Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
File: hEoXkcsH8dhhI8Y9w63P11TbEBs.mft (raw, json)
Hash identifier: 7Dhe5QmORxNEC21CJDME3QO9tBHmMWBv+qwgbsiRo1M=
Subject key identifier: A5:C5:43:FD:68:9F:88:5E:3F:D2:97:F0:6B:70:06:59:40:B5:0B:7D
Authority key identifier: 84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
Certificate issuer: /CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Certificate serial: 0197CA5E1E2E437149F410F068422A07326D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
Manifest number: 09D0
Signing time: Wed 02 Jul 2025 09:00:55 +0000
Manifest this update: Wed 02 Jul 2025 09:00:55 +0000
Manifest next update: Thu 03 Jul 2025 09:00:55 +0000
Files and hashes: 1: Ihp0VP8oRNeTGrBSGwpts6D1JhE.roa (hash: Qldf3LszJ2g2XwaE6LEoxPc+aR59tijRa50IN/mT6PY=)
2: gi2zaUr2ngLXfM8NV7jNPdt_PFI.roa (hash: pPPLz9b8ntu+6vKYV+GHcDLfS03p/6Pt+aGjIk5ADdw=)
3: hEoXkcsH8dhhI8Y9w63P11TbEBs.crl (hash: d2NRBMRenwi9heHIMzx6M3oqA+ZnWk04XByiH5FHoTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:1e:2e:43:71:49:f4:10:f0:68:42:2a:07:32:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Validity
Not Before: Jul 2 09:00:55 2025 GMT
Not After : Jul 3 09:00:55 2025 GMT
Subject: CN=a5c543fd689f885e3fd297f06b70065940b50b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:5d:3a:8a:50:e1:d5:53:92:73:1b:5d:da:
3d:af:36:09:f6:54:74:5f:f6:a0:14:11:c9:d9:3d:
6b:bd:57:22:6e:e0:1a:c6:16:7b:ce:c0:bf:0a:ee:
e4:50:3d:82:13:2c:eb:3d:e4:5d:4b:26:3c:cf:2b:
88:be:c5:bb:86:5c:d5:4a:9f:a8:68:74:99:90:93:
18:32:48:29:15:85:53:68:05:fe:ad:47:99:2b:d7:
0a:c8:04:4c:51:a7:3b:1f:7e:bb:58:f9:f3:b0:35:
bf:c9:52:78:35:b8:34:7f:4c:25:6b:17:97:44:3d:
b0:11:65:a1:7f:43:ef:1f:1d:12:10:bf:9f:f8:4e:
e0:ea:b1:8c:ed:92:53:71:f0:dc:fd:bf:53:55:e0:
9d:86:86:12:a1:b2:41:0f:8e:b4:ca:d7:f3:c1:9a:
45:d1:23:7f:a8:81:6c:2f:d1:13:34:75:a0:2e:80:
8b:0d:b1:98:4f:be:7a:38:16:50:20:af:96:e2:88:
da:16:5b:3f:b0:e8:fc:96:b3:3a:b1:45:b1:c5:e3:
96:96:17:7a:31:5f:90:dc:3d:38:97:32:4d:a6:3b:
b7:0e:e6:c3:89:bf:92:40:7f:06:df:bc:93:07:6e:
15:27:f7:6f:c9:c1:cb:07:c9:5d:01:cd:93:74:32:
20:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C5:43:FD:68:9F:88:5E:3F:D2:97:F0:6B:70:06:59:40:B5:0B:7D
X509v3 Authority Key Identifier:
keyid:84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:eb:1f:33:5d:62:9e:92:01:da:b6:0d:2c:49:4b:64:d0:0d:
c9:15:05:f2:7e:0e:61:2c:94:25:2a:17:4e:69:16:a0:24:ec:
d2:c1:b4:2d:b6:f9:7b:a0:96:19:de:ef:42:a3:15:a5:dd:b2:
12:ca:dd:08:9c:92:f1:35:5d:51:22:80:b7:63:46:8c:0c:53:
0a:c9:1b:5a:75:0e:ce:af:60:7a:1b:76:a2:ee:bb:61:79:b3:
3e:55:16:a1:f3:26:77:3d:2c:a5:72:2a:71:c5:5d:32:53:a2:
88:7e:1b:b5:c2:94:39:cb:12:69:b0:1c:ab:4e:57:f1:74:3b:
5c:3a:08:ac:33:a2:63:88:6c:75:e2:93:b1:2c:40:3a:15:5f:
85:67:c0:73:6b:d3:09:bb:91:6c:cd:a0:60:e2:84:f7:e3:d1:
8f:d1:06:fe:9e:b0:ee:ca:9e:a2:51:31:6f:17:2c:51:95:6a:
fd:bb:7e:17:8a:ee:03:90:cf:8f:52:aa:6b:bd:89:bd:67:ee:
90:48:cc:16:86:44:11:30:91:5a:f0:d3:57:1f:e5:a8:6b:e7:
35:27:25:ac:39:54:06:44:a4:fd:80:44:e4:56:f8:76:bd:ac:
b3:41:b8:0f:c3:f2:6e:90:64:1d:5c:ff:f1:38:29:df:2b:17:
90:f3:9e:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKXh4uQ3FJ9BDwaEIqBzJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NGExNzkxY2IwN2YxZDg2MTIzYzYzZGMzYWRjZmQ3NTRk
YjEwMWIwHhcNMjUwNzAyMDkwMDU1WhcNMjUwNzAzMDkwMDU1WjAzMTEwLwYDVQQD
EyhhNWM1NDNmZDY4OWY4ODVlM2ZkMjk3ZjA2YjcwMDY1OTQwYjUwYjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4pdOopQ4dVTknMbXdo9rzYJ9lR0
X/agFBHJ2T1rvVcibuAaxhZ7zsC/Cu7kUD2CEyzrPeRdSyY8zyuIvsW7hlzVSp+o
aHSZkJMYMkgpFYVTaAX+rUeZK9cKyARMUac7H367WPnzsDW/yVJ4Nbg0f0wlaxeX
RD2wEWWhf0PvHx0SEL+f+E7g6rGM7ZJTcfDc/b9TVeCdhoYSobJBD460ytfzwZpF
0SN/qIFsL9ETNHWgLoCLDbGYT756OBZQIK+W4ojaFls/sOj8lrM6sUWxxeOWlhd6
MV+Q3D04lzJNpju3DubDib+SQH8G37yTB24VJ/dvycHLB8ldAc2TdDIgxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXFQ/1on4heP9KX8GtwBllAtQt9MB8GA1UdIwQY
MBaAFIRKF5HLB/HYYSPGPcOtz9dU2xAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVvWGtjc0g4ZGhoSThZOXc2M1AxMVRiRUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mMTM3MGEtNTdjYS00NmEwLThhZjQt
NzhiYTZkYzUwMDg2LzEvaEVvWGtjc0g4ZGhoSThZOXc2M1AxMVRiRUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mMTM3MGEtNTdjYS00NmEwLThhZjQtNzhiYTZkYzUwMDg2
LzEvaEVvWGtjc0g4ZGhoSThZOXc2M1AxMVRiRUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOsfM11i
npIB2rYNLElLZNANyRUF8n4OYSyUJSoXTmkWoCTs0sG0Lbb5e6CWGd7vQqMVpd2y
EsrdCJyS8TVdUSKAt2NGjAxTCskbWnUOzq9geht2ou67YXmzPlUWofMmdz0spXIq
ccVdMlOiiH4btcKUOcsSabAcq05X8XQ7XDoIrDOiY4hsdeKTsSxAOhVfhWfAc2vT
CbuRbM2gYOKE9+PRj9EG/p6w7sqeolExbxcsUZVq/bt+F4ruA5DPj1Kqa72JvWfu
kEjMFoZEETCRWvDTVx/lqGvnNSclrDlUBkSk/YBE5Fb4dr2ss0G4D8PybpBkHVz/
8Tgp3ysXkPOeqQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 12:23:02 2025 by rpki-client