Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
File: HxINfknJ878xPZZTGt-n6q6AV2E.mft (raw, json)
Hash identifier: nKLCfoOhWusjmcIe4P1G/svO7ui9oFMb3f06W578ONo=
Subject key identifier: 4A:5E:94:23:86:4B:18:E2:00:3F:F5:9B:E8:31:F1:7B:FD:07:0A:DB
Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
Certificate issuer: /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Certificate serial: 019776AE472FE6D835D40405827F2B34E3C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
Manifest number: 0DF6
Signing time: Mon 16 Jun 2025 03:00:22 +0000
Manifest this update: Mon 16 Jun 2025 03:00:22 +0000
Manifest next update: Tue 17 Jun 2025 03:00:22 +0000
Files and hashes: 1: HxINfknJ878xPZZTGt-n6q6AV2E.crl (hash: 4A0DHBqac6sriuQ9REnNGlE4Bpa1qnpZUNNrnw8McJU=)
2: QTjz4VGR-GTFrRo0tluoiHJIBec.roa (hash: cV6m/fRf828h8WvDtj1b9iihpVzZghXy5TyXPUcK2IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:47:2f:e6:d8:35:d4:04:05:82:7f:2b:34:e3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Validity
Not Before: Jun 16 03:00:22 2025 GMT
Not After : Jun 17 03:00:22 2025 GMT
Subject: CN=4a5e9423864b18e2003ff59be831f17bfd070adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:f9:61:d3:1e:f1:b3:29:9d:40:7a:2f:5d:
09:4f:75:45:a3:aa:fc:d9:49:0d:fe:4d:ab:44:3e:
1c:94:72:ba:7e:68:65:9e:8c:d3:4e:94:5d:7f:e5:
cf:ba:23:4c:b9:9e:47:8f:4b:0e:27:46:fc:a5:44:
8f:22:1f:d9:ea:31:3e:f7:3b:83:ad:87:97:d7:25:
fe:f7:d4:d5:40:07:3c:9c:8a:ff:25:f3:ed:d6:11:
b1:bc:25:9f:8e:81:30:9e:91:c0:89:bb:37:26:1d:
78:16:fd:0c:8b:8b:aa:b1:3d:57:91:28:e3:b8:8e:
40:e9:7d:fb:c2:10:f6:0b:49:b2:ac:92:4f:17:eb:
ee:96:74:dc:5a:1d:85:3b:a3:48:70:9e:4c:55:46:
ac:c6:3c:b7:53:d3:cb:73:eb:da:aa:b9:9d:50:26:
38:44:f5:e0:80:ff:99:b3:0e:3c:fe:a6:de:50:37:
a4:51:88:26:65:a6:dc:76:00:e1:2f:76:23:88:28:
7b:25:a6:ee:fb:87:70:32:7b:34:56:b2:8b:67:95:
3e:ad:ff:99:b0:a9:92:22:78:06:60:cc:d0:91:6e:
46:e5:e5:e6:56:e7:ea:77:1a:24:12:6e:6b:66:d4:
eb:9f:7b:29:87:33:95:fd:c1:8e:09:cd:30:ec:58:
13:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5E:94:23:86:4B:18:E2:00:3F:F5:9B:E8:31:F1:7B:FD:07:0A:DB
X509v3 Authority Key Identifier:
keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0c:7e:19:a1:a3:38:25:5b:44:df:78:4a:fa:38:24:90:09:
59:de:44:aa:08:52:82:7b:50:f8:f9:df:d6:db:b7:51:76:19:
fa:b1:c4:8d:15:06:c5:14:90:7d:3f:d0:8e:23:4d:43:bb:6f:
78:5c:43:2a:34:76:66:dc:20:a3:81:52:a1:69:a5:5d:03:4c:
c3:19:09:7b:6b:55:09:e5:3b:77:f4:cc:d6:4f:3a:27:3f:9f:
16:21:46:42:a1:fa:60:cd:eb:51:08:67:a6:1a:c8:ca:ee:07:
2c:1d:2a:fe:58:93:f8:e5:40:21:0c:1e:80:37:53:22:9d:d9:
07:70:ae:81:5e:a3:0b:7a:de:4c:95:7d:02:bd:b3:8b:a3:91:
2d:e4:b9:c2:56:4f:d2:d1:0f:ad:f4:9f:ee:d7:e1:05:2a:4d:
51:9e:e5:b2:cf:6c:e2:69:04:34:8f:d3:d3:65:68:22:0c:c7:
bf:8d:fa:66:76:25:06:e0:fa:90:a0:92:87:50:9f:bc:b3:c5:
ba:20:c3:5d:3b:5d:d1:ec:39:5d:20:ce:45:76:55:61:bc:6d:
70:7b:a7:b7:ad:7f:8d:af:ce:31:71:7b:39:b0:94:55:53:c3:
f2:dd:be:db:14:df:64:8d:86:1f:64:7b:ce:63:76:db:ad:e2:
b8:68:6b:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd2rkcv5tg11AQFgn8rNOPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTIwZDdlNDljOWYzYmYzMTNkOTY1MzFhZGZhN2VhYWU4
MDU3NjEwHhcNMjUwNjE2MDMwMDIyWhcNMjUwNjE3MDMwMDIyWjAzMTEwLwYDVQQD
Eyg0YTVlOTQyMzg2NGIxOGUyMDAzZmY1OWJlODMxZjE3YmZkMDcwYWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K35YdMe8bMpnUB6L10JT3VFo6r8
2UkN/k2rRD4clHK6fmhlnozTTpRdf+XPuiNMuZ5Hj0sOJ0b8pUSPIh/Z6jE+9zuD
rYeX1yX+99TVQAc8nIr/JfPt1hGxvCWfjoEwnpHAibs3Jh14Fv0Mi4uqsT1XkSjj
uI5A6X37whD2C0myrJJPF+vulnTcWh2FO6NIcJ5MVUasxjy3U9PLc+vaqrmdUCY4
RPXggP+Zsw48/qbeUDekUYgmZabcdgDhL3YjiCh7Jabu+4dwMns0VrKLZ5U+rf+Z
sKmSIngGYMzQkW5G5eXmVufqdxokEm5rZtTrn3sphzOV/cGOCc0w7FgTqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpelCOGSxjiAD/1m+gx8Xv9BwrbMB8GA1UdIwQY
MBaAFB8SDX5JyfO/MT2WUxrfp+qugFdhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhJTmZrbko4Nzh4UFpaVEd0LW42cTZBVjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hYzVmZjktZTE5ZS00YWQwLThjNWEt
YjI3Mjc3ODkwOWQ5LzEvSHhJTmZrbko4Nzh4UFpaVEd0LW42cTZBVjJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9hYzVmZjktZTE5ZS00YWQwLThjNWEtYjI3Mjc3ODkwOWQ5
LzEvSHhJTmZrbko4Nzh4UFpaVEd0LW42cTZBVjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgx+GaGj
OCVbRN94Svo4JJAJWd5EqghSgntQ+Pnf1tu3UXYZ+rHEjRUGxRSQfT/QjiNNQ7tv
eFxDKjR2Ztwgo4FSoWmlXQNMwxkJe2tVCeU7d/TM1k86Jz+fFiFGQqH6YM3rUQhn
phrIyu4HLB0q/liT+OVAIQwegDdTIp3ZB3CugV6jC3reTJV9Ar2zi6ORLeS5wlZP
0tEPrfSf7tfhBSpNUZ7lss9s4mkENI/T02VoIgzHv436ZnYlBuD6kKCSh1CfvLPF
uiDDXTtd0ew5XSDORXZVYbxtcHunt61/ja/OMXF7ObCUVVPD8t2+2xTfZI2GH2R7
zmN2263iuGhr6Q==
-----END CERTIFICATE-----
Generated at Mon Jun 16 07:52:38 2025 by rpki-client