Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
File: h_S8G8xE8-kQBwQ1297UG25ILmg.mft (raw, json)
Hash identifier: 9cmWOIwF3g+Jvo7ke/aLWNFRij/fFqs1HXF2rMXjLg4=
Subject key identifier: 19:19:EE:10:58:02:92:20:95:6B:4A:8F:DC:DD:D2:D7:57:35:87:FF
Authority key identifier: 87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68
Certificate issuer: /CN=87f4bc1bcc44f3e910070435dbded41b6e482e68
Certificate serial: 0197801FA1D2B1245DB30A51F8D43647F0A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
Manifest number: 03CC
Signing time: Tue 17 Jun 2025 23:00:46 +0000
Manifest this update: Tue 17 Jun 2025 23:00:46 +0000
Manifest next update: Wed 18 Jun 2025 23:00:46 +0000
Files and hashes: 1: h_S8G8xE8-kQBwQ1297UG25ILmg.crl (hash: PzHNz7wIInNXUAYABNUW23ZtcvADLvs7SgahdArcbyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:1f:a1:d2:b1:24:5d:b3:0a:51:f8:d4:36:47:f0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f4bc1bcc44f3e910070435dbded41b6e482e68
Validity
Not Before: Jun 17 23:00:46 2025 GMT
Not After : Jun 18 23:00:46 2025 GMT
Subject: CN=1919ee1058029220956b4a8fdcddd2d7573587ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:be:8e:de:c3:c8:cc:df:ba:b9:9e:93:c7:
37:9b:4f:ef:a4:81:b1:e9:71:e9:0d:50:04:4c:ad:
bc:c7:a8:ac:8a:b2:86:40:78:ea:e2:eb:82:30:2d:
52:8b:60:c1:2e:58:e2:fa:75:6d:43:be:f6:68:f0:
53:d2:3c:94:92:e7:d8:36:e1:85:5c:46:62:d2:6e:
e1:2b:99:0e:e9:05:cd:3e:12:22:69:4d:65:59:94:
43:5b:06:a3:b8:b5:e8:6b:72:e7:c1:44:63:f5:18:
7c:5f:7c:21:d1:18:3f:ec:fb:c8:b1:80:cb:b6:44:
38:4b:38:af:7b:14:ae:94:44:95:79:ac:9d:7f:df:
d3:62:4a:3c:75:9f:91:ed:9d:51:5d:88:55:0e:b9:
8e:a4:8f:a6:7a:bb:75:c8:46:1e:42:8e:e0:a9:1c:
58:28:f3:4a:55:e9:24:f7:87:c7:35:ab:e6:ba:ce:
67:2c:45:a7:27:1e:e4:4b:40:17:3a:b0:45:6d:3e:
31:e9:de:b6:12:6c:0b:60:a5:75:75:4e:8a:f6:e0:
f0:03:be:0f:8e:ff:a9:06:17:83:3d:e0:97:b4:95:
8b:e5:e7:0b:95:ef:02:4b:43:b8:ae:c5:f1:c4:a5:
2b:44:13:8b:6d:95:74:19:69:50:91:01:f9:6d:8e:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:19:EE:10:58:02:92:20:95:6B:4A:8F:DC:DD:D2:D7:57:35:87:FF
X509v3 Authority Key Identifier:
keyid:87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:27:62:64:e5:80:d9:8e:35:c1:92:fc:fc:91:82:fc:1c:59:
d4:96:c3:e6:31:fc:19:d3:54:c8:40:e2:64:7c:9f:5d:39:59:
ca:52:01:69:35:62:5f:d1:ba:c6:b6:3d:6c:91:57:a7:98:ff:
0a:6a:88:c3:2f:73:41:00:d4:f0:2d:49:06:8d:c5:57:30:94:
c3:e0:1b:db:c6:a9:1f:17:5b:f2:c7:33:aa:b3:dd:ae:38:a1:
9d:a1:6d:84:9e:4d:c9:92:50:34:2d:c0:7e:d4:7c:23:93:56:
61:1f:7a:10:d3:c7:14:f0:d2:7f:73:a4:74:93:c3:51:fc:0b:
71:31:e1:c8:94:0a:d8:f6:f1:57:b3:42:ca:3c:9f:4b:31:d0:
af:ed:74:6b:18:03:64:bd:43:e4:4b:a4:d4:8f:f6:91:86:53:
c7:ea:36:8a:93:ea:d7:65:36:bb:08:04:22:8a:bf:f2:ba:40:
f1:aa:6c:3a:2f:c2:e3:07:d4:7e:34:73:0d:0d:24:44:1d:6f:
b0:77:3d:23:69:48:3b:32:a9:44:7b:04:05:a7:10:97:91:b9:
ab:63:74:91:66:78:4e:ec:e9:41:4a:bd:be:21:ae:73:e9:50:
3b:ed:49:c2:57:68:bd:4b:3e:0d:15:97:2c:63:db:22:05:d1:
41:98:5d:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeAH6HSsSRdswpR+NQ2R/CkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZjRiYzFiY2M0NGYzZTkxMDA3MDQzNWRiZGVkNDFiNmU0
ODJlNjgwHhcNMjUwNjE3MjMwMDQ2WhcNMjUwNjE4MjMwMDQ2WjAzMTEwLwYDVQQD
EygxOTE5ZWUxMDU4MDI5MjIwOTU2YjRhOGZkY2RkZDJkNzU3MzU4N2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3K+jt7DyMzfurmek8c3m0/vpIGx
6XHpDVAETK28x6isirKGQHjq4uuCMC1Si2DBLlji+nVtQ772aPBT0jyUkufYNuGF
XEZi0m7hK5kO6QXNPhIiaU1lWZRDWwajuLXoa3LnwURj9Rh8X3wh0Rg/7PvIsYDL
tkQ4SzivexSulESVeaydf9/TYko8dZ+R7Z1RXYhVDrmOpI+mert1yEYeQo7gqRxY
KPNKVekk94fHNavmus5nLEWnJx7kS0AXOrBFbT4x6d62EmwLYKV1dU6K9uDwA74P
jv+pBheDPeCXtJWL5ecLle8CS0O4rsXxxKUrRBOLbZV0GWlQkQH5bY7MmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkZ7hBYApIglWtKj9zd0tdXNYf/MB8GA1UdIwQY
MBaAFIf0vBvMRPPpEAcENdve1BtuSC5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaF9TOEc4eEU4LWtRQndRMTI5N1VHMjVJTG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wYjViNmQtN2Y0Ni00NDdhLTg5NDYt
N2U3ODE2ODBkMWQyLzEvaF9TOEc4eEU4LWtRQndRMTI5N1VHMjVJTG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wYjViNmQtN2Y0Ni00NDdhLTg5NDYtN2U3ODE2ODBkMWQy
LzEvaF9TOEc4eEU4LWtRQndRMTI5N1VHMjVJTG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIydiZOWA
2Y41wZL8/JGC/BxZ1JbD5jH8GdNUyEDiZHyfXTlZylIBaTViX9G6xrY9bJFXp5j/
CmqIwy9zQQDU8C1JBo3FVzCUw+Ab28apHxdb8sczqrPdrjihnaFthJ5NyZJQNC3A
ftR8I5NWYR96ENPHFPDSf3OkdJPDUfwLcTHhyJQK2PbxV7NCyjyfSzHQr+10axgD
ZL1D5Euk1I/2kYZTx+o2ipPq12U2uwgEIoq/8rpA8apsOi/C4wfUfjRzDQ0kRB1v
sHc9I2lIOzKpRHsEBacQl5G5q2N0kWZ4TuzpQUq9viGuc+lQO+1JwldovUs+DRWX
LGPbIgXRQZhdxg==
-----END CERTIFICATE-----
Generated at Wed Jun 18 03:01:53 2025 by rpki-client