Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
File: Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft (raw, json)
Hash identifier: jAyf8WSLO73cc0CQ8tDV37Iiu+t7wUi0SpG1F2YviZM=
Subject key identifier: AA:5F:2F:2A:CE:94:2A:B0:5F:21:B8:2D:CB:3F:E6:63:17:9D:5B:CD
Authority key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
Certificate issuer: /CN=1dde7463ed8498020dd392322459d2cf40f226b2
Certificate serial: 01974CD6C5031917B48FDC68A5A182F31705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
Manifest number: 09B3
Signing time: Sun 08 Jun 2025 00:00:32 +0000
Manifest this update: Sun 08 Jun 2025 00:00:32 +0000
Manifest next update: Mon 09 Jun 2025 00:00:32 +0000
Files and hashes: 1: Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl (hash: XyAxD9VZY7LlQsf/KOFlELUZhWmb7LjDWg5HY2e1MBQ=)
2: ZeLziwVcKFCzlXV46oF95sJgQFI.roa (hash: YJb2jXI2aFgonHfwW6/ZhSjIG0Uw2jOF0vpZ55dF3+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:c5:03:19:17:b4:8f:dc:68:a5:a1:82:f3:17:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde7463ed8498020dd392322459d2cf40f226b2
Validity
Not Before: Jun 8 00:00:32 2025 GMT
Not After : Jun 9 00:00:32 2025 GMT
Subject: CN=aa5f2f2ace942ab05f21b82dcb3fe663179d5bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:41:6a:c1:88:71:91:fc:d9:5b:60:80:1f:77:
be:48:b1:7e:df:2f:fb:c5:3e:61:8e:24:04:a3:ea:
51:ac:75:09:d2:50:54:bd:6d:4f:84:13:dc:0c:f5:
03:1d:2a:fa:93:03:34:39:5f:ed:71:40:b8:43:49:
e9:5a:f6:de:6f:c1:f8:33:2f:ad:4e:1a:2e:7f:37:
1a:5a:41:2a:98:74:ae:d9:f2:81:04:c1:1d:87:0d:
ac:f7:cb:1b:a0:6c:ea:a3:3c:b7:88:a5:4f:5a:c8:
44:b6:fe:9d:18:d0:50:77:d5:be:b1:f2:20:19:6a:
65:51:ba:67:17:17:ba:ba:0a:f7:80:67:c9:fd:8e:
ee:bc:6b:a0:e1:bb:85:35:ce:ae:23:a0:0b:2a:27:
b1:bf:c5:98:01:73:0a:8e:7c:33:8a:16:af:d4:37:
34:c8:b9:9f:c5:1e:8c:f4:11:ea:7a:e9:61:3f:e8:
89:42:42:4f:59:f3:3f:05:1a:da:56:1e:a0:d5:5a:
94:dc:a0:1c:55:41:b9:0f:d9:39:3f:93:94:a0:87:
9c:71:4d:c9:b0:b0:fa:43:bd:3b:c6:01:ae:ee:a7:
a7:61:d8:91:20:52:04:d8:c4:9f:57:f6:cf:aa:8b:
4e:8e:a4:a8:95:07:2d:e6:11:e9:a1:f3:63:56:e1:
d7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5F:2F:2A:CE:94:2A:B0:5F:21:B8:2D:CB:3F:E6:63:17:9D:5B:CD
X509v3 Authority Key Identifier:
keyid:1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2a:97:09:27:0b:9e:24:2a:cd:7e:60:56:a4:55:34:31:65:
74:6a:06:c0:fb:be:c6:d5:f9:bb:ef:91:44:31:7a:85:87:1c:
d0:46:11:bd:1c:ad:e6:2e:40:45:25:c9:c3:30:c2:eb:02:5c:
ee:1a:2a:c1:be:84:55:0f:85:52:27:43:6c:ed:ce:19:ec:31:
dd:bb:b2:b7:29:49:5c:da:3a:ad:03:f8:47:11:c5:75:f5:46:
d6:06:3f:78:60:3f:49:52:3a:6e:6e:05:63:fe:87:0d:5a:d2:
80:b1:80:ef:74:0a:96:04:79:9c:e1:1c:78:52:4f:03:29:fb:
20:7b:b8:0b:77:fb:d5:cf:cd:1d:42:2b:41:ec:22:25:9d:fa:
ab:8c:50:7d:d1:5b:04:b0:dc:4a:04:64:b0:86:11:46:c7:1e:
57:36:64:6e:c3:1c:76:56:24:30:ac:f1:4a:e8:2d:72:dd:da:
32:29:61:01:bb:9e:e7:29:b3:88:be:fc:81:7e:99:e2:1e:78:
1d:e5:f9:a1:6d:9f:f3:68:5a:d2:5b:c0:35:04:52:cd:21:33:
e5:b1:36:79:19:96:7f:4d:6a:d7:1c:55:ce:01:ff:5d:ed:c2:
7a:28:54:cf:6a:b0:e1:8b:1d:30:68:48:c4:77:eb:fa:8e:48:
50:75:79:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM1sUDGRe0j9xopaGC8xcFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZGU3NDYzZWQ4NDk4MDIwZGQzOTIzMjI0NTlkMmNmNDBm
MjI2YjIwHhcNMjUwNjA4MDAwMDMyWhcNMjUwNjA5MDAwMDMyWjAzMTEwLwYDVQQD
EyhhYTVmMmYyYWNlOTQyYWIwNWYyMWI4MmRjYjNmZTY2MzE3OWQ1YmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60FqwYhxkfzZW2CAH3e+SLF+3y/7
xT5hjiQEo+pRrHUJ0lBUvW1PhBPcDPUDHSr6kwM0OV/tcUC4Q0npWvbeb8H4My+t
ThoufzcaWkEqmHSu2fKBBMEdhw2s98sboGzqozy3iKVPWshEtv6dGNBQd9W+sfIg
GWplUbpnFxe6ugr3gGfJ/Y7uvGug4buFNc6uI6ALKiexv8WYAXMKjnwzihav1Dc0
yLmfxR6M9BHqeulhP+iJQkJPWfM/BRraVh6g1VqU3KAcVUG5D9k5P5OUoIeccU3J
sLD6Q707xgGu7qenYdiRIFIE2MSfV/bPqotOjqSolQct5hHpofNjVuHXbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpfLyrOlCqwXyG4Lcs/5mMXnVvNMB8GA1UdIwQY
MBaAFB3edGPthJgCDdOSMiRZ0s9A8iayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGQ1MFktMkVtQUlOMDVJeUpGblN6MER5SnJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81NTI4M2EtMDlhMC00ZGE4LWE5Njgt
NDNjN2YwMjdjNmU0LzEvSGQ1MFktMkVtQUlOMDVJeUpGblN6MER5SnJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81NTI4M2EtMDlhMC00ZGE4LWE5NjgtNDNjN2YwMjdjNmU0
LzEvSGQ1MFktMkVtQUlOMDVJeUpGblN6MER5SnJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyqXCScL
niQqzX5gVqRVNDFldGoGwPu+xtX5u++RRDF6hYcc0EYRvRyt5i5ARSXJwzDC6wJc
7hoqwb6EVQ+FUidDbO3OGewx3buytylJXNo6rQP4RxHFdfVG1gY/eGA/SVI6bm4F
Y/6HDVrSgLGA73QKlgR5nOEceFJPAyn7IHu4C3f71c/NHUIrQewiJZ36q4xQfdFb
BLDcSgRksIYRRsceVzZkbsMcdlYkMKzxSugtct3aMilhAbue5ymziL78gX6Z4h54
HeX5oW2f82ha0lvANQRSzSEz5bE2eRmWf01q1xxVzgH/Xe3CeihUz2qw4YsdMGhI
xHfr+o5IUHV5Ng==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:09:58 2025 by rpki-client