Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
File: hGhM2vJd5AvvwejkIoWo1ew4kEc.mft (raw, json)
Hash identifier: H2Owp1hDzjPQUkBP29E0QPGkeAAgGS9VGzlXXG/8V3c=
Subject key identifier: 1D:A3:52:6C:B0:3C:D2:DF:DC:3F:0B:B2:9A:71:AD:CF:D5:0C:78:B6
Authority key identifier: 84:68:4C:DA:F2:5D:E4:0B:EF:C1:E8:E4:22:85:A8:D5:EC:38:90:47
Certificate issuer: /CN=84684cdaf25de40befc1e8e42285a8d5ec389047
Certificate serial: 01976FD0FF123A2F525A068C7A2577D9191E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGhM2vJd5AvvwejkIoWo1ew4kEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
Manifest number: 03AE
Signing time: Sat 14 Jun 2025 19:00:57 +0000
Manifest this update: Sat 14 Jun 2025 19:00:57 +0000
Manifest next update: Sun 15 Jun 2025 19:00:57 +0000
Files and hashes: 1: hGhM2vJd5AvvwejkIoWo1ew4kEc.crl (hash: WDj96WqNPyeLDWeisIqR3X7aTK0LMxgjs6sQcAilEv0=)
2: oidwYZW8G2o74OS_a_nCcJCpjCg.roa (hash: ogxgsB9YER6I/w+iNtW/Wqu1gf3XIhY2x4sxgGoaIJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGhM2vJd5AvvwejkIoWo1ew4kEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:ff:12:3a:2f:52:5a:06:8c:7a:25:77:d9:19:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84684cdaf25de40befc1e8e42285a8d5ec389047
Validity
Not Before: Jun 14 19:00:57 2025 GMT
Not After : Jun 15 19:00:57 2025 GMT
Subject: CN=1da3526cb03cd2dfdc3f0bb29a71adcfd50c78b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:7f:bc:fc:59:32:94:52:c3:49:47:94:35:
95:93:ee:98:64:d8:48:2a:16:bd:51:c9:e1:15:5a:
96:0a:b5:4d:b9:ad:ba:25:59:2b:2f:1b:0a:2c:82:
f4:07:71:b9:32:97:b1:9b:fc:34:bf:be:4d:0e:c5:
1d:a3:e6:06:78:ca:97:e1:2c:fd:fd:fb:a4:0c:1a:
87:23:ac:94:07:7c:b5:00:aa:e0:8a:69:98:0a:66:
66:44:e4:b8:83:0d:27:6e:5e:66:2a:29:f5:86:56:
d5:00:2b:4f:ea:1d:42:85:4c:f3:37:94:f3:e6:2e:
e4:e6:31:52:dd:7e:f6:52:3c:27:dd:3d:0a:6f:a4:
49:93:f9:7a:b5:2d:66:47:41:c9:99:72:4c:93:25:
43:b4:a2:0d:e4:73:db:41:f9:0a:ec:e7:a2:d3:ba:
7e:8d:34:88:c0:fc:b4:df:c3:4c:24:0a:f5:c8:e1:
e9:18:6e:d6:57:ed:77:c0:40:61:7d:1a:22:69:65:
6d:32:06:dc:34:d1:f8:67:75:48:90:22:99:eb:f4:
2c:62:73:23:88:c2:61:8b:95:fd:7c:26:bf:a1:8c:
9c:0a:36:fa:90:50:ed:a8:87:d7:e6:60:f6:32:36:
f4:4f:32:51:0c:24:f7:27:53:2a:0d:4e:77:a0:ba:
69:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A3:52:6C:B0:3C:D2:DF:DC:3F:0B:B2:9A:71:AD:CF:D5:0C:78:B6
X509v3 Authority Key Identifier:
keyid:84:68:4C:DA:F2:5D:E4:0B:EF:C1:E8:E4:22:85:A8:D5:EC:38:90:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGhM2vJd5AvvwejkIoWo1ew4kEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:cd:71:bc:32:bc:30:65:c5:63:bc:6f:49:e4:fe:fe:72:3d:
94:19:98:22:74:99:9b:7c:0c:41:3d:2c:35:7b:4a:6f:21:69:
5e:f8:df:de:7d:7f:d2:ea:fc:fd:91:af:53:30:b4:e7:ed:39:
98:bc:af:4d:74:d6:4a:64:b2:8d:e5:c1:21:b8:63:b6:49:71:
d7:a3:32:9c:a8:7d:29:53:78:b8:b2:ed:22:32:fc:f1:b1:e9:
22:4c:9c:8e:00:0f:30:7a:8f:13:dc:fe:37:57:a2:7a:5f:ab:
7a:7c:a7:24:42:bc:12:ff:7a:d8:59:b1:4a:9a:ba:61:75:f8:
01:74:e3:40:fc:0c:93:3f:5b:26:31:b5:d7:a2:81:49:ba:c0:
43:79:09:8a:0d:a9:55:42:31:d9:40:44:01:af:3b:c4:1b:a3:
4e:8c:ed:7c:14:b5:07:4a:6c:66:51:6a:41:4d:ea:29:82:ca:
2d:f4:9b:cb:62:83:b9:12:8f:0c:d2:d0:0f:32:05:8f:fc:49:
d2:80:8b:34:12:9a:26:9f:0d:4e:43:4c:c2:bd:43:0a:cd:0f:
e3:b3:c5:ff:b2:2f:90:4a:de:b7:f7:c4:cb:4a:9d:85:97:46:
3f:aa:5f:26:22:dd:ef:9b:8a:e1:3b:83:5f:93:82:51:12:92:
84:a1:63:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0P8SOi9SWgaMeiV32RkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0Njg0Y2RhZjI1ZGU0MGJlZmMxZThlNDIyODVhOGQ1ZWMz
ODkwNDcwHhcNMjUwNjE0MTkwMDU3WhcNMjUwNjE1MTkwMDU3WjAzMTEwLwYDVQQD
EygxZGEzNTI2Y2IwM2NkMmRmZGMzZjBiYjI5YTcxYWRjZmQ1MGM3OGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRF/vPxZMpRSw0lHlDWVk+6YZNhI
Kha9UcnhFVqWCrVNua26JVkrLxsKLIL0B3G5Mpexm/w0v75NDsUdo+YGeMqX4Sz9
/fukDBqHI6yUB3y1AKrgimmYCmZmROS4gw0nbl5mKin1hlbVACtP6h1ChUzzN5Tz
5i7k5jFS3X72Ujwn3T0Kb6RJk/l6tS1mR0HJmXJMkyVDtKIN5HPbQfkK7Oei07p+
jTSIwPy038NMJAr1yOHpGG7WV+13wEBhfRoiaWVtMgbcNNH4Z3VIkCKZ6/QsYnMj
iMJhi5X9fCa/oYycCjb6kFDtqIfX5mD2Mjb0TzJRDCT3J1MqDU53oLppTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2jUmywPNLf3D8Lsppxrc/VDHi2MB8GA1UdIwQY
MBaAFIRoTNryXeQL78Ho5CKFqNXsOJBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdoTTJ2SmQ1QXZ2d2Vqa0lvV28xZXc0a0VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jMDM4M2EtZjI3MS00YzFlLWI1Y2Et
ZGVjYjIyMDYyYzcwLzEvaEdoTTJ2SmQ1QXZ2d2Vqa0lvV28xZXc0a0VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9jMDM4M2EtZjI3MS00YzFlLWI1Y2EtZGVjYjIyMDYyYzcw
LzEvaEdoTTJ2SmQ1QXZ2d2Vqa0lvV28xZXc0a0VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT81xvDK8
MGXFY7xvSeT+/nI9lBmYInSZm3wMQT0sNXtKbyFpXvjf3n1/0ur8/ZGvUzC05+05
mLyvTXTWSmSyjeXBIbhjtklx16MynKh9KVN4uLLtIjL88bHpIkycjgAPMHqPE9z+
N1eiel+renynJEK8Ev962FmxSpq6YXX4AXTjQPwMkz9bJjG116KBSbrAQ3kJig2p
VUIx2UBEAa87xBujToztfBS1B0psZlFqQU3qKYLKLfSby2KDuRKPDNLQDzIFj/xJ
0oCLNBKaJp8NTkNMwr1DCs0P47PF/7IvkEret/fEy0qdhZdGP6pfJiLd75uK4TuD
X5OCURKShKFjtA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:31:00 2025 by rpki-client