Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json)
Hash identifier: suG3LgpQ7eTLbhPptWPKT4n7sq9hVuj+QDXH1XqLPS4=
Subject key identifier: 06:1E:48:B2:4C:4A:A9:E5:FF:69:8A:87:EA:41:70:52:0C:9D:CE:18
Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Certificate serial: 0197B9A1E67ADA1B4652F019D020CC4F462F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
Manifest number: 0818
Signing time: Sun 29 Jun 2025 03:01:24 +0000
Manifest this update: Sun 29 Jun 2025 03:01:24 +0000
Manifest next update: Mon 30 Jun 2025 03:01:24 +0000
Files and hashes: 1: ET2huy81m3aucqPbuMYcz_TF2tw.roa (hash: E/ipcayMB6DPjVGiBr8hCFyBMlmTehPjlv7rgttgSjU=)
2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: mRS7yEwzQm/xYiXuVQYYeCY1T+XI0EP3LC1xyHkoX2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:e6:7a:da:1b:46:52:f0:19:d0:20:cc:4f:46:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Validity
Not Before: Jun 29 03:01:24 2025 GMT
Not After : Jun 30 03:01:24 2025 GMT
Subject: CN=061e48b24c4aa9e5ff698a87ea4170520c9dce18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:4c:27:ca:17:ea:bb:ad:76:f5:76:47:7e:
a0:be:e3:e3:31:b1:cd:f7:40:dd:9f:0f:c1:66:c0:
66:a0:cc:28:2d:76:cc:a9:7e:e1:e3:80:41:06:95:
de:54:88:44:7f:a0:45:0b:59:0b:d6:84:d7:7c:3b:
45:bb:b0:76:55:3b:ed:e0:f7:58:ba:a4:42:cf:d7:
aa:62:ae:8d:db:54:82:ff:bd:2d:2d:93:7d:78:f3:
bc:47:75:cf:d6:5c:ff:f2:59:97:ff:30:c8:5d:fa:
23:2f:a0:7f:e1:f2:a4:7b:fa:c3:2a:2c:48:1a:ba:
df:f0:9b:9c:56:ff:52:5a:70:74:72:c3:54:81:08:
83:08:35:dc:b3:a6:3a:a6:c2:ed:64:82:42:82:5c:
83:01:6a:3f:86:f6:81:6a:d3:52:76:4f:b3:8b:7c:
87:25:ec:32:f3:ca:bd:34:f7:db:0b:bd:3c:63:97:
63:6c:a4:bc:0f:8f:05:96:ef:15:42:57:33:bd:21:
64:c6:9f:cd:be:fc:34:31:2a:b0:ef:35:63:54:a6:
81:9f:90:fe:a7:46:c5:c6:ad:fa:86:5f:7d:9e:f5:
80:c6:da:52:56:47:a0:c9:13:2c:e9:80:37:4b:19:
f6:17:99:bd:d6:f3:56:9d:a6:db:44:ed:dd:df:1f:
b3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1E:48:B2:4C:4A:A9:E5:FF:69:8A:87:EA:41:70:52:0C:9D:CE:18
X509v3 Authority Key Identifier:
keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b2:89:c7:ea:cf:6a:39:85:59:9c:50:39:e2:ac:42:d1:9e:
eb:8a:fd:70:32:d6:ac:eb:8c:2e:e8:35:78:3a:47:cc:f9:66:
a6:7a:07:c5:2a:be:06:11:20:b5:96:01:fd:81:12:01:10:2e:
10:3e:16:a5:cd:d7:2b:51:14:32:31:75:3d:be:f9:40:c5:90:
36:b9:55:9a:35:cb:1b:f5:09:02:73:39:1c:b1:db:7d:6f:75:
01:2c:24:d9:a0:d8:71:9e:5d:75:c3:cf:94:50:bc:48:1b:cc:
c7:8e:5e:4c:fa:5e:20:00:20:ed:d7:88:f1:f9:fd:44:6e:7a:
20:54:12:79:45:4a:de:5d:de:ff:12:1b:bd:48:52:84:c5:b7:
94:d3:8b:a3:26:93:0b:2b:fa:7e:7b:51:44:30:f4:f6:cd:71:
1d:dc:3b:71:b4:69:82:93:ab:75:9e:2b:3a:7e:86:eb:65:f9:
b8:33:38:cc:f1:78:68:2f:07:fa:b6:b7:9b:b4:9d:49:4d:a9:
4f:26:df:e5:5a:02:91:3a:70:c6:59:f1:31:33:cf:16:1d:c0:
04:02:37:c7:8d:5a:9c:2f:df:b2:9d:5d:79:79:0f:ee:d8:9a:
20:96:2e:f9:2f:68:96:d9:01:ce:a7:7c:40:19:a5:98:47:b7:
cb:40:24:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5oeZ62htGUvAZ0CDMT0YvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTFlODNkYWUxMmEzNzFjMWRkNDlkYjM0ZDliZDUyYTk2
ODhiNGEwHhcNMjUwNjI5MDMwMTI0WhcNMjUwNjMwMDMwMTI0WjAzMTEwLwYDVQQD
EygwNjFlNDhiMjRjNGFhOWU1ZmY2OThhODdlYTQxNzA1MjBjOWRjZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKJMJ8oX6rutdvV2R36gvuPjMbHN
90Ddnw/BZsBmoMwoLXbMqX7h44BBBpXeVIhEf6BFC1kL1oTXfDtFu7B2VTvt4PdY
uqRCz9eqYq6N21SC/70tLZN9ePO8R3XP1lz/8lmX/zDIXfojL6B/4fKke/rDKixI
Grrf8JucVv9SWnB0csNUgQiDCDXcs6Y6psLtZIJCglyDAWo/hvaBatNSdk+zi3yH
Jewy88q9NPfbC708Y5djbKS8D48Flu8VQlczvSFkxp/Nvvw0MSqw7zVjVKaBn5D+
p0bFxq36hl99nvWAxtpSVkegyRMs6YA3Sxn2F5m91vNWnabbRO3d3x+z6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYeSLJMSqnl/2mKh+pBcFIMnc4YMB8GA1UdIwQY
MBaAFERR6D2uEqNxwd1J2zTZvVKpaItKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZIb1BhNFNvM0hCM1VuYk5ObTlVcWxvaTBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kZDhmNzEtMmIzNi00ZmI3LWIyZDUt
Zjk5N2RiZGMzZTU3LzEvUkZIb1BhNFNvM0hCM1VuYk5ObTlVcWxvaTBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9kZDhmNzEtMmIzNi00ZmI3LWIyZDUtZjk5N2RiZGMzZTU3
LzEvUkZIb1BhNFNvM0hCM1VuYk5ObTlVcWxvaTBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLKJx+rP
ajmFWZxQOeKsQtGe64r9cDLWrOuMLug1eDpHzPlmpnoHxSq+BhEgtZYB/YESARAu
ED4Wpc3XK1EUMjF1Pb75QMWQNrlVmjXLG/UJAnM5HLHbfW91ASwk2aDYcZ5ddcPP
lFC8SBvMx45eTPpeIAAg7deI8fn9RG56IFQSeUVK3l3e/xIbvUhShMW3lNOLoyaT
Cyv6fntRRDD09s1xHdw7cbRpgpOrdZ4rOn6G62X5uDM4zPF4aC8H+ra3m7SdSU2p
Tybf5VoCkTpwxlnxMTPPFh3ABAI3x41anC/fsp1deXkP7tiaIJYu+S9oltkBzqd8
QBmlmEe3y0Ak+g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:07:37 2025 by rpki-client