Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
File: h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft (raw, json)
Hash identifier: UwE6IV5Yt8ZgDX+a7mCDqMYY0LpZiB1y9tpbTkhb/lQ=
Subject key identifier: 43:2B:2E:44:7E:7D:AF:96:36:26:87:45:9D:B6:1C:3B:CA:6D:B8:1B
Authority key identifier: 87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE
Certificate issuer: /CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce
Certificate serial: 0197B96B24B3293388F274AA63A9DD42F6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
Manifest number: 12D9
Signing time: Sun 29 Jun 2025 02:01:35 +0000
Manifest this update: Sun 29 Jun 2025 02:01:35 +0000
Manifest next update: Mon 30 Jun 2025 02:01:35 +0000
Files and hashes: 1: TBNCAmXPiITjG3rsN7mx1xrR_KY.roa (hash: iXvzmMuxsBGvkR+ftL5TgUS2Lpzgxj9Gu947ZjpDrMU=)
2: h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl (hash: w1rkELeO9GLS9sfiP59raoOnmOKoY/lkw9fSZ/D0fVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:24:b3:29:33:88:f2:74:aa:63:a9:dd:42:f6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce
Validity
Not Before: Jun 29 02:01:35 2025 GMT
Not After : Jun 30 02:01:35 2025 GMT
Subject: CN=432b2e447e7daf96362687459db61c3bca6db81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:04:7a:68:cd:a7:e7:a5:d0:21:e5:40:2e:
cb:19:47:2e:0f:e5:1b:4e:71:b5:c3:86:3c:55:37:
b2:a3:17:4d:56:68:80:bc:0f:aa:05:3a:7a:ea:13:
dd:a4:53:92:89:88:d3:a8:f2:21:51:a7:cf:9f:18:
3f:a7:36:b2:47:e3:26:7b:7f:b5:b8:b1:08:92:30:
a0:8b:ea:51:54:fc:6b:6e:e9:16:bd:69:90:ae:a5:
80:28:cf:86:11:4e:b0:ef:03:f8:5c:ea:b0:72:ce:
90:33:6f:a6:48:49:2a:55:69:69:ca:8a:dc:59:ff:
4f:cc:c5:3d:d8:6d:5e:4c:9f:26:b8:8c:e7:78:68:
3e:38:40:58:2b:d3:9e:d7:93:64:b1:35:9b:fc:3d:
20:5c:a2:ae:2a:d4:22:18:e0:1c:fe:1a:10:b9:66:
f7:2d:94:ab:02:c3:ed:31:08:ef:f3:55:94:82:8e:
e7:f6:42:38:00:0d:0e:3d:ef:55:7d:55:06:8c:4f:
77:c2:98:9d:30:d3:ac:23:32:e5:64:cb:05:38:7b:
04:21:8c:a5:b6:fa:33:8d:77:1e:17:6c:8b:64:0b:
86:39:c4:4d:f5:be:20:f3:23:4d:78:9c:22:3e:5d:
a9:bb:5a:a8:74:8c:34:79:77:66:b4:eb:eb:35:e4:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2B:2E:44:7E:7D:AF:96:36:26:87:45:9D:B6:1C:3B:CA:6D:B8:1B
X509v3 Authority Key Identifier:
keyid:87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:40:98:87:50:ce:0f:c6:cf:85:eb:5a:48:ec:fa:28:a9:84:
2f:5c:7c:6c:1c:91:11:3d:25:a7:24:47:b2:4c:c5:ac:8e:01:
2e:a8:b0:cc:f1:c9:44:ce:8e:76:3c:5b:99:db:c1:f6:1d:a9:
fc:1d:47:a6:5d:46:35:c4:0f:90:be:94:e1:b1:41:fa:57:b2:
0b:b9:af:8f:f2:fc:0d:9a:06:88:1a:d1:b6:be:5b:22:a8:f1:
b6:e9:81:82:ec:40:bd:58:3b:23:13:00:28:a8:ee:9c:dc:00:
53:59:ef:04:42:13:ab:33:6b:f0:ce:6d:60:dc:b5:22:26:17:
67:c3:a3:91:53:86:be:b4:9f:45:7b:e6:c9:6a:a1:9b:82:e7:
a2:48:15:7d:df:07:a1:e3:1e:64:c4:7f:79:d5:65:49:7e:ef:
79:cb:1a:a3:34:0f:18:d1:d6:33:62:c0:2f:0b:4c:b2:98:88:
e6:dd:a7:14:4b:19:c9:1a:b0:79:48:1f:a4:b6:4f:0b:d8:1b:
24:73:66:9f:6c:ed:65:12:35:56:08:bc:57:23:97:d9:48:02:
f0:3a:7a:93:1d:2a:01:73:b1:4f:82:a5:38:76:dc:6f:27:e4:
f7:43:50:75:a3:01:ec:0b:02:b5:b7:f7:43:a3:33:56:8a:2e:
64:87:20:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5aySzKTOI8nSqY6ndQvbMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGZjMGZiYTFiODM2YzIzZmY2ZGY0NjhjOGFiZjdkM2E4
MjE2Y2UwHhcNMjUwNjI5MDIwMTM1WhcNMjUwNjMwMDIwMTM1WjAzMTEwLwYDVQQD
Eyg0MzJiMmU0NDdlN2RhZjk2MzYyNjg3NDU5ZGI2MWMzYmNhNmRiODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLAEemjNp+el0CHlQC7LGUcuD+Ub
TnG1w4Y8VTeyoxdNVmiAvA+qBTp66hPdpFOSiYjTqPIhUafPnxg/pzayR+Mme3+1
uLEIkjCgi+pRVPxrbukWvWmQrqWAKM+GEU6w7wP4XOqwcs6QM2+mSEkqVWlpyorc
Wf9PzMU92G1eTJ8muIzneGg+OEBYK9Oe15NksTWb/D0gXKKuKtQiGOAc/hoQuWb3
LZSrAsPtMQjv81WUgo7n9kI4AA0OPe9VfVUGjE93wpidMNOsIzLlZMsFOHsEIYyl
tvozjXceF2yLZAuGOcRN9b4g8yNNeJwiPl2pu1qodIw0eXdmtOvrNeRsowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMrLkR+fa+WNiaHRZ22HDvKbbgbMB8GA1UdIwQY
MBaAFIdPwPuhuDbCP/bfRoyKv306ghbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDBfQS02RzROc0lfOXQ5R2pJcV9mVHFDRnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMTVjZjctNDIyZC00YThhLThmNGMt
MmQ1NGU1ODJiNWUwLzEvaDBfQS02RzROc0lfOXQ5R2pJcV9mVHFDRnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jMTVjZjctNDIyZC00YThhLThmNGMtMmQ1NGU1ODJiNWUw
LzEvaDBfQS02RzROc0lfOXQ5R2pJcV9mVHFDRnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0CYh1DO
D8bPhetaSOz6KKmEL1x8bByRET0lpyRHskzFrI4BLqiwzPHJRM6OdjxbmdvB9h2p
/B1Hpl1GNcQPkL6U4bFB+leyC7mvj/L8DZoGiBrRtr5bIqjxtumBguxAvVg7IxMA
KKjunNwAU1nvBEITqzNr8M5tYNy1IiYXZ8OjkVOGvrSfRXvmyWqhm4LnokgVfd8H
oeMeZMR/edVlSX7vecsaozQPGNHWM2LALwtMspiI5t2nFEsZyRqweUgfpLZPC9gb
JHNmn2ztZRI1Vgi8VyOX2UgC8Dp6kx0qAXOxT4KlOHbcbyfk90NQdaMB7AsCtbf3
Q6MzVoouZIcg6g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:24:37 2025 by rpki-client