Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
File: 0HJnvyOylxpHlag--EeKghuvsds.mft (raw, json)
Hash identifier: fEtJXJcDE6aa5BidC9jvkQ4aqhU5HzHReePK0aNX5xk=
Subject key identifier: 2B:18:B5:6E:2D:91:C0:25:DE:A2:D5:E6:D1:6C:E2:A8:D9:61:E9:A3
Authority key identifier: D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
Certificate issuer: /CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Certificate serial: 01984E8B69CA9E614FF0D033C64374F34D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
Manifest number: 1602
Signing time: Mon 28 Jul 2025 01:00:15 +0000
Manifest this update: Mon 28 Jul 2025 01:00:15 +0000
Manifest next update: Tue 29 Jul 2025 01:00:15 +0000
Files and hashes: 1: 0HJnvyOylxpHlag--EeKghuvsds.crl (hash: CTMMbTmgDLl9npbyBuBQKhE5ke4luDR2UsR4dQcVvC4=)
2: 2dNcgj6MvN9n_fYFlGVJH7IP5P0.roa (hash: NdXmI8eBdfB68znJPh1CIG8Aqd8Jvbrd0RbmQ639jeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:8b:69:ca:9e:61:4f:f0:d0:33:c6:43:74:f3:4d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Validity
Not Before: Jul 28 01:00:15 2025 GMT
Not After : Jul 29 01:00:15 2025 GMT
Subject: CN=2b18b56e2d91c025dea2d5e6d16ce2a8d961e9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:32:c9:90:72:a9:00:2c:fc:ea:74:55:75:00:
d9:6e:93:4b:db:03:11:7a:f1:0e:9b:4e:be:37:60:
6a:4c:bd:e6:7e:77:51:65:5a:d1:43:c5:89:d6:5c:
8c:b9:18:50:0c:52:04:ae:fb:85:e6:0c:06:a6:fe:
f1:73:85:22:ea:59:5c:9c:1c:aa:35:cb:62:8f:00:
a9:85:58:df:90:a0:e8:8b:00:57:81:fa:76:80:74:
ff:60:32:08:15:33:36:5c:48:4a:53:29:ab:8f:c3:
75:77:12:c1:d1:56:95:99:48:5b:cd:9d:8e:12:0e:
96:7b:6b:b4:9b:87:3b:d1:79:d2:fd:8f:b8:de:72:
fa:f3:d6:29:43:bc:b3:e0:88:7e:3d:4b:d3:37:97:
6a:d5:bf:ac:54:1f:04:8d:b6:d1:b2:0d:cc:40:40:
39:ab:4c:ef:94:4a:0e:ec:89:ef:6b:49:27:58:b0:
bf:55:c6:7d:f7:52:52:b1:e2:3e:40:3b:60:b8:a8:
c0:d5:a8:91:2d:dd:07:1c:63:73:f4:ac:e4:5f:c8:
ea:01:a8:8e:72:ac:b9:71:42:ee:65:1a:09:f9:9d:
24:90:73:1c:f9:c4:13:85:c4:38:a6:1f:48:ce:30:
29:bf:0a:6d:9f:10:db:28:de:df:44:37:2d:af:eb:
3a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:18:B5:6E:2D:91:C0:25:DE:A2:D5:E6:D1:6C:E2:A8:D9:61:E9:A3
X509v3 Authority Key Identifier:
keyid:D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:49:8c:c2:78:7d:cb:68:5e:a6:ba:f9:cb:84:7e:29:6b:93:
88:5f:d7:95:8d:43:91:f9:f6:30:d9:30:78:59:0f:7e:97:59:
39:f9:50:45:8b:f3:1e:09:a6:ca:af:e7:08:00:9f:0e:c1:90:
2d:31:e9:b3:41:4b:92:c2:12:b2:a3:c4:40:12:f0:64:8a:c7:
2d:9f:1b:45:69:ac:66:02:3e:5a:d1:e1:f1:9d:f3:f5:94:92:
f0:8e:51:d4:76:a2:f0:ea:5f:db:5b:c9:58:ab:be:c7:9e:59:
68:cd:59:9e:9f:4b:47:56:47:dc:43:b8:9a:d6:28:16:44:4c:
1d:5d:93:a2:6a:dc:81:66:3b:08:b0:9e:0b:f3:c9:fc:79:de:
2a:cf:c1:b5:26:5c:ec:f5:dd:7f:aa:ec:4e:ca:9f:3a:76:e2:
15:22:6a:a0:4f:d6:18:30:36:81:d2:8f:6e:ae:82:f3:13:a1:
af:27:28:aa:b6:c0:98:ac:93:25:b7:68:80:eb:41:81:9d:d5:
14:6a:0d:bc:dd:c8:9b:d8:b5:9a:36:93:9f:5d:31:1d:d2:a4:
d0:46:80:aa:59:61:d7:07:7d:a0:40:c6:83:80:d8:fc:6c:e0:
3a:d5:46:35:02:53:ec:d8:09:60:e7:df:e5:0b:9a:92:1a:47:
cc:a3:64:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhOi2nKnmFP8NAzxkN0801+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNzI2N2JmMjNiMjk3MWE0Nzk1YTgzZWY4NDc4YTgyMWJh
ZmIxZGIwHhcNMjUwNzI4MDEwMDE1WhcNMjUwNzI5MDEwMDE1WjAzMTEwLwYDVQQD
EygyYjE4YjU2ZTJkOTFjMDI1ZGVhMmQ1ZTZkMTZjZTJhOGQ5NjFlOWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDLJkHKpACz86nRVdQDZbpNL2wMR
evEOm06+N2BqTL3mfndRZVrRQ8WJ1lyMuRhQDFIErvuF5gwGpv7xc4Ui6llcnByq
NctijwCphVjfkKDoiwBXgfp2gHT/YDIIFTM2XEhKUymrj8N1dxLB0VaVmUhbzZ2O
Eg6We2u0m4c70XnS/Y+43nL689YpQ7yz4Ih+PUvTN5dq1b+sVB8EjbbRsg3MQEA5
q0zvlEoO7Inva0knWLC/VcZ991JSseI+QDtguKjA1aiRLd0HHGNz9KzkX8jqAaiO
cqy5cULuZRoJ+Z0kkHMc+cQThcQ4ph9IzjApvwptnxDbKN7fRDctr+s6XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsYtW4tkcAl3qLV5tFs4qjZYemjMB8GA1UdIwQY
MBaAFNByZ78jspcaR5WoPvhHioIbr7HbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEhKbnZ5T3lseHBIbGFnLS1FZUtnaHV2c2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS84ZGI1NzktYzFmYy00MjE1LTkwZjQt
ZjQ2NzNiYTUyYzAwLzEvMEhKbnZ5T3lseHBIbGFnLS1FZUtnaHV2c2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS84ZGI1NzktYzFmYy00MjE1LTkwZjQtZjQ2NzNiYTUyYzAw
LzEvMEhKbnZ5T3lseHBIbGFnLS1FZUtnaHV2c2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkmMwnh9
y2heprr5y4R+KWuTiF/XlY1Dkfn2MNkweFkPfpdZOflQRYvzHgmmyq/nCACfDsGQ
LTHps0FLksISsqPEQBLwZIrHLZ8bRWmsZgI+WtHh8Z3z9ZSS8I5R1Hai8Opf21vJ
WKu+x55ZaM1Znp9LR1ZH3EO4mtYoFkRMHV2TomrcgWY7CLCeC/PJ/HneKs/BtSZc
7PXdf6rsTsqfOnbiFSJqoE/WGDA2gdKPbq6C8xOhrycoqrbAmKyTJbdogOtBgZ3V
FGoNvN3Im9i1mjaTn10xHdKk0EaAqllh1wd9oEDGg4DY/GzgOtVGNQJT7NgJYOff
5QuakhpHzKNkuA==
-----END CERTIFICATE-----
Generated at Mon Jul 28 05:50:59 2025 by rpki-client