Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
File: hGr1TmVYz8hiUpRuRpKrknd8DhA.mft (raw, json)
Hash identifier: 3fHqvdY4YGBKFiZXjLJ75FRwFPhxqy+cPYOXlftFyX8=
Subject key identifier: 10:86:38:D1:34:88:C0:2F:A1:C1:3F:18:34:3D:6A:6E:3F:24:87:79
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial: 0197C4CA089D5D23C88568CEC7093D6E85DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
Manifest number: 11E0
Signing time: Tue 01 Jul 2025 07:01:03 +0000
Manifest this update: Tue 01 Jul 2025 07:01:03 +0000
Manifest next update: Wed 02 Jul 2025 07:01:03 +0000
Files and hashes: 1: EAjdVmmPDgRsaYdJzqxZsWJ1dtQ.roa (hash: MpPa88zI8gAyzjuIqd3qZ9dmTTo9CAG0jQ+czPWKrY0=)
2: ZpIa8d84ZFXt_ZFQqAeQWbEn8cE.roa (hash: yg+iHdLIlyvv1zJT3FKVPdTj2ezKdgH8bzRxXJFfD+M=)
3: fw-9UYbBKED3FPK1cxwcKkMCFm0.roa (hash: jRUQB1Fr5hDxlkTn2IWZrgIhUE7mB/LkFsYZT2IUhmk=)
4: hGr1TmVYz8hiUpRuRpKrknd8DhA.crl (hash: ahWgZOPqwdHSyzFnacEhCT7I7zkrG881dvh/2IdNCtM=)
5: pT_R2pT5fkigCUc46LgmyNvu26w.roa (hash: f5EDq84NioAgiZfb2l0opuOPnSnHoDIa4FyPu++58Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:ca:08:9d:5d:23:c8:85:68:ce:c7:09:3d:6e:85:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
Validity
Not Before: Jul 1 07:01:03 2025 GMT
Not After : Jul 2 07:01:03 2025 GMT
Subject: CN=108638d13488c02fa1c13f18343d6a6e3f248779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:c9:76:a2:d7:63:36:f8:97:cc:e3:b2:3f:
e8:80:ff:43:be:23:cf:3b:b6:96:3a:b0:20:5b:04:
cb:fd:1a:84:82:af:eb:86:a9:c9:4d:8c:6e:bc:5b:
9e:0c:ca:ad:b8:83:0c:a5:b1:68:dc:f9:79:3f:58:
5b:cd:9b:a9:f2:4e:fd:da:5d:82:ad:cb:92:fe:ed:
6f:c5:ae:7f:67:f0:f5:e7:98:ed:ea:b7:4e:25:32:
93:9d:05:63:00:6a:dd:0a:d9:9c:10:3d:3e:6b:55:
97:94:19:a1:48:b6:cf:9e:9f:82:f5:d2:52:31:5f:
71:1b:db:f8:76:e2:41:75:df:41:ca:aa:32:e8:a2:
23:c3:3e:e1:02:c7:bf:20:6e:30:34:f9:a1:9a:1d:
2d:4b:e4:35:c0:03:f8:5e:9c:06:ef:43:17:6e:c6:
ff:2c:d6:e8:da:aa:56:45:94:e6:19:7e:85:7e:65:
90:e0:e3:06:23:61:4c:de:90:25:ed:07:ea:ba:89:
91:08:a9:65:a5:e2:f7:cb:95:75:99:af:de:b6:8c:
33:85:7d:7b:0a:bd:78:18:d6:74:96:83:a4:d7:4b:
22:5d:fc:94:e6:aa:b5:04:ca:aa:47:b1:f1:77:0b:
f1:b6:a4:c9:a4:34:86:bd:da:eb:93:c5:0e:ce:2f:
da:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:86:38:D1:34:88:C0:2F:A1:C1:3F:18:34:3D:6A:6E:3F:24:87:79
X509v3 Authority Key Identifier:
keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:43:01:76:b0:9b:b7:21:ff:8a:dc:f5:7b:ed:a1:63:44:32:
b7:c9:ab:25:9b:47:58:ed:39:45:fb:a7:2e:7a:74:7d:98:96:
4c:11:81:1f:9b:94:1e:27:65:26:67:bd:55:b9:2d:af:14:07:
95:4a:c6:fc:49:64:3e:10:25:f7:9b:34:79:b9:3c:36:cc:94:
25:73:0c:b0:a1:c6:97:3c:41:1c:16:5e:75:ec:90:85:fa:f8:
bd:bd:08:1e:76:36:26:43:e9:76:d6:b3:c0:fc:af:42:f4:3e:
67:ab:a5:3d:12:ef:16:3f:ff:cf:af:fa:a5:4b:1c:67:08:ab:
9f:63:34:91:e4:67:57:4c:da:8f:e4:e9:9a:1a:08:7b:34:4a:
af:1b:f5:1c:17:dc:13:bf:26:4a:c0:f9:ff:fb:26:fc:02:d3:
69:f3:31:1a:a9:be:b2:52:92:37:9c:d4:e3:cf:99:c9:71:74:
f7:31:16:af:67:44:e6:56:2f:b4:ab:a0:88:e0:88:e1:6c:ca:
98:6c:f4:9a:a5:a5:b4:35:fd:78:00:5e:6f:3a:e5:83:94:13:
af:03:91:f6:80:a7:19:d9:0e:4d:63:56:4a:1b:bb:0f:90:83:
fa:85:6f:80:eb:f6:54:5d:26:b1:5f:d7:ab:bd:1a:f4:b2:c5:
9f:7f:68:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEygidXSPIhWjOxwk9boXbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NmFmNTRlNjU1OGNmYzg2MjUyOTQ2ZTQ2OTJhYjkyNzc3
YzBlMTAwHhcNMjUwNzAxMDcwMTAzWhcNMjUwNzAyMDcwMTAzWjAzMTEwLwYDVQQD
EygxMDg2MzhkMTM0ODhjMDJmYTFjMTNmMTgzNDNkNmE2ZTNmMjQ4Nzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBbJdqLXYzb4l8zjsj/ogP9DviPP
O7aWOrAgWwTL/RqEgq/rhqnJTYxuvFueDMqtuIMMpbFo3Pl5P1hbzZup8k792l2C
rcuS/u1vxa5/Z/D155jt6rdOJTKTnQVjAGrdCtmcED0+a1WXlBmhSLbPnp+C9dJS
MV9xG9v4duJBdd9Byqoy6KIjwz7hAse/IG4wNPmhmh0tS+Q1wAP4XpwG70MXbsb/
LNbo2qpWRZTmGX6FfmWQ4OMGI2FM3pAl7QfquomRCKllpeL3y5V1ma/etowzhX17
Cr14GNZ0loOk10siXfyU5qq1BMqqR7HxdwvxtqTJpDSGvdrrk8UOzi/a2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCGONE0iMAvocE/GDQ9am4/JId5MB8GA1UdIwQY
MBaAFIRq9U5lWM/IYlKUbkaSq5J3fA4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQt
MDdlMzZlZmM1ZTQyLzEvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQtMDdlMzZlZmM1ZTQy
LzEvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEMBdrCb
tyH/itz1e+2hY0Qyt8mrJZtHWO05RfunLnp0fZiWTBGBH5uUHidlJme9VbktrxQH
lUrG/ElkPhAl95s0ebk8NsyUJXMMsKHGlzxBHBZedeyQhfr4vb0IHnY2JkPpdtaz
wPyvQvQ+Z6ulPRLvFj//z6/6pUscZwirn2M0keRnV0zaj+TpmhoIezRKrxv1HBfc
E78mSsD5//sm/ALTafMxGqm+slKSN5zU48+ZyXF09zEWr2dE5lYvtKugiOCI4WzK
mGz0mqWltDX9eABebzrlg5QTrwOR9oCnGdkOTWNWShu7D5CD+oVvgOv2VF0msV/X
q70a9LLFn39oGg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:15:43 2025 by rpki-client