Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
File: h30YEASPQ3IFBuTBgg9v4I_3ym4.mft (raw, json)
Hash identifier: J+3sYlxLquSydoa54nBXWb+KdRpNTnNCdp1ktkmdrxM=
Subject key identifier: F0:4F:2D:E5:99:3D:B9:AE:86:E7:B6:74:F5:1C:8D:51:AF:07:85:E9
Authority key identifier: 87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
Certificate issuer: /CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
Certificate serial: 0197B6A1064FDE16E6784A7D2BFF86172D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
Manifest number: 0B4F
Signing time: Sat 28 Jun 2025 13:01:35 +0000
Manifest this update: Sat 28 Jun 2025 13:01:35 +0000
Manifest next update: Sun 29 Jun 2025 13:01:35 +0000
Files and hashes: 1: BUF7f1UtiJtn_Bvl19qd2EwX0QQ.roa (hash: aqc2Xj2T1ZitA4dQvOlzNWa0gg3kBqNbkLQxtT41W0I=)
2: h30YEASPQ3IFBuTBgg9v4I_3ym4.crl (hash: 5kGuDkz07zMNn163Dliwpe9rx2QIkNcxgf88wwe5c4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:06:4f:de:16:e6:78:4a:7d:2b:ff:86:17:2d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
Validity
Not Before: Jun 28 13:01:35 2025 GMT
Not After : Jun 29 13:01:35 2025 GMT
Subject: CN=f04f2de5993db9ae86e7b674f51c8d51af0785e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:9e:92:54:52:50:48:5c:1f:38:8a:f7:22:
08:71:c6:5f:2f:57:f2:62:70:a4:a4:af:23:97:d9:
67:4c:7f:18:9c:6c:cd:6e:c0:47:99:5f:53:33:b0:
0b:e1:2d:b4:4c:1e:48:38:5a:96:47:34:a3:63:e3:
a2:8d:10:7a:b5:aa:72:f1:e4:5b:0f:1a:b4:21:28:
c7:ba:6f:4c:dd:2e:b4:48:fa:0e:13:d3:30:ff:33:
e9:63:f1:82:c4:3a:8f:7a:a6:b5:9e:3a:f5:db:4d:
61:58:8d:08:56:cd:fc:f4:26:85:f5:0b:02:90:a3:
3e:a1:ed:2c:96:33:f1:1c:5d:49:d1:8b:13:e7:a7:
89:6b:9c:2a:09:e9:68:05:dd:e2:91:6f:81:16:a9:
13:11:46:51:71:94:6d:a9:72:8a:61:ca:a2:ac:ab:
7d:7b:8b:fb:85:4c:09:ca:d5:29:a1:d0:8c:fc:04:
4a:f9:4b:f8:39:97:cf:4d:9f:83:57:c3:e1:ac:bb:
1c:fd:dc:5d:30:8e:76:b2:82:8c:71:9b:a0:c7:32:
aa:a6:2b:e1:9e:d2:79:60:bd:ee:cf:d2:94:21:ac:
9e:e9:8f:47:f0:8c:a2:a9:fc:22:d2:fc:0e:0d:f7:
bd:53:09:a2:cc:cd:4f:e0:e4:7e:59:0a:e8:97:f9:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4F:2D:E5:99:3D:B9:AE:86:E7:B6:74:F5:1C:8D:51:AF:07:85:E9
X509v3 Authority Key Identifier:
keyid:87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2d:58:b3:c2:44:f6:ff:8f:4c:1b:6a:f6:54:fd:fc:b5:7b:
a0:e2:59:f1:e2:17:09:62:0e:fd:42:cc:84:2c:bb:ec:02:61:
43:28:fb:4f:24:9c:1e:10:39:38:8b:d2:61:d1:6f:f4:05:65:
c9:b1:bf:59:49:45:3a:90:95:fe:50:d3:a0:ad:9e:89:c4:11:
b5:e3:b1:f1:b5:a9:3b:82:8c:e2:d9:f8:ed:54:40:dc:66:11:
f3:cf:9c:01:af:ef:c2:91:b0:69:d0:ee:9a:de:22:43:ee:45:
61:44:35:b4:63:42:35:50:d1:77:ba:80:c5:e6:0a:d1:d7:65:
62:45:10:cd:e6:8f:d9:80:ae:36:9b:86:7f:bb:12:dc:76:12:
2c:d1:11:81:7c:47:5b:18:bc:3f:f2:ab:23:91:86:ca:d0:c3:
a7:83:f0:ad:fc:ea:83:9b:e6:19:c8:a9:e0:71:45:4e:7f:c4:
7c:14:d5:de:9c:99:37:b0:67:65:c5:3f:ac:dd:d6:d3:a0:ad:
d3:85:41:a7:af:61:b1:4c:76:07:72:15:a3:b1:65:1d:c4:3a:
b9:af:f8:0a:98:f8:04:aa:b0:0d:b8:5d:f1:fd:45:6c:eb:d7:
3f:51:ee:53:49:1c:ac:7c:2a:cf:1f:42:a3:bd:1f:21:15:d1:
41:d6:85:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oQZP3hbmeEp9K/+GFy0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3N2QxODEwMDQ4ZjQzNzIwNTA2ZTRjMTgyMGY2ZmUwOGZm
N2NhNmUwHhcNMjUwNjI4MTMwMTM1WhcNMjUwNjI5MTMwMTM1WjAzMTEwLwYDVQQD
EyhmMDRmMmRlNTk5M2RiOWFlODZlN2I2NzRmNTFjOGQ1MWFmMDc4NWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWieklRSUEhcHziK9yIIccZfL1fy
YnCkpK8jl9lnTH8YnGzNbsBHmV9TM7AL4S20TB5IOFqWRzSjY+OijRB6tapy8eRb
Dxq0ISjHum9M3S60SPoOE9Mw/zPpY/GCxDqPeqa1njr1201hWI0IVs389CaF9QsC
kKM+oe0sljPxHF1J0YsT56eJa5wqCeloBd3ikW+BFqkTEUZRcZRtqXKKYcqirKt9
e4v7hUwJytUpodCM/ARK+Uv4OZfPTZ+DV8PhrLsc/dxdMI52soKMcZugxzKqpivh
ntJ5YL3uz9KUIaye6Y9H8Iyiqfwi0vwODfe9UwmizM1P4OR+WQrol/k/LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBPLeWZPbmuhue2dPUcjVGvB4XpMB8GA1UdIwQY
MBaAFId9GBAEj0NyBQbkwYIPb+CP98puMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDMwWUVBU1BRM0lGQnVUQmdnOXY0SV8zeW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kMzM3N2EtOGQzOC00MjM1LWFhNzMt
N2U4OWI3MjAxOTBkLzEvaDMwWUVBU1BRM0lGQnVUQmdnOXY0SV8zeW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9kMzM3N2EtOGQzOC00MjM1LWFhNzMtN2U4OWI3MjAxOTBk
LzEvaDMwWUVBU1BRM0lGQnVUQmdnOXY0SV8zeW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdy1Ys8JE
9v+PTBtq9lT9/LV7oOJZ8eIXCWIO/ULMhCy77AJhQyj7TyScHhA5OIvSYdFv9AVl
ybG/WUlFOpCV/lDToK2eicQRteOx8bWpO4KM4tn47VRA3GYR88+cAa/vwpGwadDu
mt4iQ+5FYUQ1tGNCNVDRd7qAxeYK0ddlYkUQzeaP2YCuNpuGf7sS3HYSLNERgXxH
Wxi8P/KrI5GGytDDp4Pwrfzqg5vmGcip4HFFTn/EfBTV3pyZN7BnZcU/rN3W06Ct
04VBp69hsUx2B3IVo7FlHcQ6ua/4Cpj4BKqwDbhd8f1FbOvXP1HuU0kcrHwqzx9C
o70fIRXRQdaFmQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:14:59 2025 by rpki-client