Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
File: hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft (raw, json)
Hash identifier: OxUpSbeOdSi9qvKxNXitJURt84jGEVEoxcAcveexxOE=
Subject key identifier: 5E:D7:B2:99:EC:46:FD:A6:B1:58:82:FB:6E:46:55:8F:63:08:15:75
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 0197BB58F4FD7064F3039B9C493CA2F6CCA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
Manifest number: 0EB7
Signing time: Sun 29 Jun 2025 11:00:58 +0000
Manifest this update: Sun 29 Jun 2025 11:00:58 +0000
Manifest next update: Mon 30 Jun 2025 11:00:58 +0000
Files and hashes: 1: QHLCgk4OIA3HKocxUS-EXSCE4FI.roa (hash: yV8UUld/VXt38g/Ky73F72aPYFgkCIthD8ciRWDbTtg=)
2: hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl (hash: vU8By+ssYdcM/3iJtTOWBysQPT/3AnNPpNf7UVCKUBc=)
3: wackxg843szAJDW3YTcC-GuxdM0.roa (hash: +v9nhCSaoE2Niqmv8s/yOSkoRvQZ5BpadKRFSImJdxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:58:f4:fd:70:64:f3:03:9b:9c:49:3c:a2:f6:cc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Jun 29 11:00:58 2025 GMT
Not After : Jun 30 11:00:58 2025 GMT
Subject: CN=5ed7b299ec46fda6b15882fb6e46558f63081575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:99:b8:3e:e0:2b:fe:56:d0:b4:24:ce:8a:
93:26:8d:b2:84:b9:eb:52:b5:c9:04:a9:ce:e9:4b:
44:8e:a7:60:90:39:bc:23:98:86:8a:7b:0e:0f:ce:
da:01:24:85:21:66:9f:6f:7a:40:03:a5:22:3b:32:
54:61:64:d3:3f:52:cd:f4:6d:98:e9:1e:5a:0b:e2:
e9:d1:0b:0c:21:bc:7a:5e:90:7e:b1:0f:41:73:9a:
a6:cc:76:ec:fe:33:d3:67:29:4b:c4:33:a2:21:61:
1a:0d:4f:4b:bd:a3:c4:72:6e:0a:7f:61:67:cd:70:
03:aa:bd:b4:71:ce:39:16:e9:ac:38:9b:d5:57:5a:
db:ed:cc:5a:9b:41:a4:ff:5a:62:69:4c:66:ef:26:
dd:ae:ac:5d:7f:89:d9:45:60:67:b1:77:fc:01:92:
66:73:f6:c2:89:f8:55:45:a9:1d:37:2e:fd:e9:f1:
d3:83:56:db:4a:a2:cb:36:7c:96:21:ec:c1:ca:57:
45:5d:59:30:03:39:be:e5:2e:32:8a:2a:5f:a8:a9:
b1:b1:73:74:b7:96:2b:44:86:48:d7:b9:34:e2:92:
7b:ef:ee:0f:3f:36:1d:c9:63:30:07:ba:f2:fc:26:
0e:65:e4:72:6c:56:23:f4:6d:b9:85:15:4f:01:49:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D7:B2:99:EC:46:FD:A6:B1:58:82:FB:6E:46:55:8F:63:08:15:75
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:13:9d:f3:ef:38:c0:41:e3:22:0e:a7:ac:a8:39:25:7d:33:
cb:bd:41:f6:4e:f4:78:da:e4:fd:95:fd:cc:2f:9d:db:de:57:
9b:fa:1a:cf:ca:45:33:7f:b0:74:9f:6c:b4:5f:4b:4d:ec:4e:
90:22:8b:75:79:bf:bd:28:bf:44:1e:4a:d4:bb:20:ca:99:c0:
9d:93:7e:1b:8e:b0:31:5e:88:b8:60:a7:a0:58:ae:8c:e9:5f:
ec:10:ba:20:c6:3f:92:c1:75:36:db:8b:ec:e4:d5:a8:54:9d:
7a:95:d4:e8:d9:a4:34:80:8c:cb:b9:fc:02:dd:a7:32:0e:51:
21:0f:a1:48:30:d4:4b:30:d0:d9:67:73:2c:44:59:73:6f:b8:
33:11:28:35:35:fe:80:6e:28:ce:71:cc:9e:7d:59:5d:82:4e:
ce:d8:9c:f3:ad:93:01:95:23:96:44:4e:92:7b:4d:72:cb:95:
5d:c3:74:ff:71:e2:75:e6:f1:e6:cf:b3:b8:8d:48:a1:02:a9:
2f:d7:17:41:4d:0c:a1:d2:5b:35:4a:8c:5b:7b:bf:96:06:23:
a9:3c:e1:f2:1c:dc:cf:e3:08:7f:d6:23:1d:e2:c0:d4:ff:17:
85:00:13:c7:87:78:0a:f2:86:75:3d:84:6b:e8:d6:84:7e:30:
4f:3c:7e:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7WPT9cGTzA5ucSTyi9syhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NWJlNzRkMDlkOWIwNTI1MWRhZDJjOTY5Njc5M2MwNGI0
MGYyNDEwHhcNMjUwNjI5MTEwMDU4WhcNMjUwNjMwMTEwMDU4WjAzMTEwLwYDVQQD
Eyg1ZWQ3YjI5OWVjNDZmZGE2YjE1ODgyZmI2ZTQ2NTU4ZjYzMDgxNTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOeZuD7gK/5W0LQkzoqTJo2yhLnr
UrXJBKnO6UtEjqdgkDm8I5iGinsOD87aASSFIWafb3pAA6UiOzJUYWTTP1LN9G2Y
6R5aC+Lp0QsMIbx6XpB+sQ9Bc5qmzHbs/jPTZylLxDOiIWEaDU9LvaPEcm4Kf2Fn
zXADqr20cc45FumsOJvVV1rb7cxam0Gk/1piaUxm7ybdrqxdf4nZRWBnsXf8AZJm
c/bCifhVRakdNy796fHTg1bbSqLLNnyWIezByldFXVkwAzm+5S4yiipfqKmxsXN0
t5YrRIZI17k04pJ77+4PPzYdyWMwB7ry/CYOZeRybFYj9G25hRVPAUkK3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7XspnsRv2msViC+25GVY9jCBV1MB8GA1UdIwQY
MBaAFIVb500J2bBSUdrSyWlnk8BLQPJBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZ2blRRblpzRkpSMnRMSmFXZVR3RXRBOGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80OGQwOTItYTc2Yy00YzI4LWI4NGIt
MzlhZDgwZjU0MmEwLzEvaFZ2blRRblpzRkpSMnRMSmFXZVR3RXRBOGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC80OGQwOTItYTc2Yy00YzI4LWI4NGItMzlhZDgwZjU0MmEw
LzEvaFZ2blRRblpzRkpSMnRMSmFXZVR3RXRBOGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhOd8+84
wEHjIg6nrKg5JX0zy71B9k70eNrk/ZX9zC+d295Xm/oaz8pFM3+wdJ9stF9LTexO
kCKLdXm/vSi/RB5K1LsgypnAnZN+G46wMV6IuGCnoFiujOlf7BC6IMY/ksF1NtuL
7OTVqFSdepXU6NmkNICMy7n8At2nMg5RIQ+hSDDUSzDQ2WdzLERZc2+4MxEoNTX+
gG4oznHMnn1ZXYJOztic862TAZUjlkROkntNcsuVXcN0/3Hidebx5s+zuI1IoQKp
L9cXQU0ModJbNUqMW3u/lgYjqTzh8hzcz+MIf9YjHeLA1P8XhQATx4d4CvKGdT2E
a+jWhH4wTzx+Lw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:52:24 2025 by rpki-client