Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
File: Hsub1e2W5p3aj8Kh_gIUetro9xM.mft (raw, json)
Hash identifier: JS210zwIJjXiLWEF4c6hFMT9YKA1h7BJ34IvpNPbGo4=
Subject key identifier: E8:FF:7E:3E:6D:24:C6:8E:E7:9B:5E:6B:EE:06:6F:EF:19:C2:FB:D3
Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
Certificate issuer: /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Certificate serial: 019749D59BF02FFC3CFCD3D841BE9B45F493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
Manifest number: 03F9
Signing time: Sat 07 Jun 2025 10:00:25 +0000
Manifest this update: Sat 07 Jun 2025 10:00:25 +0000
Manifest next update: Sun 08 Jun 2025 10:00:25 +0000
Files and hashes: 1: 2IUVrUcX57wEcebuPBNhbM7rtII.roa (hash: xFARryMWCZ7xJebZzJ48q6NyTNbF+EONupkOj48G4Zc=)
2: 3mgL5kmPTE1KzgmolBjYNrOCQw4.roa (hash: 4p0hGsG00DucWMHppeS8f+vIw114RVg7ok5Btqh+zyQ=)
3: Hsub1e2W5p3aj8Kh_gIUetro9xM.crl (hash: O0bTO+xPB0i+kfEbnQRndv4Y7rDoilRkb6FBd+zTiWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:9b:f0:2f:fc:3c:fc:d3:d8:41:be:9b:45:f4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Validity
Not Before: Jun 7 10:00:25 2025 GMT
Not After : Jun 8 10:00:25 2025 GMT
Subject: CN=e8ff7e3e6d24c68ee79b5e6bee066fef19c2fbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:ac:95:c0:e1:31:8f:79:d0:d4:50:23:e3:
61:55:c0:7f:d0:fe:87:2c:1d:35:42:b0:33:58:f3:
e5:83:58:37:55:2f:f7:78:50:47:ae:be:80:03:c9:
ee:b3:26:30:4c:37:47:56:17:74:17:e8:ed:0e:69:
43:7d:18:0f:56:dd:04:b1:ee:57:da:53:1a:08:ce:
25:cd:92:1a:61:49:24:ea:32:98:7c:8f:34:00:94:
91:f2:7c:d6:2d:19:7f:e9:bd:15:47:f0:ce:3d:82:
63:6d:a4:2f:7a:52:e3:98:d1:ea:bb:71:ec:0d:e9:
17:59:39:81:84:42:d7:cc:2c:35:3a:45:60:e0:ed:
3a:8c:f7:1c:b5:ca:64:73:e9:fb:50:82:30:12:13:
53:de:67:57:04:5f:fb:92:5f:d4:12:ab:da:64:b0:
4f:47:d9:ba:5b:3b:71:83:09:80:7b:52:6c:ff:13:
94:b6:80:49:53:d5:be:5b:a3:f8:7a:b9:5d:a6:0e:
14:a2:fe:59:d8:f3:10:f9:3c:7f:5a:42:45:d7:70:
b9:54:17:76:b9:c3:f6:18:a3:e4:ab:88:37:94:76:
33:e1:d4:ee:b2:70:44:da:ba:ca:37:f0:30:3a:dd:
7e:81:d2:77:88:e4:e7:f9:a2:f3:70:88:ee:8c:77:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FF:7E:3E:6D:24:C6:8E:E7:9B:5E:6B:EE:06:6F:EF:19:C2:FB:D3
X509v3 Authority Key Identifier:
keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fa:86:8d:e4:da:85:f9:fe:3c:f5:ca:f2:5f:89:77:4c:66:
92:a5:e0:ae:1a:55:8d:a3:8b:8a:74:16:32:13:96:c3:83:72:
39:76:f6:bc:ec:01:a8:2b:ca:da:64:d3:77:c4:e1:7d:46:86:
44:36:db:e7:60:86:7d:c4:16:c8:90:3f:45:6c:07:e5:43:98:
21:0e:49:54:de:e8:51:a4:44:dc:74:1c:40:44:0a:f7:ca:67:
67:e0:fb:ba:b2:0b:b8:03:d2:2e:ee:95:e3:aa:19:7d:37:dd:
69:6b:84:7d:99:8d:19:51:5a:cf:52:38:46:78:34:bb:ba:f2:
3f:92:8c:5c:71:f1:48:c9:be:a6:d5:51:9b:90:53:95:23:b7:
cc:58:bb:d0:f3:3c:93:01:45:21:fa:ff:f1:7e:42:c9:26:ff:
4a:68:67:36:5b:cd:c3:bd:a6:e6:e7:6b:8c:09:1d:a5:53:f4:
32:f4:93:64:15:85:5b:ad:db:8f:ff:ae:b5:11:83:b0:c9:5d:
06:c5:c0:20:11:f9:f8:14:e6:df:a3:e1:bd:7d:d7:90:1f:59:
2f:f5:8f:eb:9f:cc:00:72:86:b1:f9:c2:45:1b:9e:75:0f:04:
92:86:95:d0:0e:5f:52:48:77:99:44:cf:74:ef:1c:ad:6c:62:
cb:b4:76:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1ZvwL/w8/NPYQb6bRfSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlY2I5YmQ1ZWQ5NmU2OWRkYThmYzJhMWZlMDIxNDdhZGFl
OGY3MTMwHhcNMjUwNjA3MTAwMDI1WhcNMjUwNjA4MTAwMDI1WjAzMTEwLwYDVQQD
EyhlOGZmN2UzZTZkMjRjNjhlZTc5YjVlNmJlZTA2NmZlZjE5YzJmYmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4SslcDhMY950NRQI+NhVcB/0P6H
LB01QrAzWPPlg1g3VS/3eFBHrr6AA8nusyYwTDdHVhd0F+jtDmlDfRgPVt0Ese5X
2lMaCM4lzZIaYUkk6jKYfI80AJSR8nzWLRl/6b0VR/DOPYJjbaQvelLjmNHqu3Hs
DekXWTmBhELXzCw1OkVg4O06jPcctcpkc+n7UIIwEhNT3mdXBF/7kl/UEqvaZLBP
R9m6WztxgwmAe1Js/xOUtoBJU9W+W6P4erldpg4Uov5Z2PMQ+Tx/WkJF13C5VBd2
ucP2GKPkq4g3lHYz4dTusnBE2rrKN/AwOt1+gdJ3iOTn+aLzcIjujHfSqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOj/fj5tJMaO55tea+4Gb+8ZwvvTMB8GA1UdIwQY
MBaAFB7Lm9Xtluad2o/Cof4CFHra6PcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHN1YjFlMlc1cDNhajhLaF9nSVVldHJvOXhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jMzQxNTAtNTkxMi00OTBjLWIzNWIt
ZjU0ZmJmNjkxN2JjLzEvSHN1YjFlMlc1cDNhajhLaF9nSVVldHJvOXhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9jMzQxNTAtNTkxMi00OTBjLWIzNWItZjU0ZmJmNjkxN2Jj
LzEvSHN1YjFlMlc1cDNhajhLaF9nSVVldHJvOXhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfqGjeTa
hfn+PPXK8l+Jd0xmkqXgrhpVjaOLinQWMhOWw4NyOXb2vOwBqCvK2mTTd8ThfUaG
RDbb52CGfcQWyJA/RWwH5UOYIQ5JVN7oUaRE3HQcQEQK98pnZ+D7urILuAPSLu6V
46oZfTfdaWuEfZmNGVFaz1I4Rng0u7ryP5KMXHHxSMm+ptVRm5BTlSO3zFi70PM8
kwFFIfr/8X5CySb/SmhnNlvNw72m5udrjAkdpVP0MvSTZBWFW63bj/+utRGDsMld
BsXAIBH5+BTm36PhvX3XkB9ZL/WP65/MAHKGsfnCRRuedQ8EkoaV0A5fUkh3mUTP
dO8crWxiy7R2Fw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:17 2025 by rpki-client