Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
File: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft (raw, json)
Hash identifier: fhjEkcZvRKcb5ZNMMYL2uOvWTaJreb9hoRai92+n5Hk=
Subject key identifier: A0:93:3B:E2:5D:55:89:2E:3F:76:38:F6:DA:22:6B:17:9D:94:87:CF
Authority key identifier: D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
Certificate issuer: /CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Certificate serial: 0197B70E78B902DB6B4FC88BAA383891CB5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
Manifest number: 0770
Signing time: Sat 28 Jun 2025 15:01:08 +0000
Manifest this update: Sat 28 Jun 2025 15:01:08 +0000
Manifest next update: Sun 29 Jun 2025 15:01:08 +0000
Files and hashes: 1: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl (hash: 0n3q92iMjD5ch+xu9HR7REwaiwKb8NfxeWdQ8c2dZVE=)
2: 50bo-j7HR95aUFz7is7MBLLkMsc.roa (hash: aYgErZR0B+wLx1tDGd7DRHlBnCECIPjEQvva1IOrhbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:78:b9:02:db:6b:4f:c8:8b:aa:38:38:91:cb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Validity
Not Before: Jun 28 15:01:08 2025 GMT
Not After : Jun 29 15:01:08 2025 GMT
Subject: CN=a0933be25d55892e3f7638f6da226b179d9487cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:78:75:4e:46:07:69:63:8e:9f:ad:69:ae:
f6:8d:35:31:71:67:af:25:11:13:e7:4a:f2:8e:69:
35:8e:3a:1c:19:70:1f:61:e8:7b:2a:72:9f:f9:53:
93:76:d7:66:35:a8:68:b5:5e:2f:69:c0:4f:cf:db:
26:1e:6e:40:00:39:a3:ad:a9:82:63:85:ef:50:cb:
eb:19:60:50:50:9e:47:68:5f:04:6c:78:11:e2:71:
21:40:f4:84:33:e9:2d:5e:27:fb:be:f1:5d:84:bb:
7a:1a:e8:d4:26:7a:49:f9:9a:e5:b1:95:b6:e6:87:
61:b5:d1:ec:33:00:0a:b0:3b:e0:14:df:b3:78:bd:
01:d6:90:99:c6:a1:fd:70:a6:05:6e:b3:25:c5:e3:
14:bf:c4:1d:19:03:7c:17:03:71:e1:e7:54:46:44:
c3:70:c7:08:ec:5a:01:e0:1a:16:0f:e4:a4:93:9d:
c1:b5:95:e5:9a:6b:a9:f2:f6:11:8a:de:eb:e9:eb:
c3:c5:dc:01:f8:e6:83:dc:3e:b7:a1:6f:bb:7c:fe:
58:15:da:be:83:d2:03:74:64:0f:fe:cb:7a:d0:03:
fc:d6:7d:fe:6d:56:0a:24:47:91:a9:71:d2:00:dd:
22:fc:b4:34:f4:88:1a:28:72:3c:04:b2:81:2f:14:
91:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:93:3B:E2:5D:55:89:2E:3F:76:38:F6:DA:22:6B:17:9D:94:87:CF
X509v3 Authority Key Identifier:
keyid:D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ad:4f:d1:9f:61:f5:92:2b:39:2d:c2:b3:ee:6e:3c:45:ad:
74:1f:af:21:74:2c:8e:74:50:11:d5:25:22:11:de:09:47:41:
0e:54:94:f1:cb:36:0b:94:ad:31:ac:58:3f:52:95:af:7a:85:
d0:74:01:5d:cf:68:39:b0:1c:4e:fa:62:58:8b:08:ae:8a:ad:
03:a5:4d:ea:67:a0:51:ba:31:29:b4:9a:9d:1a:e1:1b:a8:c7:
c6:ad:1f:d9:84:a5:01:e3:ef:4a:c5:53:2b:68:46:81:45:a5:
ab:3e:16:6d:c8:c0:57:51:05:c6:31:53:6b:36:f2:95:1e:57:
c1:60:6c:41:43:26:83:de:5a:b6:8b:4c:c2:90:1a:a8:bd:36:
16:31:5c:b9:48:1b:50:4e:ac:b5:5d:fd:f9:ce:e2:06:49:b2:
9b:96:b4:49:89:03:46:53:2e:5b:fa:c9:62:31:73:b2:da:b7:
20:f8:c9:ec:b4:f3:e8:09:04:c0:9d:14:bc:31:31:04:8e:90:
22:c3:7e:25:14:66:ee:15:c8:82:c9:59:60:af:d3:e6:68:d7:
f8:7b:dd:46:de:d5:98:b3:20:cd:2c:b8:1a:50:5b:fe:1f:f8:
bd:1c:5d:dd:72:ea:de:1a:2a:6e:49:ec:3d:25:18:24:28:16:
0f:47:05:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dni5AttrT8iLqjg4kctbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMWE1OTQwNzIyYjIwN2IyOWQ5NWE2YzgxYmUwZDJiZjRk
NDEwY2MwHhcNMjUwNjI4MTUwMTA4WhcNMjUwNjI5MTUwMTA4WjAzMTEwLwYDVQQD
EyhhMDkzM2JlMjVkNTU4OTJlM2Y3NjM4ZjZkYTIyNmIxNzlkOTQ4N2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8Z4dU5GB2ljjp+taa72jTUxcWev
JRET50ryjmk1jjocGXAfYeh7KnKf+VOTdtdmNahotV4vacBPz9smHm5AADmjramC
Y4XvUMvrGWBQUJ5HaF8EbHgR4nEhQPSEM+ktXif7vvFdhLt6GujUJnpJ+ZrlsZW2
5odhtdHsMwAKsDvgFN+zeL0B1pCZxqH9cKYFbrMlxeMUv8QdGQN8FwNx4edURkTD
cMcI7FoB4BoWD+Skk53BtZXlmmup8vYRit7r6evDxdwB+OaD3D63oW+7fP5YFdq+
g9IDdGQP/st60AP81n3+bVYKJEeRqXHSAN0i/LQ09IgaKHI8BLKBLxSR3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCTO+JdVYkuP3Y49toiaxedlIfPMB8GA1UdIwQY
MBaAFNIaWUByKyB7KdlabIG+DSv01BDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhwWlFISXJJSHNwMlZwc2diNE5LX1RVRU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81NjQzM2EtMGE3MC00ZWFlLTlmOWQt
OGNmYmRiNzk5Mjg0LzEvMGhwWlFISXJJSHNwMlZwc2diNE5LX1RVRU13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81NjQzM2EtMGE3MC00ZWFlLTlmOWQtOGNmYmRiNzk5Mjg0
LzEvMGhwWlFISXJJSHNwMlZwc2diNE5LX1RVRU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn61P0Z9h
9ZIrOS3Cs+5uPEWtdB+vIXQsjnRQEdUlIhHeCUdBDlSU8cs2C5StMaxYP1KVr3qF
0HQBXc9oObAcTvpiWIsIroqtA6VN6megUboxKbSanRrhG6jHxq0f2YSlAePvSsVT
K2hGgUWlqz4WbcjAV1EFxjFTazbylR5XwWBsQUMmg95atotMwpAaqL02FjFcuUgb
UE6stV39+c7iBkmym5a0SYkDRlMuW/rJYjFzstq3IPjJ7LTz6AkEwJ0UvDExBI6Q
IsN+JRRm7hXIgslZYK/T5mjX+HvdRt7VmLMgzSy4GlBb/h/4vRxd3XLq3hoqbkns
PSUYJCgWD0cFww==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:36 2025 by rpki-client