Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
File: H1BLG7cWjmgLGVQvj3MDhhRMil8.mft (raw, json)
Hash identifier: AoGGKGWUCGOiEzJsovpQ0MGlOA3gd3AJcp3aY/HtUc0=
Subject key identifier: D7:8A:D3:79:61:54:03:7F:36:D8:B7:2B:45:82:A5:B4:82:0F:F7:39
Authority key identifier: 1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
Certificate issuer: /CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Certificate serial: 0197B70F18F57F40EF28F392125F287DDDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:49 +0000
Manifest this update: Sat 28 Jun 2025 15:01:49 +0000
Manifest next update: Sun 29 Jun 2025 15:01:49 +0000
Files and hashes: 1: 1YHm_89mdmO3B6rQNuElV51RHnc.roa (hash: MnfHwqRrOYbX1ON7yZ7M8gI0u2brRrZRizU4+uQlZVo=)
2: H1BLG7cWjmgLGVQvj3MDhhRMil8.crl (hash: q+bsHcuBhMthCSoVQyqm+/HkYJGC+rE4AO47lzQsZts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:18:f5:7f:40:ef:28:f3:92:12:5f:28:7d:dd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Validity
Not Before: Jun 28 15:01:49 2025 GMT
Not After : Jun 29 15:01:49 2025 GMT
Subject: CN=d78ad3796154037f36d8b72b4582a5b4820ff739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:d2:c8:97:e6:20:5e:3b:13:f0:1f:c2:07:
7f:90:84:ac:5a:48:9b:a3:52:cd:8c:c6:53:9a:c2:
d7:82:d3:ff:86:c3:12:92:32:31:19:b8:88:5a:0d:
ae:b4:3c:e8:07:65:7a:81:e4:fe:66:a7:bb:b1:67:
13:ec:5f:57:f5:e2:28:69:78:bd:e6:6f:42:66:88:
85:67:c1:d7:55:01:fd:4f:18:33:62:45:37:46:ba:
a3:6d:a1:c0:53:16:95:a9:30:3f:27:c4:72:9b:c3:
55:71:19:2f:9a:40:31:7a:a7:a1:f5:54:6e:d0:d3:
47:07:a2:d2:3f:9d:ca:b4:44:3b:e7:be:b0:0e:16:
6d:5a:81:d0:d9:57:cc:2c:b2:e9:5c:76:b6:21:24:
a5:c5:e3:18:c2:97:09:f2:ea:dd:9b:f5:b5:e6:71:
bf:5a:21:d4:c2:87:2f:ce:ed:ac:01:62:42:b5:48:
3d:ed:2c:3e:21:68:00:7e:28:bf:10:07:e8:ed:9f:
93:6a:69:d5:20:c5:ef:59:cc:3f:14:36:7a:85:e9:
cc:38:72:e1:b2:61:0a:e0:28:3a:bd:9d:41:4b:44:
a3:57:65:6d:1c:96:93:a0:f3:c1:aa:af:db:f0:09:
f3:a1:b8:ab:de:d2:6e:f3:e8:b1:cb:87:aa:ee:10:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8A:D3:79:61:54:03:7F:36:D8:B7:2B:45:82:A5:B4:82:0F:F7:39
X509v3 Authority Key Identifier:
keyid:1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8e:11:45:70:ef:a6:d2:dc:b7:7d:f9:27:15:bc:55:e0:ca:
3e:b7:3e:61:aa:bc:b4:15:55:1e:a0:94:27:dc:d1:96:4d:b0:
0d:a2:a3:4d:f9:bc:70:15:97:dd:9e:35:05:07:76:34:5e:a1:
a6:ca:91:14:31:6e:5b:a0:12:c4:ca:29:66:ff:87:87:c0:52:
0f:3f:78:68:95:2e:bd:11:e2:c3:fc:15:20:ea:fe:6b:ed:dd:
ed:0b:22:d0:3b:1a:50:79:a9:34:d5:4a:c6:54:24:ce:ea:c3:
fb:a2:8d:81:ac:9f:f0:1a:e4:62:33:2e:5a:9a:86:cf:8c:e1:
a3:fb:b0:fe:59:48:e1:f0:9b:95:33:30:f5:77:61:65:a0:3c:
59:c5:47:e1:e3:66:c2:c0:38:70:63:09:80:b8:0a:3e:96:d1:
38:82:89:7b:07:8a:9f:c8:55:05:32:ab:1b:c5:8c:bc:7f:f0:
f7:63:00:cb:c2:7a:7e:01:86:9c:51:ae:6c:40:d7:9b:56:88:
2e:f9:c0:bd:ca:75:23:2a:7d:78:c8:48:3d:74:83:eb:3f:c8:
48:fc:4c:a2:96:0c:6a:96:17:8b:4e:6b:33:78:36:24:97:f3:
4e:bf:e5:f0:c0:89:8d:a2:af:cd:14:74:1d:00:eb:7c:9c:54:
65:c6:94:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dxj1f0DvKPOSEl8ofd2/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNTA0YjFiYjcxNjhlNjgwYjE5NTQyZjhmNzMwMzg2MTQ0
YzhhNWYwHhcNMjUwNjI4MTUwMTQ5WhcNMjUwNjI5MTUwMTQ5WjAzMTEwLwYDVQQD
EyhkNzhhZDM3OTYxNTQwMzdmMzZkOGI3MmI0NTgyYTViNDgyMGZmNzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqzSyJfmIF47E/Afwgd/kISsWkib
o1LNjMZTmsLXgtP/hsMSkjIxGbiIWg2utDzoB2V6geT+Zqe7sWcT7F9X9eIoaXi9
5m9CZoiFZ8HXVQH9TxgzYkU3RrqjbaHAUxaVqTA/J8Rym8NVcRkvmkAxeqeh9VRu
0NNHB6LSP53KtEQ7576wDhZtWoHQ2VfMLLLpXHa2ISSlxeMYwpcJ8urdm/W15nG/
WiHUwocvzu2sAWJCtUg97Sw+IWgAfii/EAfo7Z+TamnVIMXvWcw/FDZ6henMOHLh
smEK4Cg6vZ1BS0SjV2VtHJaToPPBqq/b8Anzobir3tJu8+ixy4eq7hBp1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeK03lhVAN/Nti3K0WCpbSCD/c5MB8GA1UdIwQY
MBaAFB9QSxu3Fo5oCxlUL49zA4YUTIpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zYzc0YTgtOWY3Mi00YzA2LWI1MTYt
MzViYjYwZWEwN2MxLzEvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8zYzc0YTgtOWY3Mi00YzA2LWI1MTYtMzViYjYwZWEwN2Mx
LzEvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbI4RRXDv
ptLct335JxW8VeDKPrc+Yaq8tBVVHqCUJ9zRlk2wDaKjTfm8cBWX3Z41BQd2NF6h
psqRFDFuW6ASxMopZv+Hh8BSDz94aJUuvRHiw/wVIOr+a+3d7Qsi0DsaUHmpNNVK
xlQkzurD+6KNgayf8BrkYjMuWpqGz4zho/uw/llI4fCblTMw9XdhZaA8WcVH4eNm
wsA4cGMJgLgKPpbROIKJeweKn8hVBTKrG8WMvH/w92MAy8J6fgGGnFGubEDXm1aI
LvnAvcp1Iyp9eMhIPXSD6z/ISPxMopYMapYXi05rM3g2JJfzTr/l8MCJjaKvzRR0
HQDrfJxUZcaUNA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:23 2025 by rpki-client