 07:01:40 2025 GMT
Subject: CN=2c3999d485815caa8d0f2f620070f4db375d7c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:0b:15:f7:90:99:e0:b4:48:3b:71:83:6d:
4a:75:b3:56:94:6e:dd:93:61:b7:78:b2:34:02:18:
4f:cc:70:dd:54:92:da:f9:4f:db:d1:a1:ab:36:26:
b8:41:7f:38:cc:1e:bc:d0:6b:b7:23:d0:97:e9:e2:
19:8f:dc:5c:8b:3b:00:05:9e:c9:b9:8f:ae:f3:92:
f5:3a:99:17:33:85:14:18:63:65:a5:87:15:54:d6:
44:09:1b:54:fa:b7:f9:42:95:82:63:83:46:d3:38:
48:67:a8:20:27:25:75:fc:aa:49:7e:63:09:46:f7:
b6:6e:ff:51:96:29:89:57:fb:3b:9a:75:3a:aa:c9:
6d:ed:ac:64:6e:fb:64:23:d9:f9:4f:7d:43:d8:6f:
18:93:f7:09:be:85:59:6b:43:5d:b7:e3:97:1a:de:
d0:97:c4:cb:bd:08:75:3b:ae:91:4b:ca:ca:14:b0:
fb:74:64:37:cb:dd:3e:36:40:7d:8a:bb:fa:23:dc:
87:f4:49:e2:88:9c:83:5d:04:6f:67:f1:c8:9b:96:
7d:3e:e9:5e:09:6a:18:f3:f0:1b:ea:15:f7:ff:e4:
73:e1:01:77:ef:5a:ea:3e:3a:66:a7:f7:bd:f5:39:
6b:8f:9d:bc:c8:41:3d:b5:09:0b:2b:50:62:60:2c:
d3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:39:99:D4:85:81:5C:AA:8D:0F:2F:62:00:70:F4:DB:37:5D:7C:80
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bf:b2:69:b1:2f:b5:53:4c:e4:4b:26:42:ca:14:22:c0:0b:
9e:bd:d4:f9:10:fd:89:81:2a:b9:2f:aa:cd:e8:8b:77:d7:83:
d5:08:28:ff:d0:c8:82:86:dc:f2:de:07:a6:07:d5:bc:12:3d:
31:56:49:6e:28:34:9a:3a:6d:b8:43:a5:85:b6:86:4c:c8:b1:
b0:b1:22:18:fa:0b:13:f0:10:5d:57:e8:32:45:b9:c1:5e:7b:
08:06:b5:30:01:6a:78:a0:9f:ac:7e:d3:d7:56:a3:68:62:e8:
0f:41:17:1a:6c:cd:e1:5c:5d:30:eb:8b:88:e7:1a:dd:48:91:
21:5e:77:bb:1f:0e:e4:ff:74:e5:f3:80:18:85:93:40:f5:1d:
9e:87:49:ce:bf:17:d5:58:de:ec:ef:07:13:0f:5e:c6:57:0f:
5d:b2:a9:aa:87:83:4e:63:a2:d1:7c:7f:13:83:31:39:cc:4f:
ff:34:8a:ed:8c:44:a7:7c:25:01:2b:e6:66:25:92:28:dc:71:
2e:42:10:ef:db:9f:24:9d:39:42:89:96:5b:ee:59:78:05:40:
be:cd:5a:36:50:23:77:05:dd:b2:9f:f8:b2:bb:13:28:38:50:
4e:93:a7:a1:10:a3:ca:58:f2:e8:4a:23:4d:01:27:89:eb:e5:
80:8b:60:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu6QH69PfVxWm+jPxfor3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMWUyZWFhZWYwNzAxNTk1YWMyNzU0ZDAxMjEyMTdlN2I5
MWQ3MzkwHhcNMjUwODIzMDcwMTQwWhcNMjUwODI0MDcwMTQwWjAzMTEwLwYDVQQD
EygyYzM5OTlkNDg1ODE1Y2FhOGQwZjJmNjIwMDcwZjRkYjM3NWQ3YzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcgLFfeQmeC0SDtxg21KdbNWlG7d
k2G3eLI0AhhPzHDdVJLa+U/b0aGrNia4QX84zB680Gu3I9CX6eIZj9xcizsABZ7J
uY+u85L1OpkXM4UUGGNlpYcVVNZECRtU+rf5QpWCY4NG0zhIZ6ggJyV1/KpJfmMJ
Rve2bv9RlimJV/s7mnU6qslt7axkbvtkI9n5T31D2G8Yk/cJvoVZa0Ndt+OXGt7Q
l8TLvQh1O66RS8rKFLD7dGQ3y90+NkB9irv6I9yH9EniiJyDXQRvZ/HIm5Z9Pule
CWoY8/Ab6hX3/+Rz4QF371rqPjpmp/e99Tlrj528yEE9tQkLK1BiYCzT3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCw5mdSFgVyqjQ8vYgBw9Ns3XXyAMB8GA1UdIwQY
MBaAFB8eLqrvBwFZWsJ1TQEhIX57kdc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMt
MmIzNGI4NDMzYmI1LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMtMmIzNGI4NDMzYmI1
LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdr+yabEv
tVNM5EsmQsoUIsALnr3U+RD9iYEquS+qzeiLd9eD1Qgo/9DIgobc8t4HpgfVvBI9
MVZJbig0mjptuEOlhbaGTMixsLEiGPoLE/AQXVfoMkW5wV57CAa1MAFqeKCfrH7T
11ajaGLoD0EXGmzN4VxdMOuLiOca3UiRIV53ux8O5P905fOAGIWTQPUdnodJzr8X
1Vje7O8HEw9exlcPXbKpqoeDTmOi0Xx/E4MxOcxP/zSK7YxEp3wlASvmZiWSKNxx
LkIQ79ufJJ05QomWW+5ZeAVAvs1aNlAjdwXdsp/4srsTKDhQTpOnoRCjyljy6Eoj
TQEnievlgItgmA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:20 2025 by rpki-client