Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
File: rHpOXEMf9seeT1vRtGsF-fRBEM4.mft (raw, json)
Hash identifier: Y/VO9wRnG27XwAbS5dlzXuU33nVb/3xz9Ior4gKcohw=
Subject key identifier: 92:2D:50:01:CA:95:AF:2F:E1:52:D8:DB:E3:BC:95:CA:1E:C2:2E:DD
Authority key identifier: AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
Certificate issuer: /CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Certificate serial: 0197B70F4314AEDA7DB5AFD89A9659602DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
Manifest number: 0C52
Signing time: Sat 28 Jun 2025 15:02:00 +0000
Manifest this update: Sat 28 Jun 2025 15:02:00 +0000
Manifest next update: Sun 29 Jun 2025 15:02:00 +0000
Files and hashes: 1: YFU0rK0Che90IboZIqxr-FhxEZs.roa (hash: +N2ECLyQEU3So4t+LKUIhIdvw7PoPWjMAcQERFvIBbI=)
2: rHpOXEMf9seeT1vRtGsF-fRBEM4.crl (hash: uXuEtGHOxf456/udJBb2hn6YlFJ4oiJ3Asx24JaY0Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:43:14:ae:da:7d:b5:af:d8:9a:96:59:60:2d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Validity
Not Before: Jun 28 15:02:00 2025 GMT
Not After : Jun 29 15:02:00 2025 GMT
Subject: CN=922d5001ca95af2fe152d8dbe3bc95ca1ec22edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:e4:e0:3c:97:bd:ad:3a:f4:bd:3e:df:fb:
be:6f:f2:5d:09:bc:79:ad:d1:23:ef:39:9c:08:7c:
50:d3:19:53:12:ce:7f:90:89:5c:59:ed:5d:9a:a0:
90:51:68:29:c6:f2:5d:26:0e:ee:a6:68:41:01:0d:
2d:a5:74:61:3e:82:d8:da:9b:71:fa:b1:85:ae:51:
c4:a5:87:ce:86:15:03:e9:f7:14:78:96:42:01:5f:
b9:ae:48:7d:e3:78:50:72:e0:af:3c:91:49:79:84:
d6:d2:90:25:df:bd:da:bc:24:45:c6:ac:d0:85:b9:
10:c3:4b:e8:18:60:6b:61:94:ba:9e:c4:fe:62:58:
86:c7:68:90:b6:0b:66:38:80:2f:71:4b:2e:e2:ed:
01:5f:14:2a:82:a3:d5:95:3a:54:73:ab:dc:15:c6:
1a:fe:50:a0:6c:63:29:db:a8:23:1b:83:97:76:53:
ff:29:ed:5c:f5:db:56:c2:38:d4:37:04:1c:52:59:
8b:71:cf:7f:bf:fc:fd:06:53:28:ff:fa:77:41:36:
1e:09:47:87:2d:e3:95:98:11:30:70:30:85:37:55:
20:d6:14:b9:6c:a2:c5:f0:d2:89:2f:4b:04:35:44:
e2:08:16:04:f7:6d:27:71:6e:48:ad:ec:9f:4b:d2:
be:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2D:50:01:CA:95:AF:2F:E1:52:D8:DB:E3:BC:95:CA:1E:C2:2E:DD
X509v3 Authority Key Identifier:
keyid:AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b8:24:d0:36:4f:ed:27:7b:f3:a7:2e:16:af:d3:6e:43:96:
9f:82:09:a2:9d:03:24:b6:b8:f3:09:62:1b:a5:44:70:25:e5:
e7:76:2b:73:7d:62:fa:05:34:4f:80:e2:6c:57:31:66:61:3d:
1c:dc:c0:f5:73:1e:56:32:c5:2e:6b:bd:df:59:e1:e8:98:e2:
97:5a:1c:35:ea:60:2d:c1:f0:94:da:96:c8:62:03:48:02:78:
57:ce:24:12:4b:d8:5c:b2:91:69:24:aa:6a:88:c9:e0:81:56:
7c:13:31:6c:37:39:4b:aa:b5:d8:ae:91:3e:15:02:a9:f5:7b:
17:d5:21:fd:da:3a:98:b1:80:55:b4:d7:e1:3e:06:0e:34:56:
57:2b:4c:73:de:62:6f:42:fd:5b:28:5e:d7:a5:92:40:03:eb:
10:98:27:29:be:ff:5e:f4:59:ef:1b:05:b5:77:c9:c2:7f:80:
4a:0c:31:ba:3f:d5:56:3b:4e:55:00:9a:2e:6a:b4:e1:b1:ea:
dd:45:87:e1:86:82:c6:9d:f8:1b:ef:a0:f3:2d:14:13:dd:86:
55:f2:62:a8:5b:a1:8e:1d:ef:a1:d1:d4:22:f3:7d:61:bc:e5:
c8:e4:37:f1:e1:61:f9:7a:2b:e9:f2:82:a7:ab:99:58:66:c7:
46:f1:92:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D0MUrtp9ta/YmpZZYC3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjN2E0ZTVjNDMxZmY2Yzc5ZTRmNWJkMWI0NmIwNWY5ZjQ0
MTEwY2UwHhcNMjUwNjI4MTUwMjAwWhcNMjUwNjI5MTUwMjAwWjAzMTEwLwYDVQQD
Eyg5MjJkNTAwMWNhOTVhZjJmZTE1MmQ4ZGJlM2JjOTVjYTFlYzIyZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF/k4DyXva069L0+3/u+b/JdCbx5
rdEj7zmcCHxQ0xlTEs5/kIlcWe1dmqCQUWgpxvJdJg7upmhBAQ0tpXRhPoLY2ptx
+rGFrlHEpYfOhhUD6fcUeJZCAV+5rkh943hQcuCvPJFJeYTW0pAl373avCRFxqzQ
hbkQw0voGGBrYZS6nsT+YliGx2iQtgtmOIAvcUsu4u0BXxQqgqPVlTpUc6vcFcYa
/lCgbGMp26gjG4OXdlP/Ke1c9dtWwjjUNwQcUlmLcc9/v/z9BlMo//p3QTYeCUeH
LeOVmBEwcDCFN1Ug1hS5bKLF8NKJL0sENUTiCBYE920ncW5IreyfS9K+swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJItUAHKla8v4VLY2+O8lcoewi7dMB8GA1UdIwQY
MBaAFKx6TlxDH/bHnk9b0bRrBfn0QRDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckhwT1hFTWY5c2VlVDF2UnRHc0YtZlJCRU00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jODhkNTAtOTIzYi00ODUzLTkwOWMt
ZjRlZmQxNzdlOWQwLzEvckhwT1hFTWY5c2VlVDF2UnRHc0YtZlJCRU00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jODhkNTAtOTIzYi00ODUzLTkwOWMtZjRlZmQxNzdlOWQw
LzEvckhwT1hFTWY5c2VlVDF2UnRHc0YtZlJCRU00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsrgk0DZP
7Sd786cuFq/TbkOWn4IJop0DJLa48wliG6VEcCXl53Yrc31i+gU0T4DibFcxZmE9
HNzA9XMeVjLFLmu931nh6Jjil1ocNepgLcHwlNqWyGIDSAJ4V84kEkvYXLKRaSSq
aojJ4IFWfBMxbDc5S6q12K6RPhUCqfV7F9Uh/do6mLGAVbTX4T4GDjRWVytMc95i
b0L9Wyhe16WSQAPrEJgnKb7/XvRZ7xsFtXfJwn+ASgwxuj/VVjtOVQCaLmq04bHq
3UWH4YaCxp34G++g8y0UE92GVfJiqFuhjh3vodHUIvN9YbzlyOQ38eFh+Xor6fKC
p6uZWGbHRvGS3Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:30 2025 by rpki-client