Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
File: hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft (raw, json)
Hash identifier: jvPDcKT49Jn2SuHE/RHjyYHUJIbxdmWhS32pK/4k884=
Subject key identifier: D3:AB:93:C3:02:72:B1:38:AA:A8:6F:FC:E1:73:58:8D:13:A3:19:34
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 01977007E50D335362D8EF045FA543DA32C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 20:00:54 +0000
Manifest this update: Sat 14 Jun 2025 20:00:54 +0000
Manifest next update: Sun 15 Jun 2025 20:00:54 +0000
Files and hashes: 1: 0mePZR1kaf-hX2Yp4hjxtaHCXOY.roa (hash: Iz51+DSbV7Tr3oZnznfPb0ztDkoHj3CGvdnh39JEVfU=)
2: Dh6Kyc_0YRpUkQaciLKNTFpj2yY.roa (hash: XwxfewChyQGnh/6DJxz8pIZg+xrexkVvjsVCqgpoH3U=)
3: ZovzMlbHa6h-Fl7gDQG_Zq7WfR4.roa (hash: H/iI+5AR6wdmCN1X+mmy0vutxGeF8cVAtih493U1ycg=)
4: hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl (hash: GahaLdUeoZs1luf6RJkvNYkeOh+hlfepw6VGmpFdPOQ=)
5: l73B-rq6PzNDiKoxaYkXjLCugtw.roa (hash: 3VSqbyAVKfkVsGJFnzfZhKO8PUH5YDBnP4CFYJUZ7hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:e5:0d:33:53:62:d8:ef:04:5f:a5:43:da:32:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Jun 14 20:00:54 2025 GMT
Not After : Jun 15 20:00:54 2025 GMT
Subject: CN=d3ab93c30272b138aaa86ffce173588d13a31934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:57:4e:2a:08:6d:ae:3f:8b:d9:00:58:bc:
91:61:4c:46:be:f7:0e:7b:61:7b:21:98:b8:2c:98:
32:3f:54:df:d8:87:39:b9:de:06:3d:84:d8:c6:8a:
fe:6a:13:75:a5:a8:a3:b6:d1:99:0f:c0:49:d3:96:
6b:87:59:d6:97:17:04:18:b6:64:e7:b2:04:03:d8:
65:6b:ed:63:2d:4e:97:15:d6:fd:3b:f0:d4:35:0b:
80:ee:cb:be:a8:fc:09:f3:90:0e:15:50:f3:d7:4b:
f4:2a:f7:51:7f:d7:aa:0b:26:8e:21:27:9c:d5:81:
9c:51:de:7f:0d:89:a1:0a:39:c6:85:45:29:45:fc:
a7:a1:db:43:ca:9a:8f:5d:a3:a6:5d:5c:31:66:3c:
39:32:fe:8a:b7:e0:38:07:cc:35:33:d6:93:87:93:
db:54:d2:1e:7d:99:d9:97:b3:43:ef:77:94:a9:d1:
5d:80:cf:1f:53:c2:43:cd:e2:f3:3c:81:25:95:62:
b6:4d:14:ab:61:27:19:df:cc:26:85:43:ff:b1:2a:
3e:9a:00:22:82:fb:84:ef:0a:1a:be:b8:41:77:05:
02:ee:64:45:59:3f:25:19:ff:e4:d8:0f:00:87:c2:
3d:78:d2:f5:56:11:a7:47:03:1b:39:a8:3e:84:c0:
99:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AB:93:C3:02:72:B1:38:AA:A8:6F:FC:E1:73:58:8D:13:A3:19:34
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2b:1a:6c:a3:e2:28:a8:3f:13:b1:86:73:d9:15:1d:0e:54:
06:bb:10:56:17:40:f0:8c:3e:17:d9:7c:e2:68:61:35:cb:b1:
0d:74:77:e0:cd:92:a9:f4:17:bb:9c:8b:4e:f2:9e:70:6d:aa:
04:df:a0:26:9d:a4:83:c8:c7:c2:b0:be:24:7f:bc:1a:87:83:
45:55:78:06:60:70:d3:ef:84:ff:fe:58:51:96:1e:65:4e:44:
00:6e:e0:17:ec:d2:b9:1e:b8:ea:61:5c:45:ba:8c:39:f3:bf:
37:45:91:d7:8b:ca:00:22:94:ee:5d:70:a7:d6:fe:dd:aa:3e:
2c:87:7c:96:09:6a:78:46:20:48:b0:90:36:0e:aa:88:91:40:
36:9b:e3:f1:8e:85:29:b9:bc:42:64:03:9f:87:bc:11:fc:dd:
32:95:9e:5b:0c:11:e3:15:99:e2:6d:37:90:d2:78:67:80:e0:
b9:de:15:c8:ec:b8:bf:c6:2e:7c:d0:1e:01:28:7e:6f:a0:e3:
34:07:f8:12:f5:61:57:ec:b8:5e:c4:09:90:55:31:db:ee:03:
e0:40:47:6c:98:1a:bf:f7:fc:3d:a2:f7:7e:64:e7:89:07:dd:
51:12:3f:25:86:b8:95:cb:45:6a:3e:5f:77:72:74:76:81:27:
dc:fb:51:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwB+UNM1Ni2O8EX6VD2jLCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NmYwYzkwMDczYWZiOGVjZGU3ZTgzNDA5Y2VhYmRiOTNi
NDFhNGUwHhcNMjUwNjE0MjAwMDU0WhcNMjUwNjE1MjAwMDU0WjAzMTEwLwYDVQQD
EyhkM2FiOTNjMzAyNzJiMTM4YWFhODZmZmNlMTczNTg4ZDEzYTMxOTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLVXTioIba4/i9kAWLyRYUxGvvcO
e2F7IZi4LJgyP1Tf2Ic5ud4GPYTYxor+ahN1paijttGZD8BJ05Zrh1nWlxcEGLZk
57IEA9hla+1jLU6XFdb9O/DUNQuA7su+qPwJ85AOFVDz10v0KvdRf9eqCyaOISec
1YGcUd5/DYmhCjnGhUUpRfynodtDypqPXaOmXVwxZjw5Mv6Kt+A4B8w1M9aTh5Pb
VNIefZnZl7ND73eUqdFdgM8fU8JDzeLzPIEllWK2TRSrYScZ38wmhUP/sSo+mgAi
gvuE7woavrhBdwUC7mRFWT8lGf/k2A8Ah8I9eNL1VhGnRwMbOag+hMCZTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOrk8MCcrE4qqhv/OFzWI0Toxk0MB8GA1UdIwQY
MBaAFIVvDJAHOvuOzefoNAnOq9uTtBpOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8yMDQyNjgtNjA3OC00YjUzLTk0ZDIt
NDRmZGU5NmI4YWVjLzEvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8yMDQyNjgtNjA3OC00YjUzLTk0ZDItNDRmZGU5NmI4YWVj
LzEvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJysabKPi
KKg/E7GGc9kVHQ5UBrsQVhdA8Iw+F9l84mhhNcuxDXR34M2SqfQXu5yLTvKecG2q
BN+gJp2kg8jHwrC+JH+8GoeDRVV4BmBw0++E//5YUZYeZU5EAG7gF+zSuR646mFc
RbqMOfO/N0WR14vKACKU7l1wp9b+3ao+LId8lglqeEYgSLCQNg6qiJFANpvj8Y6F
Kbm8QmQDn4e8EfzdMpWeWwwR4xWZ4m03kNJ4Z4Dgud4VyOy4v8YufNAeASh+b6Dj
NAf4EvVhV+y4XsQJkFUx2+4D4EBHbJgav/f8PaL3fmTniQfdURI/JYa4lctFaj5f
d3J0doEn3PtRbg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:59:05 2025 by rpki-client