Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
File: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft (raw, json)
Hash identifier: 6pDFwNFqFc8CDSawS4qVNcceH3Y1Nz9bDcesuZ439J4=
Subject key identifier: EF:A2:6F:9F:0B:AF:31:32:E3:2C:0A:91:14:90:CD:E6:F5:1E:50:E4
Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
Certificate issuer: /CN=86c4112efc9bed84761d3678b87c483948d2a72f
Certificate serial: 0197470B6C9616589303847B7F4CFA66F5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
Manifest number: 12B1
Signing time: Fri 06 Jun 2025 21:00:20 +0000
Manifest this update: Fri 06 Jun 2025 21:00:20 +0000
Manifest next update: Sat 07 Jun 2025 21:00:20 +0000
Files and hashes: 1: BYVEd7xc3EBzXbLQU0wScv8W8vM.roa (hash: eCnXcs4Xd2N+nO1T0PH3Iw+HOsHQZJC8Zr12UJP7ABo=)
2: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl (hash: 5Y7lFBMWgYOaCvV0VT0xch/gtS37M1K8DX4FMts3tt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:6c:96:16:58:93:03:84:7b:7f:4c:fa:66:f5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f
Validity
Not Before: Jun 6 21:00:20 2025 GMT
Not After : Jun 7 21:00:20 2025 GMT
Subject: CN=efa26f9f0baf3132e32c0a911490cde6f51e50e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:4b:eb:22:83:ff:eb:a1:8b:7a:9d:4c:f8:
5f:57:2f:a2:da:90:e8:d6:b4:09:69:af:33:a0:e1:
37:1d:cc:e1:58:8f:1f:c6:7f:22:86:80:ea:95:03:
f4:b3:10:21:21:e2:84:62:31:35:d7:bd:03:62:6a:
b2:9b:71:78:71:4c:93:80:41:12:ea:53:a5:76:ea:
ca:9d:8b:96:b6:cc:3f:d9:09:7a:0d:f2:04:6e:3c:
c4:af:08:93:49:45:0b:9c:fc:2b:88:55:39:05:8d:
4e:8a:4e:b9:82:4d:87:c7:db:61:9e:b3:3e:b5:4d:
3b:8c:b9:aa:63:b7:d5:9b:fe:55:ee:5a:fd:c9:ed:
0d:8b:a9:3c:15:01:e4:88:4c:81:f5:bb:bd:b3:7a:
06:91:82:89:be:0c:82:19:a0:73:62:fd:0a:80:d0:
64:1e:69:b2:91:65:45:d1:6b:6f:ad:14:72:3a:0a:
f1:ff:23:43:1e:36:5a:45:19:0e:89:89:61:e3:cf:
14:89:83:8c:22:a6:a1:12:a0:bf:e0:39:a8:78:c6:
aa:de:24:a4:b4:0d:f8:be:52:e2:0e:22:5c:84:60:
99:2f:73:30:51:a9:08:37:b4:ab:94:34:76:4a:02:
88:5a:0e:e1:5f:07:dc:41:60:f7:db:81:fd:41:fd:
e5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A2:6F:9F:0B:AF:31:32:E3:2C:0A:91:14:90:CD:E6:F5:1E:50:E4
X509v3 Authority Key Identifier:
keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6e:09:ec:4e:ae:eb:10:47:db:d4:fb:cd:e3:f9:1d:ea:65:
bf:43:28:8a:3a:93:a0:4d:6c:09:fd:5a:ab:3a:7f:86:9b:2a:
fc:16:92:05:aa:7b:5f:00:a7:5e:6f:89:d2:27:31:1d:07:e7:
c1:f2:a5:c6:c6:70:6d:a7:e5:8f:d5:22:b3:7a:64:18:05:ff:
c8:d5:e4:c3:19:69:56:92:7a:06:6a:02:70:96:f5:25:11:ef:
33:63:91:16:fe:5e:9a:a2:ea:d0:57:36:76:0c:43:3b:04:49:
5e:5b:af:1c:cb:7e:72:76:ef:51:f1:cf:7a:bc:ab:a1:cc:78:
6f:47:9e:64:47:71:9a:df:b6:3f:6b:f1:bc:59:b6:90:17:4b:
3a:39:42:fe:ae:6d:e7:1e:39:98:83:7a:51:7e:ed:31:a7:1f:
80:64:cb:34:00:86:2f:f9:6f:1a:5c:cf:f4:28:5a:87:a9:27:
89:0c:ec:a1:ef:ee:34:4f:5d:ed:3d:34:57:b0:94:8d:5b:85:
af:a6:0a:29:cb:10:77:ff:10:16:8a:2e:c1:a1:f4:df:25:4a:
d4:13:16:57:75:e7:fd:8c:1d:90:af:dd:02:7a:98:24:08:e6:
9c:75:33:13:7e:cf:61:30:ad:90:70:43:ed:e6:38:45:45:84:
84:92:63:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHC2yWFliTA4R7f0z6ZvXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YzQxMTJlZmM5YmVkODQ3NjFkMzY3OGI4N2M0ODM5NDhk
MmE3MmYwHhcNMjUwNjA2MjEwMDIwWhcNMjUwNjA3MjEwMDIwWjAzMTEwLwYDVQQD
EyhlZmEyNmY5ZjBiYWYzMTMyZTMyYzBhOTExNDkwY2RlNmY1MWU1MGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm9L6yKD/+uhi3qdTPhfVy+i2pDo
1rQJaa8zoOE3HczhWI8fxn8ihoDqlQP0sxAhIeKEYjE1170DYmqym3F4cUyTgEES
6lOldurKnYuWtsw/2Ql6DfIEbjzErwiTSUULnPwriFU5BY1Oik65gk2Hx9thnrM+
tU07jLmqY7fVm/5V7lr9ye0Ni6k8FQHkiEyB9bu9s3oGkYKJvgyCGaBzYv0KgNBk
HmmykWVF0WtvrRRyOgrx/yNDHjZaRRkOiYlh488UiYOMIqahEqC/4DmoeMaq3iSk
tA34vlLiDiJchGCZL3MwUakIN7SrlDR2SgKIWg7hXwfcQWD324H9Qf3lYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+ib58LrzEy4ywKkRSQzeb1HlDkMB8GA1UdIwQY
MBaAFIbEES78m+2Edh02eLh8SDlI0qcvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHNRUkx2eWI3WVIySFRaNHVIeElPVWpTcHk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC80NWViZGEtYzJjNy00YzI3LTk1ZDQt
MDBiOTZkNzRkOGIwLzEvaHNRUkx2eWI3WVIySFRaNHVIeElPVWpTcHk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC80NWViZGEtYzJjNy00YzI3LTk1ZDQtMDBiOTZkNzRkOGIw
LzEvaHNRUkx2eWI3WVIySFRaNHVIeElPVWpTcHk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASm4J7E6u
6xBH29T7zeP5Heplv0MoijqToE1sCf1aqzp/hpsq/BaSBap7XwCnXm+J0icxHQfn
wfKlxsZwbaflj9Uis3pkGAX/yNXkwxlpVpJ6BmoCcJb1JRHvM2ORFv5emqLq0Fc2
dgxDOwRJXluvHMt+cnbvUfHPeryrocx4b0eeZEdxmt+2P2vxvFm2kBdLOjlC/q5t
5x45mIN6UX7tMacfgGTLNACGL/lvGlzP9Chah6kniQzsoe/uNE9d7T00V7CUjVuF
r6YKKcsQd/8QFoouwaH03yVK1BMWV3Xn/YwdkK/dAnqYJAjmnHUzE37PYTCtkHBD
7eY4RUWEhJJjWw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:19 2025 by rpki-client