Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
File: HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft (raw, json)
Hash identifier: 3uP3DD2cKD33aq8ix5mcKFNndCL9xtIO6sXkD4XnQEE=
Subject key identifier: 29:E7:E2:E5:43:DA:C7:85:9C:3E:42:D6:A2:9E:02:F4:F1:82:6B:10
Authority key identifier: 1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
Certificate issuer: /CN=1d13cd3dde789d294793afce938a533c02bb84d1
Certificate serial: 0197B70E84530C8ED7752384249B348299BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
Manifest number: 010A
Signing time: Sat 28 Jun 2025 15:01:11 +0000
Manifest this update: Sat 28 Jun 2025 15:01:11 +0000
Manifest next update: Sun 29 Jun 2025 15:01:11 +0000
Files and hashes: 1: 4hv9xJ2bNEDWcqzGsYchdn5kUVY.roa (hash: V4068ud7nrpI5Ayn9tZ99ZE/P8vbDb4mLPR/eOpzEt4=)
2: HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl (hash: TOiXPNSqUZ+2fwY7Vw5BcHN6UxugHtXlsizST2NgVE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:84:53:0c:8e:d7:75:23:84:24:9b:34:82:99:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d13cd3dde789d294793afce938a533c02bb84d1
Validity
Not Before: Jun 28 15:01:11 2025 GMT
Not After : Jun 29 15:01:11 2025 GMT
Subject: CN=29e7e2e543dac7859c3e42d6a29e02f4f1826b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:bd:94:a0:f6:b7:11:5a:9a:7b:27:d0:dd:
30:33:12:86:5a:4c:9d:6b:85:fd:3e:da:f4:41:89:
b6:a1:0a:51:56:eb:5b:bd:b3:93:8a:46:0e:d6:da:
0e:73:40:44:a9:f4:7b:70:d7:d9:50:2d:d0:f1:66:
0e:0a:60:9b:33:c7:5c:12:5c:5b:a3:ac:5e:8d:da:
35:30:80:ff:83:71:ee:c3:d5:b4:fb:aa:b7:c9:07:
f5:29:66:0d:46:d4:4c:a3:42:58:a4:4b:da:f1:01:
f3:56:b9:cd:b2:0b:47:41:44:d2:b4:5b:72:dc:ec:
bb:e4:ef:cb:71:05:d0:74:b5:c2:01:ba:1b:21:2d:
6d:5c:1c:32:33:71:52:1d:91:71:fd:db:f3:8c:ca:
38:bb:5e:f0:d5:71:2a:20:1a:ab:5a:16:11:c5:a3:
6b:09:1d:1a:bc:44:c3:d3:01:d4:fd:9d:2e:78:30:
0f:76:d8:0c:66:72:24:eb:64:98:5f:d3:89:76:aa:
c7:1b:fa:89:14:28:b4:b8:e1:2e:df:a8:0b:57:99:
fc:94:d8:ef:86:ec:6f:22:73:81:20:76:83:e3:8b:
16:5b:4e:8c:df:7f:4e:f6:16:d1:f8:68:df:e7:c2:
d4:65:9a:b9:8f:44:52:02:8e:0f:75:2e:66:ec:f3:
b9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E7:E2:E5:43:DA:C7:85:9C:3E:42:D6:A2:9E:02:F4:F1:82:6B:10
X509v3 Authority Key Identifier:
keyid:1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:06:c2:fe:ea:94:35:0a:7c:ff:7c:ab:28:65:1b:74:df:34:
3f:9d:34:8c:70:b3:51:8e:36:60:d9:9f:fc:cd:90:8b:a0:10:
77:07:d7:b2:0c:89:e3:b2:22:17:d5:39:18:ee:9b:77:65:31:
e1:de:1c:9d:99:ec:5c:16:0e:fc:49:68:7c:dd:00:1c:58:05:
60:77:71:f1:f5:d5:21:e4:30:84:de:80:59:46:9f:28:48:14:
2d:0a:7d:68:d9:cf:a8:76:c0:57:56:54:78:1d:8c:17:2f:90:
a9:7d:e1:41:eb:0a:2d:1a:a2:04:39:65:29:25:4a:4f:7f:98:
ce:75:60:de:fb:a5:ca:79:97:45:3a:41:ff:55:64:2a:73:71:
97:c5:4f:b7:14:18:e2:47:d5:f9:12:4a:ed:e8:75:ac:6e:a8:
d3:e2:be:40:3f:99:7c:2e:b2:ab:b4:0f:83:2f:9f:75:ea:5c:
2b:6f:6f:fe:73:06:eb:e6:9b:3a:e6:2b:97:f4:00:99:66:b0:
ff:1e:17:d8:82:bf:67:29:99:4c:87:6e:f1:6e:83:5e:fe:b1:
de:91:87:5e:0b:12:bc:3d:3a:06:62:ab:b1:5f:4f:23:e8:4a:
f1:50:15:09:ba:3c:d5:b1:f1:7d:c0:94:bf:76:18:bf:7f:ff:
51:b2:ab:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DoRTDI7XdSOEJJs0gpm6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMTNjZDNkZGU3ODlkMjk0NzkzYWZjZTkzOGE1MzNjMDJi
Yjg0ZDEwHhcNMjUwNjI4MTUwMTExWhcNMjUwNjI5MTUwMTExWjAzMTEwLwYDVQQD
EygyOWU3ZTJlNTQzZGFjNzg1OWMzZTQyZDZhMjllMDJmNGYxODI2YjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbe9lKD2txFamnsn0N0wMxKGWkyd
a4X9Ptr0QYm2oQpRVutbvbOTikYO1toOc0BEqfR7cNfZUC3Q8WYOCmCbM8dcElxb
o6xejdo1MID/g3Huw9W0+6q3yQf1KWYNRtRMo0JYpEva8QHzVrnNsgtHQUTStFty
3Oy75O/LcQXQdLXCAbobIS1tXBwyM3FSHZFx/dvzjMo4u17w1XEqIBqrWhYRxaNr
CR0avETD0wHU/Z0ueDAPdtgMZnIk62SYX9OJdqrHG/qJFCi0uOEu36gLV5n8lNjv
huxvInOBIHaD44sWW06M339O9hbR+Gjf58LUZZq5j0RSAo4PdS5m7PO5JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnn4uVD2seFnD5C1qKeAvTxgmsQMB8GA1UdIwQY
MBaAFB0TzT3eeJ0pR5OvzpOKUzwCu4TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJQTlBkNTRuU2xIazZfT2s0cFRQQUs3aE5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kMjlhNWYtYTUyYy00Yzc5LTkzMDMt
YTc3Y2FhYzQ2MjVjLzEvSFJQTlBkNTRuU2xIazZfT2s0cFRQQUs3aE5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kMjlhNWYtYTUyYy00Yzc5LTkzMDMtYTc3Y2FhYzQ2MjVj
LzEvSFJQTlBkNTRuU2xIazZfT2s0cFRQQUs3aE5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANAbC/uqU
NQp8/3yrKGUbdN80P500jHCzUY42YNmf/M2Qi6AQdwfXsgyJ47IiF9U5GO6bd2Ux
4d4cnZnsXBYO/ElofN0AHFgFYHdx8fXVIeQwhN6AWUafKEgULQp9aNnPqHbAV1ZU
eB2MFy+QqX3hQesKLRqiBDllKSVKT3+YznVg3vulynmXRTpB/1VkKnNxl8VPtxQY
4kfV+RJK7eh1rG6o0+K+QD+ZfC6yq7QPgy+fdepcK29v/nMG6+abOuYrl/QAmWaw
/x4X2IK/ZymZTIdu8W6DXv6x3pGHXgsSvD06BmKrsV9PI+hK8VAVCbo81bHxfcCU
v3YYv3//UbKrlQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:44 2025 by rpki-client