Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: Hak/6/mcblZqzjBhbM4G33iTIF7jOjPe4JrlxIN7xeI=
Subject key identifier: 67:F3:33:A9:CF:81:46:CF:C4:29:0E:80:07:85:58:29:CB:58:2A:21
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 01977DFA923B67DBF1C458ECF6F4B51180BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 1386
Signing time: Tue 17 Jun 2025 13:01:02 +0000
Manifest this update: Tue 17 Jun 2025 13:01:02 +0000
Manifest next update: Wed 18 Jun 2025 13:01:02 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: 0ZjXdc2qZen5VBRuEhJb6X5l8B9zv0oq44Oca6T/IO8=)
2: wC7Ohmh2aveKOZ7_Cl4a1vLomLo.roa (hash: hPiN8yhRbkkwhBqX7IPJBoamojlDhfcUtcDIIbpri30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:fa:92:3b:67:db:f1:c4:58:ec:f6:f4:b5:11:80:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: Jun 17 13:01:02 2025 GMT
Not After : Jun 18 13:01:02 2025 GMT
Subject: CN=67f333a9cf8146cfc4290e8007855829cb582a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a1:e1:d9:db:72:a8:17:3d:b1:45:e6:4b:48:
76:ff:02:aa:ee:53:87:d0:79:43:69:31:74:b0:72:
6f:d6:01:44:3e:41:f0:b8:91:41:84:20:8c:a4:ae:
e8:4c:9d:fc:71:62:36:f8:4a:71:59:cb:ca:67:96:
ca:45:6f:48:47:55:c1:3d:39:50:55:5b:17:61:04:
c0:3f:18:26:e3:c9:5a:d1:59:0d:8f:0f:4b:af:85:
84:f3:7b:ae:1c:3b:a0:0d:12:91:f6:eb:db:56:61:
9b:9a:aa:21:d8:9e:bd:7b:4a:da:17:88:26:a7:ac:
4f:13:91:0a:66:48:70:c4:e6:94:0a:d3:8c:5c:8c:
eb:8c:ac:f7:bc:52:2f:17:a6:8c:5f:cc:23:e2:5b:
84:2d:31:6d:e1:86:40:7a:1a:6a:9f:34:25:b0:b9:
00:ea:9b:7f:48:d8:8e:2c:94:62:04:c3:38:19:2b:
dd:d7:fa:ee:cb:8d:7e:26:fd:28:48:55:ca:47:79:
cb:ad:ec:84:ea:c9:0c:aa:93:be:d9:4f:2c:60:37:
98:fd:c4:73:7d:6a:b9:4b:22:3c:f1:3b:6c:ce:3a:
c3:ab:1e:4b:0a:2c:4b:c1:f7:ee:6e:2c:44:10:22:
a3:4c:a0:2d:11:27:89:9e:6f:be:f9:ae:8c:69:3f:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F3:33:A9:CF:81:46:CF:C4:29:0E:80:07:85:58:29:CB:58:2A:21
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:63:35:53:48:8f:33:52:5b:75:2e:65:23:45:a0:4f:b5:00:
f8:b9:6e:28:53:26:be:11:4b:1c:30:d3:e1:76:b0:ce:39:39:
d0:e8:eb:bd:f7:e7:d7:1b:46:eb:8d:99:4e:a8:fc:d1:aa:ae:
e9:7d:26:8e:29:62:10:cb:b6:99:1c:e8:7d:14:a3:64:82:0e:
9d:98:56:ae:78:69:46:7f:69:53:7e:e3:d7:9c:ae:70:37:3e:
d2:f0:7d:6f:97:7e:e3:32:08:61:f5:80:ac:d2:90:89:01:ca:
44:45:dd:12:d4:f6:69:ff:01:71:49:0a:f9:82:f6:5b:36:a1:
54:91:71:d0:4f:d1:82:c5:c6:3e:ab:5d:dc:f0:fc:39:bb:77:
de:cf:64:39:3d:db:3f:06:3e:11:c4:ee:45:be:62:ea:bd:2d:
3e:b5:48:dc:b5:40:c7:d3:c8:73:9c:a7:4a:ff:3e:06:52:0a:
f0:9c:ba:40:21:e8:6e:ee:83:29:12:37:a8:e9:8d:ba:8f:f3:
f5:9a:c7:db:8a:46:ee:81:90:13:62:56:4b:44:b3:76:a6:81:
1e:a9:9b:f9:34:10:bb:08:60:d2:b8:16:dd:cc:3b:e3:4b:1f:
cc:8d:cd:ba:ce:0c:90:ed:37:a4:b1:ce:19:99:cd:b7:77:3b:
ca:71:ce:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9+pI7Z9vxxFjs9vS1EYC6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTFkYjQ2NmNmODA4MjA2MjkzZDA3ZTY1ZjIxMjFmZWI0
OWEzM2UwHhcNMjUwNjE3MTMwMTAyWhcNMjUwNjE4MTMwMTAyWjAzMTEwLwYDVQQD
Eyg2N2YzMzNhOWNmODE0NmNmYzQyOTBlODAwNzg1NTgyOWNiNTgyYTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqHh2dtyqBc9sUXmS0h2/wKq7lOH
0HlDaTF0sHJv1gFEPkHwuJFBhCCMpK7oTJ38cWI2+EpxWcvKZ5bKRW9IR1XBPTlQ
VVsXYQTAPxgm48la0VkNjw9Lr4WE83uuHDugDRKR9uvbVmGbmqoh2J69e0raF4gm
p6xPE5EKZkhwxOaUCtOMXIzrjKz3vFIvF6aMX8wj4luELTFt4YZAehpqnzQlsLkA
6pt/SNiOLJRiBMM4GSvd1/ruy41+Jv0oSFXKR3nLreyE6skMqpO+2U8sYDeY/cRz
fWq5SyI88TtszjrDqx5LCixLwffubixEECKjTKAtESeJnm+++a6MaT96MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfzM6nPgUbPxCkOgAeFWCnLWCohMB8GA1UdIwQY
MBaAFNCh20Zs+AggYpPQfmXyEh/rSaM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xMWNkYWMtNjQxMS00NTRkLWI5NzMt
NDc2MmIwMTBlZjFlLzEvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8xMWNkYWMtNjQxMS00NTRkLWI5NzMtNDc2MmIwMTBlZjFl
LzEvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGM1U0iP
M1JbdS5lI0WgT7UA+LluKFMmvhFLHDDT4Xawzjk50Ojrvffn1xtG642ZTqj80aqu
6X0mjiliEMu2mRzofRSjZIIOnZhWrnhpRn9pU37j15yucDc+0vB9b5d+4zIIYfWA
rNKQiQHKREXdEtT2af8BcUkK+YL2WzahVJFx0E/RgsXGPqtd3PD8Obt33s9kOT3b
PwY+EcTuRb5i6r0tPrVI3LVAx9PIc5ynSv8+BlIK8Jy6QCHobu6DKRI3qOmNuo/z
9ZrH24pG7oGQE2JWS0SzdqaBHqmb+TQQuwhg0rgW3cw740sfzI3Nus4MkO03pLHO
GZnNt3c7ynHOuA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 20:22:40 2025 by rpki-client