Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier: uHsMTDKIMzC7jNPIem7gc1x/Mlz1nQk7gtHAVeT7RAU=
Subject key identifier: E7:C5:4E:E3:0E:04:B7:2A:92:F9:33:E4:42:60:CA:3C:67:11:B1:ED
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 0197B7B37B89568F9F0B934FB6611316E488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number: 158A
Signing time: Sat 28 Jun 2025 18:01:22 +0000
Manifest this update: Sat 28 Jun 2025 18:01:22 +0000
Manifest next update: Sun 29 Jun 2025 18:01:22 +0000
Files and hashes: 1: 5PJXNIBNkIDizHXqABCfI2weMXY.roa (hash: mf+a4WKnZwf0YHj/JFfXY0yYuBPjjgdMLip3MBUWcAI=)
2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: g7Z6WDisqQ+LN62/15zzEpU8UP5zPMZZLVg41KKpeSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7b:89:56:8f:9f:0b:93:4f:b6:61:13:16:e4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: Jun 28 18:01:22 2025 GMT
Not After : Jun 29 18:01:22 2025 GMT
Subject: CN=e7c54ee30e04b72a92f933e44260ca3c6711b1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2c:67:15:c1:57:14:33:cb:0a:57:09:8e:2b:
ce:61:66:d8:a6:f7:36:7d:2f:3f:53:a6:56:27:30:
32:47:e9:06:52:e0:9f:6d:16:4e:d0:e5:44:69:9e:
3b:97:da:02:35:2b:b3:a0:9e:2e:4d:00:43:02:00:
13:d1:c0:34:90:4e:fb:c6:f1:36:10:6f:a3:48:9a:
65:66:46:eb:38:cf:8c:d3:2f:fa:f5:00:a0:16:50:
eb:f3:e8:2f:7e:27:87:9b:4f:2b:0c:36:5d:a2:35:
7a:62:4a:ff:c5:f3:a9:2f:d0:d8:59:67:a4:b3:36:
77:c5:d6:5f:0a:d8:a9:ae:07:4c:eb:bd:b6:2c:28:
39:ef:f4:25:49:18:e0:0e:4e:2b:1e:67:03:d6:e8:
27:33:1e:69:bf:29:2d:97:fa:e4:f4:16:a3:b8:9e:
5a:9a:03:75:9a:64:c1:12:e1:31:39:b7:00:c1:84:
c9:08:aa:32:4b:80:0b:7b:23:5a:e2:e7:3d:0b:bb:
ef:cb:6f:1d:0b:1f:fe:79:e2:c7:4d:38:90:08:a3:
9a:eb:3c:f0:c3:3a:e6:b9:c1:ed:4c:e0:dc:b1:a8:
48:ee:e5:0e:91:fc:3b:a3:2a:04:1d:ae:0c:30:84:
1e:b1:f1:b9:71:2e:d0:4e:41:cb:df:da:a3:fa:3e:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C5:4E:E3:0E:04:B7:2A:92:F9:33:E4:42:60:CA:3C:67:11:B1:ED
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:dc:b3:21:a6:ee:88:82:b8:cd:b1:1d:85:cf:e7:d3:fd:64:
f8:04:0e:38:ab:3d:28:2a:a1:5a:db:b2:78:2b:d2:90:4a:dc:
c7:5a:11:b7:69:aa:ac:d9:ec:fd:55:5c:2e:38:31:6f:0f:c6:
a1:9d:34:c1:d8:cf:ea:64:7e:6a:d4:61:ca:c8:75:d9:a5:a2:
10:01:b3:52:96:98:79:34:6c:6c:dd:8a:7d:67:a8:a3:0f:51:
4e:f5:46:ab:64:b4:2d:1f:84:55:0c:48:c3:7f:d6:dd:bf:bc:
20:12:3c:73:a2:34:4b:e2:60:39:c9:1f:6a:62:8f:59:de:ce:
e3:0b:d9:0a:1b:bd:58:1e:7a:ad:82:49:cf:7a:e3:b3:a5:03:
19:ae:71:df:69:3f:0b:03:a2:d9:c2:99:be:f3:02:d1:1d:2c:
16:a3:55:6f:21:17:a1:9b:8b:08:2c:ac:15:f4:a8:a2:e4:5a:
fe:21:06:ce:a7:80:7b:49:35:74:cc:0c:5d:26:3e:92:d8:2e:
2e:06:31:cb:2b:20:28:be:d5:68:a1:55:9a:2e:91:d8:4a:f7:
74:3d:4d:ff:64:ad:dd:b4:7a:b9:c1:5c:6b:d6:a4:33:d8:84:
cd:4f:60:de:89:d6:0e:20:26:40:14:11:aa:c6:ff:8c:c3:92:
ea:d4:43:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s3uJVo+fC5NPtmETFuSIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWJlZWRmNDM4YTlhYTk2MWMzNDMyNjQzN2MyOWM0ZGQw
Y2M0YmMwHhcNMjUwNjI4MTgwMTIyWhcNMjUwNjI5MTgwMTIyWjAzMTEwLwYDVQQD
EyhlN2M1NGVlMzBlMDRiNzJhOTJmOTMzZTQ0MjYwY2EzYzY3MTFiMWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SxnFcFXFDPLClcJjivOYWbYpvc2
fS8/U6ZWJzAyR+kGUuCfbRZO0OVEaZ47l9oCNSuzoJ4uTQBDAgAT0cA0kE77xvE2
EG+jSJplZkbrOM+M0y/69QCgFlDr8+gvfieHm08rDDZdojV6Ykr/xfOpL9DYWWek
szZ3xdZfCtiprgdM6722LCg57/QlSRjgDk4rHmcD1ugnMx5pvyktl/rk9BajuJ5a
mgN1mmTBEuExObcAwYTJCKoyS4ALeyNa4uc9C7vvy28dCx/+eeLHTTiQCKOa6zzw
wzrmucHtTODcsahI7uUOkfw7oyoEHa4MMIQesfG5cS7QTkHL39qj+j7rPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfFTuMOBLcqkvkz5EJgyjxnEbHtMB8GA1UdIwQY
MBaAFIRb7t9DipqpYcNDJkN8KcTdDMS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEZ2dTMwT0ttcWxodzBNbVEzd3B4TjBNeEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hNzBhODQtZDIyMy00ZGZkLTlmZWIt
MThlNjQ0NDFkMDFlLzEvaEZ2dTMwT0ttcWxodzBNbVEzd3B4TjBNeEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hNzBhODQtZDIyMy00ZGZkLTlmZWItMThlNjQ0NDFkMDFl
LzEvaEZ2dTMwT0ttcWxodzBNbVEzd3B4TjBNeEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidyzIabu
iIK4zbEdhc/n0/1k+AQOOKs9KCqhWtuyeCvSkErcx1oRt2mqrNns/VVcLjgxbw/G
oZ00wdjP6mR+atRhysh12aWiEAGzUpaYeTRsbN2KfWeoow9RTvVGq2S0LR+EVQxI
w3/W3b+8IBI8c6I0S+JgOckfamKPWd7O4wvZChu9WB56rYJJz3rjs6UDGa5x32k/
CwOi2cKZvvMC0R0sFqNVbyEXoZuLCCysFfSoouRa/iEGzqeAe0k1dMwMXSY+ktgu
LgYxyysgKL7VaKFVmi6R2Er3dD1N/2St3bR6ucFca9akM9iEzU9g3onWDiAmQBQR
qsb/jMOS6tRD9A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:19 2025 by rpki-client