Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: pObAM3HsN+97YFYXnRXymyvvR6/jdGwpy0no4EwEUmU=
Subject key identifier: D8:1A:BE:FA:34:7F:ED:38:81:96:9D:CC:FC:1C:37:3D:FC:C3:F6:45
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 0197B6D74AC64C3648A3BFBAE204D230D808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 0A0E
Signing time: Sat 28 Jun 2025 14:00:51 +0000
Manifest this update: Sat 28 Jun 2025 14:00:51 +0000
Manifest next update: Sun 29 Jun 2025 14:00:51 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: 18wEhMmaD584tonwaaaTZmbFruTOgtjMdcFq0KW/FsU=)
2: oNzr7e9N0_nB7NG8uVVH1YFW8SA.roa (hash: E5UVvjB7YIozDhZ03PLtgPckm/pTCCT/ml1aJ8kENsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4a:c6:4c:36:48:a3:bf:ba:e2:04:d2:30:d8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Jun 28 14:00:51 2025 GMT
Not After : Jun 29 14:00:51 2025 GMT
Subject: CN=d81abefa347fed3881969dccfc1c373dfcc3f645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c7:52:ec:7d:f9:49:c5:a4:fe:d4:d2:76:ca:
4a:d7:44:df:c2:5e:42:1a:3b:e7:85:fa:90:29:b2:
35:c8:93:d2:35:32:b6:dd:b9:ad:35:3e:1a:2b:ed:
15:6c:ca:a9:cc:63:58:60:0e:cf:c2:6b:d6:22:e3:
e9:7e:76:69:14:49:d8:90:fb:16:e4:43:9d:f8:82:
58:b0:a4:b9:c2:50:d0:3d:0c:b6:b3:52:6d:cb:99:
32:6e:0c:f0:e7:f0:8d:a6:11:ad:b3:06:7d:e0:e8:
4d:c1:68:30:8a:92:75:9b:87:2e:9e:d8:e6:77:a6:
04:cc:a9:a1:ee:ae:64:c0:a4:0c:6f:e0:da:72:0b:
7b:bd:b3:38:93:38:35:a3:42:d2:84:39:39:d3:93:
1e:bc:af:82:3c:f0:33:de:6d:42:62:ff:34:22:a6:
1e:a6:47:fb:6f:e6:2a:47:fa:5c:48:24:0a:72:10:
81:3c:d8:dc:2a:15:9a:3c:13:14:30:d0:4f:29:dd:
11:7d:a0:8a:7e:02:0c:11:df:1c:dd:b3:e5:42:06:
6e:06:4f:a0:ee:ee:df:e9:66:71:39:3c:06:fe:9a:
c1:03:82:ef:37:57:20:1b:e1:1b:7e:36:9f:d9:67:
46:31:6b:24:33:b8:07:69:6d:33:e7:90:a5:73:84:
1f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1A:BE:FA:34:7F:ED:38:81:96:9D:CC:FC:1C:37:3D:FC:C3:F6:45
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:33:d2:71:da:ea:3b:a3:01:47:2c:02:c9:07:2d:33:a2:c9:
9b:29:98:35:c1:b3:3d:ca:4b:d8:a1:8f:25:27:ab:0e:e0:5e:
04:21:e6:a0:0a:91:bd:d4:00:41:af:36:0d:b9:68:de:5e:c0:
78:ce:52:a0:75:d8:c9:2e:ee:ec:d6:e3:2e:b7:49:f2:46:31:
bd:f6:20:b0:74:f9:bf:f2:5b:be:01:30:21:22:43:d6:25:5f:
c0:0d:5a:94:c5:9a:23:d7:05:36:23:28:af:53:f2:1c:48:8e:
f5:43:1d:7b:66:e7:5f:30:1e:9e:d7:27:d6:01:44:6f:2a:20:
eb:ce:ae:35:6f:9e:f2:d1:62:b5:37:12:f4:28:8e:73:15:ab:
9c:3b:e8:6f:a2:a9:bb:be:97:c8:a2:7b:a8:da:06:5e:77:40:
5e:a1:9f:b7:dd:5f:15:5a:10:0e:72:70:ba:e6:69:4f:0a:a4:
c6:24:66:d0:d3:2a:94:91:af:36:32:04:37:d9:b3:03:c1:c9:
5c:b7:1f:44:5c:8a:93:fa:60:5b:b2:8f:b8:2b:00:d7:cb:c2:
8a:66:d0:31:b3:fe:df:60:96:1d:e2:54:30:fd:a7:03:98:27:
41:0d:9e:8b:30:6c:29:0b:5e:f7:9a:1d:74:19:19:c3:97:f4:
77:93:52:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe210rGTDZIo7+64gTSMNgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzFjZTIwODY4MDVmOTEyZjg1MTJiNzljNWU2NmE5Yzlm
NGQ0ZDIwHhcNMjUwNjI4MTQwMDUxWhcNMjUwNjI5MTQwMDUxWjAzMTEwLwYDVQQD
EyhkODFhYmVmYTM0N2ZlZDM4ODE5NjlkY2NmYzFjMzczZGZjYzNmNjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MdS7H35ScWk/tTSdspK10Tfwl5C
GjvnhfqQKbI1yJPSNTK23bmtNT4aK+0VbMqpzGNYYA7PwmvWIuPpfnZpFEnYkPsW
5EOd+IJYsKS5wlDQPQy2s1Jty5kybgzw5/CNphGtswZ94OhNwWgwipJ1m4cuntjm
d6YEzKmh7q5kwKQMb+Dacgt7vbM4kzg1o0LShDk505MevK+CPPAz3m1CYv80IqYe
pkf7b+YqR/pcSCQKchCBPNjcKhWaPBMUMNBPKd0RfaCKfgIMEd8c3bPlQgZuBk+g
7u7f6WZxOTwG/prBA4LvN1cgG+Ebfjaf2WdGMWskM7gHaW0z55Clc4Qf9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgavvo0f+04gZadzPwcNz38w/ZFMB8GA1UdIwQY
MBaAFONxziCGgF+RL4USt5xeZqnJ9NTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82ZGJkYWYtNTQ5NS00Y2M1LWI3NzAt
NzM1OTBhYTI5MGYxLzEvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82ZGJkYWYtNTQ5NS00Y2M1LWI3NzAtNzM1OTBhYTI5MGYx
LzEvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTPScdrq
O6MBRywCyQctM6LJmymYNcGzPcpL2KGPJSerDuBeBCHmoAqRvdQAQa82Dblo3l7A
eM5SoHXYyS7u7NbjLrdJ8kYxvfYgsHT5v/JbvgEwISJD1iVfwA1alMWaI9cFNiMo
r1PyHEiO9UMde2bnXzAentcn1gFEbyog686uNW+e8tFitTcS9CiOcxWrnDvob6Kp
u76XyKJ7qNoGXndAXqGft91fFVoQDnJwuuZpTwqkxiRm0NMqlJGvNjIEN9mzA8HJ
XLcfRFyKk/pgW7KPuCsA18vCimbQMbP+32CWHeJUMP2nA5gnQQ2eizBsKQte95od
dBkZw5f0d5NSdg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:42 2025 by rpki-client