Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
File: hCVmomcjm6WlPmRH7GrdFiM38NM.mft (raw, json)
Hash identifier: VLUz6Pmytfk1nOem8bOnpGntGH2+VH10j0WG18dO1o0=
Subject key identifier: E3:67:41:9B:3F:C2:68:A6:31:F4:76:BF:64:33:B1:75:B4:7E:D8:54
Authority key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
Certificate issuer: /CN=842566a267239ba5a53e6447ec6add162337f0d3
Certificate serial: 0198D6603F8412F922A1E66063E7AB47F265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
Manifest number: 0F1A
Signing time: Sat 23 Aug 2025 10:01:28 +0000
Manifest this update: Sat 23 Aug 2025 10:01:28 +0000
Manifest next update: Sun 24 Aug 2025 10:01:28 +0000
Files and hashes: 1: hCVmomcjm6WlPmRH7GrdFiM38NM.crl (hash: PCPezF8fvjs2XHUnWCRWQO8biq/q7zncgLGUj7B4RNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:3f:84:12:f9:22:a1:e6:60:63:e7:ab:47:f2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842566a267239ba5a53e6447ec6add162337f0d3
Validity
Not Before: Aug 23 10:01:28 2025 GMT
Not After : Aug 24 10:01:28 2025 GMT
Subject: CN=e367419b3fc268a631f476bf6433b175b47ed854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:ff:a4:45:cf:ee:d2:86:d9:4e:de:01:84:
45:8b:1e:71:be:17:73:b2:ab:78:29:a0:1e:97:e3:
aa:c8:c7:07:e7:c7:d9:5a:54:41:dc:84:00:f8:aa:
17:8a:1c:36:1b:7d:13:8e:92:90:35:43:83:5b:44:
5b:2c:00:75:e8:6b:6a:51:93:88:ff:90:b5:23:04:
36:7e:71:74:c5:e2:d3:e8:6e:da:83:7f:af:c4:74:
2f:b5:04:17:7d:14:d9:f6:7e:ce:4c:46:81:4b:6b:
a6:f0:fe:fd:11:32:2b:09:b2:ab:da:8c:4b:3f:5f:
65:ec:dc:da:2c:e0:76:e3:8c:40:14:a6:e1:a8:16:
cd:a4:39:58:d9:c4:78:77:43:c2:e5:57:61:11:4e:
99:c2:41:a3:03:4e:89:54:86:93:67:2f:64:3d:aa:
a0:39:e4:90:e9:b4:45:d0:0e:7f:6b:5e:02:18:14:
d6:3e:1e:12:7b:f3:0e:14:4d:56:c2:44:da:0b:ef:
a8:96:ab:fc:92:56:6e:ef:62:3d:83:2b:33:82:21:
be:14:cf:6e:5d:ff:73:92:85:3d:29:6c:75:63:97:
f3:99:5e:a9:37:56:72:08:d6:80:23:ca:58:70:5e:
c1:1f:b9:4b:f9:30:de:0c:ad:83:82:06:e8:47:37:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:67:41:9B:3F:C2:68:A6:31:F4:76:BF:64:33:B1:75:B4:7E:D8:54
X509v3 Authority Key Identifier:
keyid:84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:27:b6:24:a2:62:02:01:45:89:70:17:cc:7a:b0:b7:5a:ee:
99:87:97:c4:f2:e0:ff:d9:97:e4:88:86:60:a8:06:56:78:42:
7b:4c:bc:a5:15:5e:d7:0f:eb:1e:d9:0b:72:bb:65:27:d0:44:
9b:07:f4:62:ec:9a:62:70:9e:e0:25:26:d0:2c:44:d8:93:3d:
51:83:b5:4d:fc:b1:c8:f6:32:cd:ce:d1:7c:e8:72:89:ea:5a:
bb:aa:0e:94:d5:e2:c6:92:bf:08:2f:30:9e:2d:7a:16:51:1a:
80:1e:ec:83:08:6d:a4:73:fa:03:82:ed:9d:7a:57:43:b5:04:
be:09:0c:c4:23:02:50:4b:00:ae:9e:22:19:70:36:5e:29:92:
54:3f:53:e8:24:49:32:f5:78:a1:3b:61:3b:7b:a2:76:1b:08:
3c:4c:f0:d9:1a:60:c2:cc:56:16:31:9d:dd:d9:7c:64:aa:f6:
72:35:3e:a1:1a:02:78:2b:be:26:a1:6f:8b:65:6d:15:d3:00:
d4:e7:fa:19:1a:64:2f:f2:6f:22:80:c7:8d:e1:07:25:d0:d4:
c6:10:32:01:15:cc:db:18:31:ab:cf:c4:68:45:70:fd:27:09:
bc:cb:5e:16:b0:64:43:eb:85:ff:1a:70:bb:b6:2f:d9:b4:bd:
3d:f3:fb:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYD+EEvkioeZgY+erR/JlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MjU2NmEyNjcyMzliYTVhNTNlNjQ0N2VjNmFkZDE2MjMz
N2YwZDMwHhcNMjUwODIzMTAwMTI4WhcNMjUwODI0MTAwMTI4WjAzMTEwLwYDVQQD
EyhlMzY3NDE5YjNmYzI2OGE2MzFmNDc2YmY2NDMzYjE3NWI0N2VkODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya//pEXP7tKG2U7eAYRFix5xvhdz
sqt4KaAel+OqyMcH58fZWlRB3IQA+KoXihw2G30TjpKQNUODW0RbLAB16GtqUZOI
/5C1IwQ2fnF0xeLT6G7ag3+vxHQvtQQXfRTZ9n7OTEaBS2um8P79ETIrCbKr2oxL
P19l7NzaLOB244xAFKbhqBbNpDlY2cR4d0PC5VdhEU6ZwkGjA06JVIaTZy9kPaqg
OeSQ6bRF0A5/a14CGBTWPh4Se/MOFE1WwkTaC++olqv8klZu72I9gyszgiG+FM9u
Xf9zkoU9KWx1Y5fzmV6pN1ZyCNaAI8pYcF7BH7lL+TDeDK2DggboRzevOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONnQZs/wmimMfR2v2QzsXW0fthUMB8GA1UdIwQY
MBaAFIQlZqJnI5ulpT5kR+xq3RYjN/DTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaENWbW9tY2ptNldsUG1SSDdHcmRGaU0zOE5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82ZDJjZjItODBhYy00MzhiLThiNDAt
NmIxZWQ2YjA4YzU4LzEvaENWbW9tY2ptNldsUG1SSDdHcmRGaU0zOE5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC82ZDJjZjItODBhYy00MzhiLThiNDAtNmIxZWQ2YjA4YzU4
LzEvaENWbW9tY2ptNldsUG1SSDdHcmRGaU0zOE5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANie2JKJi
AgFFiXAXzHqwt1rumYeXxPLg/9mX5IiGYKgGVnhCe0y8pRVe1w/rHtkLcrtlJ9BE
mwf0YuyaYnCe4CUm0CxE2JM9UYO1TfyxyPYyzc7RfOhyiepau6oOlNXixpK/CC8w
ni16FlEagB7sgwhtpHP6A4LtnXpXQ7UEvgkMxCMCUEsArp4iGXA2XimSVD9T6CRJ
MvV4oTthO3uidhsIPEzw2RpgwsxWFjGd3dl8ZKr2cjU+oRoCeCu+JqFvi2VtFdMA
1Of6GRpkL/JvIoDHjeEHJdDUxhAyARXM2xgxq8/EaEVw/ScJvMteFrBkQ+uF/xpw
u7Yv2bS9PfP7pg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:39 2025 by rpki-client