Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
File: hJG76s9bDFiembk_hOHF5H2a9gQ.mft (raw, json)
Hash identifier: rmHxrHkHzDkXzMOqC9ag9mybG3f15TKL2JWTYnQg0vA=
Subject key identifier: 96:80:80:38:48:A6:24:70:BC:65:A2:D7:6D:51:11:82:7E:0A:69:3A
Authority key identifier: 84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04
Certificate issuer: /CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
Certificate serial: 01976E503C38F57EEEAE8E5B270F7F6BF76B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
Manifest number: 0B8E
Signing time: Sat 14 Jun 2025 12:00:41 +0000
Manifest this update: Sat 14 Jun 2025 12:00:41 +0000
Manifest next update: Sun 15 Jun 2025 12:00:41 +0000
Files and hashes: 1: QpSqb6NaQUo2aw3LPuosxHd4Wqs.roa (hash: euL9pnyKB7Cxdfldh990cg3q0bj2BEOIXY3BCjW3Vt4=)
2: hJG76s9bDFiembk_hOHF5H2a9gQ.crl (hash: lefhvW7ea5wW5YofBXYSKQmOnUQ6fckDZ8vgtncF1dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:3c:38:f5:7e:ee:ae:8e:5b:27:0f:7f:6b:f7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
Validity
Not Before: Jun 14 12:00:41 2025 GMT
Not After : Jun 15 12:00:41 2025 GMT
Subject: CN=9680803848a62470bc65a2d76d5111827e0a693a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:b7:16:ef:6d:f4:de:7c:5e:0d:19:53:31:
86:5c:62:f0:3e:0b:44:d9:66:67:65:0c:a3:5a:ac:
6e:60:07:88:bd:69:e9:ba:39:5e:40:e1:f8:f1:8a:
d3:c0:ea:77:be:31:a9:3b:58:77:16:73:ce:76:43:
ab:ae:be:f0:44:2c:43:4c:99:03:de:f8:fa:0f:76:
4d:be:20:b3:90:66:49:ea:a4:3f:d2:9b:92:17:45:
3b:64:77:f2:9d:75:4c:86:85:df:ae:a2:7f:04:70:
01:e3:9f:69:90:c5:0b:02:10:66:39:e4:7d:a4:43:
a2:df:c3:ff:9a:c7:ac:ae:1b:b1:49:2c:5b:65:cf:
f6:96:79:06:51:93:69:80:25:46:85:e0:2b:70:17:
b7:a6:2d:5d:9d:7b:8e:99:38:2f:4d:87:a2:b6:47:
6d:45:6d:ea:29:83:c5:40:c2:06:4d:7e:b0:1e:ad:
c2:01:bb:ac:bc:a0:46:11:88:6e:eb:d5:39:9e:57:
0e:73:5f:fc:c7:b5:15:7a:c6:af:f6:04:3e:0b:3f:
2f:2a:03:54:8c:8c:ab:25:39:6e:b8:60:ef:33:a4:
99:cf:b0:22:e6:8c:97:34:a8:9f:69:72:cb:6a:16:
2b:8e:40:78:c2:f7:5f:74:56:82:89:9c:57:40:fc:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:80:80:38:48:A6:24:70:BC:65:A2:D7:6D:51:11:82:7E:0A:69:3A
X509v3 Authority Key Identifier:
keyid:84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0b:ac:e7:09:9f:53:3f:c5:c0:69:f8:ff:6a:fd:a6:fa:ec:
d1:97:5e:2d:21:02:68:bb:a7:e3:61:07:bc:15:18:61:d5:36:
86:b1:22:4b:31:21:be:bd:8b:3b:92:df:7d:14:32:3c:ea:94:
8c:e6:ed:3a:86:be:57:c5:8f:cd:bc:27:a1:9a:2f:0d:83:58:
f8:f7:a5:09:4b:2a:44:c0:c6:b9:60:ef:5e:15:91:83:91:53:
10:0d:4d:6a:f5:e7:d6:30:4f:c8:64:8d:16:17:f5:2f:47:68:
a5:08:11:19:1a:4b:eb:56:cd:29:bf:7c:14:65:94:b6:df:66:
0b:5b:aa:96:6e:27:a6:84:06:64:a2:7e:97:bf:29:a0:96:f0:
9b:65:63:1f:43:78:1b:f6:a9:ce:eb:71:92:87:14:04:78:a1:
46:0b:2f:e8:88:2f:dd:07:eb:05:b6:d9:b7:24:ef:85:e1:1b:
36:4f:86:40:f2:e1:41:e7:6e:f7:f0:0a:cc:e9:a9:34:00:b9:
16:55:78:f5:47:8f:ad:e3:87:51:ad:ce:9f:0a:d7:35:1e:f2:
7a:2f:8f:4b:3d:c2:89:e8:b6:72:66:90:2a:46:b5:73:5c:99:
9e:e2:2d:90:9c:6b:0d:38:b7:b6:65:18:67:1a:1f:93:06:bc:
f5:aa:1e:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduUDw49X7uro5bJw9/a/drMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OTFiYmVhY2Y1YjBjNTg5ZTk5YjkzZjg0ZTFjNWU0N2Q5
YWY2MDQwHhcNMjUwNjE0MTIwMDQxWhcNMjUwNjE1MTIwMDQxWjAzMTEwLwYDVQQD
Eyg5NjgwODAzODQ4YTYyNDcwYmM2NWEyZDc2ZDUxMTE4MjdlMGE2OTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBu3Fu9t9N58Xg0ZUzGGXGLwPgtE
2WZnZQyjWqxuYAeIvWnpujleQOH48YrTwOp3vjGpO1h3FnPOdkOrrr7wRCxDTJkD
3vj6D3ZNviCzkGZJ6qQ/0puSF0U7ZHfynXVMhoXfrqJ/BHAB459pkMULAhBmOeR9
pEOi38P/msesrhuxSSxbZc/2lnkGUZNpgCVGheArcBe3pi1dnXuOmTgvTYeitkdt
RW3qKYPFQMIGTX6wHq3CAbusvKBGEYhu69U5nlcOc1/8x7UVesav9gQ+Cz8vKgNU
jIyrJTluuGDvM6SZz7Ai5oyXNKifaXLLahYrjkB4wvdfdFaCiZxXQPzVmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaAgDhIpiRwvGWi121REYJ+Cmk6MB8GA1UdIwQY
MBaAFISRu+rPWwxYnpm5P4ThxeR9mvYEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEpHNzZzOWJERmllbWJrX2hPSEY1SDJhOWdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hZGY5ODQtNzk1OS00YmJkLThhOGUt
MmNiZWNkZGQwZDY0LzEvaEpHNzZzOWJERmllbWJrX2hPSEY1SDJhOWdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hZGY5ODQtNzk1OS00YmJkLThhOGUtMmNiZWNkZGQwZDY0
LzEvaEpHNzZzOWJERmllbWJrX2hPSEY1SDJhOWdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAus5wmf
Uz/FwGn4/2r9pvrs0ZdeLSECaLun42EHvBUYYdU2hrEiSzEhvr2LO5LffRQyPOqU
jObtOoa+V8WPzbwnoZovDYNY+PelCUsqRMDGuWDvXhWRg5FTEA1NavXn1jBPyGSN
Fhf1L0dopQgRGRpL61bNKb98FGWUtt9mC1uqlm4npoQGZKJ+l78poJbwm2VjH0N4
G/apzutxkocUBHihRgsv6Igv3QfrBbbZtyTvheEbNk+GQPLhQedu9/AKzOmpNAC5
FlV49UePreOHUa3OnwrXNR7yei+PSz3Ciei2cmaQKka1c1yZnuItkJxrDTi3tmUY
Zxofkwa89aoegg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:07:31 2025 by rpki-client