Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
File: hEcK8NideFuhi6YX3Anj9yxZlvM.mft (raw, json)
Hash identifier: 0kWUlP8iDyZf3FhMC/lSYvZMSA6aEKMet7j3u7nNbVU=
Subject key identifier: 0C:7C:26:58:98:47:25:48:50:1B:74:42:DE:6E:07:E3:E7:91:E4:CF
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 01976EF4FC6D54DA618FDEFBE2543ADCAC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
Manifest number: 0716
Signing time: Sat 14 Jun 2025 15:00:38 +0000
Manifest this update: Sat 14 Jun 2025 15:00:38 +0000
Manifest next update: Sun 15 Jun 2025 15:00:38 +0000
Files and hashes: 1: 9ZZlEoJ6DOwFDIJbfzBhtXucSCo.roa (hash: e3MsAliQl7R+w6WCs9Je3nF/3YOrMW2JU+QDq2FQ+FM=)
2: hEcK8NideFuhi6YX3Anj9yxZlvM.crl (hash: cTEo7RyPX7gi3Hw4OesTab9RmFeDaoejTTmvRyy7kqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:fc:6d:54:da:61:8f:de:fb:e2:54:3a:dc:ac:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Jun 14 15:00:38 2025 GMT
Not After : Jun 15 15:00:38 2025 GMT
Subject: CN=0c7c265898472548501b7442de6e07e3e791e4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e2:f1:a2:fd:14:22:89:dc:c0:39:85:11:90:
4e:0a:08:df:4b:97:81:c6:83:99:97:0b:f1:7d:bf:
71:22:e6:f5:3a:f1:3f:e7:0d:c6:9a:e2:3a:da:fa:
ce:0b:98:b2:eb:7d:51:9f:ee:48:2d:2d:d8:b8:ff:
e9:49:93:cb:d7:d4:d8:4d:f5:f0:22:1b:9b:a0:77:
e0:9e:ca:ab:22:b2:5f:71:16:3b:1b:83:24:dd:7e:
e6:c6:02:cf:d4:2e:84:45:2f:5c:31:32:6e:b1:ad:
6a:dd:bc:6e:03:58:51:88:a4:03:c0:8f:39:69:41:
53:c4:6a:a7:06:61:ae:10:38:56:3c:0e:ef:e9:ee:
4c:12:f2:34:d9:22:42:96:09:49:60:0d:4b:65:f3:
75:99:bc:1b:32:6e:61:22:4b:1d:0d:78:71:e5:90:
db:9d:b1:c6:3d:13:8e:a2:36:70:0c:a0:f1:d7:21:
cd:3a:4e:42:c1:f1:f0:95:3b:df:de:68:7b:02:fb:
26:56:7c:22:e2:22:9e:da:84:a4:4d:d4:93:62:3e:
f6:0b:c7:ea:11:cc:b2:5a:5d:57:e0:f2:ac:c4:53:
b3:89:0b:ef:7e:ba:fe:01:67:e9:f9:dd:ce:8b:46:
81:cc:60:fb:eb:f6:44:fa:37:87:21:8e:bd:6c:08:
af:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7C:26:58:98:47:25:48:50:1B:74:42:DE:6E:07:E3:E7:91:E4:CF
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:5d:3c:5a:61:08:25:eb:a3:24:44:c9:ff:df:86:25:ad:3f:
cf:cc:60:e2:39:08:ac:6e:04:69:7f:e6:08:7f:66:ff:30:f2:
74:f6:a8:1b:4c:5d:22:69:27:7f:fd:b7:a1:ea:92:b0:c9:57:
30:6f:7b:c5:01:6f:98:97:c2:22:5a:73:89:40:12:02:39:d1:
8c:dd:4c:76:7f:06:a2:c6:a3:46:ce:5d:9c:85:79:bc:7a:cc:
bd:d3:e9:43:1d:25:f8:b3:15:7c:de:29:26:7a:b2:6b:5c:66:
66:fd:cb:a3:a1:68:b4:96:96:d4:fc:3b:a7:b2:a1:b9:ee:1f:
43:58:6e:42:28:fe:12:27:01:8f:37:be:05:79:87:b7:4c:78:
98:0c:af:76:e9:ea:bf:5e:39:df:0c:bb:6c:97:ef:67:6b:57:
0f:13:36:bf:75:90:9d:66:27:c0:81:2a:72:c7:da:e3:ff:f2:
7f:8a:05:2c:6f:f4:22:50:33:86:cd:61:42:a0:ee:da:cd:a4:
78:97:cd:b7:64:e1:fc:4a:fb:f7:1e:92:37:d8:15:8b:10:b9:
ab:a3:63:f4:98:ce:36:f3:e6:35:f0:8f:b9:25:b5:c1:3a:64:
de:91:55:80:55:91:8d:e5:60:e4:e5:79:64:1e:ca:2a:36:b0:
8b:fc:db:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9PxtVNphj9774lQ63KyJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDcwYWYwZDg5ZDc4NWJhMThiYTYxN2RjMDllM2Y3MmM1
OTk2ZjMwHhcNMjUwNjE0MTUwMDM4WhcNMjUwNjE1MTUwMDM4WjAzMTEwLwYDVQQD
EygwYzdjMjY1ODk4NDcyNTQ4NTAxYjc0NDJkZTZlMDdlM2U3OTFlNGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uLxov0UIoncwDmFEZBOCgjfS5eB
xoOZlwvxfb9xIub1OvE/5w3GmuI62vrOC5iy631Rn+5ILS3YuP/pSZPL19TYTfXw
IhuboHfgnsqrIrJfcRY7G4Mk3X7mxgLP1C6ERS9cMTJusa1q3bxuA1hRiKQDwI85
aUFTxGqnBmGuEDhWPA7v6e5MEvI02SJClglJYA1LZfN1mbwbMm5hIksdDXhx5ZDb
nbHGPROOojZwDKDx1yHNOk5CwfHwlTvf3mh7AvsmVnwi4iKe2oSkTdSTYj72C8fq
EcyyWl1X4PKsxFOziQvvfrr+AWfp+d3Oi0aBzGD76/ZE+jeHIY69bAivDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAx8JliYRyVIUBt0Qt5uB+PnkeTPMB8GA1UdIwQY
MBaAFIRHCvDYnXhboYumF9wJ4/csWZbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82NjBmMWQtNTc1My00NTE2LTgwMDIt
ZTc2ZTNlMjkzZTAyLzEvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82NjBmMWQtNTc1My00NTE2LTgwMDItZTc2ZTNlMjkzZTAy
LzEvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv108WmEI
JeujJETJ/9+GJa0/z8xg4jkIrG4EaX/mCH9m/zDydPaoG0xdImknf/23oeqSsMlX
MG97xQFvmJfCIlpziUASAjnRjN1Mdn8GosajRs5dnIV5vHrMvdPpQx0l+LMVfN4p
Jnqya1xmZv3Lo6FotJaW1Pw7p7Khue4fQ1huQij+EicBjze+BXmHt0x4mAyvdunq
v1453wy7bJfvZ2tXDxM2v3WQnWYnwIEqcsfa4//yf4oFLG/0IlAzhs1hQqDu2s2k
eJfNt2Th/Er79x6SN9gVixC5q6Nj9JjONvPmNfCPuSW1wTpk3pFVgFWRjeVg5OV5
ZB7KKjawi/zbXw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:23:49 2025 by rpki-client