Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: +GNZeTjrPGH0LLxuaxwvYOZZeSzxTf436jirh2htBzg=
Subject key identifier: 94:F0:71:B6:F4:0C:C8:EE:31:86:45:FC:C1:AF:6B:8A:83:93:A4:B3
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 0197B89040495C75016318C0199B1CF0A26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 154B
Signing time: Sat 28 Jun 2025 22:02:30 +0000
Manifest this update: Sat 28 Jun 2025 22:02:30 +0000
Manifest next update: Sun 29 Jun 2025 22:02:30 +0000
Files and hashes: 1: F9OoqFi0y_GmOqfd2KThNGIcQRY.roa (hash: lknpUMMVcnd7NcsdFUBWrkK4Xx0BYlNeNsb3yAIL3yk=)
2: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: T1VLnP+1+4etQZ546DINm2LGefe+1xevsBBI87uGtQ8=)
3: xiqfg-sD-JA_U5POqcioMLPnSTo.roa (hash: JD/nDI8VlQSh0memjTUGDYmELCHkrFvR/ey5KgQYfKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:40:49:5c:75:01:63:18:c0:19:9b:1c:f0:a2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Jun 28 22:02:30 2025 GMT
Not After : Jun 29 22:02:30 2025 GMT
Subject: CN=94f071b6f40cc8ee318645fcc1af6b8a8393a4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:69:d4:49:11:c0:00:b5:5c:19:db:bc:cc:
ec:1a:ef:20:18:34:ad:62:27:14:4d:b1:b5:fc:ac:
ee:47:9c:40:75:54:83:32:2c:53:52:3e:a2:c8:1f:
0d:9a:90:e6:e3:37:c6:95:da:3d:44:ad:c8:c3:e6:
51:1d:49:99:d3:15:62:c7:82:18:3f:23:8e:f6:af:
b1:98:11:2d:33:3e:f0:2e:d7:1f:e6:10:fa:29:1d:
e4:48:5e:16:99:6a:a5:f2:ac:03:8f:70:fe:47:25:
5a:eb:ac:f0:75:2d:64:ab:b9:39:e9:36:9d:55:34:
d2:22:f7:87:21:e8:a8:b8:ae:3c:57:27:3f:77:6d:
47:38:f1:e6:07:04:45:e4:92:03:a2:88:40:4c:b9:
a1:9e:cc:ef:69:48:48:0f:5f:31:6b:86:1a:f7:fe:
2b:db:8c:1a:d1:c2:53:4f:1f:1d:2b:f7:77:6e:aa:
45:9a:ad:6e:7e:62:42:04:0c:7d:3a:61:21:09:de:
6a:65:79:1d:fe:e9:21:60:c6:09:f7:37:8f:b0:e3:
17:7f:5a:96:7e:19:9c:fd:36:e6:d4:72:be:4e:fa:
f4:6e:be:02:9c:4f:fc:15:21:1d:ba:e7:fb:fa:10:
dd:0e:d7:19:45:fa:87:24:b5:02:c8:71:8a:7f:6f:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F0:71:B6:F4:0C:C8:EE:31:86:45:FC:C1:AF:6B:8A:83:93:A4:B3
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6c:20:73:db:78:35:70:e2:f4:df:ab:98:8f:0a:2a:6d:d2:
f6:9d:11:7b:cc:55:de:ba:79:7a:a7:01:70:e0:fb:6c:45:fc:
da:11:64:9c:11:67:ed:44:25:fe:f1:ae:14:e5:35:50:33:6b:
a3:b5:41:7c:62:5a:31:58:1e:e3:e6:c0:48:2f:8c:af:7e:03:
4f:d2:fa:50:13:5e:34:14:47:9f:ad:05:4d:8f:11:b3:f7:4f:
db:d5:32:c1:17:64:69:01:de:24:aa:56:f1:ff:04:1f:9b:93:
c4:71:1c:8f:b6:11:0a:f0:e6:f4:65:50:bf:a8:f4:c9:3c:7a:
e4:2a:5d:24:e8:2a:ac:dd:64:a1:dd:30:96:56:01:22:c4:70:
49:5e:40:5b:b6:e9:30:25:8d:a8:ab:27:e3:26:77:20:21:0c:
60:ab:7b:b1:63:41:38:2b:ee:fd:20:bf:8d:73:c9:e4:56:35:
b4:38:21:a1:f7:4e:27:3c:b6:83:ce:5e:0c:8e:20:b0:5c:12:
d2:4a:76:c4:9a:5a:5c:47:24:58:16:2b:b0:91:5a:ae:8b:e1:
0b:77:b1:d2:27:db:64:f4:33:d5:30:62:91:49:35:3f:f0:0a:
a2:5f:cc:96:93:aa:9b:39:f8:d6:14:d7:5a:15:19:21:a3:80:
9e:98:6e:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kEBJXHUBYxjAGZsc8KJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGM3NzMzNmQ2NmY3YjAyMzhlNmMxODRjNjRmYTRmMjRk
MDlmMDEwHhcNMjUwNjI4MjIwMjMwWhcNMjUwNjI5MjIwMjMwWjAzMTEwLwYDVQQD
Eyg5NGYwNzFiNmY0MGNjOGVlMzE4NjQ1ZmNjMWFmNmI4YTgzOTNhNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5pp1EkRwAC1XBnbvMzsGu8gGDSt
YicUTbG1/KzuR5xAdVSDMixTUj6iyB8NmpDm4zfGldo9RK3Iw+ZRHUmZ0xVix4IY
PyOO9q+xmBEtMz7wLtcf5hD6KR3kSF4WmWql8qwDj3D+RyVa66zwdS1kq7k56Tad
VTTSIveHIeiouK48Vyc/d21HOPHmBwRF5JIDoohATLmhnszvaUhID18xa4Ya9/4r
24wa0cJTTx8dK/d3bqpFmq1ufmJCBAx9OmEhCd5qZXkd/ukhYMYJ9zePsOMXf1qW
fhmc/Tbm1HK+Tvr0br4CnE/8FSEduuf7+hDdDtcZRfqHJLUCyHGKf2+RBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTwcbb0DMjuMYZF/MGva4qDk6SzMB8GA1UdIwQY
MBaAFB6MdzNtZvewI45sGExk+k8k0J8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2Et
OTk5NTdkZjQ5OTdlLzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2EtOTk5NTdkZjQ5OTdl
LzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGwgc9t4
NXDi9N+rmI8KKm3S9p0Re8xV3rp5eqcBcOD7bEX82hFknBFn7UQl/vGuFOU1UDNr
o7VBfGJaMVge4+bASC+Mr34DT9L6UBNeNBRHn60FTY8Rs/dP29UywRdkaQHeJKpW
8f8EH5uTxHEcj7YRCvDm9GVQv6j0yTx65CpdJOgqrN1kod0wllYBIsRwSV5AW7bp
MCWNqKsn4yZ3ICEMYKt7sWNBOCvu/SC/jXPJ5FY1tDghofdOJzy2g85eDI4gsFwS
0kp2xJpaXEckWBYrsJFarovhC3ex0ifbZPQz1TBikUk1P/AKol/MlpOqmzn41hTX
WhUZIaOAnphupw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:41 2025 by rpki-client