Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
File: H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft (raw, json)
Hash identifier: /PJeHq9Wq0z1e67K0yRVlqXpT+GTfJsdGkzsbWZH4sk=
Subject key identifier: 57:49:41:34:84:39:48:3A:66:B1:4E:D1:44:B4:6E:56:2E:25:FC:62
Authority key identifier: 1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32
Certificate issuer: /CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32
Certificate serial: 01976C991A70990F747B2E37D5B08E90E428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
Manifest number: 02FD
Signing time: Sat 14 Jun 2025 04:01:02 +0000
Manifest this update: Sat 14 Jun 2025 04:01:02 +0000
Manifest next update: Sun 15 Jun 2025 04:01:02 +0000
Files and hashes: 1: H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl (hash: ac6+h1/HY3sgeDBaSSHcr+yF1x/YW5aeVKgcmEx0V8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:1a:70:99:0f:74:7b:2e:37:d5:b0:8e:90:e4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32
Validity
Not Before: Jun 14 04:01:02 2025 GMT
Not After : Jun 15 04:01:02 2025 GMT
Subject: CN=574941348439483a66b14ed144b46e562e25fc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:fb:33:b9:32:4b:d9:87:88:e9:a9:96:1e:
98:76:29:cd:ae:88:c8:c1:ea:04:0f:cd:97:1f:f9:
11:03:c2:a0:e5:35:be:86:9e:b0:63:e0:fb:37:08:
0d:65:68:39:ae:4b:a5:c4:ee:61:7e:bf:4f:68:12:
eb:9f:8d:0d:a8:b4:d0:94:95:d0:b2:02:97:40:80:
4c:84:de:6b:0b:29:98:34:62:35:20:13:48:5e:41:
00:fb:e5:aa:12:4d:ed:cd:49:a4:5b:b8:20:7d:a2:
21:d4:7d:9e:82:e2:eb:f9:65:10:d1:6a:d0:f8:df:
c2:da:f5:57:88:8b:57:4f:07:82:63:5c:70:d6:81:
c1:d9:4a:b4:d2:2c:3a:ef:06:85:b2:12:05:a8:95:
8f:1e:19:c3:e5:dd:24:77:c2:57:ec:3b:74:6f:f5:
03:f1:9c:c1:f2:16:d1:ec:52:dd:89:cd:20:48:30:
00:1a:73:8a:aa:60:ef:5f:17:28:9c:80:13:99:e0:
b3:5e:63:70:4e:da:dc:8f:25:f7:d8:f0:d2:4f:c6:
38:ef:bf:c3:54:7a:a5:6c:a8:24:b7:7d:01:f4:da:
e9:4d:ff:92:21:ed:90:e3:ab:89:9d:39:91:4d:cf:
d6:60:e0:fe:b4:b5:64:0d:82:3e:45:3f:42:a8:76:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:49:41:34:84:39:48:3A:66:B1:4E:D1:44:B4:6E:56:2E:25:FC:62
X509v3 Authority Key Identifier:
keyid:1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7e:d7:1a:d6:2d:c8:69:e8:ce:59:1b:75:5a:c1:e6:a2:40:
c2:36:e5:a6:f7:ff:33:f9:14:ab:a2:8f:41:64:ee:f7:dd:e1:
2e:1e:d1:15:ed:3a:74:80:b2:45:62:3b:37:c8:77:f8:c0:c6:
aa:b4:dd:2d:30:29:c4:cf:4a:86:b1:4a:e3:35:92:39:21:cf:
2a:98:b7:43:12:2f:80:e3:1f:f8:7f:da:c1:bd:44:27:27:4f:
23:45:49:d9:3f:aa:e5:f4:83:5d:f3:22:11:dc:2f:4e:bc:f1:
5a:02:58:39:99:5a:70:89:c8:d0:60:0d:51:7a:e4:de:1d:60:
b7:ee:21:af:c1:39:be:bc:62:d4:e3:43:09:b4:dd:98:bb:df:
cf:3e:08:fe:b3:5b:a6:d8:e1:6a:49:71:f7:f6:da:bd:fa:cf:
b2:d1:7e:e9:b6:39:12:a5:40:cc:f7:e5:4e:fd:0c:37:bd:34:
aa:cf:0b:37:a5:05:e7:69:ef:4b:9f:e2:9b:33:77:c9:02:2f:
ad:c5:e7:0a:24:80:a2:c6:f7:e4:91:fd:11:21:71:5a:1d:d6:
12:ac:52:c4:b6:df:70:a3:84:91:6d:a9:66:e7:ef:02:ab:97:
7a:f4:a6:d4:ed:ca:72:2a:33:aa:7b:c4:24:d9:31:10:40:3b:
08:30:f7:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmRpwmQ90ey431bCOkOQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmODk3ZGJmZjAxYWZkOWQxZTc3YjZmOWZlMDhkOTc3NDJm
NTZkMzIwHhcNMjUwNjE0MDQwMTAyWhcNMjUwNjE1MDQwMTAyWjAzMTEwLwYDVQQD
Eyg1NzQ5NDEzNDg0Mzk0ODNhNjZiMTRlZDE0NGI0NmU1NjJlMjVmYzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjj7M7kyS9mHiOmplh6YdinNrojI
weoED82XH/kRA8Kg5TW+hp6wY+D7NwgNZWg5rkulxO5hfr9PaBLrn40NqLTQlJXQ
sgKXQIBMhN5rCymYNGI1IBNIXkEA++WqEk3tzUmkW7ggfaIh1H2eguLr+WUQ0WrQ
+N/C2vVXiItXTweCY1xw1oHB2Uq00iw67waFshIFqJWPHhnD5d0kd8JX7Dt0b/UD
8ZzB8hbR7FLdic0gSDAAGnOKqmDvXxconIATmeCzXmNwTtrcjyX32PDST8Y477/D
VHqlbKgkt30B9NrpTf+SIe2Q46uJnTmRTc/WYOD+tLVkDYI+RT9CqHb08wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdJQTSEOUg6ZrFO0US0blYuJfxiMB8GA1UdIwQY
MBaAFB+Jfb/wGv2dHne2+f4I2XdC9W0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDRsOXZfQWFfWjBlZDdiNV9nalpkMEwxYlRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lNDAxZDAtNjlmZS00MzI2LWEwNDIt
NDExYzNkMmQwNjllLzEvSDRsOXZfQWFfWjBlZDdiNV9nalpkMEwxYlRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9lNDAxZDAtNjlmZS00MzI2LWEwNDItNDExYzNkMmQwNjll
LzEvSDRsOXZfQWFfWjBlZDdiNV9nalpkMEwxYlRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG37XGtYt
yGnozlkbdVrB5qJAwjblpvf/M/kUq6KPQWTu993hLh7RFe06dICyRWI7N8h3+MDG
qrTdLTApxM9KhrFK4zWSOSHPKpi3QxIvgOMf+H/awb1EJydPI0VJ2T+q5fSDXfMi
EdwvTrzxWgJYOZlacInI0GANUXrk3h1gt+4hr8E5vrxi1ONDCbTdmLvfzz4I/rNb
ptjhaklx9/bavfrPstF+6bY5EqVAzPflTv0MN700qs8LN6UF52nvS5/imzN3yQIv
rcXnCiSAosb35JH9ESFxWh3WEqxSxLbfcKOEkW2pZufvAquXevSm1O3KciozqnvE
JNkxEEA7CDD3FA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:10 2025 by rpki-client