Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
File: MH-1ujHWxAxPLiMjPmB17q8tUwc.mft (raw, json)
Hash identifier: XANeQ8fucQ9w8vaD7PVCgYKagUn16/7WJYAFsd28xGM=
Subject key identifier: AC:EB:06:6D:BD:18:2D:5D:57:14:3F:84:EA:E0:D1:88:02:1F:2D:2F
Authority key identifier: 30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
Certificate issuer: /CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Certificate serial: 0197B6A0B7EDE2A2E3D3881B399214970121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:01:15 +0000
Manifest this update: Sat 28 Jun 2025 13:01:15 +0000
Manifest next update: Sun 29 Jun 2025 13:01:15 +0000
Files and hashes: 1: MH-1ujHWxAxPLiMjPmB17q8tUwc.crl (hash: +676tqtN0QVZNZMkpBcRMIDHO7T5J2SSDCCQDcVSTg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b7:ed:e2:a2:e3:d3:88:1b:39:92:14:97:01:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Validity
Not Before: Jun 28 13:01:15 2025 GMT
Not After : Jun 29 13:01:15 2025 GMT
Subject: CN=aceb066dbd182d5d57143f84eae0d188021f2d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:14:6a:98:52:5b:de:a7:85:ec:86:59:33:a1:
92:e9:37:08:3f:78:0f:21:4c:e2:83:5f:5e:1c:8c:
4d:f0:f4:4b:58:de:af:57:96:41:54:ee:d7:41:d1:
60:02:88:ad:f2:b3:41:ea:a7:ad:b4:fd:30:a6:e0:
3b:1c:86:c8:d6:a5:fe:bb:84:c0:4a:b5:c9:54:bd:
94:a9:97:e3:c8:97:80:a7:ad:ce:c1:6c:90:39:ef:
b3:32:50:60:27:07:95:d1:08:fc:e1:cf:d7:0b:50:
eb:23:81:43:5c:dc:ce:22:b4:1d:66:61:50:59:3e:
8f:f5:73:12:c8:5f:0e:c5:69:8b:b0:58:dc:fe:56:
ae:aa:44:4a:14:c0:67:9f:46:6d:b2:09:ee:a5:f4:
90:06:fd:7f:f3:84:1f:9d:3e:28:0a:b7:83:c1:d9:
46:9e:fa:ad:75:72:76:cf:ae:d7:01:4c:03:6b:80:
cf:ec:47:2a:3f:d1:ec:38:c5:da:f0:93:b8:7d:83:
7d:df:96:98:dc:fd:54:62:59:bd:29:ac:de:a2:79:
53:5c:00:21:33:34:0b:a6:5b:5d:b4:93:83:04:5e:
bf:76:35:e4:b0:50:7b:06:06:cf:01:e9:20:fa:31:
c7:5c:56:d8:30:78:e4:d3:7d:55:b0:81:3f:ba:c9:
84:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EB:06:6D:BD:18:2D:5D:57:14:3F:84:EA:E0:D1:88:02:1F:2D:2F
X509v3 Authority Key Identifier:
keyid:30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:eb:8a:56:b6:a0:27:08:e3:91:0d:4a:7a:ad:df:ec:37:c3:
56:d7:9c:74:6b:41:6e:c7:c4:7b:4f:0e:e0:bf:65:34:35:95:
5e:5f:42:58:22:25:59:cd:e8:bc:b6:12:4d:4a:a0:ed:eb:82:
12:7e:af:06:37:b2:74:3d:fe:1a:fa:e4:20:1c:87:80:7a:24:
1a:75:a0:53:3f:68:63:f9:bf:2b:19:00:4f:07:f3:54:2b:5e:
49:52:f2:ad:92:f7:f5:1a:e2:dc:c3:43:5a:ab:97:73:d8:36:
e8:8f:8d:73:36:e9:f7:d6:1f:2c:55:1e:e6:04:fa:8a:c0:c6:
c6:72:49:12:91:81:3d:03:68:7c:17:91:a2:43:8f:a6:f2:b9:
1d:b8:4a:ab:2d:61:6f:b1:c7:8f:c7:7f:b0:5e:83:80:ed:92:
15:8a:fe:e6:a1:d5:5c:5c:95:0a:13:19:7a:73:d3:f4:ac:d5:
36:33:17:69:b7:f4:bd:01:96:88:62:73:52:ae:cd:e5:a7:c3:
0b:50:52:2f:bb:76:f4:55:2e:70:77:2f:3b:95:6d:61:14:f6:
9c:f0:37:9a:a0:06:69:61:21:b6:66:a7:0a:6c:ed:2f:72:b2:
34:b9:03:9c:5b:01:d4:6a:ba:f8:97:8c:8c:65:63:e0:7e:bc:
06:ad:f2:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oLft4qLj04gbOZIUlwEhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2ZiNWJhMzFkNmM0MGM0ZjJlMjMyMzNlNjA3NWVlYWYy
ZDUzMDcwHhcNMjUwNjI4MTMwMTE1WhcNMjUwNjI5MTMwMTE1WjAzMTEwLwYDVQQD
EyhhY2ViMDY2ZGJkMTgyZDVkNTcxNDNmODRlYWUwZDE4ODAyMWYyZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhRqmFJb3qeF7IZZM6GS6TcIP3gP
IUzig19eHIxN8PRLWN6vV5ZBVO7XQdFgAoit8rNB6qettP0wpuA7HIbI1qX+u4TA
SrXJVL2UqZfjyJeAp63OwWyQOe+zMlBgJweV0Qj84c/XC1DrI4FDXNzOIrQdZmFQ
WT6P9XMSyF8OxWmLsFjc/lauqkRKFMBnn0ZtsgnupfSQBv1/84QfnT4oCreDwdlG
nvqtdXJ2z67XAUwDa4DP7EcqP9HsOMXa8JO4fYN935aY3P1UYlm9KazeonlTXAAh
MzQLpltdtJODBF6/djXksFB7BgbPAekg+jHHXFbYMHjk031VsIE/usmEYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzrBm29GC1dVxQ/hOrg0YgCHy0vMB8GA1UdIwQY
MBaAFDB/tbox1sQMTy4jIz5gde6vLVMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUgtMXVqSFd4QXhQTGlNalBtQjE3cTh0VXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81NWQ3YzUtMzc0YS00ODc2LTk5MzQt
YWUzZjA1MmZmYWFkLzEvTUgtMXVqSFd4QXhQTGlNalBtQjE3cTh0VXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81NWQ3YzUtMzc0YS00ODc2LTk5MzQtYWUzZjA1MmZmYWFk
LzEvTUgtMXVqSFd4QXhQTGlNalBtQjE3cTh0VXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvuuKVrag
JwjjkQ1Keq3f7DfDVtecdGtBbsfEe08O4L9lNDWVXl9CWCIlWc3ovLYSTUqg7euC
En6vBjeydD3+GvrkIByHgHokGnWgUz9oY/m/KxkATwfzVCteSVLyrZL39Rri3MND
WquXc9g26I+Nczbp99YfLFUe5gT6isDGxnJJEpGBPQNofBeRokOPpvK5HbhKqy1h
b7HHj8d/sF6DgO2SFYr+5qHVXFyVChMZenPT9KzVNjMXabf0vQGWiGJzUq7N5afD
C1BSL7t29FUucHcvO5VtYRT2nPA3mqAGaWEhtmanCmztL3KyNLkDnFsB1Gq6+JeM
jGVj4H68Bq3yfQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:28 2025 by rpki-client