Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: kgX+6IrnGio8VyA3FsH4aqsty7t/5rEWBnEgeQiJjzs=
Subject key identifier: 50:3E:C5:22:38:D1:EE:20:AC:75:5E:29:05:7A:AF:D9:8A:87:4D:AF
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 019775D2A841EFDF4B13AC668F367B09F309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 1595
Signing time: Sun 15 Jun 2025 23:00:29 +0000
Manifest this update: Sun 15 Jun 2025 23:00:29 +0000
Manifest next update: Mon 16 Jun 2025 23:00:29 +0000
Files and hashes: 1: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: cXFCJmkLeWur3lKCCt2Of5BAHuU5iJ/V0tZ36eK/7xA=)
2: PGC2gjbo2htZQJwYOmeelo5Z83Y.roa (hash: JFulXR+ljWTJG0RiuMIfac488bMeOxp9OF6JRC9SK3k=)
3: kTvVn_B76BHAkt21A667VWLx85c.roa (hash: RlO7Fkyzwvg6DOaLdLA5nagDWX7X86stBqbWJQSamrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:d2:a8:41:ef:df:4b:13:ac:66:8f:36:7b:09:f3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Jun 15 23:00:29 2025 GMT
Not After : Jun 16 23:00:29 2025 GMT
Subject: CN=503ec52238d1ee20ac755e29057aafd98a874daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:82:cf:82:47:4c:be:4c:ea:a4:7f:86:0d:
f7:e2:29:6a:4e:6b:f2:05:bb:c9:a0:d3:55:9c:5a:
82:2b:78:e2:19:63:0e:f7:b1:97:cd:e3:97:4a:ca:
36:f9:c2:ac:b4:a9:1b:83:31:45:bd:25:70:8a:1d:
16:92:cb:b5:60:58:e2:93:35:df:00:7c:93:ec:8e:
cd:10:1a:77:9b:19:af:1f:8a:b5:0b:7c:a3:aa:92:
a8:58:99:b9:ea:e6:44:3c:e5:ce:1d:92:16:a1:f1:
58:56:c0:6c:e2:22:be:77:44:82:3a:2c:7b:78:5d:
db:8d:4a:b2:5b:1f:42:ef:d4:b9:29:45:c6:7a:ba:
37:30:b3:56:2c:91:b4:81:1e:d3:39:ea:68:83:c0:
42:b1:15:42:77:92:ea:f2:77:22:18:c5:fb:36:83:
e5:24:bc:89:bf:b1:70:ee:d6:df:49:71:d7:b2:b0:
9f:f3:f1:d9:4e:06:a6:36:a4:02:49:5b:ef:64:d4:
d1:24:ed:37:78:3b:b8:1e:8d:bf:8e:6a:98:f6:c7:
1b:18:1c:d6:64:06:57:ef:e1:99:49:bc:e1:66:fd:
0d:a9:1d:0d:f6:0a:78:04:1c:c4:8d:bd:a3:9e:ee:
dc:21:3f:80:02:1a:31:d0:f4:b8:00:a4:94:62:88:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3E:C5:22:38:D1:EE:20:AC:75:5E:29:05:7A:AF:D9:8A:87:4D:AF
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:53:12:6c:2d:ef:90:56:b6:11:bb:7c:44:59:17:46:38:1b:
f7:6a:e7:eb:15:38:b0:9f:c9:4e:5c:43:ad:c3:f8:62:53:c4:
42:0f:7d:eb:58:27:7a:5c:6c:c0:4f:7e:61:27:ba:71:1d:a5:
95:1a:9c:e9:f5:95:f3:13:7a:38:e4:b8:97:98:6a:d4:ce:8d:
45:a4:d1:42:37:34:a9:dc:a7:ab:35:e1:6a:60:28:6e:f1:c5:
8b:83:80:0f:c7:dd:47:07:a8:18:15:a1:35:30:06:15:9c:3f:
8f:1e:40:25:83:63:4c:a0:b4:0c:54:42:53:66:1f:77:58:57:
30:f0:83:e5:c0:2c:50:2a:51:50:43:75:78:51:c3:b4:f8:be:
f5:9b:7c:e2:98:e0:b5:41:2e:bc:45:27:18:2f:8b:ec:e4:86:
62:09:31:4f:04:f1:2a:bb:4c:5b:77:7e:8c:46:5d:01:b2:cf:
44:b7:d5:97:53:29:57:4e:be:d1:f0:6f:a7:e3:0c:82:33:77:
95:d7:d4:fd:47:8d:a4:f0:48:89:04:16:91:37:17:ac:0b:bd:
b2:ee:fa:f7:5f:3e:63:8e:df:53:e0:f4:08:8b:52:92:d1:bf:
a6:0a:03:65:e4:73:e5:f1:16:01:1d:d6:47:48:4c:ba:e9:82:
1e:24:04:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd10qhB799LE6xmjzZ7CfMJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmODk2Y2QzZDhkMWEwNjk5ZGE1MjEwNTVkZmI1OGRjMDZk
ZGRmMzUwHhcNMjUwNjE1MjMwMDI5WhcNMjUwNjE2MjMwMDI5WjAzMTEwLwYDVQQD
Eyg1MDNlYzUyMjM4ZDFlZTIwYWM3NTVlMjkwNTdhYWZkOThhODc0ZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5iCz4JHTL5M6qR/hg334ilqTmvy
BbvJoNNVnFqCK3jiGWMO97GXzeOXSso2+cKstKkbgzFFvSVwih0Wksu1YFjikzXf
AHyT7I7NEBp3mxmvH4q1C3yjqpKoWJm56uZEPOXOHZIWofFYVsBs4iK+d0SCOix7
eF3bjUqyWx9C79S5KUXGero3MLNWLJG0gR7TOepog8BCsRVCd5Lq8nciGMX7NoPl
JLyJv7Fw7tbfSXHXsrCf8/HZTgamNqQCSVvvZNTRJO03eDu4Ho2/jmqY9scbGBzW
ZAZX7+GZSbzhZv0NqR0N9gp4BBzEjb2jnu7cIT+AAhox0PS4AKSUYoi0OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFA+xSI40e4grHVeKQV6r9mKh02vMB8GA1UdIwQY
MBaAFB+JbNPY0aBpnaUhBV37WNwG3d81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mYWI0OWEtOTFmNC00NjBjLTgyN2It
YzMzMjc4MjJhMTM4LzEvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mYWI0OWEtOTFmNC00NjBjLTgyN2ItYzMzMjc4MjJhMTM4
LzEvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVMSbC3v
kFa2Ebt8RFkXRjgb92rn6xU4sJ/JTlxDrcP4YlPEQg9961gnelxswE9+YSe6cR2l
lRqc6fWV8xN6OOS4l5hq1M6NRaTRQjc0qdynqzXhamAobvHFi4OAD8fdRweoGBWh
NTAGFZw/jx5AJYNjTKC0DFRCU2Yfd1hXMPCD5cAsUCpRUEN1eFHDtPi+9Zt84pjg
tUEuvEUnGC+L7OSGYgkxTwTxKrtMW3d+jEZdAbLPRLfVl1MpV06+0fBvp+MMgjN3
ldfU/UeNpPBIiQQWkTcXrAu9su76918+Y47fU+D0CItSktG/pgoDZeRz5fEWAR3W
R0hMuumCHiQE4w==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:42:32 2025 by rpki-client