Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json)
Hash identifier: JTAtf9wUXOda9n9fX/H50p+pYMjk9CeIN3aJbcv/AyE=
Subject key identifier: 95:7C:E7:DD:DC:68:D7:25:A3:65:B8:D2:A1:D0:9C:12:31:BE:35:37
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial: 0198D4732F7E06A7C90FA0A12F3DC9A78D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
Manifest number: 1656
Signing time: Sat 23 Aug 2025 01:02:55 +0000
Manifest this update: Sat 23 Aug 2025 01:02:55 +0000
Manifest next update: Sun 24 Aug 2025 01:02:55 +0000
Files and hashes: 1: IZeoqEY95eSVV0eYYLX8T3tHlCs.roa (hash: LO4oh4VYMguVhAQpzzJsbYN82/uMVEn2vgRLSpasT1s=)
2: LJnxaD0i6KMHQc1A1Myl7JzH7gk.roa (hash: BOqHp3/8Lrk2VNXTgZj56poMzxkbv3v/wNmy6/SirSw=)
3: NewZ8pp4liRlRqK_bUM9ux7lUdY.roa (hash: e2V20fh5Bna/npvAqL/4q48RnUBDa1PMa1ud3KkuSzU=)
4: OMAWMgjFkntxY9hjh7x9HjopsUQ.roa (hash: fC4Wynjh9RIf9v3k1CSQsuZtxFupNj1veyw3ZlhI/Jw=)
5: QHrhoLDtZR3zPElOqqmMq3qzkao.roa (hash: NXLg9El+SZKbOxc9Fad+2P9R3XvjaMUu4aKcgfvxLco=)
6: VTgIeAjnu6QDITPutn3ZYiX28hw.roa (hash: 1qNSFP6+K7IEMjkOk6A/QLlgZfO6RHOCGRUYacl+A9I=)
7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: hpFk3jwpkukSPZL1TNlNycD4k2Nxj4KRRV6qmy4Wb2U=)
8: kYOzNphxQuuMN-KEH5LcxfVfKho.roa (hash: ZqTwzdBEFFNTdg6mPtQfwSsq0u9CJRd378DWfNVX+no=)
9: wYF_ylL7pnBo9OaIzACNhn9RjFU.roa (hash: RTPtjL/eZ7d6GsDAAsmLFavUlJqeMCconuqgqwEBbU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:2f:7e:06:a7:c9:0f:a0:a1:2f:3d:c9:a7:8d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
Validity
Not Before: Aug 23 01:02:55 2025 GMT
Not After : Aug 24 01:02:55 2025 GMT
Subject: CN=957ce7dddc68d725a365b8d2a1d09c1231be3537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:26:3d:60:36:e5:0b:8b:c5:0b:91:36:4b:6e:
63:2f:26:56:ff:bf:47:6a:92:bd:97:f3:f5:30:7d:
0f:b5:a6:fa:03:29:95:38:f5:15:82:66:04:bc:2d:
15:b3:76:3c:1b:eb:83:f5:a2:14:4a:cf:5f:fc:a5:
dd:03:b8:06:49:d4:e7:95:db:f5:e6:97:46:66:e6:
cf:0e:52:66:82:50:60:07:9a:9a:ae:2d:33:24:d0:
fd:be:b7:62:ec:89:22:5a:37:c7:f2:b0:22:01:ff:
b8:22:c4:bf:c4:a8:ce:26:ff:e2:62:49:72:8f:a4:
7b:f7:27:17:3a:8c:bd:d2:c2:44:8f:19:77:3e:e4:
58:32:04:05:06:ed:de:35:10:22:8c:a2:d4:f6:d0:
ca:8c:f0:d2:b2:5b:61:88:75:3d:4e:96:1a:0c:a9:
57:d8:30:fe:54:1e:9d:3a:91:5d:44:3e:c3:5c:47:
b5:95:03:37:48:33:64:50:6d:02:aa:33:b1:cb:85:
c3:93:fa:b9:83:cd:c0:f5:24:f2:30:8f:fb:c2:2f:
cf:8c:27:43:be:20:4e:6f:4b:a0:4f:28:a7:fc:c2:
e9:85:64:09:4e:50:4f:62:7b:fc:96:0c:d8:37:68:
6a:ab:64:cb:65:6f:a0:a3:1d:92:09:fe:8f:1a:95:
f0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7C:E7:DD:DC:68:D7:25:A3:65:B8:D2:A1:D0:9C:12:31:BE:35:37
X509v3 Authority Key Identifier:
keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:66:7e:b7:34:35:d1:da:44:cd:36:9e:d4:1a:35:43:e5:20:
f6:68:ab:89:06:a4:e2:9b:81:98:d5:26:23:d2:66:30:6d:7a:
98:d4:40:fe:82:fb:f7:14:6e:b7:b7:e5:34:66:e2:15:41:d2:
54:84:ce:ca:ff:57:b9:b5:0f:f3:ed:35:1b:77:90:5b:91:b0:
5f:39:dc:c0:4b:f1:e0:35:69:c9:b3:5e:1b:cf:c8:56:de:2d:
a4:cf:65:4a:cf:85:3e:3b:c5:4f:b7:6b:df:82:d1:ed:f2:dc:
c1:16:ac:dc:ad:03:f7:ef:a3:e7:e0:d8:1e:c7:a8:27:b5:a1:
28:1e:d2:a8:98:e5:b1:17:a4:34:ec:a9:f7:39:40:74:1b:ad:
41:eb:b8:e5:88:65:02:3e:ba:a2:89:f4:a3:fc:25:0a:71:69:
d0:bc:d7:cf:03:1a:f3:78:59:af:fc:4f:91:f6:c2:71:91:61:
b9:7c:51:73:7d:ed:13:8f:b9:35:4a:06:a5:6b:be:7c:69:d2:
cd:0a:a2:47:b0:cf:8d:3d:70:c4:bb:12:49:02:53:4d:e5:af:
84:a0:0a:98:8c:25:9d:25:09:ad:69:3d:ca:77:70:8a:70:b9:
fa:51:44:06:a4:dc:c7:99:25:59:55:ad:a9:c7:60:cc:b5:e6:
7a:b2:4f:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcy9+BqfJD6ChLz3Jp41KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl
Y2FiNzcwHhcNMjUwODIzMDEwMjU1WhcNMjUwODI0MDEwMjU1WjAzMTEwLwYDVQQD
Eyg5NTdjZTdkZGRjNjhkNzI1YTM2NWI4ZDJhMWQwOWMxMjMxYmUzNTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSY9YDblC4vFC5E2S25jLyZW/79H
apK9l/P1MH0Ptab6AymVOPUVgmYEvC0Vs3Y8G+uD9aIUSs9f/KXdA7gGSdTnldv1
5pdGZubPDlJmglBgB5qari0zJND9vrdi7IkiWjfH8rAiAf+4IsS/xKjOJv/iYkly
j6R79ycXOoy90sJEjxl3PuRYMgQFBu3eNRAijKLU9tDKjPDSslthiHU9TpYaDKlX
2DD+VB6dOpFdRD7DXEe1lQM3SDNkUG0CqjOxy4XDk/q5g83A9STyMI/7wi/PjCdD
viBOb0ugTyin/MLphWQJTlBPYnv8lgzYN2hqq2TLZW+gox2SCf6PGpXwqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJV8593caNclo2W40qHQnBIxvjU3MB8GA1UdIwQY
MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt
MjAwZmMyNzRjYjAxLzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx
LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv2Z+tzQ1
0dpEzTae1Bo1Q+Ug9miriQak4puBmNUmI9JmMG16mNRA/oL79xRut7flNGbiFUHS
VITOyv9XubUP8+01G3eQW5GwXzncwEvx4DVpybNeG8/IVt4tpM9lSs+FPjvFT7dr
34LR7fLcwRas3K0D9++j5+DYHseoJ7WhKB7SqJjlsRekNOyp9zlAdButQeu45Yhl
Aj66oon0o/wlCnFp0LzXzwMa83hZr/xPkfbCcZFhuXxRc33tE4+5NUoGpWu+fGnS
zQqiR7DPjT1wxLsSSQJTTeWvhKAKmIwlnSUJrWk9yndwinC5+lFEBqTcx5klWVWt
qcdgzLXmerJPNA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:40 2025 by rpki-client