Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier: fkVqNGYJMF5K7NhI3/nTtMm3DTQPfdaekqoccni9QJs=
Subject key identifier: 27:A2:DB:26:A7:10:8B:9E:6F:8C:0F:5D:43:F7:31:5A:A5:4E:69:AA
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial: 0197481E515FFEBBB3B8F4461E137E0EE9EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number: 12E4
Signing time: Sat 07 Jun 2025 02:00:35 +0000
Manifest this update: Sat 07 Jun 2025 02:00:35 +0000
Manifest next update: Sun 08 Jun 2025 02:00:35 +0000
Files and hashes: 1: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: Kb9iHD5bK+G1PbOKzyux91ODQZ1TalicRBYrQfz2gVY=)
2: pd4NfQq1m5q0gJRIY8-JV63L0Ug.roa (hash: 2jDsm0ha9EaVCILusmCVnInYpOVbfVEOKEtxwwvPFb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:51:5f:fe:bb:b3:b8:f4:46:1e:13:7e:0e:e9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Validity
Not Before: Jun 7 02:00:35 2025 GMT
Not After : Jun 8 02:00:35 2025 GMT
Subject: CN=27a2db26a7108b9e6f8c0f5d43f7315aa54e69aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bc:df:ee:11:35:58:a4:43:b0:93:0c:37:31:
29:8b:7a:f8:b4:3e:33:0e:24:e3:51:86:a6:45:4e:
f4:cc:5e:ad:ac:f4:4f:d0:1e:96:b2:f4:bc:0c:93:
f8:ea:8d:19:35:e2:da:d4:e0:55:e8:fe:61:40:8e:
00:9c:5d:8f:32:8e:57:68:37:75:a3:fb:ec:8d:b5:
99:dd:5a:a5:ac:9d:09:9f:77:86:53:d3:37:a4:7e:
25:02:7f:e0:1f:9b:b6:70:5b:4d:22:2a:fc:f1:c1:
55:80:49:88:c3:b8:64:3e:98:81:12:e2:5f:3c:af:
10:22:54:72:e1:c5:e3:05:87:09:c3:e3:f3:a9:17:
c8:18:a0:80:cc:74:6b:fd:73:7e:b3:b3:a8:51:21:
b4:71:13:28:28:65:0b:1b:c0:cc:83:10:87:40:b7:
c8:60:c2:23:ec:35:75:ed:4d:19:2a:b3:97:94:fd:
98:ed:c1:61:c0:13:cb:b6:90:fd:68:4f:08:80:fc:
6a:55:2d:e5:2d:0b:c2:1b:2b:2d:12:f9:2b:bf:76:
0e:3d:62:9f:93:7f:8f:85:d8:b9:5a:db:35:c2:9c:
9d:11:18:47:9f:4d:c5:4a:01:3d:3f:c6:2a:e5:3a:
52:07:05:e9:4f:14:b1:03:bd:65:67:c4:29:4c:39:
2f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A2:DB:26:A7:10:8B:9E:6F:8C:0F:5D:43:F7:31:5A:A5:4E:69:AA
X509v3 Authority Key Identifier:
keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:71:f7:68:c4:c2:41:2d:1d:c1:96:ef:b4:01:4b:00:d1:37:
59:e0:88:23:0b:bb:1c:cc:53:08:2f:6f:7a:5b:59:80:fa:16:
9e:49:0d:91:d4:4d:d0:3c:ac:67:59:4b:b2:a2:e1:b8:25:7e:
8c:1a:ac:4e:1e:4c:f6:41:7d:c0:00:d7:17:42:f2:89:7e:8a:
f2:a1:eb:06:e4:00:c0:99:5c:34:7e:b5:ca:26:d6:60:78:ce:
85:88:fe:c1:49:0e:58:57:e5:95:2e:71:2a:ba:4c:5a:be:af:
52:41:c5:d0:f3:c1:06:0d:40:53:30:8c:14:7a:a5:81:54:b2:
dd:4d:d8:2f:58:09:98:00:67:e0:9d:64:c3:f9:e2:d9:2e:b6:
ed:fe:f3:09:00:e1:fd:f2:58:21:f8:57:cf:67:8d:ce:a8:b1:
42:bf:e8:91:5a:5e:d1:a6:fd:f3:4d:d3:8c:68:e0:9b:c0:8c:
47:a5:91:74:97:2d:9e:51:1b:07:3f:5d:bb:b6:90:64:a1:be:
6c:0c:5a:97:c7:84:6f:10:4a:45:f0:a1:f0:00:77:f1:e2:eb:
3f:81:11:e7:70:29:c3:06:b4:40:85:fd:fd:83:e8:82:53:cb:
47:d7:69:7e:41:cc:ec:03:2c:67:f5:98:e5:96:85:cc:8a:ac:
68:e4:ea:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHlFf/ruzuPRGHhN+DunvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZDdmN2QyZmMxMzQ4OTE0YzAwNmI1NWFiOTNmMmQyZTMz
OTBkZTYwHhcNMjUwNjA3MDIwMDM1WhcNMjUwNjA4MDIwMDM1WjAzMTEwLwYDVQQD
EygyN2EyZGIyNmE3MTA4YjllNmY4YzBmNWQ0M2Y3MzE1YWE1NGU2OWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLzf7hE1WKRDsJMMNzEpi3r4tD4z
DiTjUYamRU70zF6trPRP0B6WsvS8DJP46o0ZNeLa1OBV6P5hQI4AnF2PMo5XaDd1
o/vsjbWZ3VqlrJ0Jn3eGU9M3pH4lAn/gH5u2cFtNIir88cFVgEmIw7hkPpiBEuJf
PK8QIlRy4cXjBYcJw+PzqRfIGKCAzHRr/XN+s7OoUSG0cRMoKGULG8DMgxCHQLfI
YMIj7DV17U0ZKrOXlP2Y7cFhwBPLtpD9aE8IgPxqVS3lLQvCGystEvkrv3YOPWKf
k3+Phdi5Wts1wpydERhHn03FSgE9P8Yq5TpSBwXpTxSxA71lZ8QpTDkvyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCei2yanEIueb4wPXUP3MVqlTmmqMB8GA1UdIwQY
MBaAFIfX99L8E0iRTABrVauT8tLjOQ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQt
MzAxZGYyNzIxNTJlLzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQtMzAxZGYyNzIxNTJl
LzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXH3aMTC
QS0dwZbvtAFLANE3WeCIIwu7HMxTCC9veltZgPoWnkkNkdRN0DysZ1lLsqLhuCV+
jBqsTh5M9kF9wADXF0LyiX6K8qHrBuQAwJlcNH61yibWYHjOhYj+wUkOWFfllS5x
KrpMWr6vUkHF0PPBBg1AUzCMFHqlgVSy3U3YL1gJmABn4J1kw/ni2S627f7zCQDh
/fJYIfhXz2eNzqixQr/okVpe0ab9803TjGjgm8CMR6WRdJctnlEbBz9du7aQZKG+
bAxal8eEbxBKRfCh8AB38eLrP4ER53Apwwa0QIX9/YPoglPLR9dpfkHM7AMsZ/WY
5ZaFzIqsaOTq2g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:38:48 2025 by rpki-client