Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
File: H0rytHmBXwfNgun4K6sv6hP7IbE.mft (raw, json)
Hash identifier: 7Ac4kdmN1sASmOcZGwFDRC8UFQ2z2t+kOJpZ1MRYsVY=
Subject key identifier: 43:BB:7F:64:E1:24:F4:94:3D:71:27:45:79:16:1A:74:8C:5D:9B:5D
Authority key identifier: 1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
Certificate issuer: /CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Certificate serial: 01976DAC2643004BBC41A8774CCBA37733CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
Manifest number: 0E49
Signing time: Sat 14 Jun 2025 09:01:27 +0000
Manifest this update: Sat 14 Jun 2025 09:01:27 +0000
Manifest next update: Sun 15 Jun 2025 09:01:27 +0000
Files and hashes: 1: H0rytHmBXwfNgun4K6sv6hP7IbE.crl (hash: Wxxmm+O54+vCl4baREjqAgaO+OWWWFLLDQyICo9egT8=)
2: vNstzceOXGplN-vBnPrAujnN1Ks.roa (hash: A1jnUd+2zoPrt/m5wPvY6xxOOy1gAscK2t40BFmGG10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ac:26:43:00:4b:bc:41:a8:77:4c:cb:a3:77:33:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Validity
Not Before: Jun 14 09:01:27 2025 GMT
Not After : Jun 15 09:01:27 2025 GMT
Subject: CN=43bb7f64e124f4943d71274579161a748c5d9b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:de:e1:58:d0:b2:f2:f5:69:5f:fe:9e:72:
f8:bc:7d:6b:03:10:32:89:5c:08:26:a1:60:ed:2d:
15:40:55:58:5a:e1:18:53:b9:10:b0:1b:8e:dc:2c:
55:35:d1:af:86:0b:7c:71:78:ba:c9:22:8b:f1:b8:
b4:b3:ed:64:8e:df:67:39:78:09:20:4e:bc:f4:99:
73:d5:11:e4:c8:ca:df:66:6d:45:c7:b0:8f:22:1d:
5d:31:c0:2d:53:78:b3:ff:cc:99:e9:7e:8a:f1:7f:
5e:25:c1:e2:b9:b5:5f:cd:22:74:00:e4:e1:13:45:
13:31:ab:26:2d:33:99:8f:30:4a:10:0a:5b:45:52:
a3:59:ff:16:08:cc:37:f9:51:6c:61:be:c1:20:a1:
f5:30:77:ee:c7:9f:5c:2e:84:48:95:f6:f8:b1:3c:
d9:f6:9a:e8:12:0e:cd:fb:f0:3a:29:ab:c8:75:1c:
04:bb:8c:b7:18:dd:9c:d1:64:cb:76:62:7c:a5:36:
17:37:8c:f2:39:38:ff:18:f8:ff:2a:b2:10:2a:ff:
0d:58:fc:8e:26:d3:b8:b6:6c:3a:3f:6d:7d:cf:04:
91:88:a8:37:ec:88:8a:19:da:f7:15:62:2b:ac:8a:
dc:d6:a9:e5:cd:aa:e4:dd:43:69:19:0f:69:51:93:
32:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BB:7F:64:E1:24:F4:94:3D:71:27:45:79:16:1A:74:8C:5D:9B:5D
X509v3 Authority Key Identifier:
keyid:1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7a:54:9f:1d:f9:c5:5d:80:96:7b:12:4a:88:45:62:48:d4:
fc:ff:47:5a:80:30:07:ae:88:23:7d:de:ce:91:71:09:1c:d5:
0e:66:a8:7e:26:6d:d5:7f:56:d5:69:94:c7:04:24:47:05:22:
de:44:5c:bb:bf:5b:a9:21:ea:2e:62:c8:8b:72:29:ee:0c:ae:
6c:3f:a0:91:d9:bc:42:37:1c:1b:1f:4f:13:36:35:73:9d:ef:
d3:95:10:42:25:c6:d7:15:4b:53:91:6f:50:27:89:50:5a:48:
ae:1c:59:0b:ad:60:99:3a:19:cc:12:a8:af:b5:88:c8:3a:36:
4c:20:11:5e:8d:5a:c0:6f:66:1a:8c:2b:ce:f6:50:21:43:73:
b7:d5:21:a5:01:ce:85:6b:6b:79:de:94:05:31:13:40:51:32:
9e:87:3e:fd:7f:d6:c3:e5:52:d3:23:35:21:28:66:fa:02:4a:
c0:fa:f1:8d:7c:09:1b:7b:d0:1e:0b:c3:42:5a:65:3d:51:e4:
4c:15:c0:63:0a:07:95:10:dd:7c:53:d3:49:ff:dc:73:f8:8b:
d6:c6:eb:6f:cf:d2:94:82:62:0c:72:75:6c:b7:b2:09:83:f8:
e0:a2:60:36:96:6f:f7:5d:14:74:df:bb:4a:89:95:7e:dd:f9:
2f:e6:31:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtrCZDAEu8Qah3TMujdzPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNGFmMmI0Nzk4MTVmMDdjZDgyZTlmODJiYWIyZmVhMTNm
YjIxYjEwHhcNMjUwNjE0MDkwMTI3WhcNMjUwNjE1MDkwMTI3WjAzMTEwLwYDVQQD
Eyg0M2JiN2Y2NGUxMjRmNDk0M2Q3MTI3NDU3OTE2MWE3NDhjNWQ5YjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCre4VjQsvL1aV/+nnL4vH1rAxAy
iVwIJqFg7S0VQFVYWuEYU7kQsBuO3CxVNdGvhgt8cXi6ySKL8bi0s+1kjt9nOXgJ
IE689Jlz1RHkyMrfZm1Fx7CPIh1dMcAtU3iz/8yZ6X6K8X9eJcHiubVfzSJ0AOTh
E0UTMasmLTOZjzBKEApbRVKjWf8WCMw3+VFsYb7BIKH1MHfux59cLoRIlfb4sTzZ
9proEg7N+/A6KavIdRwEu4y3GN2c0WTLdmJ8pTYXN4zyOTj/GPj/KrIQKv8NWPyO
JtO4tmw6P219zwSRiKg37IiKGdr3FWIrrIrc1qnlzark3UNpGQ9pUZMykQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEO7f2ThJPSUPXEnRXkWGnSMXZtdMB8GA1UdIwQY
MBaAFB9K8rR5gV8HzYLp+CurL+oT+yGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDByeXRIbUJYd2ZOZ3VuNEs2c3Y2aFA3SWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZjI1YjctNGY4MS00ZjQxLWExNjIt
MDg2YzE2ZjczNmIxLzEvSDByeXRIbUJYd2ZOZ3VuNEs2c3Y2aFA3SWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wZjI1YjctNGY4MS00ZjQxLWExNjItMDg2YzE2ZjczNmIx
LzEvSDByeXRIbUJYd2ZOZ3VuNEs2c3Y2aFA3SWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXpUnx35
xV2AlnsSSohFYkjU/P9HWoAwB66II33ezpFxCRzVDmaofiZt1X9W1WmUxwQkRwUi
3kRcu79bqSHqLmLIi3Ip7gyubD+gkdm8QjccGx9PEzY1c53v05UQQiXG1xVLU5Fv
UCeJUFpIrhxZC61gmToZzBKor7WIyDo2TCARXo1awG9mGowrzvZQIUNzt9UhpQHO
hWtred6UBTETQFEynoc+/X/Ww+VS0yM1IShm+gJKwPrxjXwJG3vQHgvDQlplPVHk
TBXAYwoHlRDdfFPTSf/cc/iL1sbrb8/SlIJiDHJ1bLeyCYP44KJgNpZv910UdN+7
SomVft35L+YxLA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:06:02 2025 by rpki-client