Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
File: hZtbaj2CvQDtMcbOs66nrVke5Tc.mft (raw, json)
Hash identifier: ukbD4h+STATrbL4GLihX/P9w4cZ3qQfW8iyFpvLm+bE=
Subject key identifier: A9:0E:57:5B:32:B7:C8:8B:AE:2C:BF:35:F2:66:D6:46:9C:A6:B9:7B
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Certificate issuer: /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial: 019748FAADEC1DFC542B19900C3D8C1A6B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
Manifest number: 0625
Signing time: Sat 07 Jun 2025 06:01:17 +0000
Manifest this update: Sat 07 Jun 2025 06:01:17 +0000
Manifest next update: Sun 08 Jun 2025 06:01:17 +0000
Files and hashes: 1: hZtbaj2CvQDtMcbOs66nrVke5Tc.crl (hash: cUwPaKurVZYTiAOiLJ/vgxbdLXusip1UucNgh+RYDCs=)
2: iDoekYbnPiOIxLiqr48QVJjIZ7I.roa (hash: BFGeDsq9cIJPFhHXYs9ml2z2YYV20g/bd7ZbGgfmSrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:ad:ec:1d:fc:54:2b:19:90:0c:3d:8c:1a:6b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Validity
Not Before: Jun 7 06:01:17 2025 GMT
Not After : Jun 8 06:01:17 2025 GMT
Subject: CN=a90e575b32b7c88bae2cbf35f266d6469ca6b97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:9b:63:40:58:6c:2e:8d:eb:3e:a5:7b:71:
81:a2:d6:70:c4:41:e5:2c:ca:de:8a:ea:ae:98:a5:
77:8b:8c:6c:5e:88:4d:ef:ef:9a:ff:60:78:53:d4:
56:f4:a7:1b:d7:46:de:0a:59:99:9d:5c:d0:23:f4:
f5:4b:9e:06:54:cf:8c:7c:7d:77:b4:b0:6a:4f:ce:
37:04:b6:95:6d:da:1f:a3:ce:08:14:b2:b2:2a:ff:
2c:d8:7d:5d:06:7f:20:3e:b3:4b:ae:62:09:a5:e0:
e9:2f:9a:fb:d3:e8:7a:25:c7:aa:ec:27:5f:fd:47:
af:ca:92:d3:bd:98:ba:e2:f5:7c:dc:70:6b:96:fe:
13:ab:e7:9d:60:90:eb:ec:7f:8f:14:50:de:59:61:
ee:f5:47:3c:59:cf:14:a8:17:f0:8a:96:74:e1:a5:
2b:f1:2a:e5:ac:9d:cd:bc:1d:53:41:e0:f9:e7:3f:
86:e1:7c:10:c4:fc:06:7f:ef:e8:b4:68:06:87:ff:
eb:46:2a:c9:ca:e6:c0:c6:24:8c:c4:16:e4:54:c3:
a5:50:47:10:98:d1:37:f9:e3:fe:29:31:2d:9a:99:
02:fd:bb:bc:5e:44:d7:ce:a7:8d:60:07:5e:5f:88:
34:68:08:f2:7e:de:f3:bd:5a:ce:9c:53:a7:0f:08:
e8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0E:57:5B:32:B7:C8:8B:AE:2C:BF:35:F2:66:D6:46:9C:A6:B9:7B
X509v3 Authority Key Identifier:
keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:39:70:1e:eb:fa:b9:02:72:27:9d:f3:8a:72:b0:bf:0b:22:
5a:ae:54:68:c2:8c:fb:26:bf:17:ef:45:66:3c:f5:d2:c1:71:
23:11:cf:21:20:a8:85:4f:c7:ba:e6:ad:89:96:80:f5:cd:72:
89:2f:b6:58:9f:85:bb:a4:35:fb:64:20:3a:68:eb:32:73:6c:
5a:df:dd:7c:08:77:8d:46:31:09:24:c2:83:8b:ec:c9:9e:4b:
71:c7:cc:7f:38:84:e3:a2:05:e7:a6:c0:c4:17:af:a4:0b:1c:
0f:c2:04:23:11:00:69:7f:d1:a5:8b:e2:21:35:af:5c:a9:17:
1d:11:50:1c:ab:d1:4d:c7:c0:08:0e:f6:31:e8:e5:02:38:f1:
07:7d:47:6e:14:8a:b5:20:6e:e2:1d:8a:2e:04:9d:99:05:ba:
11:54:2c:38:a7:bf:04:e9:e7:69:d0:78:68:88:80:c8:ac:5e:
65:f2:17:7e:6c:37:c6:21:ab:0a:ee:81:d3:08:b6:38:91:e3:
aa:b7:6e:45:fa:bf:a6:fd:56:5e:fd:b2:ae:a5:52:12:dd:ba:
e0:87:af:bd:86:79:6e:a2:59:15:80:61:9e:b6:78:70:85:22:
31:b9:a6:24:6d:7c:ce:7b:ed:08:14:41:f1:4e:a8:ec:18:f2:
e5:cd:67:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+q3sHfxUKxmQDD2MGmszMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OWI1YjZhM2Q4MmJkMDBlZDMxYzZjZWIzYWVhN2FkNTkx
ZWU1MzcwHhcNMjUwNjA3MDYwMTE3WhcNMjUwNjA4MDYwMTE3WjAzMTEwLwYDVQQD
EyhhOTBlNTc1YjMyYjdjODhiYWUyY2JmMzVmMjY2ZDY0NjljYTZiOTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugWbY0BYbC6N6z6le3GBotZwxEHl
LMreiuqumKV3i4xsXohN7++a/2B4U9RW9Kcb10beClmZnVzQI/T1S54GVM+MfH13
tLBqT843BLaVbdofo84IFLKyKv8s2H1dBn8gPrNLrmIJpeDpL5r70+h6Jceq7Cdf
/UevypLTvZi64vV83HBrlv4Tq+edYJDr7H+PFFDeWWHu9Uc8Wc8UqBfwipZ04aUr
8SrlrJ3NvB1TQeD55z+G4XwQxPwGf+/otGgGh//rRirJyubAxiSMxBbkVMOlUEcQ
mNE3+eP+KTEtmpkC/bu8XkTXzqeNYAdeX4g0aAjyft7zvVrOnFOnDwjoEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkOV1syt8iLriy/NfJm1kacprl7MB8GA1UdIwQY
MBaAFIWbW2o9gr0A7THGzrOup61ZHuU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84ZWRiODItY2UyYi00NGUxLTkyY2Qt
MmZjOWU2YjZmYzk2LzEvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84ZWRiODItY2UyYi00NGUxLTkyY2QtMmZjOWU2YjZmYzk2
LzEvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDlwHuv6
uQJyJ53zinKwvwsiWq5UaMKM+ya/F+9FZjz10sFxIxHPISCohU/HuuatiZaA9c1y
iS+2WJ+Fu6Q1+2QgOmjrMnNsWt/dfAh3jUYxCSTCg4vsyZ5LccfMfziE46IF56bA
xBevpAscD8IEIxEAaX/RpYviITWvXKkXHRFQHKvRTcfACA72MejlAjjxB31HbhSK
tSBu4h2KLgSdmQW6EVQsOKe/BOnnadB4aIiAyKxeZfIXfmw3xiGrCu6B0wi2OJHj
qrduRfq/pv1WXv2yrqVSEt264IevvYZ5bqJZFYBhnrZ4cIUiMbmmJG18znvtCBRB
8U6o7Bjy5c1nhg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:43:41 2025 by rpki-client