Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier: P4qMmIJAAoZyaUz2TNc96JCCls+MihR6pSHB8V2BkP4=
Subject key identifier: 55:A4:CE:55:51:F1:E0:76:0A:22:84:4F:6A:78:99:86:F8:F9:89:38
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial: 0197B74563CE581AC1A6F1B662D9DE6B5835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number: 06DD
Signing time: Sat 28 Jun 2025 16:01:07 +0000
Manifest this update: Sat 28 Jun 2025 16:01:07 +0000
Manifest next update: Sun 29 Jun 2025 16:01:07 +0000
Files and hashes: 1: 00q_V9fiuxK8x1J5dDf6heEWqpM.roa (hash: XdV8RV4SCz2Bjb29weutw1xlx9C6MC3WoiwiAcbHJHU=)
2: 0DRjjmcZlOUPV43RadORGLY5fAU.roa (hash: OsLSdbKdwCfPfb6fa3q09CVq+CXKI7ScoH/tLbYmOyY=)
3: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: LTs3+CmDogKIup62JWAdUiSI1N4YI9pT+avX/ibO3QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:63:ce:58:1a:c1:a6:f1:b6:62:d9:de:6b:58:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Validity
Not Before: Jun 28 16:01:07 2025 GMT
Not After : Jun 29 16:01:07 2025 GMT
Subject: CN=55a4ce5551f1e0760a22844f6a789986f8f98938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:2e:99:b4:aa:70:a5:e7:57:75:bc:88:da:
4f:2b:8e:5f:e3:fa:9b:8b:2c:a9:c9:8c:77:95:00:
73:56:60:f9:36:ed:d7:81:57:a0:f3:c4:e8:11:b9:
5d:86:b1:8e:30:8a:6f:2b:d6:f0:da:f5:22:f7:df:
d3:3f:42:82:4d:49:4e:18:2b:5d:1d:7d:67:1e:e3:
77:c9:2f:c2:f6:63:32:83:0b:ca:9c:f3:6d:69:45:
d9:8a:dc:bd:0b:59:0c:2e:02:af:44:e6:ab:a5:75:
ca:8a:74:7c:cd:6e:4f:4c:d0:48:ad:ef:81:27:1f:
76:31:12:42:a8:8a:49:75:a3:7f:bf:1b:06:37:d0:
70:f7:36:9c:a0:e0:06:37:ca:16:01:ec:0a:68:5b:
f7:f3:03:ff:d5:21:ac:87:ef:a7:22:ef:cd:0f:05:
cf:ba:0d:51:61:53:96:6a:b4:ff:33:93:5c:48:68:
76:7f:6a:29:b4:29:bf:54:ca:dc:ad:3a:ba:46:f4:
68:55:f0:02:e7:2e:c0:3d:7a:ce:b0:78:78:a9:61:
ce:3b:43:be:7e:53:08:3b:35:dd:52:8e:52:62:40:
ab:93:fc:a8:03:c1:e1:67:8a:49:3c:17:11:12:51:
25:3f:5f:ed:9e:87:30:86:d1:67:0f:a5:b1:a9:1b:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A4:CE:55:51:F1:E0:76:0A:22:84:4F:6A:78:99:86:F8:F9:89:38
X509v3 Authority Key Identifier:
keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b0:6f:b2:7f:b6:47:da:c4:a0:8a:17:23:c0:38:b8:59:7b:
f7:e0:cf:7d:9f:25:25:53:10:c3:bf:69:bc:3f:b2:e6:9b:29:
33:ac:80:0b:a1:3a:87:78:d9:73:a7:c4:ca:93:c5:aa:b4:0f:
5e:d1:40:46:e7:80:54:12:22:dc:bd:1f:3a:1b:6d:f0:c3:08:
55:07:d9:b2:79:40:00:72:b7:b9:b3:e9:4e:48:d4:82:d5:d1:
8b:cc:f7:c6:38:6f:d6:8c:98:8c:32:db:14:5d:42:9d:f4:9b:
d5:8f:ed:6a:30:65:a6:36:78:da:72:7d:5f:2d:e6:e0:cd:6a:
49:18:32:ef:56:29:93:ff:56:bf:36:db:0b:b8:ae:b0:dd:38:
c9:b7:2c:9f:78:d7:eb:41:25:9d:cb:b0:ab:d4:c8:52:88:f1:
d4:8d:20:34:e3:8f:7b:d2:4c:93:ec:fb:27:16:2c:50:b6:ce:
01:7a:b3:2b:5e:e7:62:72:c6:76:97:5d:21:c9:b0:e9:92:93:
d2:c2:1c:92:81:13:fe:1f:7b:cf:fc:f0:7f:08:d3:6e:50:dc:
78:87:02:16:51:9c:df:69:66:40:7d:38:39:11:2f:56:d0:e4:
19:d3:b1:98:28:ae:77:ed:36:6a:d2:f8:6c:17:37:7d:86:d1:
1c:2e:af:52
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe3RWPOWBrBpvG2Ytnea1g1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMWIyNDc4ZGZlMGYzM2EyNzhiMTNmNDJkZDMxOTYwMWQ2
Mzc4YTgwHhcNMjUwNjI4MTYwMTA3WhcNMjUwNjI5MTYwMTA3WjAzMTEwLwYDVQQD
Eyg1NWE0Y2U1NTUxZjFlMDc2MGEyMjg0NGY2YTc4OTk4NmY4Zjk4OTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscQumbSqcKXnV3W8iNpPK45f4/qb
iyypyYx3lQBzVmD5Nu3XgVeg88ToEbldhrGOMIpvK9bw2vUi99/TP0KCTUlOGCtd
HX1nHuN3yS/C9mMygwvKnPNtaUXZity9C1kMLgKvROarpXXKinR8zW5PTNBIre+B
Jx92MRJCqIpJdaN/vxsGN9Bw9zacoOAGN8oWAewKaFv38wP/1SGsh++nIu/NDwXP
ug1RYVOWarT/M5NcSGh2f2optCm/VMrcrTq6RvRoVfAC5y7APXrOsHh4qWHOO0O+
flMIOzXdUo5SYkCrk/yoA8HhZ4pJPBcRElElP1/tnocwhtFnD6WxqRtvfwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFWkzlVR8eB2CiKET2p4mYb4+Yk4MB8GA1UdIwQY
MBaAFPobJHjf4PM6J4sT9C3TGWAdY3ioMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oc2tlTl9nOHpvbml4UDBMZE1aWUIxamVLZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvMDhhOWM4LTRiZTMtNDY4Mi1hZjgy
LTJhMWNjZTdkMmM2NS8xLzEtaHNrZU5fZzh6b25peFAwTGRNWllCMWplS2cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FmLzA4YTljOC00YmUzLTQ2ODItYWY4Mi0yYTFjY2U3ZDJj
NjUvMS8xLWhza2VOX2c4em9uaXhQMExkTVpZQjFqZUtnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrBv
sn+2R9rEoIoXI8A4uFl79+DPfZ8lJVMQw79pvD+y5pspM6yAC6E6h3jZc6fEypPF
qrQPXtFARueAVBIi3L0fOhtt8MMIVQfZsnlAAHK3ubPpTkjUgtXRi8z3xjhv1oyY
jDLbFF1CnfSb1Y/tajBlpjZ42nJ9Xy3m4M1qSRgy71Ypk/9WvzbbC7iusN04ybcs
n3jX60Elncuwq9TIUojx1I0gNOOPe9JMk+z7JxYsULbOAXqzK17nYnLGdpddIcmw
6ZKT0sIckoET/h97z/zwfwjTblDceIcCFlGc32lmQH04OREvVtDkGdOxmCiud+02
atL4bBc3fYbRHC6vUg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:21:37 2025 by rpki-client