Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: gIv5GnsXZZJ5fb8P26wuA/6ulDEROtQF/S+fP6+hzgw=
Subject key identifier: 46:47:1D:26:D8:0B:26:7C:CE:94:B1:2E:D4:6D:92:83:66:1C:C7:42
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 0197470B9FD084E0B8A8E95C488D38AC7520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 1585
Signing time: Fri 06 Jun 2025 21:00:33 +0000
Manifest this update: Fri 06 Jun 2025 21:00:33 +0000
Manifest next update: Sat 07 Jun 2025 21:00:33 +0000
Files and hashes: 1: 2SchzzJaAzexW7ZHgOgzy2lmxNs.roa (hash: RiHYijJvu/N31/d02O4Q6+rMxWrRtxzNnGoQBv8G2nQ=)
2: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: e/zzoi7KrI1YZFPnoyDCbWi35VEBu8c8x+auFVHLr/Q=)
3: WlXI-iwoMwDNSzHCK_zDY3koVSA.roa (hash: smiKZ03dyUbxU4U4rGUY4/4dYERRUQa1juzBxJQFPbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:9f:d0:84:e0:b8:a8:e9:5c:48:8d:38:ac:75:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Jun 6 21:00:33 2025 GMT
Not After : Jun 7 21:00:33 2025 GMT
Subject: CN=46471d26d80b267cce94b12ed46d9283661cc742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:cb:b4:92:5a:bf:f0:d1:e2:e6:c2:33:e5:
33:64:f8:fc:5c:26:4c:00:ab:bf:13:06:fc:8a:9a:
74:dd:ed:0b:6a:25:89:25:84:a1:e7:b7:17:5d:34:
9e:53:d0:46:ee:eb:16:70:02:c0:a7:83:43:a1:5b:
e8:1d:77:d8:72:4e:e3:dc:d3:05:2e:e6:16:f0:93:
46:f1:10:2a:57:e3:37:e9:38:87:94:a9:00:45:62:
f0:78:ba:51:e2:41:c1:f8:00:7b:ed:58:c7:7f:c6:
fb:51:57:1b:f8:cf:d1:b8:fd:38:84:a8:01:88:f4:
56:6d:ba:bc:59:bc:9b:bb:a7:5b:49:54:2d:d8:9b:
ee:13:06:ff:22:47:5f:05:14:dc:a8:06:07:14:db:
04:08:10:da:69:7e:65:58:a5:3a:02:0e:db:8c:ce:
9c:01:51:0f:d1:cc:4c:56:9c:77:d2:f6:ec:65:ee:
da:69:7a:01:ea:27:bb:c5:7b:2e:6a:41:07:8d:10:
fd:56:59:1e:fb:e8:9f:2e:9c:aa:8e:10:11:2b:c6:
01:90:7b:85:d5:f5:36:24:4e:8f:bd:2e:fd:67:94:
ed:ce:2f:9b:d5:61:0e:01:ac:e5:5f:a0:2c:33:71:
64:d7:10:7a:84:fd:d0:d7:7a:57:dc:dc:4c:42:50:
c7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:47:1D:26:D8:0B:26:7C:CE:94:B1:2E:D4:6D:92:83:66:1C:C7:42
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6e:da:a6:a0:16:f8:54:88:81:12:d2:89:c1:8e:aa:fe:10:
95:38:52:16:be:3c:a5:f4:56:95:e7:21:46:3c:6b:02:94:55:
96:1f:5b:2d:b1:64:ce:24:25:34:80:27:d8:4a:4d:8d:4b:55:
8e:f2:70:9f:b3:9c:8b:5a:2f:fd:da:72:00:9c:c9:5b:f4:61:
67:b6:2c:4b:9b:cf:21:1b:9b:0e:e1:77:76:34:24:7c:c7:1a:
31:42:3c:0c:38:a5:94:ea:65:8c:b2:ba:a0:45:92:86:0b:fe:
a3:cc:8c:47:a9:49:b2:04:97:c8:6e:8a:38:26:c0:c7:88:b4:
1b:dd:21:70:80:ba:2a:0f:3c:b3:2b:7f:b4:0f:23:3a:36:a9:
89:da:ac:81:a3:37:40:85:44:60:c9:2a:19:6f:fd:e0:7b:5a:
5e:85:5e:b3:f8:a7:25:c9:65:12:93:38:ad:fb:f7:98:c8:ad:
87:96:5d:39:ac:77:d1:25:84:98:0d:44:33:f7:11:a5:93:e3:
b5:6a:28:5f:74:f6:73:db:f3:f9:81:63:43:a0:4d:9f:ad:b1:
c3:ec:16:e6:08:73:b8:64:1e:16:1e:99:bf:db:c1:b8:6a:0f:
47:84:5a:f2:06:16:12:1f:51:0d:3a:ca:7e:e6:51:37:e7:65:
74:97:a3:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHC5/QhOC4qOlcSI04rHUgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNzM5ZDIxM2E0MzhmNjc4YjMyMmE4ZjhmODRlMmQ4Yzc4
MTRhY2EwHhcNMjUwNjA2MjEwMDMzWhcNMjUwNjA3MjEwMDMzWjAzMTEwLwYDVQQD
Eyg0NjQ3MWQyNmQ4MGIyNjdjY2U5NGIxMmVkNDZkOTI4MzY2MWNjNzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgXLtJJav/DR4ubCM+UzZPj8XCZM
AKu/Ewb8ipp03e0LaiWJJYSh57cXXTSeU9BG7usWcALAp4NDoVvoHXfYck7j3NMF
LuYW8JNG8RAqV+M36TiHlKkARWLweLpR4kHB+AB77VjHf8b7UVcb+M/RuP04hKgB
iPRWbbq8Wbybu6dbSVQt2JvuEwb/IkdfBRTcqAYHFNsECBDaaX5lWKU6Ag7bjM6c
AVEP0cxMVpx30vbsZe7aaXoB6ie7xXsuakEHjRD9Vlke++ifLpyqjhARK8YBkHuF
1fU2JE6PvS79Z5Ttzi+b1WEOAazlX6AsM3Fk1xB6hP3Q13pX3NxMQlDHLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZHHSbYCyZ8zpSxLtRtkoNmHMdCMB8GA1UdIwQY
MBaAFB9znSE6Q49nizIqj4+E4tjHgUrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MWJjOTUtMTQ0NC00MDhhLTkyZjEt
MzkyZTA1YTg0Mjc3LzEvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84MWJjOTUtMTQ0NC00MDhhLTkyZjEtMzkyZTA1YTg0Mjc3
LzEvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATm7apqAW
+FSIgRLSicGOqv4QlThSFr48pfRWlechRjxrApRVlh9bLbFkziQlNIAn2EpNjUtV
jvJwn7Oci1ov/dpyAJzJW/RhZ7YsS5vPIRubDuF3djQkfMcaMUI8DDillOpljLK6
oEWShgv+o8yMR6lJsgSXyG6KOCbAx4i0G90hcIC6Kg88syt/tA8jOjapidqsgaM3
QIVEYMkqGW/94HtaXoVes/inJcllEpM4rfv3mMith5ZdOax30SWEmA1EM/cRpZPj
tWooX3T2c9vz+YFjQ6BNn62xw+wW5ghzuGQeFh6Zv9vBuGoPR4Ra8gYWEh9RDTrK
fuZRN+dldJejCA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:38 2025 by rpki-client