Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
File: H5TRNU5yMGqff5Ufk_UujROkCr8.mft (raw, json)
Hash identifier: QfdHq0EkyhjXf+pzg1/q0MW/EUMGApkz0ZC+ax1z9cY=
Subject key identifier: 8C:4E:03:45:49:25:0E:6F:17:A7:4A:7F:C7:1D:03:9E:9F:A4:67:3E
Authority key identifier: 1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
Certificate issuer: /CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Certificate serial: 01978168F50985370D908F34EEE005708F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
Manifest number: 0DCE
Signing time: Wed 18 Jun 2025 05:00:28 +0000
Manifest this update: Wed 18 Jun 2025 05:00:28 +0000
Manifest next update: Thu 19 Jun 2025 05:00:28 +0000
Files and hashes: 1: H5TRNU5yMGqff5Ufk_UujROkCr8.crl (hash: DAKhJ2KYy5dq1QMQIBPslx6aSJzh3XODQeSlisEuDrA=)
2: LKhlG3TMTYsgOdNspAeUKjE3FDY.roa (hash: ktutiAHlvXrlvrW8ZLJWK+gJEGiryttMuOJwRo+ROtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:68:f5:09:85:37:0d:90:8f:34:ee:e0:05:70:8f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Validity
Not Before: Jun 18 05:00:28 2025 GMT
Not After : Jun 19 05:00:28 2025 GMT
Subject: CN=8c4e034549250e6f17a74a7fc71d039e9fa4673e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:62:75:db:05:f3:3d:3b:1b:c9:d1:1f:e6:
52:25:a9:40:16:88:db:bc:1b:bd:25:8d:3c:15:22:
48:08:39:3c:38:79:b3:17:00:78:64:5d:84:41:4a:
11:a7:3f:e2:3f:89:05:f7:a8:a1:20:e2:6b:24:7d:
3c:2e:8f:e3:33:00:94:63:4c:3b:a8:ed:49:03:59:
f1:50:e0:76:ea:39:aa:4c:52:f4:b5:a3:33:4d:33:
74:b9:19:93:4c:23:b3:e2:24:9a:08:ce:e9:64:27:
6c:92:7c:e4:cc:9d:49:16:15:12:bd:f2:87:0b:bb:
2a:61:22:f2:3a:25:73:c8:9a:42:86:b3:9d:3e:85:
c7:89:ce:7d:71:1a:b0:53:28:b6:31:21:22:48:a0:
d0:a3:35:e8:90:f3:2c:c7:30:35:42:94:d1:71:dc:
26:74:d2:64:2f:c6:82:d4:2c:ae:48:6c:22:46:91:
cd:6c:16:f0:37:70:82:c3:27:97:61:45:de:fa:0c:
32:a5:79:6d:87:c5:30:25:6d:93:1f:a1:68:f2:19:
d8:9e:88:34:a6:40:32:17:c2:75:b2:d0:f1:0b:35:
dd:90:ad:56:70:2d:3e:31:af:f1:e9:96:85:5a:83:
0b:38:27:01:fb:2d:a6:d1:29:da:ba:dd:71:fd:17:
99:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4E:03:45:49:25:0E:6F:17:A7:4A:7F:C7:1D:03:9E:9F:A4:67:3E
X509v3 Authority Key Identifier:
keyid:1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:06:c4:ac:9e:2c:73:c4:30:2d:14:4b:b5:ba:d2:76:22:4c:
e8:83:e3:19:2d:1c:be:89:55:9d:e5:f9:0a:3a:3f:5a:37:a3:
63:1d:a9:59:cf:12:69:9f:d0:69:69:71:46:f8:4b:d3:e1:77:
48:5a:04:b9:71:19:bb:04:6d:73:aa:91:80:d1:70:4a:04:04:
f9:79:c4:67:f0:d0:53:35:b1:d0:63:07:40:35:37:b3:16:47:
33:34:cb:72:68:58:8b:2a:be:dd:9a:a5:97:bd:a7:97:16:00:
ad:58:41:4c:35:c8:b5:91:c6:7f:be:25:04:28:ae:88:27:d4:
14:05:27:dd:a4:42:90:5e:3c:37:51:85:13:c9:7c:01:48:84:
a6:ac:d0:2f:77:82:d1:bc:02:e3:7c:7d:03:ba:af:58:c9:fc:
bf:95:e1:98:5b:d5:3a:7a:dc:2d:e6:59:f4:59:8d:22:e2:3d:
eb:be:15:68:6f:7e:07:49:f0:65:4c:14:a4:ef:e0:d3:1f:31:
11:b5:9b:73:7d:47:c0:43:f6:3a:81:d2:78:66:48:9e:56:a7:
02:06:c4:78:cc:51:ea:26:7a:df:50:e3:74:54:1a:40:94:52:
4c:3f:92:33:08:1a:0e:d4:12:d1:0c:0c:8c:57:21:63:97:40:
4e:76:05:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeBaPUJhTcNkI807uAFcI9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOTRkMTM1NGU3MjMwNmE5ZjdmOTUxZjkzZjUyZThkMTNh
NDBhYmYwHhcNMjUwNjE4MDUwMDI4WhcNMjUwNjE5MDUwMDI4WjAzMTEwLwYDVQQD
Eyg4YzRlMDM0NTQ5MjUwZTZmMTdhNzRhN2ZjNzFkMDM5ZTlmYTQ2NzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq81iddsF8z07G8nRH+ZSJalAFojb
vBu9JY08FSJICDk8OHmzFwB4ZF2EQUoRpz/iP4kF96ihIOJrJH08Lo/jMwCUY0w7
qO1JA1nxUOB26jmqTFL0taMzTTN0uRmTTCOz4iSaCM7pZCdsknzkzJ1JFhUSvfKH
C7sqYSLyOiVzyJpChrOdPoXHic59cRqwUyi2MSEiSKDQozXokPMsxzA1QpTRcdwm
dNJkL8aC1CyuSGwiRpHNbBbwN3CCwyeXYUXe+gwypXlth8UwJW2TH6Fo8hnYnog0
pkAyF8J1stDxCzXdkK1WcC0+Ma/x6ZaFWoMLOCcB+y2m0Snaut1x/ReZbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxOA0VJJQ5vF6dKf8cdA56fpGc+MB8GA1UdIwQY
MBaAFB+U0TVOcjBqn3+VH5P1Lo0TpAq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kZjk2YTUtMzE1Ny00ODgzLTgwODMt
MjEyZjg5M2ZjODM1LzEvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kZjk2YTUtMzE1Ny00ODgzLTgwODMtMjEyZjg5M2ZjODM1
LzEvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwbErJ4s
c8QwLRRLtbrSdiJM6IPjGS0cvolVneX5Cjo/WjejYx2pWc8SaZ/QaWlxRvhL0+F3
SFoEuXEZuwRtc6qRgNFwSgQE+XnEZ/DQUzWx0GMHQDU3sxZHMzTLcmhYiyq+3Zql
l72nlxYArVhBTDXItZHGf74lBCiuiCfUFAUn3aRCkF48N1GFE8l8AUiEpqzQL3eC
0bwC43x9A7qvWMn8v5XhmFvVOnrcLeZZ9FmNIuI9674VaG9+B0nwZUwUpO/g0x8x
EbWbc31HwEP2OoHSeGZInlanAgbEeMxR6iZ631DjdFQaQJRSTD+SMwgaDtQS0QwM
jFchY5dATnYFag==
-----END CERTIFICATE-----
Generated at Wed Jun 18 08:59:55 2025 by rpki-client