Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
File: hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json)
Hash identifier: NEaah0ACcOUi6llsYGN8gWxc5o2R1o58kWIg0mPWo2A=
Subject key identifier: E7:51:F8:3D:BB:71:58:B1:7F:40:B6:F5:21:C7:81:B2:1D:1C:46:B6
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 0197B82126E235AEEAEB6F021E04A91A4DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
Manifest number: 07C9
Signing time: Sat 28 Jun 2025 20:01:09 +0000
Manifest this update: Sat 28 Jun 2025 20:01:09 +0000
Manifest next update: Sun 29 Jun 2025 20:01:09 +0000
Files and hashes: 1: GrVfgYYa0s5gLsRQp5P5vAQeHlE.roa (hash: Twu1XyErZ1bzBOtE8/HK3XbggJvMpOYaRXT376BODWE=)
2: XUIGCJfhGsoP5FdVAQmT9lUNYuc.roa (hash: hjmwDLHRKf4c787nov0R6bRVLxtqmM1uwueYf+NK6fU=)
3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: q/c43ImMRb/o1h0ZqToQWf2T1JSSD7sxPW8f51LnSpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:26:e2:35:ae:ea:eb:6f:02:1e:04:a9:1a:4d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: Jun 28 20:01:09 2025 GMT
Not After : Jun 29 20:01:09 2025 GMT
Subject: CN=e751f83dbb7158b17f40b6f521c781b21d1c46b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:9d:8a:03:67:52:a4:4b:4e:42:3a:55:43:
aa:6d:39:5e:1a:20:95:07:d3:f5:67:37:68:da:2f:
3e:a4:1f:20:75:b7:fb:46:a7:de:a8:97:ff:e1:7e:
6c:d6:55:d1:1b:60:2a:85:a0:cb:23:7a:39:9f:42:
70:60:1c:31:64:aa:42:0d:6b:26:7e:e3:1b:71:34:
04:41:52:be:f4:72:6a:c2:a2:b6:65:6d:37:e3:54:
d1:4d:e8:99:22:0c:58:eb:08:7c:b3:3a:5c:6a:83:
ea:97:df:d2:73:47:49:92:04:2b:6c:7f:d1:a5:84:
08:2b:5d:28:3c:5e:72:dd:df:2e:c5:89:ba:1a:6f:
73:3e:b7:02:b6:ef:fc:6e:ba:e2:a3:57:91:15:d7:
b2:17:86:7a:ca:c2:dc:ad:bf:28:83:98:6d:70:e6:
29:e0:a1:b0:c2:9f:77:78:e3:3d:65:a3:2a:46:f9:
f1:7a:20:b7:8b:fa:ee:f1:0f:8b:d2:32:c0:03:60:
98:4b:b2:6b:15:0e:7e:54:10:95:21:02:e1:da:73:
51:f6:55:a0:bc:97:93:eb:71:f7:ad:fe:b8:c8:a4:
cb:70:89:1c:aa:f3:89:5a:e4:70:e8:14:26:87:6d:
2e:d0:dd:aa:a2:c5:a2:8b:a2:11:d9:e4:0b:f6:6d:
b4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:51:F8:3D:BB:71:58:B1:7F:40:B6:F5:21:C7:81:B2:1D:1C:46:B6
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:88:ea:aa:ba:c0:2d:b8:4a:17:09:c4:d0:6a:2b:6e:51:5a:
cf:0f:34:6e:a2:bc:f4:d6:53:34:19:8f:4b:1f:00:92:97:65:
ac:a3:97:0c:2e:73:87:76:54:18:02:6a:45:c7:25:2d:10:2f:
f9:8f:b5:07:b5:bb:52:fd:9f:2e:92:57:e0:5d:5f:96:70:9a:
b3:6e:a2:47:c6:61:a4:fc:2d:a0:2d:ac:78:9a:29:38:a5:83:
8e:74:35:72:6c:2f:64:a7:0d:13:ae:4b:00:67:3d:23:6f:33:
3e:d2:c5:35:cf:7d:5f:fc:5a:25:a2:ab:eb:6d:11:20:ab:ac:
6e:56:3e:9a:73:6d:45:b2:52:0f:8a:29:36:83:cb:14:bb:95:
36:8c:f1:d0:05:ce:9c:80:35:da:82:5c:0a:b9:d8:e6:76:2a:
6b:60:c2:69:92:6b:37:a8:97:0d:75:2e:58:d5:fe:f2:aa:8a:
ff:0f:c5:21:a6:a0:5f:67:fa:86:38:aa:0e:81:29:3c:1c:e9:
b0:ca:e5:85:c1:3e:12:7b:7b:91:dd:48:91:12:6c:4c:3e:39:
a4:31:d1:5a:6e:14:1b:ea:7c:19:83:02:f8:a3:28:fe:3b:01:
c2:f8:2d:62:1a:85:55:86:80:ce:74:d2:03:44:c9:95:dc:02:
d4:49:f7:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4ISbiNa7q628CHgSpGk3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MjBiNzdkMDM1YjkxMmZmYTQwNmRmZGRmMjllM2EyOTYz
ZTY5MDQwHhcNMjUwNjI4MjAwMTA5WhcNMjUwNjI5MjAwMTA5WjAzMTEwLwYDVQQD
EyhlNzUxZjgzZGJiNzE1OGIxN2Y0MGI2ZjUyMWM3ODFiMjFkMWM0NmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutqdigNnUqRLTkI6VUOqbTleGiCV
B9P1Zzdo2i8+pB8gdbf7RqfeqJf/4X5s1lXRG2AqhaDLI3o5n0JwYBwxZKpCDWsm
fuMbcTQEQVK+9HJqwqK2ZW0341TRTeiZIgxY6wh8szpcaoPql9/Sc0dJkgQrbH/R
pYQIK10oPF5y3d8uxYm6Gm9zPrcCtu/8brrio1eRFdeyF4Z6ysLcrb8og5htcOYp
4KGwwp93eOM9ZaMqRvnxeiC3i/ru8Q+L0jLAA2CYS7JrFQ5+VBCVIQLh2nNR9lWg
vJeT63H3rf64yKTLcIkcqvOJWuRw6BQmh20u0N2qosWii6IR2eQL9m203QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdR+D27cVixf0C29SHHgbIdHEa2MB8GA1UdIwQY
MBaAFIUgt30DW5Ev+kBt/d8p46KWPmkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mMDQ2ODYtMzU5Yi00NzQ0LWI5MzAt
MWFmMjc5NjI1ZmQwLzEvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mMDQ2ODYtMzU5Yi00NzQ0LWI5MzAtMWFmMjc5NjI1ZmQw
LzEvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs4jqqrrA
LbhKFwnE0GorblFazw80bqK89NZTNBmPSx8AkpdlrKOXDC5zh3ZUGAJqRcclLRAv
+Y+1B7W7Uv2fLpJX4F1flnCas26iR8ZhpPwtoC2seJopOKWDjnQ1cmwvZKcNE65L
AGc9I28zPtLFNc99X/xaJaKr620RIKusblY+mnNtRbJSD4opNoPLFLuVNozx0AXO
nIA12oJcCrnY5nYqa2DCaZJrN6iXDXUuWNX+8qqK/w/FIaagX2f6hjiqDoEpPBzp
sMrlhcE+Ent7kd1IkRJsTD45pDHRWm4UG+p8GYMC+KMo/jsBwvgtYhqFVYaAznTS
A0TJldwC1En3MQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:48 2025 by rpki-client