Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
File: HoYS4w6WzLqJ514Et7uhwreXxcM.mft (raw, json)
Hash identifier: 1Lb6zHZw7vWL/y59Ay7TtaN+A0IEyui1Y3vewRxytKM=
Subject key identifier: 16:F2:E4:A3:66:FC:20:18:4D:16:4F:CF:61:89:32:9D:78:2B:60:DF
Authority key identifier: 1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
Certificate issuer: /CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Certificate serial: 0197B5C498F45E1612624AB0E5EE52EA68DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
Manifest number: 0101
Signing time: Sat 28 Jun 2025 09:00:49 +0000
Manifest this update: Sat 28 Jun 2025 09:00:49 +0000
Manifest next update: Sun 29 Jun 2025 09:00:49 +0000
Files and hashes: 1: HoYS4w6WzLqJ514Et7uhwreXxcM.crl (hash: B52rqHC43l+0+/7nYzlBt7DIo1mjMwef5s9CA8ppWlc=)
2: JUZrH7esHXuIUR8S80TNsOfBgq4.roa (hash: U7uEaoA1okVxydwdN7xgsZxq5XRAaznjumXB+lt8BF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:98:f4:5e:16:12:62:4a:b0:e5:ee:52:ea:68:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Validity
Not Before: Jun 28 09:00:49 2025 GMT
Not After : Jun 29 09:00:49 2025 GMT
Subject: CN=16f2e4a366fc20184d164fcf6189329d782b60df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:31:45:b2:df:95:11:9f:80:1f:ef:ea:97:06:
b8:f0:09:9e:be:f7:bf:d9:56:ac:fb:cc:b8:40:f1:
93:15:ef:1c:cc:ee:f7:7c:56:52:06:ab:98:b0:6e:
2f:31:b0:85:af:f9:86:47:72:ed:da:81:f1:0a:15:
c7:8a:9d:3d:d1:18:90:17:ca:e5:32:25:09:76:e1:
2c:6d:1d:a4:f2:6d:10:cb:28:dd:84:3e:cd:8b:12:
75:04:11:6d:66:65:8f:80:8b:56:53:b4:67:66:56:
75:5f:6f:e1:c0:38:d9:91:b7:21:59:8f:3a:f0:9a:
d3:e2:05:52:5d:98:c5:75:d6:44:26:a2:0d:f3:ed:
0b:df:06:d9:7c:e8:bf:f4:cc:87:85:be:fb:2b:d4:
70:b2:7e:d1:b2:34:ff:98:ed:f5:7c:40:a2:9f:5c:
bc:9c:f5:e4:21:87:56:11:82:d7:39:30:69:e1:58:
98:8b:37:a7:a9:96:fc:cd:99:e2:ac:98:42:71:e0:
19:5a:c3:44:e2:9e:0d:dc:85:3a:ce:2a:14:4e:7f:
ea:3e:2a:82:84:05:6e:a0:ba:97:e0:66:b2:17:65:
94:eb:06:7f:e3:d0:f2:a8:9a:6c:0a:19:a7:07:0e:
6e:c6:17:42:12:7b:64:42:58:47:c5:19:ca:e9:24:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F2:E4:A3:66:FC:20:18:4D:16:4F:CF:61:89:32:9D:78:2B:60:DF
X509v3 Authority Key Identifier:
keyid:1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a3:fd:81:4d:0b:c1:2d:74:52:d2:93:60:4e:9b:4a:10:28:
bc:96:fc:1f:78:64:90:4f:33:c0:fa:74:6f:eb:91:60:32:b0:
c1:06:4a:ef:d9:74:3c:1b:ea:48:32:c1:37:ed:05:24:2a:57:
df:cb:ae:93:2a:a3:93:7a:31:f7:b2:57:cc:79:0f:2f:23:8e:
b9:7d:5c:18:62:ce:40:5b:b9:ed:64:72:45:55:da:b1:f0:ae:
ab:64:56:df:ba:13:c1:be:b6:ce:15:04:44:09:3c:e9:a8:9e:
ea:83:04:a7:1b:ea:92:6e:c9:43:b0:00:79:aa:ac:ea:ae:6d:
4c:d7:14:dc:4f:05:0d:ba:53:77:01:c2:91:7d:84:9d:ee:ec:
75:d9:56:de:f8:0c:5a:fe:08:2a:de:24:64:6d:d9:96:f9:d6:
7d:eb:9f:a6:7f:40:ce:1b:3c:2f:4f:09:2e:94:e4:84:22:4e:
b4:ae:bf:35:a7:98:6b:b6:e7:ac:0c:44:f5:62:25:60:10:e7:
fe:85:22:b9:9e:de:73:1c:0d:7e:86:56:7a:e9:d7:1a:88:00:
ed:1e:e9:6a:66:19:a5:c1:a2:0f:a2:be:e4:a9:38:56:e9:55:
33:7d:61:cb:65:42:f4:58:cf:7c:b2:aa:1e:99:b4:3d:b9:fe:
69:be:f4:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xJj0XhYSYkqw5e5S6mjbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlODYxMmUzMGU5NmNjYmE4OWU3NWUwNGI3YmJhMWMyYjc5
N2M1YzMwHhcNMjUwNjI4MDkwMDQ5WhcNMjUwNjI5MDkwMDQ5WjAzMTEwLwYDVQQD
EygxNmYyZTRhMzY2ZmMyMDE4NGQxNjRmY2Y2MTg5MzI5ZDc4MmI2MGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jFFst+VEZ+AH+/qlwa48Amevve/
2Vas+8y4QPGTFe8czO73fFZSBquYsG4vMbCFr/mGR3Lt2oHxChXHip090RiQF8rl
MiUJduEsbR2k8m0QyyjdhD7NixJ1BBFtZmWPgItWU7RnZlZ1X2/hwDjZkbchWY86
8JrT4gVSXZjFddZEJqIN8+0L3wbZfOi/9MyHhb77K9Rwsn7RsjT/mO31fECin1y8
nPXkIYdWEYLXOTBp4ViYizenqZb8zZnirJhCceAZWsNE4p4N3IU6zioUTn/qPiqC
hAVuoLqX4GayF2WU6wZ/49DyqJpsChmnBw5uxhdCEntkQlhHxRnK6SS1cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBby5KNm/CAYTRZPz2GJMp14K2DfMB8GA1UdIwQY
MBaAFB6GEuMOlsy6iedeBLe7ocK3l8XDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83MzBiZDQtZGIzMy00NTUyLWJhZDUt
YjZkYzJiN2JmMzBhLzEvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC83MzBiZDQtZGIzMy00NTUyLWJhZDUtYjZkYzJiN2JmMzBh
LzEvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIaP9gU0L
wS10UtKTYE6bShAovJb8H3hkkE8zwPp0b+uRYDKwwQZK79l0PBvqSDLBN+0FJCpX
38uukyqjk3ox97JXzHkPLyOOuX1cGGLOQFu57WRyRVXasfCuq2RW37oTwb62zhUE
RAk86aie6oMEpxvqkm7JQ7AAeaqs6q5tTNcU3E8FDbpTdwHCkX2Ene7sddlW3vgM
Wv4IKt4kZG3ZlvnWfeufpn9Azhs8L08JLpTkhCJOtK6/NaeYa7bnrAxE9WIlYBDn
/oUiuZ7ecxwNfoZWeunXGogA7R7pamYZpcGiD6K+5Kk4VulVM31hy2VC9FjPfLKq
Hpm0Pbn+ab70wg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:00 2025 by rpki-client