Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft
File: hoRh4GD99IzUHTOtknHIB9Qk60I.mft (raw, json)
Hash identifier: pteOJY91sIZ7Wuqvxf5XTrW2rSckBCAK2DWgUtscKrQ=
Subject key identifier: F3:3C:E0:10:83:EF:14:30:AB:47:60:C8:FC:8E:86:EC:FC:9A:76:3F
Authority key identifier: 86:84:61:E0:60:FD:F4:8C:D4:1D:33:AD:92:71:C8:07:D4:24:EB:42
Certificate issuer: /CN=868461e060fdf48cd41d33ad9271c807d424eb42
Certificate serial: 019748FAB8034455466876D259CB25E34279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoRh4GD99IzUHTOtknHIB9Qk60I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft
Manifest number: A1
Signing time: Sat 07 Jun 2025 06:01:19 +0000
Manifest this update: Sat 07 Jun 2025 06:01:19 +0000
Manifest next update: Sun 08 Jun 2025 06:01:19 +0000
Files and hashes: 1: H_XoU52eTHbpZkmpLvAUJ7VlUWc.roa (hash: i8bOFbhv/rSJKPzgYxH26TzbQ5J62pViGnxTa332Y9Q=)
2: hoRh4GD99IzUHTOtknHIB9Qk60I.crl (hash: tE+MZqinUqZl35g68BJCchLY9E5V6ZN28nhOQTaJ/FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoRh4GD99IzUHTOtknHIB9Qk60I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:b8:03:44:55:46:68:76:d2:59:cb:25:e3:42:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868461e060fdf48cd41d33ad9271c807d424eb42
Validity
Not Before: Jun 7 06:01:19 2025 GMT
Not After : Jun 8 06:01:19 2025 GMT
Subject: CN=f33ce01083ef1430ab4760c8fc8e86ecfc9a763f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:e4:3f:e2:df:ec:5b:da:7c:f9:44:cc:05:
c6:09:85:28:dd:b6:5a:4b:f0:5c:8a:15:bb:b5:ee:
58:34:90:84:a6:97:a0:74:56:23:e7:16:8f:6b:f4:
93:7a:39:6e:e7:91:d6:72:6e:e2:cd:60:95:f9:40:
14:d9:7e:19:05:bf:8e:8a:99:65:71:14:ee:55:75:
72:97:21:46:3f:30:2a:60:dd:99:14:23:4e:a7:ee:
58:b7:d7:fd:c1:5f:17:bb:ec:6b:06:23:e4:3f:98:
31:f5:38:ce:ff:be:07:75:ef:ac:10:73:d2:6b:d4:
c4:03:3a:f8:8a:cb:b5:2f:de:de:bd:32:99:2b:52:
20:5e:e8:62:a4:0d:c8:68:2e:b2:ba:2f:20:8e:6c:
85:98:a0:1e:6c:48:fd:3f:ff:b1:bc:4c:2b:c8:dc:
b0:a1:dc:fd:e9:6b:31:5f:8f:f3:25:70:36:53:32:
c9:43:be:97:c8:4b:98:4a:35:40:fc:a3:bf:e3:e9:
ef:ea:f2:a7:64:8e:f8:2a:59:26:6c:11:e7:6a:b5:
71:fe:ee:8f:06:46:7b:e4:72:69:7d:11:49:3a:14:
16:cf:9c:f8:34:90:fa:d7:60:30:d4:af:ff:ff:7e:
dd:09:aa:c2:e0:d3:af:e3:bd:90:1c:fc:13:22:ac:
4d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3C:E0:10:83:EF:14:30:AB:47:60:C8:FC:8E:86:EC:FC:9A:76:3F
X509v3 Authority Key Identifier:
keyid:86:84:61:E0:60:FD:F4:8C:D4:1D:33:AD:92:71:C8:07:D4:24:EB:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoRh4GD99IzUHTOtknHIB9Qk60I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9b:5c:23:8b:0a:10:6e:55:2f:b8:9c:85:c5:1b:d2:7a:9a:
eb:79:f3:ce:f0:65:af:77:d8:34:2d:8f:89:af:85:f1:f2:4f:
28:17:eb:ad:27:66:e4:df:ba:08:9e:bc:4e:01:c0:87:42:76:
1e:df:02:7d:08:9b:93:42:df:c2:22:7f:f3:55:27:ca:93:6f:
15:71:47:be:fe:9b:ca:3e:61:1f:79:92:ed:98:f2:b5:8f:67:
78:ec:fa:c6:49:89:08:9f:1e:a1:15:91:9a:df:f0:d8:d7:ed:
0e:33:5b:9e:3e:f1:d3:07:d7:86:3b:51:e3:fe:71:b4:7d:4e:
86:43:ee:f6:27:81:13:96:61:bd:09:0b:fb:6c:d4:68:88:2c:
6a:fb:73:53:ad:21:7e:19:9e:f3:0b:f4:1d:4e:c8:24:24:84:
e4:a7:15:f6:61:36:77:1b:e5:e5:da:1b:4b:e1:f9:f5:a1:8e:
0f:be:0b:34:e7:77:91:f0:07:f1:fa:40:36:ae:63:1b:2a:8a:
9f:02:60:8f:79:b5:92:84:e1:cc:0f:c7:8b:5a:8b:df:bc:dc:
cc:83:4c:96:43:f4:fc:be:e0:46:1a:63:3d:af:f7:1b:a4:0f:
ef:bb:84:1b:72:d7:2c:d4:37:81:6b:7a:f4:42:54:9c:87:0e:
60:33:b3:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+rgDRFVGaHbSWcsl40J5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ODQ2MWUwNjBmZGY0OGNkNDFkMzNhZDkyNzFjODA3ZDQy
NGViNDIwHhcNMjUwNjA3MDYwMTE5WhcNMjUwNjA4MDYwMTE5WjAzMTEwLwYDVQQD
EyhmMzNjZTAxMDgzZWYxNDMwYWI0NzYwYzhmYzhlODZlY2ZjOWE3NjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6rkP+Lf7FvafPlEzAXGCYUo3bZa
S/BcihW7te5YNJCEppegdFYj5xaPa/STejlu55HWcm7izWCV+UAU2X4ZBb+Oipll
cRTuVXVylyFGPzAqYN2ZFCNOp+5Yt9f9wV8Xu+xrBiPkP5gx9TjO/74Hde+sEHPS
a9TEAzr4isu1L97evTKZK1IgXuhipA3IaC6yui8gjmyFmKAebEj9P/+xvEwryNyw
odz96WsxX4/zJXA2UzLJQ76XyEuYSjVA/KO/4+nv6vKnZI74KlkmbBHnarVx/u6P
BkZ75HJpfRFJOhQWz5z4NJD612Aw1K///37dCarC4NOv472QHPwTIqxN1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPM84BCD7xQwq0dgyPyOhuz8mnY/MB8GA1UdIwQY
MBaAFIaEYeBg/fSM1B0zrZJxyAfUJOtCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG9SaDRHRDk5SXpVSFRPdGtuSElCOVFrNjBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80YWY0YmUtNzBmMS00MTk0LTkxMWYt
NTlhYjk2YmMzNWM2LzEvaG9SaDRHRDk5SXpVSFRPdGtuSElCOVFrNjBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My80YWY0YmUtNzBmMS00MTk0LTkxMWYtNTlhYjk2YmMzNWM2
LzEvaG9SaDRHRDk5SXpVSFRPdGtuSElCOVFrNjBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5tcI4sK
EG5VL7ichcUb0nqa63nzzvBlr3fYNC2Pia+F8fJPKBfrrSdm5N+6CJ68TgHAh0J2
Ht8CfQibk0LfwiJ/81UnypNvFXFHvv6byj5hH3mS7ZjytY9neOz6xkmJCJ8eoRWR
mt/w2NftDjNbnj7x0wfXhjtR4/5xtH1OhkPu9ieBE5ZhvQkL+2zUaIgsavtzU60h
fhme8wv0HU7IJCSE5KcV9mE2dxvl5dobS+H59aGOD74LNOd3kfAH8fpANq5jGyqK
nwJgj3m1koThzA/Hi1qL37zczINMlkP0/L7gRhpjPa/3G6QP77uEG3LXLNQ3gWt6
9EJUnIcOYDOz6A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:58 2025 by rpki-client