Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
File: Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft (raw, json)
Hash identifier: lDgduGKDJw3HrVXFztZlpRJvkcVcVcXDkNa8UxoyU3M=
Subject key identifier: 0B:04:5F:ED:43:EB:64:D7:C7:91:5A:DE:4B:5F:1F:4E:19:41:CD:F0
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 0197B7B380AFCD4727814F69C68012CF7975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 18:01:23 +0000
Manifest this update: Sat 28 Jun 2025 18:01:23 +0000
Manifest next update: Sun 29 Jun 2025 18:01:23 +0000
Files and hashes: 1: BXSG7yvBfzfSNaMTJpttdMTmSwI.roa (hash: 1RyXuzT18l9m34jhodBKLjc26bjq4on+qltizIR39go=)
2: Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl (hash: fo8iFmRN2QHDibgKDbsB5GuJ92IgGSCjzGHQGJ9hjc8=)
3: ziWItZyxi3pgc4xhCv8AY_ye8qQ.roa (hash: SUXoNw7/XslPVf+LyLnG1Yvy88uBm5yyDGjaK5XKEjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:80:af:cd:47:27:81:4f:69:c6:80:12:cf:79:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Jun 28 18:01:23 2025 GMT
Not After : Jun 29 18:01:23 2025 GMT
Subject: CN=0b045fed43eb64d7c7915ade4b5f1f4e1941cdf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:26:40:89:31:39:84:ad:a2:4b:1b:4f:38:
bd:0a:75:b2:0f:9d:4f:42:9d:a5:71:02:28:71:e0:
7c:54:0a:d2:37:99:8d:47:dd:e5:e7:ce:46:4b:49:
c2:a4:80:f0:69:0a:41:d9:cd:40:c2:29:c4:f8:53:
eb:72:d6:8b:74:05:d0:0a:8a:61:d0:0e:4a:a9:d2:
4b:29:f1:8d:66:0a:25:04:9d:59:08:51:79:ac:02:
5b:95:70:9c:06:8e:11:0b:10:3d:8c:3f:bd:34:5d:
d9:a1:e1:83:07:32:77:29:74:0f:ad:e1:21:30:f2:
88:80:3a:6f:5c:19:52:d3:ac:3e:50:fe:54:62:c3:
bf:7c:50:a4:62:3b:2a:cf:8a:3b:5c:f7:0c:64:0e:
42:04:4f:54:3a:73:a7:79:ae:70:8d:9c:8f:b5:bd:
2f:5a:4a:bd:27:0a:74:d2:6c:64:4d:d4:b6:48:eb:
a3:35:17:73:c1:f7:f2:1a:4d:c7:f3:09:4b:69:cb:
d1:c8:49:19:36:36:90:2b:62:bf:fd:bc:a1:df:e1:
5f:33:a1:76:57:41:46:4a:2c:92:d2:29:af:44:7a:
47:f3:c1:61:25:52:c2:28:c2:28:b9:6a:90:e9:98:
d4:60:57:28:96:84:0f:b4:dd:3a:63:6a:ec:d6:be:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:04:5F:ED:43:EB:64:D7:C7:91:5A:DE:4B:5F:1F:4E:19:41:CD:F0
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:88:64:54:40:36:a0:45:21:01:7d:44:c5:77:aa:5e:16:f4:
42:f8:43:05:e3:74:92:a4:c5:50:91:79:87:23:06:30:81:eb:
9a:e1:ff:ff:eb:a9:9b:51:e6:d5:04:c5:87:7f:c6:29:0f:e9:
88:8b:52:15:6d:09:b0:6d:0f:d7:33:7b:96:7b:6b:65:23:78:
27:2c:28:c8:41:7f:c2:00:01:91:3b:6c:96:f6:39:c8:33:a2:
02:26:62:a1:63:67:c5:df:9a:6f:33:1b:15:98:4c:b0:1e:cb:
fa:71:dd:07:99:88:6d:be:d6:d1:58:da:c3:8c:10:d1:63:f0:
b5:0d:68:db:42:63:64:e1:27:b6:fb:eb:b8:70:23:e5:ec:08:
52:3d:40:ab:ad:d0:2e:a7:20:9f:a5:ab:4b:45:da:f1:fa:ed:
b3:f1:5f:aa:d5:e4:d5:96:4d:82:22:28:f9:ca:96:da:a6:31:
95:e5:33:83:18:c4:79:be:c3:3d:9e:93:73:d1:5d:59:99:e4:
c1:be:f4:a4:6b:61:51:f1:2f:ca:05:d3:b2:fb:29:ee:83:b1:
1e:05:d0:6a:32:9c:66:ec:24:a7:c1:f0:60:40:aa:b9:df:5c:
a4:2c:43:f8:f2:ce:56:7a:ad:37:4d:c9:2a:91:8f:c4:86:c0:
f4:89:1a:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s4CvzUcngU9pxoASz3l1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMGU0ZDJkYmRlOTg2ZmRjMjViZjNiZjc1NjM3ODUyZGE4
N2FiZjEwHhcNMjUwNjI4MTgwMTIzWhcNMjUwNjI5MTgwMTIzWjAzMTEwLwYDVQQD
EygwYjA0NWZlZDQzZWI2NGQ3Yzc5MTVhZGU0YjVmMWY0ZTE5NDFjZGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxUmQIkxOYStoksbTzi9CnWyD51P
Qp2lcQIoceB8VArSN5mNR93l585GS0nCpIDwaQpB2c1AwinE+FPrctaLdAXQCoph
0A5KqdJLKfGNZgolBJ1ZCFF5rAJblXCcBo4RCxA9jD+9NF3ZoeGDBzJ3KXQPreEh
MPKIgDpvXBlS06w+UP5UYsO/fFCkYjsqz4o7XPcMZA5CBE9UOnOnea5wjZyPtb0v
Wkq9Jwp00mxkTdS2SOujNRdzwffyGk3H8wlLacvRyEkZNjaQK2K//byh3+FfM6F2
V0FGSiyS0imvRHpH88FhJVLCKMIouWqQ6ZjUYFcoloQPtN06Y2rs1r5QMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsEX+1D62TXx5Fa3ktfH04ZQc3wMB8GA1UdIwQY
MBaAFB4OTS296Yb9wlvzv3VjeFLah6vxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGc1TkxiM3BodjNDV19PX2RXTjRVdHFIcV9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jOWUxMTUtMTIzNi00ZmRhLWEwMzMt
OTllZWExZjBhMzU0LzEvSGc1TkxiM3BodjNDV19PX2RXTjRVdHFIcV9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jOWUxMTUtMTIzNi00ZmRhLWEwMzMtOTllZWExZjBhMzU0
LzEvSGc1TkxiM3BodjNDV19PX2RXTjRVdHFIcV9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKohkVEA2
oEUhAX1ExXeqXhb0QvhDBeN0kqTFUJF5hyMGMIHrmuH//+upm1Hm1QTFh3/GKQ/p
iItSFW0JsG0P1zN7lntrZSN4JywoyEF/wgABkTtslvY5yDOiAiZioWNnxd+abzMb
FZhMsB7L+nHdB5mIbb7W0Vjaw4wQ0WPwtQ1o20JjZOEntvvruHAj5ewIUj1Aq63Q
Lqcgn6WrS0Xa8frts/FfqtXk1ZZNgiIo+cqW2qYxleUzgxjEeb7DPZ6Tc9FdWZnk
wb70pGthUfEvygXTsvsp7oOxHgXQajKcZuwkp8HwYECqud9cpCxD+PLOVnqtN03J
KpGPxIbA9IkaHg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:25 2025 by rpki-client