Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: 9dU6bAP18G1hoxdQkDxwDqMaER02jcRjpMSQnH0tQs0=
Subject key identifier: 7B:B2:37:BE:C9:0D:50:4C:AD:EB:22:B6:09:92:23:D2:72:A0:E1:03
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 019771F60D256793F5479AEE9E9939594AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 05:00:39 +0000
Manifest this update: Sun 15 Jun 2025 05:00:39 +0000
Manifest next update: Mon 16 Jun 2025 05:00:39 +0000
Files and hashes: 1: 2eNuQu_p5ginCAZ1GWglFgX2Ois.roa (hash: w05SWnwARvBa6z4mKj9c93WMw5hgy4MoXYoHU2TqLvA=)
2: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: +DCStOT5W/HoJInSfyzonmrFLoWVhroKEOXNDLvVDtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:0d:25:67:93:f5:47:9a:ee:9e:99:39:59:4a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Jun 15 05:00:39 2025 GMT
Not After : Jun 16 05:00:39 2025 GMT
Subject: CN=7bb237bec90d504cadeb22b6099223d272a0e103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:5b:6d:d1:3b:ae:b8:ae:48:fe:fb:21:2a:
3e:70:4e:99:7d:1d:02:fe:aa:09:44:5d:c9:64:90:
34:a7:25:67:ac:f6:21:9a:0b:8a:8d:22:a8:dd:44:
ef:d6:5f:7e:d9:e9:39:17:16:35:76:4c:74:3a:a5:
18:9a:30:18:09:b8:9e:35:21:8f:ba:2b:0c:20:30:
b0:a1:65:8c:34:e6:4b:b6:d3:43:b7:ef:cf:8c:6d:
49:de:0e:ab:ae:63:89:d3:4f:ac:fa:82:a0:e4:1a:
8b:dd:be:99:82:15:a3:93:38:17:a9:89:45:5c:fb:
d9:fd:68:63:13:c8:21:a6:25:21:d5:ac:27:40:b0:
a0:ad:ab:34:c3:67:43:a2:8b:43:46:85:07:d6:22:
76:8c:05:00:4a:6f:1a:ad:c5:b5:e6:44:6a:5b:a2:
76:76:a4:8f:3a:f3:9c:2f:2f:28:5d:41:02:da:b0:
16:20:96:b3:ac:dd:d8:ba:04:a6:59:98:b8:0c:37:
6a:15:0a:95:ff:f2:5d:5a:4b:01:e8:e9:0c:47:46:
ce:79:f4:b3:6d:b7:e7:2b:60:e4:7a:7d:e7:5c:46:
f8:00:48:39:7f:eb:9e:28:cf:70:c7:94:d7:76:08:
15:ae:46:2a:62:a5:48:ac:81:cb:05:e3:49:60:3f:
04:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B2:37:BE:C9:0D:50:4C:AD:EB:22:B6:09:92:23:D2:72:A0:E1:03
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ea:d9:3d:75:63:6c:cd:5d:fa:24:a0:a3:67:07:5d:ef:c1:
15:a6:77:54:f8:2e:82:37:4b:4f:99:3d:ae:4c:d8:61:f6:7f:
c4:2a:8b:85:1a:e3:00:07:70:fe:45:d8:18:75:93:b7:7c:b9:
21:ce:3d:0d:11:5a:fb:06:1b:c1:68:05:d7:7e:f3:03:e1:71:
97:87:96:90:47:33:4f:9b:07:b1:a5:ce:d0:3d:40:09:73:47:
c5:79:1f:69:bb:24:17:56:33:2a:0b:fb:25:bc:da:35:74:91:
94:39:f1:39:6c:2b:61:e2:3b:cf:a4:4c:8a:54:e9:c2:34:4e:
b3:64:e1:43:9e:00:2c:de:ab:12:81:47:2d:69:dc:4d:dc:e0:
e8:5d:81:b0:c8:1c:9e:2b:e8:32:e9:07:9d:24:2f:95:f9:10:
3a:5c:05:82:85:4c:75:bf:d1:0e:30:a4:82:10:fc:e5:d6:f4:
a8:50:fa:44:0d:e6:89:39:0a:65:c0:f4:fa:0a:ae:4e:ff:9c:
eb:1c:59:f1:e8:4f:9d:97:25:21:e7:0a:e3:28:e4:40:93:fc:
64:ac:e7:f8:cb:73:12:21:51:81:80:39:04:e0:07:ec:76:0b:
2c:1c:fa:9b:6b:b4:f4:51:5f:27:9b:32:2e:da:3f:54:62:fc:
d2:a5:a7:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdx9g0lZ5P1R5runpk5WUrpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWQ3YjlmMWM0OWY4ZDEzZTFhNjdhYmNmMmZiYTM1YjBh
NjZkMTgwHhcNMjUwNjE1MDUwMDM5WhcNMjUwNjE2MDUwMDM5WjAzMTEwLwYDVQQD
Eyg3YmIyMzdiZWM5MGQ1MDRjYWRlYjIyYjYwOTkyMjNkMjcyYTBlMTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/tbbdE7rriuSP77ISo+cE6ZfR0C
/qoJRF3JZJA0pyVnrPYhmguKjSKo3UTv1l9+2ek5FxY1dkx0OqUYmjAYCbieNSGP
uisMIDCwoWWMNOZLttNDt+/PjG1J3g6rrmOJ00+s+oKg5BqL3b6ZghWjkzgXqYlF
XPvZ/WhjE8ghpiUh1awnQLCgras0w2dDootDRoUH1iJ2jAUASm8arcW15kRqW6J2
dqSPOvOcLy8oXUEC2rAWIJazrN3YugSmWZi4DDdqFQqV//JdWksB6OkMR0bOefSz
bbfnK2Dken3nXEb4AEg5f+ueKM9wx5TXdggVrkYqYqVIrIHLBeNJYD8E/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuyN77JDVBMresitgmSI9JyoOEDMB8GA1UdIwQY
MBaAFB2te58cSfjRPhpnq88vujWwpm0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zYzM5ZjAtN2U5Ny00ZWY3LTg5NDQt
NWViZDhlYWVlMmM2LzEvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zYzM5ZjAtN2U5Ny00ZWY3LTg5NDQtNWViZDhlYWVlMmM2
LzEvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+rZPXVj
bM1d+iSgo2cHXe/BFaZ3VPgugjdLT5k9rkzYYfZ/xCqLhRrjAAdw/kXYGHWTt3y5
Ic49DRFa+wYbwWgF137zA+Fxl4eWkEczT5sHsaXO0D1ACXNHxXkfabskF1YzKgv7
JbzaNXSRlDnxOWwrYeI7z6RMilTpwjROs2ThQ54ALN6rEoFHLWncTdzg6F2BsMgc
nivoMukHnSQvlfkQOlwFgoVMdb/RDjCkghD85db0qFD6RA3miTkKZcD0+gquTv+c
6xxZ8ehPnZclIecK4yjkQJP8ZKzn+MtzEiFRgYA5BOAH7HYLLBz6m2u09FFfJ5sy
Lto/VGL80qWncA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:57:36 2025 by rpki-client