Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json)
Hash identifier: c0FyNQ9oN/bZafJhc/aMLd3PQZ6+q0YrkraeGCf/Fwk=
Subject key identifier: F7:15:94:21:A8:CF:09:CA:41:9F:76:D9:CC:7B:AE:80:D8:C9:18:EF
Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Certificate serial: 01976DABB3B219440EF17BF694964A2BD2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
Manifest number: 05F3
Signing time: Sat 14 Jun 2025 09:00:58 +0000
Manifest this update: Sat 14 Jun 2025 09:00:58 +0000
Manifest next update: Sun 15 Jun 2025 09:00:58 +0000
Files and hashes: 1: Z7UyGu5eAyy6eE2IZXWBPwAGCsY.roa (hash: 69ViYIsd0St7iG615BWi/I8unIJ08lLoNoGfAWMd13A=)
2: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: SIBhCt+nVGxu/FiEPGmQcT7gvyOAbbAtgxwuK01gVJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:b3:b2:19:44:0e:f1:7b:f6:94:96:4a:2b:d2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Validity
Not Before: Jun 14 09:00:58 2025 GMT
Not After : Jun 15 09:00:58 2025 GMT
Subject: CN=f7159421a8cf09ca419f76d9cc7bae80d8c918ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:6e:be:c9:1a:aa:f9:59:0c:7f:5c:ca:23:
a2:dc:96:a5:f0:ac:bb:d9:a3:68:0a:32:a3:fb:bf:
cd:a3:c4:cd:60:80:57:a7:4c:cd:18:76:ef:1b:5b:
fc:17:9d:21:cc:e9:78:7f:30:c0:9c:28:a4:25:94:
5d:df:c5:d1:c2:11:40:11:79:85:82:6f:95:ea:9e:
4c:cc:d2:ed:28:6d:71:69:41:65:2e:0d:d6:e5:da:
f0:ff:69:9e:ee:9a:ce:16:e3:c4:cc:a6:7e:50:7c:
64:6f:bc:10:f2:b9:40:08:5d:e6:df:dc:ec:a5:e0:
2f:d2:a2:2f:e0:c6:7d:55:a4:ab:13:16:d1:6f:cd:
e9:b5:b7:52:6e:4e:27:b9:a8:5c:ee:61:a9:e0:c3:
b2:94:50:cb:e4:3b:7a:83:a2:46:c2:bd:87:dd:78:
66:ce:1b:83:43:e2:24:5a:ec:f7:b7:f6:4f:45:5a:
c4:36:dc:56:cd:5c:fa:e6:0d:68:1a:df:63:6e:f3:
cb:6b:a0:d2:5d:c1:1d:fc:56:7a:a9:3a:d2:7b:f6:
67:28:84:a6:be:47:23:b6:d7:aa:e5:cb:d4:d9:ad:
2c:ad:e6:63:c5:4f:28:6a:36:27:56:8a:8c:6f:33:
0f:3a:53:f2:07:f9:9f:f2:01:f0:0d:b6:cd:bc:43:
3b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:15:94:21:A8:CF:09:CA:41:9F:76:D9:CC:7B:AE:80:D8:C9:18:EF
X509v3 Authority Key Identifier:
keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:76:de:ff:56:a5:9c:a8:59:d1:45:16:b1:7f:f8:d5:4d:c6:
38:90:93:ce:d1:87:cb:ef:27:c5:59:ce:4c:05:a6:15:cb:ee:
f6:ab:5e:61:84:b3:ef:6e:b3:1b:62:dc:8c:a7:d8:0b:d2:08:
57:76:c9:00:b1:7f:94:91:98:54:54:07:e1:8c:db:c7:12:33:
6a:95:23:b2:88:92:d9:c7:72:d5:c9:42:12:01:cd:d5:1b:6b:
f9:4f:46:cb:66:8e:74:6f:a2:4f:77:42:bf:b4:64:b8:d6:65:
d8:e2:32:04:5d:3b:4c:02:a1:61:3d:b9:9e:8f:4f:2c:af:fb:
e9:f2:5e:58:da:96:61:c2:34:06:43:87:fd:2f:08:4f:0f:aa:
e0:e7:1c:29:80:f4:6a:be:13:cf:61:8b:8e:2e:ff:00:72:ec:
f3:b5:77:87:29:b2:e2:ae:77:c6:27:00:f2:37:3b:7f:a5:85:
9d:a3:db:d4:e7:a1:95:b4:80:6b:0e:3b:56:87:9b:0c:4d:a7:
d3:04:23:78:71:76:f3:b6:2b:0d:be:29:52:10:44:39:4f:7e:
5b:37:e4:20:b8:d8:d7:e8:6c:a1:9a:b8:b8:fc:bf:90:ae:cd:
4c:76:44:1c:62:9d:d0:99:44:7e:73:bc:3a:a5:6b:d5:bf:34:
93:ba:83:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq7OyGUQO8Xv2lJZKK9KwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MDdmMDA2M2VlOWFmMzFkODdjZmU2NWI5YmMxOTNlYjQy
Yzg5NjkwHhcNMjUwNjE0MDkwMDU4WhcNMjUwNjE1MDkwMDU4WjAzMTEwLwYDVQQD
EyhmNzE1OTQyMWE4Y2YwOWNhNDE5Zjc2ZDljYzdiYWU4MGQ4YzkxOGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIZuvskaqvlZDH9cyiOi3Jal8Ky7
2aNoCjKj+7/No8TNYIBXp0zNGHbvG1v8F50hzOl4fzDAnCikJZRd38XRwhFAEXmF
gm+V6p5MzNLtKG1xaUFlLg3W5drw/2me7prOFuPEzKZ+UHxkb7wQ8rlACF3m39zs
peAv0qIv4MZ9VaSrExbRb83ptbdSbk4nuahc7mGp4MOylFDL5Dt6g6JGwr2H3Xhm
zhuDQ+IkWuz3t/ZPRVrENtxWzVz65g1oGt9jbvPLa6DSXcEd/FZ6qTrSe/ZnKISm
vkcjtteq5cvU2a0sreZjxU8oajYnVoqMbzMPOlPyB/mf8gHwDbbNvEM7UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcVlCGozwnKQZ922cx7roDYyRjvMB8GA1UdIwQY
MBaAFIQH8AY+6a8x2Hz+Zbm8GT60LIlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NTdjNTktZTNiOS00MDRmLWFmYWIt
ZTFlZmNmMmVkMGE3LzEvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82NTdjNTktZTNiOS00MDRmLWFmYWItZTFlZmNmMmVkMGE3
LzEvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3be/1al
nKhZ0UUWsX/41U3GOJCTztGHy+8nxVnOTAWmFcvu9qteYYSz726zG2LcjKfYC9II
V3bJALF/lJGYVFQH4YzbxxIzapUjsoiS2cdy1clCEgHN1Rtr+U9Gy2aOdG+iT3dC
v7RkuNZl2OIyBF07TAKhYT25no9PLK/76fJeWNqWYcI0BkOH/S8ITw+q4OccKYD0
ar4Tz2GLji7/AHLs87V3hymy4q53xicA8jc7f6WFnaPb1OehlbSAaw47VoebDE2n
0wQjeHF287YrDb4pUhBEOU9+WzfkILjY1+hsoZq4uPy/kK7NTHZEHGKd0JlEfnO8
OqVr1b80k7qDbw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:24:48 2025 by rpki-client