Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: hqFZEY2sqhJJzS/ah6hIakSASDBON++3BKD6LS7JVqA=
Subject key identifier: B3:E4:2B:D4:1D:31:2D:8D:D1:A0:F3:72:F3:06:98:2F:93:0A:03:18
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 0197B70E862B8041C9AE6C1A63CB29B54F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 12A1
Signing time: Sat 28 Jun 2025 15:01:11 +0000
Manifest this update: Sat 28 Jun 2025 15:01:11 +0000
Manifest next update: Sun 29 Jun 2025 15:01:11 +0000
Files and hashes: 1: GEL87EsMVhk3ZunlststnTM4YLA.roa (hash: H7b1xc1l2fw0pFwv7g5oKkpSKlsP+OyAptyBIDDM0uk=)
2: agw3OIrKwOyL1W_VnmVopnHAQeo.roa (hash: f+xBycRNQ1p+9ZUPOHzjnJANu2PPzQm41w3wdyO787g=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: v4fudjjByIQA0ODgA25HNK/ibSfpakMHiSjMjukR298=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:86:2b:80:41:c9:ae:6c:1a:63:cb:29:b5:4f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Jun 28 15:01:11 2025 GMT
Not After : Jun 29 15:01:11 2025 GMT
Subject: CN=b3e42bd41d312d8dd1a0f372f306982f930a0318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:9a:19:72:c8:d6:d0:15:b2:3f:fc:14:b2:
a2:29:37:cd:bf:a1:39:57:d2:17:97:68:16:42:69:
35:73:d6:d2:4d:77:7a:b4:bd:12:a2:97:b9:f4:bc:
8a:91:0f:a4:13:0a:8f:a4:5a:28:d2:e7:51:45:38:
d1:26:40:c9:50:e6:ac:97:58:63:4a:35:c1:af:3d:
76:81:cf:72:e7:57:76:a8:59:59:24:15:33:85:8c:
6a:ff:8c:70:48:24:e7:3a:98:47:f9:7e:36:e6:5f:
5a:cc:e1:74:72:ef:15:0f:fa:ad:7e:03:2b:37:c1:
f6:41:4e:a3:8f:dc:6e:d7:90:8b:ea:d3:23:fa:dd:
b5:33:3d:79:c6:15:d0:43:9c:8d:f5:14:2d:34:1a:
78:d5:c1:cc:97:5e:ee:a4:f1:51:83:8d:1e:ea:e9:
8e:4d:db:c4:f2:aa:32:c9:ab:58:66:01:b8:7f:76:
63:e2:d3:48:a5:95:69:3c:0a:76:4f:a1:78:f0:c9:
a0:97:b7:00:cf:27:5b:ba:da:8b:34:8a:24:a7:e2:
0e:75:58:69:12:ec:5f:2b:35:27:45:80:02:a1:57:
d4:f6:ae:a0:ca:6e:d2:f6:7d:5c:9a:f8:47:10:bb:
ca:3b:0c:d9:49:ca:8b:8b:74:13:1c:d4:70:ea:74:
c0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E4:2B:D4:1D:31:2D:8D:D1:A0:F3:72:F3:06:98:2F:93:0A:03:18
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:02:32:52:03:60:d7:18:e3:27:0b:8e:ee:6a:3a:2e:82:a4:
20:1b:f5:27:25:b4:5f:76:df:98:a9:a1:ad:83:15:bc:10:31:
4f:20:f7:f3:e0:21:2a:d6:e6:e9:7c:17:0b:f2:1b:bd:ff:bc:
2e:fa:6a:30:b0:5e:2b:59:d6:49:ba:89:c1:35:dd:40:23:af:
b3:1e:85:e5:3a:4d:cc:a9:04:85:73:d2:9b:1b:f4:db:0d:48:
ac:f7:81:56:dd:51:6e:fb:10:31:a1:19:fc:2c:32:71:31:54:
91:51:ba:cf:84:08:52:ef:af:ac:8d:69:88:1b:98:75:8e:63:
0f:4e:24:61:05:d3:5f:c5:61:37:79:1c:b1:31:c7:5b:c2:46:
82:3e:85:f5:e3:66:00:a9:72:b7:e0:58:a6:b3:01:e3:01:5c:
62:52:be:aa:50:c2:01:2c:11:0c:b6:dd:e9:5d:05:1e:d6:cd:
c0:cf:8a:7f:b3:08:46:5a:25:f4:ad:42:52:c5:74:80:f7:7e:
f5:b6:08:b4:96:ae:1c:2a:e8:da:0b:1a:c1:bc:ea:b7:18:7d:
01:48:8a:b5:e1:3d:34:1c:88:f6:84:64:1c:ec:cf:3d:bd:cb:
38:51:90:b1:f5:8d:6a:fa:7c:32:80:ff:59:c7:34:63:fd:f1:
4c:1f:82:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DoYrgEHJrmwaY8sptU9TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMmYwNzAxZDdhNjNjZjNkMTkzNjk1YzM5NWQxYTFmNzgz
MzVjY2YwHhcNMjUwNjI4MTUwMTExWhcNMjUwNjI5MTUwMTExWjAzMTEwLwYDVQQD
EyhiM2U0MmJkNDFkMzEyZDhkZDFhMGYzNzJmMzA2OTgyZjkzMGEwMzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIOaGXLI1tAVsj/8FLKiKTfNv6E5
V9IXl2gWQmk1c9bSTXd6tL0Sope59LyKkQ+kEwqPpFoo0udRRTjRJkDJUOasl1hj
SjXBrz12gc9y51d2qFlZJBUzhYxq/4xwSCTnOphH+X425l9azOF0cu8VD/qtfgMr
N8H2QU6jj9xu15CL6tMj+t21Mz15xhXQQ5yN9RQtNBp41cHMl17upPFRg40e6umO
TdvE8qoyyatYZgG4f3Zj4tNIpZVpPAp2T6F48Mmgl7cAzydbutqLNIokp+IOdVhp
EuxfKzUnRYACoVfU9q6gym7S9n1cmvhHELvKOwzZScqLi3QTHNRw6nTAsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPkK9QdMS2N0aDzcvMGmC+TCgMYMB8GA1UdIwQY
MBaAFJovBwHXpjzz0ZNpXDldGh94M1zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjct
NzM3MTdjNTZiNmYzLzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjctNzM3MTdjNTZiNmYz
LzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgIyUgNg
1xjjJwuO7mo6LoKkIBv1JyW0X3bfmKmhrYMVvBAxTyD38+AhKtbm6XwXC/Ibvf+8
LvpqMLBeK1nWSbqJwTXdQCOvsx6F5TpNzKkEhXPSmxv02w1IrPeBVt1RbvsQMaEZ
/CwycTFUkVG6z4QIUu+vrI1piBuYdY5jD04kYQXTX8VhN3kcsTHHW8JGgj6F9eNm
AKlyt+BYprMB4wFcYlK+qlDCASwRDLbd6V0FHtbNwM+Kf7MIRlol9K1CUsV0gPd+
9bYItJauHCro2gsawbzqtxh9AUiKteE9NByI9oRkHOzPPb3LOFGQsfWNavp8MoD/
Wcc0Y/3xTB+Crw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:00 2025 by rpki-client