Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier: NzX1NJc1/txHyutNAkW8Ymu2iJaKUizKGltHfUDqUlA=
Subject key identifier: 50:D4:AD:78:6A:F0:EA:B7:A7:0B:E0:3E:C6:3B:31:BD:2F:A8:C0:37
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial: 0197B8FD99523CF3DED73F2E41A310C0E3C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number: 15BC
Signing time: Sun 29 Jun 2025 00:01:57 +0000
Manifest this update: Sun 29 Jun 2025 00:01:57 +0000
Manifest next update: Mon 30 Jun 2025 00:01:57 +0000
Files and hashes: 1: UzSEdJBP2Gqr1z-0qx79WTsLauw.roa (hash: vl1ow4mOIeKlrrAdbJAJQJmVxWS6mp39VC/9XaCz00U=)
2: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: 4g6PFuuFkLS7CtoaN4u8LeiXx4zDJVVGqZdH3toK550=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:99:52:3c:f3:de:d7:3f:2e:41:a3:10:c0:e3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Validity
Not Before: Jun 29 00:01:57 2025 GMT
Not After : Jun 30 00:01:57 2025 GMT
Subject: CN=50d4ad786af0eab7a70be03ec63b31bd2fa8c037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c7:2d:0d:6c:96:38:b4:32:0c:f7:64:37:82:
e2:b1:98:52:5a:ac:ce:f8:d5:c6:b3:ca:2d:5f:ba:
3a:f3:6e:16:16:45:14:22:a2:67:3d:83:43:5e:2d:
90:a8:c5:c8:74:45:56:cb:a2:2b:fa:21:0f:e4:f7:
6e:34:56:6e:82:bd:40:02:6c:c2:20:8c:4d:18:f4:
68:33:12:96:cb:a1:c2:65:17:fe:3f:72:b7:83:ce:
66:77:e5:84:84:95:7f:1f:c2:0f:e7:1b:ab:e3:ec:
b3:56:db:47:a8:11:8e:da:9c:f7:48:04:98:0f:d5:
7a:3e:0b:9f:2f:53:df:7a:43:c9:0b:43:02:2e:db:
3e:22:71:23:70:78:0d:df:80:e8:52:c2:50:90:05:
97:92:24:f9:53:0b:6b:78:91:3e:43:e1:0a:23:c0:
57:d6:45:1c:9a:20:7e:c1:36:4b:1d:8c:ef:18:70:
28:bb:8d:0f:f2:7f:75:07:40:5a:d9:86:5e:30:f5:
79:9f:cf:8c:df:4b:1d:8c:a3:84:0e:08:af:86:2c:
08:10:09:0f:70:69:e8:c6:9d:1f:5c:1c:f5:d3:d1:
b3:d3:00:e7:8d:ec:07:32:b5:0a:4d:84:db:2b:5c:
a3:ba:f6:cb:97:c0:97:ea:1a:1c:91:b9:44:10:64:
fc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D4:AD:78:6A:F0:EA:B7:A7:0B:E0:3E:C6:3B:31:BD:2F:A8:C0:37
X509v3 Authority Key Identifier:
keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:62:71:99:2b:4e:c6:ff:71:5b:9f:b0:e4:21:a2:aa:b0:95:
6e:66:56:35:21:2e:2d:b0:ae:cd:b2:e6:0b:ac:78:b1:6f:40:
ec:32:13:b9:ae:55:8a:d0:89:7f:5a:1a:28:a5:21:90:97:77:
b4:5c:0e:a4:7f:64:96:a9:50:b4:51:f7:fe:83:89:b3:17:9e:
67:1e:59:01:b7:df:52:07:fb:8d:96:2e:d8:03:73:39:27:c7:
e5:cc:3e:e8:7c:80:f3:61:12:c2:ab:0b:16:49:a9:d9:6b:ea:
c1:1e:b8:26:5d:60:58:40:57:1e:18:ac:3f:d5:46:ec:2e:70:
da:a2:51:86:2c:57:51:f9:2f:88:1b:08:3c:f0:49:8c:40:25:
5a:f3:2e:ab:fe:64:39:1e:b2:0a:f8:29:f8:54:59:83:af:fb:
7b:24:d5:65:81:20:e7:f9:39:6d:43:16:a2:06:67:0c:66:ea:
09:ea:5f:2b:9b:fe:21:a7:e7:b3:de:06:5c:03:38:de:25:d4:
fd:b5:b2:8a:fc:1e:27:c7:61:a6:78:cb:fc:cb:33:c1:f6:4f:
fa:4c:62:8d:dd:2b:7a:6a:7f:68:56:05:f8:08:61:63:2a:b3:
de:db:c1:98:2c:15:b9:83:30:08:bb:4a:9a:aa:94:fa:7b:69:
70:21:9b:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/ZlSPPPe1z8uQaMQwOPGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZTE0MjlhNTNlNjQ2M2IzYzc0ZjVhM2YxN2M1ZDRhNTFl
YmQwYjgwHhcNMjUwNjI5MDAwMTU3WhcNMjUwNjMwMDAwMTU3WjAzMTEwLwYDVQQD
Eyg1MGQ0YWQ3ODZhZjBlYWI3YTcwYmUwM2VjNjNiMzFiZDJmYThjMDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cctDWyWOLQyDPdkN4LisZhSWqzO
+NXGs8otX7o6824WFkUUIqJnPYNDXi2QqMXIdEVWy6Ir+iEP5PduNFZugr1AAmzC
IIxNGPRoMxKWy6HCZRf+P3K3g85md+WEhJV/H8IP5xur4+yzVttHqBGO2pz3SASY
D9V6PgufL1PfekPJC0MCLts+InEjcHgN34DoUsJQkAWXkiT5UwtreJE+Q+EKI8BX
1kUcmiB+wTZLHYzvGHAou40P8n91B0Ba2YZeMPV5n8+M30sdjKOEDgivhiwIEAkP
cGnoxp0fXBz109Gz0wDnjewHMrUKTYTbK1yjuvbLl8CX6hockblEEGT8UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDUrXhq8Oq3pwvgPsY7Mb0vqMA3MB8GA1UdIwQY
MBaAFIThQppT5kY7PHT1o/F8XUpR69C4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE9GQ21sUG1SanM4ZFBXajhYeGRTbEhyMExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83MmRiZGYtYzcxZC00ZTU5LTgwNzYt
YzQxZGNjYThiNzc1LzEvaE9GQ21sUG1SanM4ZFBXajhYeGRTbEhyMExnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83MmRiZGYtYzcxZC00ZTU5LTgwNzYtYzQxZGNjYThiNzc1
LzEvaE9GQ21sUG1SanM4ZFBXajhYeGRTbEhyMExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWJxmStO
xv9xW5+w5CGiqrCVbmZWNSEuLbCuzbLmC6x4sW9A7DITua5VitCJf1oaKKUhkJd3
tFwOpH9klqlQtFH3/oOJsxeeZx5ZAbffUgf7jZYu2ANzOSfH5cw+6HyA82ESwqsL
Fkmp2WvqwR64Jl1gWEBXHhisP9VG7C5w2qJRhixXUfkviBsIPPBJjEAlWvMuq/5k
OR6yCvgp+FRZg6/7eyTVZYEg5/k5bUMWogZnDGbqCepfK5v+Iafns94GXAM43iXU
/bWyivweJ8dhpnjL/MszwfZP+kxijd0remp/aFYF+AhhYyqz3tvBmCwVuYMwCLtK
mqqU+ntpcCGb7g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:15:17 2025 by rpki-client