Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File: HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier: RjA+jFjXAYJn30O9Su5LFn0IzCxULy2UkyR43jS54Jo=
Subject key identifier: 3E:C4:41:92:84:C2:25:6A:18:EC:15:48:22:18:D0:00:40:B5:CC:0B
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 01974968124630152195C4B730116CF84DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number: 152C
Signing time: Sat 07 Jun 2025 08:00:46 +0000
Manifest this update: Sat 07 Jun 2025 08:00:46 +0000
Manifest next update: Sun 08 Jun 2025 08:00:46 +0000
Files and hashes: 1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: WGuCtFKVHoFrkCvVauAEcEuPqv0NbKZUpifjQvunPjM=)
2: PqAYbce5ZFtorWDJm1IoXprDpjE.roa (hash: tbDVPuUEiQGmvMdLsr4Uj3a9EoVRDD7cfOnaPg9V/Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:12:46:30:15:21:95:c4:b7:30:11:6c:f8:4d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: Jun 7 08:00:46 2025 GMT
Not After : Jun 8 08:00:46 2025 GMT
Subject: CN=3ec4419284c2256a18ec15482218d00040b5cc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d2:17:0f:7f:4e:a9:08:a3:d7:f6:7f:d0:8f:
85:7f:1b:9f:e0:2f:ff:6e:f7:e9:44:3a:72:be:98:
43:7d:4b:d4:c7:34:fe:39:6d:c8:20:c7:ec:fa:7a:
de:de:17:87:08:93:b4:f0:e2:2f:a4:7b:d2:31:af:
da:43:30:22:ba:83:b2:6a:52:6e:ba:5b:90:ee:d7:
28:35:10:4e:4d:aa:ae:f9:8f:8a:c7:2d:f9:cb:41:
37:aa:52:52:b6:b7:04:7b:a6:69:d6:c0:3e:47:cb:
5d:64:15:db:fc:e3:9a:a9:ee:b8:4c:66:3f:28:0b:
ca:09:fa:f8:82:31:ae:6a:06:62:91:2e:05:58:db:
8e:30:14:3e:51:18:a7:48:24:58:9b:df:04:73:45:
64:a2:3b:6c:4d:29:6e:96:48:6e:cd:ed:4f:04:ee:
29:55:fc:32:6c:e9:1b:2f:5f:90:7a:be:8b:97:cb:
62:29:56:dc:70:29:5e:b5:07:97:87:06:97:5d:9a:
14:5b:fa:bd:c2:0c:6f:e9:e5:e0:81:8b:4d:e5:d2:
1a:13:11:54:b2:78:6f:18:9d:ea:19:4b:21:73:97:
f6:a1:53:98:83:89:3f:fd:ff:23:d7:7c:de:08:21:
44:28:bd:13:41:b7:6e:d4:d7:25:9a:5c:7d:5f:87:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C4:41:92:84:C2:25:6A:18:EC:15:48:22:18:D0:00:40:B5:CC:0B
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ef:aa:4b:04:05:5f:16:97:16:1e:b9:fa:ed:3f:b3:b7:cf:
33:20:ab:f1:da:36:dc:d8:61:fa:bc:b6:49:71:e2:b2:03:aa:
27:9a:0e:c4:6a:39:5a:18:fd:0b:e7:67:22:13:8b:2d:9a:44:
b2:8f:c6:83:1b:0e:3b:58:16:86:38:7b:9f:c8:97:df:c4:7d:
e9:15:c1:e2:73:4e:3f:4d:4e:09:0f:bc:90:07:46:91:56:bd:
54:57:fc:6e:d7:fa:ee:22:9b:57:0d:bd:b5:8f:83:45:c8:a8:
57:d6:61:b2:a8:20:0b:ce:1f:85:78:44:2b:59:fe:b1:c9:ee:
e2:b5:13:ec:2e:39:79:16:aa:0c:88:e1:39:76:b3:49:68:d1:
8e:b4:f5:22:d5:8c:1f:f0:f9:58:3a:d1:87:00:f1:49:d7:ee:
6c:7d:7e:d6:9a:60:a5:53:ce:f1:d3:d5:ad:df:e4:c4:bb:95:
19:fd:6e:6a:f1:85:ef:d9:95:00:9c:5e:c8:30:87:7e:06:29:
a7:01:b3:06:91:e1:49:40:04:8b:17:9d:7d:24:0b:11:1a:46:
d0:4b:17:7e:5e:26:80:e6:1d:6b:aa:e2:61:18:3f:cb:4c:13:
a1:3f:a6:4c:7a:95:55:db:fb:42:97:34:c8:cf:fc:87:d1:62:
95:4f:f9:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaBJGMBUhlcS3MBFs+E2/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNGU5NTkyMDBhZWE4ZmI5MjkxNThiNzNlOGMwZTY5YTg4
ZGM1ZTkwHhcNMjUwNjA3MDgwMDQ2WhcNMjUwNjA4MDgwMDQ2WjAzMTEwLwYDVQQD
EygzZWM0NDE5Mjg0YzIyNTZhMThlYzE1NDgyMjE4ZDAwMDQwYjVjYzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9IXD39OqQij1/Z/0I+Ffxuf4C//
bvfpRDpyvphDfUvUxzT+OW3IIMfs+nre3heHCJO08OIvpHvSMa/aQzAiuoOyalJu
uluQ7tcoNRBOTaqu+Y+Kxy35y0E3qlJStrcEe6Zp1sA+R8tdZBXb/OOaqe64TGY/
KAvKCfr4gjGuagZikS4FWNuOMBQ+URinSCRYm98Ec0VkojtsTSlulkhuze1PBO4p
VfwybOkbL1+Qer6Ll8tiKVbccCletQeXhwaXXZoUW/q9wgxv6eXggYtN5dIaExFU
snhvGJ3qGUshc5f2oVOYg4k//f8j13zeCCFEKL0TQbdu1Nclmlx9X4fZAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7EQZKEwiVqGOwVSCIY0ABAtcwLMB8GA1UdIwQY
MBaAFB1OlZIArqj7kpFYtz6MDmmojcXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wNGQzNjQtNTYwZi00YjM2LThmMmEt
MmI1MzZjZjdiODI1LzEvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wNGQzNjQtNTYwZi00YjM2LThmMmEtMmI1MzZjZjdiODI1
LzEvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMu+qSwQF
XxaXFh65+u0/s7fPMyCr8do23Nhh+ry2SXHisgOqJ5oOxGo5Whj9C+dnIhOLLZpE
so/GgxsOO1gWhjh7n8iX38R96RXB4nNOP01OCQ+8kAdGkVa9VFf8btf67iKbVw29
tY+DRcioV9ZhsqggC84fhXhEK1n+scnu4rUT7C45eRaqDIjhOXazSWjRjrT1ItWM
H/D5WDrRhwDxSdfubH1+1ppgpVPO8dPVrd/kxLuVGf1uavGF79mVAJxeyDCHfgYp
pwGzBpHhSUAEixedfSQLERpG0EsXfl4mgOYda6riYRg/y0wToT+mTHqVVdv7Qpc0
yM/8h9FilU/5Uw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:09 2025 by rpki-client