Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
File: hPLOccb_zodWDVZe5czaMeAbnBU.mft (raw, json)
Hash identifier: nwdIrEI8l2JTtB6yrdRsPo5VWK03q9QoIHfC3hYQFUg=
Subject key identifier: 76:B1:74:BA:A6:27:7A:24:D4:52:84:80:B5:CD:8E:F8:71:86:A5:5D
Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Certificate serial: 0197B96A7B4583C15EE86ADF5F89456A6FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
Manifest number: 10E2
Signing time: Sun 29 Jun 2025 02:00:52 +0000
Manifest this update: Sun 29 Jun 2025 02:00:52 +0000
Manifest next update: Mon 30 Jun 2025 02:00:52 +0000
Files and hashes: 1: IDSoal-WPRQg2kggJnZlgyY7mtI.roa (hash: juWvqJns3UfT6SO2SE3jBpIvpwCfu+sMyWgDyL3Cs3I=)
2: hPLOccb_zodWDVZe5czaMeAbnBU.crl (hash: x1EakU5Owuf15WliLvHZFY6UUQ5gxTG8DDp7RwYw7Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:7b:45:83:c1:5e:e8:6a:df:5f:89:45:6a:6f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Validity
Not Before: Jun 29 02:00:52 2025 GMT
Not After : Jun 30 02:00:52 2025 GMT
Subject: CN=76b174baa6277a24d4528480b5cd8ef87186a55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:14:b3:ea:6d:9f:19:36:e4:6b:55:49:db:ea:
f8:5c:5e:39:1a:91:43:22:f1:5b:0f:73:9e:1e:b0:
b3:53:5e:3e:fb:67:ba:bb:7b:6c:42:4a:df:f6:37:
6b:6d:82:ba:18:c0:da:df:36:6c:c6:68:bb:d6:a3:
ac:26:50:54:63:65:0c:37:56:f6:c5:da:57:1c:4e:
1f:36:13:ee:67:ac:9d:e9:eb:86:06:4f:41:80:bb:
cc:2a:4e:09:5c:87:d6:65:cd:f0:04:95:9f:a4:f2:
5e:04:d5:f7:52:6f:d8:e2:d8:ae:f1:bd:6e:ba:6a:
c5:21:a3:8b:17:d7:35:4d:27:c8:7d:b8:4e:7e:e4:
45:04:15:33:0d:e2:1f:44:8a:79:02:1f:dc:31:3f:
10:a9:11:59:c3:23:55:a5:b1:c9:cb:49:40:a1:26:
5f:9a:da:61:4d:0e:a4:1e:3c:f9:ef:48:cf:9f:82:
a9:18:77:01:d4:84:44:b6:e0:f5:1c:c2:23:34:ee:
92:78:b9:b5:06:b9:28:1f:e3:d2:bf:09:97:b8:a8:
70:3f:c9:5a:e2:c8:80:2d:3d:ff:79:1c:86:f0:e3:
84:f0:a2:66:8c:1e:51:60:36:b4:18:03:cd:6d:d8:
61:eb:88:73:fd:53:32:04:7a:de:f2:34:d6:e3:b3:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B1:74:BA:A6:27:7A:24:D4:52:84:80:B5:CD:8E:F8:71:86:A5:5D
X509v3 Authority Key Identifier:
keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ae:58:7a:c7:8e:06:26:db:2a:0a:d6:33:89:5d:40:d8:9a:
6f:63:16:ea:1b:a7:ce:94:6a:25:11:35:7b:00:22:28:90:f0:
6e:70:c7:b8:0e:51:d8:6a:23:74:f8:99:4d:31:f9:65:97:28:
f7:f0:74:23:e3:1b:59:d2:fb:cb:77:fc:83:d3:43:9a:be:04:
3c:56:8b:01:30:e3:d6:f9:d7:85:4d:75:82:6f:ab:aa:1f:c1:
c8:c3:f6:1c:e7:e8:4d:57:53:e0:a6:f4:9f:3c:a7:13:a5:0c:
00:c9:ab:88:a0:32:69:d9:7a:17:df:0d:a4:3d:db:7d:b1:ff:
f1:7e:b6:b4:6f:dd:3b:78:ac:e9:a3:b3:70:43:97:7a:98:1a:
50:0e:97:84:00:8c:36:ff:9c:a4:8d:76:c8:97:03:e4:56:e1:
6f:bb:d0:22:45:a9:62:6b:63:92:fd:0b:1a:d3:84:c8:d3:53:
9a:cc:2b:ec:be:8e:30:17:96:cf:99:88:38:a5:85:d1:13:b9:
36:9e:b6:9f:9a:93:1b:7e:81:ee:80:02:e4:88:25:1f:6c:26:
b9:af:bb:b9:39:40:72:d0:ad:df:67:42:35:95:d7:85:e4:84:
e7:ce:84:5f:94:88:9a:17:03:cf:91:39:47:1d:23:83:fc:bc:
fd:8c:fb:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5antFg8Fe6GrfX4lFam/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjJjZTcxYzZmZmNlODc1NjBkNTY1ZWU1Y2NkYTMxZTAx
YjljMTUwHhcNMjUwNjI5MDIwMDUyWhcNMjUwNjMwMDIwMDUyWjAzMTEwLwYDVQQD
Eyg3NmIxNzRiYWE2Mjc3YTI0ZDQ1Mjg0ODBiNWNkOGVmODcxODZhNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BSz6m2fGTbka1VJ2+r4XF45GpFD
IvFbD3OeHrCzU14++2e6u3tsQkrf9jdrbYK6GMDa3zZsxmi71qOsJlBUY2UMN1b2
xdpXHE4fNhPuZ6yd6euGBk9BgLvMKk4JXIfWZc3wBJWfpPJeBNX3Um/Y4tiu8b1u
umrFIaOLF9c1TSfIfbhOfuRFBBUzDeIfRIp5Ah/cMT8QqRFZwyNVpbHJy0lAoSZf
mtphTQ6kHjz570jPn4KpGHcB1IREtuD1HMIjNO6SeLm1BrkoH+PSvwmXuKhwP8la
4siALT3/eRyG8OOE8KJmjB5RYDa0GAPNbdhh64hz/VMyBHre8jTW47ORBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaxdLqmJ3ok1FKEgLXNjvhxhqVdMB8GA1UdIwQY
MBaAFITyznHG/86HVg1WXuXM2jHgG5wVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yYWM5ODAtMjI1OS00NmZkLWE0Mjgt
N2I5OGM3NDYyYTdlLzEvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yYWM5ODAtMjI1OS00NmZkLWE0MjgtN2I5OGM3NDYyYTdl
LzEvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM65YeseO
BibbKgrWM4ldQNiab2MW6hunzpRqJRE1ewAiKJDwbnDHuA5R2GojdPiZTTH5ZZco
9/B0I+MbWdL7y3f8g9NDmr4EPFaLATDj1vnXhU11gm+rqh/ByMP2HOfoTVdT4Kb0
nzynE6UMAMmriKAyadl6F98NpD3bfbH/8X62tG/dO3is6aOzcEOXepgaUA6XhACM
Nv+cpI12yJcD5Fbhb7vQIkWpYmtjkv0LGtOEyNNTmswr7L6OMBeWz5mIOKWF0RO5
Np62n5qTG36B7oAC5IglH2wmua+7uTlActCt32dCNZXXheSE586EX5SImhcDz5E5
Rx0jg/y8/Yz7rA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:26:11 2025 by rpki-client