Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
File: RHhnr-yeLyk5So9fl_kJKdkoIQI.mft (raw, json)
Hash identifier: wtpN2vmBow8FlW9W37jPi8dUTvxGwnioCsK/2zso3O0=
Subject key identifier: 30:10:09:23:7C:79:F9:7F:AE:5D:07:1D:72:8D:41:B2:86:D3:A3:AF
Authority key identifier: 44:78:67:AF:EC:9E:2F:29:39:4A:8F:5F:97:F9:09:29:D9:28:21:02
Certificate issuer: /CN=447867afec9e2f29394a8f5f97f90929d9282102
Certificate serial: 019774F73D8902D1AB703C02C8CCEC15A9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
Manifest number: 1590
Signing time: Sun 15 Jun 2025 19:00:49 +0000
Manifest this update: Sun 15 Jun 2025 19:00:49 +0000
Manifest next update: Mon 16 Jun 2025 19:00:49 +0000
Files and hashes: 1: RHhnr-yeLyk5So9fl_kJKdkoIQI.crl (hash: 9hbAfIN7APQbmgbR+dE5refEw7xh0VKFRXsYJF9YFXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:3d:89:02:d1:ab:70:3c:02:c8:cc:ec:15:a9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447867afec9e2f29394a8f5f97f90929d9282102
Validity
Not Before: Jun 15 19:00:49 2025 GMT
Not After : Jun 16 19:00:49 2025 GMT
Subject: CN=301009237c79f97fae5d071d728d41b286d3a3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:b0:99:3f:55:b7:70:2b:80:8e:68:0a:7e:
a5:09:93:76:01:b0:ed:e6:d2:e7:91:2f:6c:b8:6a:
7e:c5:25:96:39:6a:80:75:51:65:1f:4f:08:39:c7:
37:ea:f4:09:3c:13:75:33:35:8a:5e:c2:17:2f:20:
e5:be:a0:e6:33:5e:87:21:79:2a:16:03:20:49:bf:
bc:45:3a:dc:c0:7a:3e:46:a7:0f:95:fb:ee:7f:12:
19:35:70:b5:19:c2:fd:ef:83:e6:72:e2:cf:84:32:
17:2d:0e:69:19:12:94:5a:62:66:1b:aa:7c:75:b4:
a3:26:ff:b9:7b:c0:1b:79:b0:67:50:6c:5b:35:b2:
c1:bc:17:7c:f5:f4:50:5e:d3:3d:5b:07:29:ca:6f:
55:bd:2c:ee:2a:3e:4f:45:72:d0:3a:fa:29:0e:6e:
fd:b1:95:70:ad:ca:e6:b2:f3:ac:7b:31:37:74:33:
bc:93:be:5e:3e:69:57:e6:41:6c:4e:1e:12:76:bf:
37:59:14:a5:f8:43:06:77:96:7e:36:49:65:5b:13:
59:12:14:e4:4a:49:d2:31:44:c7:39:50:94:ba:ce:
1e:27:eb:8b:7b:06:9d:08:fd:d8:c6:34:6c:85:2f:
68:b5:5f:81:a1:d1:e7:54:81:72:3a:99:cd:22:d0:
24:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:10:09:23:7C:79:F9:7F:AE:5D:07:1D:72:8D:41:B2:86:D3:A3:AF
X509v3 Authority Key Identifier:
keyid:44:78:67:AF:EC:9E:2F:29:39:4A:8F:5F:97:F9:09:29:D9:28:21:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:23:3e:0c:1b:50:2c:9b:e7:75:9f:56:4a:0d:81:20:4e:17:
a1:73:6e:6e:18:a5:3d:1b:5c:cd:7d:d2:1c:bc:2a:a8:db:1a:
3a:f5:69:5e:8b:ce:ef:5f:f4:cd:72:1b:44:c5:8c:9e:3a:d8:
8c:34:16:4c:93:75:9e:84:f7:52:ca:23:9a:4b:94:a4:d1:48:
1b:5e:17:d5:9c:98:87:c7:8d:08:35:8e:52:ae:30:cd:63:a4:
f6:0a:40:98:78:67:f4:ac:5e:cc:8d:c5:cc:fc:08:b1:1d:a9:
40:51:c9:ac:62:ec:a1:76:87:74:6c:99:9e:9d:47:4d:cf:3d:
4f:18:86:0b:f9:8a:66:51:e9:22:d7:e8:51:e9:4f:c0:08:8d:
66:4a:60:99:52:2f:53:be:66:8b:c6:37:e6:c5:9c:c7:7f:8e:
27:c7:d7:a0:1e:e0:d4:90:67:f3:08:23:87:03:b5:bd:e9:f3:
47:91:30:5b:4d:5d:22:4a:d7:2e:75:6e:b1:db:67:cd:d6:15:
e1:25:9c:39:61:38:55:ea:41:3e:af:9b:a7:b8:e3:84:08:b3:
ac:4a:79:b9:d8:53:ee:d3:9d:17:f7:32:58:2e:bd:87:14:ca:
6d:92:73:58:46:b1:06:f1:c3:35:b7:5d:28:a2:59:f0:1f:d0:
45:c3:70:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd09z2JAtGrcDwCyMzsFanYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0Nzg2N2FmZWM5ZTJmMjkzOTRhOGY1Zjk3ZjkwOTI5ZDky
ODIxMDIwHhcNMjUwNjE1MTkwMDQ5WhcNMjUwNjE2MTkwMDQ5WjAzMTEwLwYDVQQD
EygzMDEwMDkyMzdjNzlmOTdmYWU1ZDA3MWQ3MjhkNDFiMjg2ZDNhM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL6wmT9Vt3ArgI5oCn6lCZN2AbDt
5tLnkS9suGp+xSWWOWqAdVFlH08IOcc36vQJPBN1MzWKXsIXLyDlvqDmM16HIXkq
FgMgSb+8RTrcwHo+RqcPlfvufxIZNXC1GcL974PmcuLPhDIXLQ5pGRKUWmJmG6p8
dbSjJv+5e8AbebBnUGxbNbLBvBd89fRQXtM9Wwcpym9VvSzuKj5PRXLQOvopDm79
sZVwrcrmsvOsezE3dDO8k75ePmlX5kFsTh4Sdr83WRSl+EMGd5Z+NkllWxNZEhTk
SknSMUTHOVCUus4eJ+uLewadCP3YxjRshS9otV+BodHnVIFyOpnNItAk+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAQCSN8efl/rl0HHXKNQbKG06OvMB8GA1UdIwQY
MBaAFER4Z6/sni8pOUqPX5f5CSnZKCECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkhobnIteWVMeWs1U285Zmxfa0pLZGtvSVFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTMyMmItNjQ4Mi00NGE1LWIzZDIt
M2UxMDkxMDdjZWI2LzEvUkhobnIteWVMeWs1U285Zmxfa0pLZGtvSVFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83YTMyMmItNjQ4Mi00NGE1LWIzZDItM2UxMDkxMDdjZWI2
LzEvUkhobnIteWVMeWs1U285Zmxfa0pLZGtvSVFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSM+DBtQ
LJvndZ9WSg2BIE4XoXNubhilPRtczX3SHLwqqNsaOvVpXovO71/0zXIbRMWMnjrY
jDQWTJN1noT3UsojmkuUpNFIG14X1ZyYh8eNCDWOUq4wzWOk9gpAmHhn9KxezI3F
zPwIsR2pQFHJrGLsoXaHdGyZnp1HTc89TxiGC/mKZlHpItfoUelPwAiNZkpgmVIv
U75mi8Y35sWcx3+OJ8fXoB7g1JBn8wgjhwO1venzR5EwW01dIkrXLnVusdtnzdYV
4SWcOWE4VepBPq+bp7jjhAizrEp5udhT7tOdF/cyWC69hxTKbZJzWEaxBvHDNbdd
KKJZ8B/QRcNw8A==
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:51:36 2025 by rpki-client