Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
File: hyELNM4ALjCgpU-r-ivKxG36cig.mft (raw, json)
Hash identifier: A/f/yxl47ajxWcBEnjCmjdwo1180xPV1KLQ+6g0217M=
Subject key identifier: 50:8B:8E:B5:71:4B:A7:41:D1:41:8E:76:83:33:47:76:D1:DD:AB:F3
Authority key identifier: 87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
Certificate issuer: /CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Certificate serial: 01974BFB46AC5A12248ED17C7354DBDDA210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
Manifest number: 039C
Signing time: Sat 07 Jun 2025 20:00:48 +0000
Manifest this update: Sat 07 Jun 2025 20:00:48 +0000
Manifest next update: Sun 08 Jun 2025 20:00:48 +0000
Files and hashes: 1: Oi0Mexif2IU5YWgRrWRDGcE4Aw4.roa (hash: hcI8ATUfRYduE8yCuLSr8RsjKUn++KtzCI3lWbIhr1A=)
2: RNEIzNGbtOLDhiuIlbx5LtZxiHA.roa (hash: YH3jUp9Z5jmgiTgvLayfiplIuhfqDKTG69/LcYMXnX0=)
3: hyELNM4ALjCgpU-r-ivKxG36cig.crl (hash: Z45obO6QtYRDSI9VUR1vvMD4DJS08f0TTzujBYVp9Dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:46:ac:5a:12:24:8e:d1:7c:73:54:db:dd:a2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Validity
Not Before: Jun 7 20:00:48 2025 GMT
Not After : Jun 8 20:00:48 2025 GMT
Subject: CN=508b8eb5714ba741d1418e7683334776d1ddabf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:d7:81:ff:82:2a:b1:46:8e:3b:49:5d:df:
a1:33:cc:e1:2d:99:66:1b:34:63:03:e4:75:28:83:
51:da:78:f2:80:e2:28:b8:d0:14:f2:bd:c4:e9:41:
38:04:cb:de:25:42:83:fd:b9:03:d8:a1:27:12:5c:
4a:7b:54:58:82:a9:e3:84:2e:55:8f:46:4d:22:d9:
72:8c:15:22:53:91:93:46:cd:78:6a:67:13:32:d7:
c1:b4:74:85:e0:79:67:46:28:7a:64:b2:69:c8:3e:
31:6e:b6:b6:a0:6e:23:fe:45:f7:97:c4:c4:f6:bc:
dd:85:fd:03:34:b0:b0:79:f3:6c:b9:4b:ca:e5:55:
72:ee:63:52:fd:50:9d:c0:5a:2c:99:7b:e4:39:98:
5b:82:fa:56:7f:19:c2:d0:91:6e:01:33:d6:e8:7e:
3a:ba:18:05:25:31:b3:cc:e3:cf:13:7d:92:aa:d8:
63:6f:94:c7:c1:c3:a9:be:e8:5f:ae:a1:a0:82:c3:
4e:ad:0b:3a:87:b2:9f:07:b2:37:2c:c5:1f:d5:da:
fe:59:c5:cc:81:9d:01:88:bc:e1:88:09:b5:a3:6d:
8b:2d:89:07:19:97:4a:32:a6:03:83:a1:dc:19:53:
c4:67:c3:a0:1e:d5:02:7d:5b:29:19:76:ec:46:ae:
c6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8B:8E:B5:71:4B:A7:41:D1:41:8E:76:83:33:47:76:D1:DD:AB:F3
X509v3 Authority Key Identifier:
keyid:87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:aa:10:68:4d:0e:8d:e3:8e:ea:ab:db:e7:f0:59:37:05:f1:
68:b4:0f:6f:33:f9:2d:4e:5d:c9:31:58:a2:f4:0b:d8:8a:ba:
e4:b4:a9:18:5e:cd:c2:e3:16:47:48:45:90:86:e7:17:65:f5:
59:be:31:04:db:e2:00:b2:5d:c1:f5:aa:69:54:41:70:ce:16:
0a:30:e0:67:ed:99:ef:ea:2e:aa:04:27:a5:cd:f6:fa:a3:7a:
9b:7e:cc:b2:6a:5c:f7:bb:dd:6c:34:83:6f:f9:57:e0:50:92:
7b:40:61:26:af:9a:70:1a:eb:d5:cf:9b:e7:9d:26:4a:52:40:
e4:c9:d3:f7:13:81:b4:a6:64:31:05:a1:8e:e1:ed:75:cc:85:
cc:52:c1:66:48:e2:f4:a9:1c:26:b3:51:ac:45:90:38:f6:90:
4a:12:47:48:a5:e9:dc:2b:61:50:a4:1e:59:28:61:e5:4f:0d:
9c:67:f4:9e:c9:3d:6c:65:96:4f:0c:7d:f1:e5:43:04:7a:8f:
7a:d9:67:6c:8a:74:53:16:d6:3d:30:00:4a:f2:c9:bd:af:0a:
e5:c1:b8:d8:23:70:a4:db:47:72:2a:56:b1:38:66:0a:0a:90:
c1:59:74:e7:69:4c:de:48:45:17:b3:26:62:9f:f0:40:ff:27:
b0:da:ca:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+0asWhIkjtF8c1Tb3aIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MjEwYjM0Y2UwMDJlMzBhMGE1NGZhYmZhMmJjYWM0NmRm
YTcyMjgwHhcNMjUwNjA3MjAwMDQ4WhcNMjUwNjA4MjAwMDQ4WjAzMTEwLwYDVQQD
Eyg1MDhiOGViNTcxNGJhNzQxZDE0MThlNzY4MzMzNDc3NmQxZGRhYmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcnXgf+CKrFGjjtJXd+hM8zhLZlm
GzRjA+R1KINR2njygOIouNAU8r3E6UE4BMveJUKD/bkD2KEnElxKe1RYgqnjhC5V
j0ZNItlyjBUiU5GTRs14amcTMtfBtHSF4HlnRih6ZLJpyD4xbra2oG4j/kX3l8TE
9rzdhf0DNLCwefNsuUvK5VVy7mNS/VCdwFosmXvkOZhbgvpWfxnC0JFuATPW6H46
uhgFJTGzzOPPE32Sqthjb5THwcOpvuhfrqGggsNOrQs6h7KfB7I3LMUf1dr+WcXM
gZ0BiLzhiAm1o22LLYkHGZdKMqYDg6HcGVPEZ8OgHtUCfVspGXbsRq7GCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCLjrVxS6dB0UGOdoMzR3bR3avzMB8GA1UdIwQY
MBaAFIchCzTOAC4woKVPq/orysRt+nIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yOWEwZGMtMjBhZi00MzdlLTk4NzAt
MzY2OWQxYjU2OWQ2LzEvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8yOWEwZGMtMjBhZi00MzdlLTk4NzAtMzY2OWQxYjU2OWQ2
LzEvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6oQaE0O
jeOO6qvb5/BZNwXxaLQPbzP5LU5dyTFYovQL2Iq65LSpGF7NwuMWR0hFkIbnF2X1
Wb4xBNviALJdwfWqaVRBcM4WCjDgZ+2Z7+ouqgQnpc32+qN6m37Msmpc97vdbDSD
b/lX4FCSe0BhJq+acBrr1c+b550mSlJA5MnT9xOBtKZkMQWhjuHtdcyFzFLBZkji
9KkcJrNRrEWQOPaQShJHSKXp3CthUKQeWShh5U8NnGf0nsk9bGWWTwx98eVDBHqP
etlnbIp0UxbWPTAASvLJva8K5cG42CNwpNtHcipWsThmCgqQwVl052lM3khFF7Mm
Yp/wQP8nsNrKTg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:42:38 2025 by rpki-client