Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
File: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft (raw, json)
Hash identifier: Wip8SjH0+3ak/QDp/os7A2C+9kfsu8gLx1O3cVabMYY=
Subject key identifier: EA:20:D4:0F:EE:95:31:D5:1E:C1:08:70:3D:0D:89:39:B2:16:40:80
Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Certificate issuer: /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Certificate serial: 019768BBE2CFFBF9E4F9E1C31C1DB2A3ADA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 10:00:33 +0000
Manifest this update: Fri 13 Jun 2025 10:00:33 +0000
Manifest next update: Sat 14 Jun 2025 10:00:33 +0000
Files and hashes: 1: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl (hash: 6Ep+5B4XxPZ+LaRHu48ZboJT0Bo+TAC6v1CZdFLIffg=)
2: LiDek8ukAeDalnCmjHOSOx8ybkY.roa (hash: XaMtoZ+RB8cq+ljNgiN30o7Aneys4CKgmujbsMdFNUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:e2:cf:fb:f9:e4:f9:e1:c3:1c:1d:b2:a3:ad:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Validity
Not Before: Jun 13 10:00:33 2025 GMT
Not After : Jun 14 10:00:33 2025 GMT
Subject: CN=ea20d40fee9531d51ec108703d0d8939b2164080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:df:e6:08:6e:d3:25:06:53:1b:d5:04:b5:
2a:8d:37:61:a0:d1:98:18:21:71:79:90:20:6a:9d:
96:d3:60:b2:45:1f:81:07:82:97:e8:37:df:d1:6e:
b9:7b:db:f2:9e:21:35:94:3b:2f:97:1a:ed:0c:bc:
0f:ff:df:13:7a:bc:94:fe:f4:e1:b7:31:79:02:b7:
60:b4:44:83:2b:34:6c:c5:f8:42:1a:4b:e0:a6:46:
58:7a:1a:ea:52:44:64:a3:ec:d9:b3:e5:14:9e:78:
34:e5:19:86:1c:68:53:93:8e:a0:69:80:ce:97:3a:
36:81:c9:b2:f8:6b:cf:b4:09:47:85:fb:c2:94:85:
e6:b8:bb:67:31:c3:4b:2f:49:9c:ed:5d:fa:4a:ab:
35:d0:4e:fa:ff:38:c9:47:03:89:b1:09:c1:90:86:
84:38:8a:de:b7:99:6f:71:04:7a:5d:17:a6:4e:42:
55:5f:cc:57:10:37:b1:10:88:ad:de:a6:1e:68:e9:
38:18:67:c6:c4:b7:bd:7b:7b:23:83:35:25:97:1f:
ce:97:0f:0a:13:05:77:2a:e5:72:2f:2a:26:4c:c2:
c3:b2:98:c3:88:63:b2:ff:fc:e0:ee:30:a7:cd:07:
32:e1:90:02:d1:8a:b0:12:9d:b9:a5:30:6d:c7:e9:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:20:D4:0F:EE:95:31:D5:1E:C1:08:70:3D:0D:89:39:B2:16:40:80
X509v3 Authority Key Identifier:
keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8e:9a:97:7f:ea:af:4a:49:d2:20:d6:89:95:b1:57:e5:31:
d8:a1:ba:c4:e8:1b:aa:a4:be:a9:92:bb:5d:4c:7a:3c:08:d9:
de:f9:bf:90:c2:e4:6f:b8:78:a7:31:9f:15:2b:89:c2:61:de:
99:e7:93:e6:69:be:f3:e1:b1:61:cc:86:c0:03:77:07:f7:fa:
86:b0:8c:0c:4a:07:28:d4:a2:4a:5c:fd:42:e9:f6:22:10:f0:
6d:88:84:b3:5a:35:bb:65:c4:87:b7:2b:d2:eb:ce:09:54:a2:
8c:93:35:8e:be:33:42:61:3c:51:90:7d:72:a3:0e:9f:db:c4:
85:d3:20:b6:3a:e9:7c:2c:9f:6a:68:e6:bc:47:d4:92:76:db:
5f:ce:d1:78:6e:5f:16:2a:86:cc:9f:ad:9b:74:92:73:29:28:
b8:45:83:14:a5:76:8f:de:92:29:b6:bc:19:33:17:e8:36:b1:
61:09:f1:02:ea:fc:b0:c3:b1:21:80:b6:56:c3:99:25:f9:52:
75:ad:23:67:70:ab:f0:26:f3:b0:14:98:98:e2:38:57:a8:6e:
01:3f:f0:6a:8e:32:88:50:3f:7e:d6:42:15:ca:39:57:2c:ea:
fa:cf:e8:50:e2:21:1a:78:80:4a:86:a5:84:18:84:cc:39:2c:
6d:a7:f0:3a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdou+LP+/nk+eHDHB2yo62nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMTI5Y2NiYjhjMjQxYTljOWIxZmYyMDczMGEyNjQ5NTZi
NTAyOTQwHhcNMjUwNjEzMTAwMDMzWhcNMjUwNjE0MTAwMDMzWjAzMTEwLwYDVQQD
EyhlYTIwZDQwZmVlOTUzMWQ1MWVjMTA4NzAzZDBkODkzOWIyMTY0MDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7Tf5ghu0yUGUxvVBLUqjTdhoNGY
GCFxeZAgap2W02CyRR+BB4KX6Dff0W65e9vyniE1lDsvlxrtDLwP/98TeryU/vTh
tzF5ArdgtESDKzRsxfhCGkvgpkZYehrqUkRko+zZs+UUnng05RmGHGhTk46gaYDO
lzo2gcmy+GvPtAlHhfvClIXmuLtnMcNLL0mc7V36Sqs10E76/zjJRwOJsQnBkIaE
OIret5lvcQR6XRemTkJVX8xXEDexEIit3qYeaOk4GGfGxLe9e3sjgzUllx/Olw8K
EwV3KuVyLyomTMLDspjDiGOy//zg7jCnzQcy4ZAC0YqwEp25pTBtx+koYQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOog1A/ulTHVHsEIcD0NiTmyFkCAMB8GA1UdIwQY
MBaAFPoSnMu4wkGpybH/IHMKJklWtQKUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oS2N5N2pDUWFuSnNmOGdjd29tU1ZhMUFwUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvMzAwODM5LTE5MmUtNGVhOS05OWYy
LTE4ZmQ4NTZhNThiNy8xLzEtaEtjeTdqQ1FhbkpzZjhnY3dvbVNWYTFBcFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzhjLzMwMDgzOS0xOTJlLTRlYTktOTlmMi0xOGZkODU2YTU4
YjcvMS8xLWhLY3k3akNRYW5Kc2Y4Z2N3b21TVmExQXBRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIo6a
l3/qr0pJ0iDWiZWxV+Ux2KG6xOgbqqS+qZK7XUx6PAjZ3vm/kMLkb7h4pzGfFSuJ
wmHemeeT5mm+8+GxYcyGwAN3B/f6hrCMDEoHKNSiSlz9Qun2IhDwbYiEs1o1u2XE
h7cr0uvOCVSijJM1jr4zQmE8UZB9cqMOn9vEhdMgtjrpfCyfamjmvEfUknbbX87R
eG5fFiqGzJ+tm3SScykouEWDFKV2j96SKba8GTMX6DaxYQnxAur8sMOxIYC2VsOZ
JflSda0jZ3Cr8CbzsBSYmOI4V6huAT/wao4yiFA/ftZCFco5Vyzq+s/oUOIhGniA
SoalhBiEzDksbafwOg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:34:55 2025 by rpki-client