Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: abJx3Nf1V19rCQRLCrgInVcUIctlXu+A8THw0Fo4HFQ=
Subject key identifier: 54:BA:A9:67:D6:E6:D7:49:5B:77:97:57:0E:42:1B:3A:D5:EB:79:FA
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 0197BD10A9246C576587D861134F1C2694B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 15BA
Signing time: Sun 29 Jun 2025 19:01:15 +0000
Manifest this update: Sun 29 Jun 2025 19:01:15 +0000
Manifest next update: Mon 30 Jun 2025 19:01:15 +0000
Files and hashes: 1: NwkZh_DNuB_iBInY9wDbpyHdLgE.roa (hash: 5w+s5Rk1602R4y1zX8F10ZF0iAVWkGEzyROrjF/5dqE=)
2: SeFxeccbo68KLvP3eAvdIgxyzVI.roa (hash: KKPafx1oDtZuIFD9Wnd6TukbFDgA1SpzCeh9Ci09gpw=)
3: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: J3aTdHHI4iiAN6M3+JQ3Oyc8fJWy2s0Iry4EUsogulI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bd:10:a9:24:6c:57:65:87:d8:61:13:4f:1c:26:94:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Jun 29 19:01:15 2025 GMT
Not After : Jun 30 19:01:15 2025 GMT
Subject: CN=54baa967d6e6d7495b7797570e421b3ad5eb79fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e2:e0:e2:ed:ab:d3:bf:f6:2e:1a:00:86:4f:
89:b3:b5:9f:fa:10:2d:4f:f7:83:8a:78:cf:e7:a2:
56:3d:ef:65:4b:dd:7c:14:c0:08:45:dc:10:7d:f0:
ef:e2:e8:a2:63:32:15:57:b4:b2:b9:a1:d5:f4:e5:
7e:91:06:ff:56:e7:15:2c:1c:e1:9e:e1:dc:4b:d6:
a7:d1:8f:5c:43:45:3d:71:6e:14:8f:66:72:2a:ce:
81:d2:70:1a:cc:08:d8:8a:42:cd:04:2d:1c:6c:71:
80:57:f2:9c:89:9c:7e:50:64:c9:30:fd:31:4a:2b:
d0:2f:c6:62:e5:21:b1:76:68:5a:a2:ac:ef:2e:00:
7c:e6:2d:26:23:27:32:ba:f8:d8:36:1e:87:30:c9:
a2:aa:6d:79:7d:7e:4b:8b:cd:86:1b:43:15:06:91:
77:9b:68:66:29:7b:e4:9c:e1:00:14:5a:04:38:67:
93:1e:8b:ef:93:e6:09:11:d8:45:d9:b0:d5:f6:57:
30:d3:b6:72:74:b8:d6:ee:6a:2e:16:4d:66:cd:9e:
e9:7a:87:dc:e1:01:df:79:85:02:a3:4f:57:a5:3f:
39:84:7b:b8:0e:79:11:0d:c6:78:fd:5d:7c:49:56:
e6:85:91:9b:0a:61:39:2a:9d:00:85:58:1f:dc:20:
76:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BA:A9:67:D6:E6:D7:49:5B:77:97:57:0E:42:1B:3A:D5:EB:79:FA
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:dd:d3:34:29:19:c8:ac:60:46:e3:c2:68:48:9d:29:cd:e4:
b1:92:a6:d3:ee:3e:79:ef:e1:96:92:55:c3:e4:87:88:b6:ac:
2d:74:52:7a:2b:40:dd:89:5a:7f:e3:69:f8:7e:a9:8c:fa:43:
a6:6e:30:f9:6b:a3:38:d5:65:97:be:b8:da:eb:d9:d5:bc:91:
ec:6b:d7:95:4d:b5:7c:51:41:84:00:bc:61:46:cd:04:20:9c:
49:b2:2e:1d:e6:98:cd:e7:80:d3:8a:80:81:12:91:27:16:b0:
f4:bc:6e:88:4c:61:21:55:ed:7e:63:0c:f9:ea:b8:40:82:86:
d8:ab:43:73:5b:21:83:66:20:29:b5:35:dc:c1:0c:03:d1:78:
25:51:b1:fa:22:46:bb:3e:a4:c0:97:62:fa:55:d1:26:46:04:
e2:aa:38:d7:58:61:43:87:07:8a:2a:dd:26:ec:71:ea:a4:85:
a6:d9:1c:2a:01:17:3d:33:ce:5c:45:c3:e7:57:f1:53:01:af:
04:dd:8c:b2:ad:6a:7e:9f:ac:b4:4a:10:6c:dd:01:90:40:f5:
3c:6b:57:1e:a2:3b:53:74:36:1e:e1:a6:3c:d4:38:4c:fd:72:
20:e9:f0:24:82:96:8a:26:41:e6:1d:37:9b:45:d5:76:e8:e0:
86:46:a1:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe9EKkkbFdlh9hhE08cJpS2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3N2MyMDczNzExNmJjNmQ1ZTViMjI0OTMxY2YxM2RkN2Y3
OWY5NWIwHhcNMjUwNjI5MTkwMTE1WhcNMjUwNjMwMTkwMTE1WjAzMTEwLwYDVQQD
Eyg1NGJhYTk2N2Q2ZTZkNzQ5NWI3Nzk3NTcwZTQyMWIzYWQ1ZWI3OWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOLg4u2r07/2LhoAhk+Js7Wf+hAt
T/eDinjP56JWPe9lS918FMAIRdwQffDv4uiiYzIVV7SyuaHV9OV+kQb/VucVLBzh
nuHcS9an0Y9cQ0U9cW4Uj2ZyKs6B0nAazAjYikLNBC0cbHGAV/KciZx+UGTJMP0x
SivQL8Zi5SGxdmhaoqzvLgB85i0mIycyuvjYNh6HMMmiqm15fX5Li82GG0MVBpF3
m2hmKXvknOEAFFoEOGeTHovvk+YJEdhF2bDV9lcw07ZydLjW7mouFk1mzZ7peofc
4QHfeYUCo09XpT85hHu4DnkRDcZ4/V18SVbmhZGbCmE5Kp0AhVgf3CB2EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFS6qWfW5tdJW3eXVw5CGzrV63n6MB8GA1UdIwQY
MBaAFId8IHNxFrxtXlsiSTHPE91/eflbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgt
ZTcyMzJmODQ0OGIwLzEvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgtZTcyMzJmODQ0OGIw
LzEvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAod3TNCkZ
yKxgRuPCaEidKc3ksZKm0+4+ee/hlpJVw+SHiLasLXRSeitA3Ylaf+Np+H6pjPpD
pm4w+WujONVll7642uvZ1byR7GvXlU21fFFBhAC8YUbNBCCcSbIuHeaYzeeA04qA
gRKRJxaw9LxuiExhIVXtfmMM+eq4QIKG2KtDc1shg2YgKbU13MEMA9F4JVGx+iJG
uz6kwJdi+lXRJkYE4qo411hhQ4cHiirdJuxx6qSFptkcKgEXPTPOXEXD51fxUwGv
BN2Msq1qfp+stEoQbN0BkED1PGtXHqI7U3Q2HuGmPNQ4TP1yIOnwJIKWiiZB5h03
m0XVdujghkahOw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 21:09:42 2025 by rpki-client