Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: wsEZ6wavrXMtTuha+htqTATbS1i8w3Yy+TWZtYWn4cI=
Subject key identifier: 23:9B:E5:2D:B4:63:ED:A2:D4:61:30:9E:6E:A4:7E:E7:29:EB:30:13
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 01974D7C108F18CC38B282F571EB5E4B3045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 120B
Signing time: Sun 08 Jun 2025 03:01:05 +0000
Manifest this update: Sun 08 Jun 2025 03:01:05 +0000
Manifest next update: Mon 09 Jun 2025 03:01:05 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: /3zhJhWK+PPw5kfFOq/Kkl99CBqMWXRmyKcL7BIAtcU=)
2: vOY7PB5NDzFxhVih037o9jJ1bUc.roa (hash: 8OCsn1+9HWmViC4NQ7DEHa7bN4pK4rZb0B/Nsp5g6gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:10:8f:18:cc:38:b2:82:f5:71:eb:5e:4b:30:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Jun 8 03:01:05 2025 GMT
Not After : Jun 9 03:01:05 2025 GMT
Subject: CN=239be52db463eda2d461309e6ea47ee729eb3013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f2:4d:b7:95:40:aa:01:2a:ad:b6:00:b3:ae:
e2:40:d3:9a:19:ce:39:97:c5:e6:77:3d:8a:15:14:
ce:5c:f0:c7:01:b6:63:5b:ed:58:2f:6e:8b:a3:94:
d4:73:4a:9e:9b:1c:56:49:2c:ab:61:9b:7b:24:ae:
5c:41:6d:af:f4:a6:55:1e:ff:2d:1f:6a:ae:b3:a4:
ae:fb:ec:0c:a9:1b:67:51:f0:c0:56:d3:47:a4:52:
a6:34:80:c7:8a:f1:e4:f5:b6:1f:00:42:02:77:0e:
63:8d:9e:17:df:c2:cc:bf:5b:4f:5e:6d:2a:f2:b3:
6d:00:7d:0e:c9:ad:46:b1:b6:c2:ba:ca:7b:0e:65:
75:da:89:47:1e:98:11:c4:de:b4:94:ca:46:4e:ee:
a7:12:c3:9f:9b:32:e3:66:ca:91:45:a2:31:25:99:
5c:35:a3:c7:fd:67:cb:25:f7:a9:ee:42:8f:46:fb:
26:4d:38:ff:e1:7d:d3:f2:83:c8:a6:a9:91:c8:48:
6e:dc:d0:33:27:cc:e2:ca:db:82:46:96:07:d0:c1:
43:5c:4d:91:a5:e1:0c:93:1b:b4:a7:bd:de:37:96:
a1:04:ab:e9:00:6f:0c:3a:f4:1b:d1:f5:9b:1a:8e:
5d:5b:41:8f:35:2a:78:23:98:3c:e6:92:04:2a:3c:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9B:E5:2D:B4:63:ED:A2:D4:61:30:9E:6E:A4:7E:E7:29:EB:30:13
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6a:e6:22:3a:06:fa:81:28:96:91:46:12:5c:e3:9c:37:72:
e5:0d:7f:82:eb:56:2a:f0:44:ae:d6:1e:dd:5f:51:49:5c:f2:
91:f0:28:c4:21:6f:3b:44:8f:14:33:71:77:44:ed:32:50:8d:
cd:65:17:d8:c9:35:65:b5:be:fb:f2:48:da:17:7d:6a:bd:2a:
b8:a7:fb:cd:f4:1f:e1:c5:c2:03:30:c6:00:90:24:6c:86:72:
de:61:a4:fb:8e:98:ad:9a:a1:8f:86:68:67:f2:75:fe:3d:60:
b3:ea:a5:81:0a:a6:2c:1b:ac:6f:89:a1:cd:3d:c0:09:30:96:
a6:0e:1d:e8:fe:4c:80:d4:3c:9d:6b:86:70:a3:15:3d:db:d6:
db:bc:71:84:29:1a:f4:a3:2a:27:cc:c8:40:91:2b:4e:bc:6e:
84:ee:2b:a1:f3:df:5e:67:34:d3:66:94:51:2f:b6:40:31:25:
04:6b:0e:23:03:98:8d:06:df:c2:2c:d1:cd:b4:bc:9b:d2:02:
e5:1c:18:12:e8:4b:9d:db:e7:63:7d:9e:ab:ff:a0:85:23:f1:
af:44:c7:12:76:a3:3f:49:95:79:df:5a:16:cc:9c:2b:1a:c9:
cc:de:ef:63:89:28:a1:9e:94:e8:c3:94:7c:df:f2:e7:eb:42:
e4:ee:d6:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNfBCPGMw4soL1ceteSzBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZGM3NjMyN2U5MmYyNWZjNDcxYjM0NWEzN2QyNDNjYzgz
OTM1MDAwHhcNMjUwNjA4MDMwMTA1WhcNMjUwNjA5MDMwMTA1WjAzMTEwLwYDVQQD
EygyMzliZTUyZGI0NjNlZGEyZDQ2MTMwOWU2ZWE0N2VlNzI5ZWIzMDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/JNt5VAqgEqrbYAs67iQNOaGc45
l8Xmdz2KFRTOXPDHAbZjW+1YL26Lo5TUc0qemxxWSSyrYZt7JK5cQW2v9KZVHv8t
H2qus6Su++wMqRtnUfDAVtNHpFKmNIDHivHk9bYfAEICdw5jjZ4X38LMv1tPXm0q
8rNtAH0Oya1GsbbCusp7DmV12olHHpgRxN60lMpGTu6nEsOfmzLjZsqRRaIxJZlc
NaPH/WfLJfep7kKPRvsmTTj/4X3T8oPIpqmRyEhu3NAzJ8ziytuCRpYH0MFDXE2R
peEMkxu0p73eN5ahBKvpAG8MOvQb0fWbGo5dW0GPNSp4I5g85pIEKjynrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOb5S20Y+2i1GEwnm6kfucp6zATMB8GA1UdIwQY
MBaAFBzcdjJ+kvJfxHGzRaN9JDzIOTUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYt
ODA3MzY5NTBhYTk0LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYtODA3MzY5NTBhYTk0
LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGrmIjoG
+oEolpFGElzjnDdy5Q1/gutWKvBErtYe3V9RSVzykfAoxCFvO0SPFDNxd0TtMlCN
zWUX2Mk1ZbW++/JI2hd9ar0quKf7zfQf4cXCAzDGAJAkbIZy3mGk+46YrZqhj4Zo
Z/J1/j1gs+qlgQqmLBusb4mhzT3ACTCWpg4d6P5MgNQ8nWuGcKMVPdvW27xxhCka
9KMqJ8zIQJErTrxuhO4rofPfXmc002aUUS+2QDElBGsOIwOYjQbfwizRzbS8m9IC
5RwYEuhLndvnY32eq/+ghSPxr0THEnajP0mVed9aFsycKxrJzN7vY4kooZ6U6MOU
fN/y5+tC5O7W+A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:49:20 2025 by rpki-client