Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
File: V-HUowlen6i5N9f6pDdZNyfSOTI.mft (raw, json)
Hash identifier: Iksnh7ErjGPo+cg/r5PEBkhJXoUgi+LPBSfj9L0oVGc=
Subject key identifier: CB:B9:34:75:8C:A0:DE:57:19:13:05:2A:38:B5:A5:C3:4E:78:7B:44
Authority key identifier: 57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32
Certificate issuer: /CN=57e1d4a3095e9fa8b937d7faa437593727d23932
Certificate serial: 0198D54EC4D89C9ACA85D9716ADCFF345CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
Manifest number: 058D
Signing time: Sat 23 Aug 2025 05:02:45 +0000
Manifest this update: Sat 23 Aug 2025 05:02:45 +0000
Manifest next update: Sun 24 Aug 2025 05:02:45 +0000
Files and hashes: 1: V-HUowlen6i5N9f6pDdZNyfSOTI.crl (hash: hjQUdPTKniR6c/KvMBfOZz7gU8SY0zEjQKiVlEE41C4=)
2: bXJ4QtYhfWp1RnpTQChAp4cUwiU.roa (hash: fSbKrEDwgOdPjCAnblJniiQxtJvOzvNWIo+25OG2EEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:c4:d8:9c:9a:ca:85:d9:71:6a:dc:ff:34:5c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e1d4a3095e9fa8b937d7faa437593727d23932
Validity
Not Before: Aug 23 05:02:45 2025 GMT
Not After : Aug 24 05:02:45 2025 GMT
Subject: CN=cbb934758ca0de571913052a38b5a5c34e787b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:03:a1:52:dc:48:76:d2:85:ab:21:c2:b8:
2b:1e:31:e1:9e:5a:43:9a:b1:ad:df:45:11:f8:58:
9b:7f:5b:9e:c9:49:08:c9:9e:20:7f:b2:ee:aa:2a:
e1:ac:77:b8:d1:31:71:83:fb:e3:71:ab:34:20:4c:
10:e4:a5:91:2f:e0:7c:cb:32:ae:47:f6:3b:b6:79:
4f:55:f0:17:17:fd:a6:4f:22:4d:ad:b3:35:60:c5:
ae:c7:c9:dc:c6:f1:63:d8:16:6b:fc:0f:59:23:72:
f7:ab:23:64:11:fc:98:c4:8d:bf:a3:8b:21:b1:18:
49:c4:80:e9:7a:c6:76:82:52:33:9e:af:82:4c:46:
ea:98:15:94:6f:20:9e:63:ff:8e:8f:9a:f3:1a:f6:
9b:66:a2:e9:5f:a8:fe:44:07:74:df:c4:93:f3:9a:
dd:6c:f2:79:47:13:97:4a:5c:bc:bc:d6:84:f9:9f:
65:87:5c:b2:00:39:d1:45:6c:cb:cb:79:76:fa:26:
a6:5d:92:98:a4:f4:6d:21:da:3f:fc:dc:7b:c7:6f:
0d:6f:12:f1:2d:9c:96:cf:e5:e3:04:ae:88:00:6e:
73:61:25:8a:67:78:f1:62:e6:8a:bc:e8:50:37:79:
fd:32:a6:ba:b3:d7:3e:55:0c:0d:2f:60:47:49:69:
8d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B9:34:75:8C:A0:DE:57:19:13:05:2A:38:B5:A5:C3:4E:78:7B:44
X509v3 Authority Key Identifier:
keyid:57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:39:c4:f5:fe:06:35:bf:d1:b1:6b:fa:eb:8d:ab:db:61:38:
17:a2:18:a0:f8:a4:a9:5e:47:86:5c:b9:8d:55:0a:e1:97:89:
fa:03:bb:94:98:23:8e:4e:cf:16:a2:bb:43:11:27:2c:22:c0:
ef:de:cb:fa:97:15:25:0e:ed:8e:85:23:5e:b9:ec:36:57:06:
5d:b8:a6:b8:89:9a:1a:8e:bb:23:21:3f:fb:20:68:84:0b:f6:
b7:25:7c:33:7b:af:c0:c6:cd:32:fc:2a:89:69:60:62:3b:32:
b4:d8:45:06:a3:b3:21:23:24:73:dd:55:d7:bb:ef:8f:e6:47:
9e:dc:63:6f:60:41:68:98:77:72:43:54:9f:34:9d:af:9f:77:
61:96:af:7c:a2:a1:f6:64:c4:78:0e:55:79:f4:14:a2:62:5c:
6d:9e:25:95:01:6f:4c:d3:35:72:5a:8c:72:fc:74:0b:0a:dc:
7c:24:1d:f1:09:57:d1:00:c1:f5:7a:52:27:03:f9:c4:7c:71:
2f:d5:38:67:7d:54:5f:28:c9:3e:8e:18:ed:af:b9:56:0f:09:
44:22:c9:a5:96:e8:a5:44:b8:59:cc:89:ef:0b:e4:c5:7a:d0:
a7:08:84:48:94:a9:3b:7e:26:5c:44:c3:7a:80:54:cb:b0:46:
67:84:3a:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTsTYnJrKhdlxatz/NFyoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZTFkNGEzMDk1ZTlmYThiOTM3ZDdmYWE0Mzc1OTM3Mjdk
MjM5MzIwHhcNMjUwODIzMDUwMjQ1WhcNMjUwODI0MDUwMjQ1WjAzMTEwLwYDVQQD
EyhjYmI5MzQ3NThjYTBkZTU3MTkxMzA1MmEzOGI1YTVjMzRlNzg3YjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAwDoVLcSHbShashwrgrHjHhnlpD
mrGt30UR+Fibf1ueyUkIyZ4gf7LuqirhrHe40TFxg/vjcas0IEwQ5KWRL+B8yzKu
R/Y7tnlPVfAXF/2mTyJNrbM1YMWux8ncxvFj2BZr/A9ZI3L3qyNkEfyYxI2/o4sh
sRhJxIDpesZ2glIznq+CTEbqmBWUbyCeY/+Oj5rzGvabZqLpX6j+RAd038ST85rd
bPJ5RxOXSly8vNaE+Z9lh1yyADnRRWzLy3l2+iamXZKYpPRtIdo//Nx7x28NbxLx
LZyWz+XjBK6IAG5zYSWKZ3jxYuaKvOhQN3n9Mqa6s9c+VQwNL2BHSWmNtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMu5NHWMoN5XGRMFKji1pcNOeHtEMB8GA1UdIwQY
MBaAFFfh1KMJXp+ouTfX+qQ3WTcn0jkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVi1IVW93bGVuNmk1TjlmNnBEZFpOeWZTT1RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NTYyNmItY2M4OC00N2MyLTgzNWUt
NGQ3NTI4MmNlMmViLzEvVi1IVW93bGVuNmk1TjlmNnBEZFpOeWZTT1RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS84NTYyNmItY2M4OC00N2MyLTgzNWUtNGQ3NTI4MmNlMmVi
LzEvVi1IVW93bGVuNmk1TjlmNnBEZFpOeWZTT1RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejnE9f4G
Nb/RsWv6642r22E4F6IYoPikqV5Hhly5jVUK4ZeJ+gO7lJgjjk7PFqK7QxEnLCLA
797L+pcVJQ7tjoUjXrnsNlcGXbimuImaGo67IyE/+yBohAv2tyV8M3uvwMbNMvwq
iWlgYjsytNhFBqOzISMkc91V17vvj+ZHntxjb2BBaJh3ckNUnzSdr593YZavfKKh
9mTEeA5VefQUomJcbZ4llQFvTNM1clqMcvx0CwrcfCQd8QlX0QDB9XpSJwP5xHxx
L9U4Z31UXyjJPo4Y7a+5Vg8JRCLJpZbopUS4WcyJ7wvkxXrQpwiESJSpO34mXETD
eoBUy7BGZ4Q6Rw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:21 2025 by rpki-client