Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
File: hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json)
Hash identifier: bzgxphXYBt7IXLevgaxjDi7ZUfjRc/XtpqUC1aZIwDY=
Subject key identifier: 45:C4:3E:1B:17:BA:9D:BF:8B:D5:32:38:DF:F8:9D:84:1A:74:A2:D0
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Certificate issuer: /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial: 0197B77C0808790D1D3269679922C8C039B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:00:48 +0000
Manifest this update: Sat 28 Jun 2025 17:00:48 +0000
Manifest next update: Sun 29 Jun 2025 17:00:48 +0000
Files and hashes: 1: O8vYugo1IMFhRrolkiJ5A2F_9k4.roa (hash: vT082QVsehcKVaVyOGMEheCQhaYoT8jhfxj4aHEzNiI=)
2: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: eUWBXZyf7oblKvBCccLLqemzfjYZVTHu/YMjc9WnCoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:08:08:79:0d:1d:32:69:67:99:22:c8:c0:39:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Validity
Not Before: Jun 28 17:00:48 2025 GMT
Not After : Jun 29 17:00:48 2025 GMT
Subject: CN=45c43e1b17ba9dbf8bd53238dff89d841a74a2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:1d:6b:09:3c:ee:3d:51:ca:a7:52:67:51:
b8:c0:01:33:51:5b:71:d5:da:0d:40:95:f9:a2:ab:
cd:8f:a9:36:c4:8e:f6:c7:db:d4:03:49:f9:c9:f2:
1b:26:f6:ea:38:cf:7a:da:fa:c5:44:74:1a:3c:f5:
bb:7e:fd:3f:62:b4:a1:d6:9d:f8:f5:1e:75:a7:02:
1e:e7:45:0f:31:66:09:5b:e7:af:a3:b0:37:36:f5:
51:33:6a:f5:50:4a:b4:e5:a8:30:15:08:2a:0a:b3:
18:ad:8b:59:8a:da:84:a9:e4:3e:06:26:36:a4:26:
86:41:6c:c5:31:b7:16:49:f2:b8:22:19:e8:d4:02:
a2:1c:a0:dc:cb:a1:da:d9:b7:dd:63:68:86:c0:8d:
41:b8:61:21:b8:a2:2c:d9:a1:a6:35:b0:3d:a3:6e:
9b:b5:6f:e8:be:62:47:3e:e6:40:6a:eb:d7:10:f6:
9b:b7:5e:5f:69:14:d5:6a:0b:b2:5c:20:e4:a9:30:
bd:e1:27:1c:2a:a2:4a:a7:33:63:f1:c9:5d:5f:f7:
04:3e:65:72:d1:9e:0d:6e:af:c9:30:ac:bc:a5:20:
54:0f:28:f1:5a:8f:a1:d2:ba:d6:80:f4:67:27:4d:
b1:92:2f:23:99:bb:f4:2b:08:b9:bf:cd:85:07:62:
a2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C4:3E:1B:17:BA:9D:BF:8B:D5:32:38:DF:F8:9D:84:1A:74:A2:D0
X509v3 Authority Key Identifier:
keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:64:d0:fb:55:34:40:7c:af:27:07:1b:6c:9a:2a:cd:1a:3d:
fc:79:f3:ec:e7:97:f7:48:58:82:70:9f:3e:fe:5d:74:35:01:
09:5e:50:76:07:f2:e7:6d:d5:e8:2c:85:20:db:46:77:92:0e:
c1:f5:60:22:4a:22:9c:1f:53:a9:48:97:94:7e:35:1f:9c:3b:
e6:78:1f:36:ef:db:ba:a9:d2:67:a3:32:23:c5:f4:60:0a:7c:
7c:b0:07:4e:0b:44:91:f5:19:cc:bf:c2:4f:ce:f4:68:9e:94:
34:17:6b:08:24:05:97:54:4c:b9:a9:b1:68:07:c2:03:9c:3f:
b0:b1:9c:e6:a3:43:43:2c:f6:2a:cb:d4:4d:ce:8b:2b:55:31:
5c:bd:c8:9f:13:8e:1f:e5:09:6e:da:a8:fa:d9:c9:ba:89:bf:
9e:c4:a9:59:7f:da:13:77:f3:c2:10:dd:17:d4:96:90:e4:d5:
42:64:ff:f2:1f:d5:fb:ae:c2:8e:b3:85:f9:e9:08:ca:55:11:
8e:9a:62:1c:fa:22:e6:b3:d1:63:dd:b6:09:78:e1:a2:75:5a:
3c:96:6f:b4:1f:e3:2a:0e:0c:6f:96:ed:5b:6b:6c:07:ec:f1:
37:0b:d7:03:2e:40:68:01:1f:31:0d:7a:df:99:c5:37:78:78:
77:90:e7:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fAgIeQ0dMmlnmSLIwDmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjVhNDBiMjc0YTk2M2U1ZWQzZWYwMmU4Mzk5Y2I5YjFi
YjBjN2IwHhcNMjUwNjI4MTcwMDQ4WhcNMjUwNjI5MTcwMDQ4WjAzMTEwLwYDVQQD
Eyg0NWM0M2UxYjE3YmE5ZGJmOGJkNTMyMzhkZmY4OWQ4NDFhNzRhMmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub4dawk87j1RyqdSZ1G4wAEzUVtx
1doNQJX5oqvNj6k2xI72x9vUA0n5yfIbJvbqOM962vrFRHQaPPW7fv0/YrSh1p34
9R51pwIe50UPMWYJW+evo7A3NvVRM2r1UEq05agwFQgqCrMYrYtZitqEqeQ+BiY2
pCaGQWzFMbcWSfK4Ihno1AKiHKDcy6Ha2bfdY2iGwI1BuGEhuKIs2aGmNbA9o26b
tW/ovmJHPuZAauvXEPabt15faRTVaguyXCDkqTC94SccKqJKpzNj8cldX/cEPmVy
0Z4Nbq/JMKy8pSBUDyjxWo+h0rrWgPRnJ02xki8jmbv0Kwi5v82FB2KieQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXEPhsXup2/i9UyON/4nYQadKLQMB8GA1UdIwQY
MBaAFIS1pAsnSpY+XtPvAug5nLmxuwx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zZDk3NzctYzk5Ni00NmZjLTlkNjct
YTcyMGFmODYxZmVlLzEvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8zZDk3NzctYzk5Ni00NmZjLTlkNjctYTcyMGFmODYxZmVl
LzEvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWTQ+1U0
QHyvJwcbbJoqzRo9/Hnz7OeX90hYgnCfPv5ddDUBCV5Qdgfy523V6CyFINtGd5IO
wfVgIkoinB9TqUiXlH41H5w75ngfNu/buqnSZ6MyI8X0YAp8fLAHTgtEkfUZzL/C
T870aJ6UNBdrCCQFl1RMuamxaAfCA5w/sLGc5qNDQyz2KsvUTc6LK1UxXL3InxOO
H+UJbtqo+tnJuom/nsSpWX/aE3fzwhDdF9SWkOTVQmT/8h/V+67CjrOF+ekIylUR
jppiHPoi5rPRY922CXjhonVaPJZvtB/jKg4Mb5btW2tsB+zxNwvXAy5AaAEfMQ16
35nFN3h4d5DnIg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:15:08 2025 by rpki-client