Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: 9IZ7K0I5ljys4T1T3y7WERK5/v/rnf5xz4itBFRk26o=
Subject key identifier: 74:29:4F:CB:DD:1D:45:53:99:F2:1C:C5:D2:B1:40:C8:0A:3E:57:FF
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 01974779FAFD9B9AD028E6AB30EBECBDA96E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0AF2
Signing time: Fri 06 Jun 2025 23:01:05 +0000
Manifest this update: Fri 06 Jun 2025 23:01:05 +0000
Manifest next update: Sat 07 Jun 2025 23:01:05 +0000
Files and hashes: 1: KNngLPUEeJfGeGvW_sjNLwrjlmo.roa (hash: VdgpRYVhUpsamPtzdnV+HbncE6iEYGQS6JyumMp2yn8=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: H7pdd6Z702VUdWyG4EVd3kPSSmw2Fhf7NHqFktdpPtI=)
3: XrZ7_VYsTjVO1Hdr6lTXBYRHdDM.roa (hash: /HTMnGOuDTUdEjSKAx29mQcK6o1vmtlFHqUYC092xGg=)
4: aJuKlK4Eyd-5-SWqzCamWBjJAOA.roa (hash: JqxrD9CIJNSFvb9h8lx5ybgaqxfxBBfuz3mHyoez/iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:fa:fd:9b:9a:d0:28:e6:ab:30:eb:ec:bd:a9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Jun 6 23:01:05 2025 GMT
Not After : Jun 7 23:01:05 2025 GMT
Subject: CN=74294fcbdd1d455399f21cc5d2b140c80a3e57ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:85:12:12:52:7c:8b:85:6c:7e:d2:ff:df:
82:ce:54:b9:78:16:47:89:e5:a8:6c:56:5a:48:25:
b4:10:1c:c1:36:f7:56:36:35:20:c7:6c:a8:6f:ca:
43:66:4c:ba:41:1d:f0:49:59:50:3a:ee:bf:7b:0b:
f6:1b:21:0f:aa:2d:86:2b:cb:4b:9e:58:c8:94:09:
c6:af:0f:d5:79:61:de:05:f9:2c:45:72:56:78:d0:
67:48:a9:63:e5:01:88:01:58:32:87:69:f9:a5:9c:
c3:08:12:65:b8:49:9f:97:97:fe:5d:21:6a:89:94:
09:d0:f2:9e:19:55:45:c8:2a:3a:f0:41:b3:a8:0e:
18:eb:bc:83:f0:3d:29:0d:23:d7:6b:62:5e:f8:17:
32:be:e0:cd:29:33:ce:11:5e:46:cc:da:63:47:83:
77:6a:f7:0a:ad:70:66:53:03:9e:23:4d:b4:36:33:
b5:78:ce:fc:ae:42:5b:8d:f8:36:5f:ff:e2:82:7e:
66:39:44:ba:5b:12:fd:22:dc:8a:38:26:67:9a:56:
f8:b3:d9:74:53:69:2a:db:e5:6f:3f:9c:06:0c:25:
43:f0:ee:88:73:1e:42:b8:b5:bb:88:f0:46:f9:a5:
cc:6b:5d:16:81:76:f3:68:b2:d4:3f:18:c0:fb:cf:
22:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:29:4F:CB:DD:1D:45:53:99:F2:1C:C5:D2:B1:40:C8:0A:3E:57:FF
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:39:a7:79:47:28:d0:12:9c:f3:6b:9e:52:67:e1:c9:06:1e:
6a:63:76:5a:4a:9e:97:c3:0d:85:59:b0:f6:5f:cc:51:fa:a6:
0a:20:b2:03:75:f7:ba:ed:88:d2:6a:a8:f7:fa:1f:db:89:74:
d5:c4:72:c9:ef:f3:5d:a7:4f:3e:5a:80:d3:42:bf:ba:1b:27:
f8:92:e1:53:5a:dc:af:da:14:0f:0c:f3:d0:93:61:b9:4c:ce:
a6:be:05:9c:92:7e:91:f3:cb:90:9e:fd:9b:e8:b0:30:bb:cb:
17:e3:89:26:f6:ec:6f:c7:1c:b9:64:a4:f6:43:d1:f3:63:72:
81:90:7c:b4:0f:c6:7f:d7:b0:a0:10:1a:9f:56:a5:61:4a:a8:
49:15:aa:2c:a1:1b:21:f5:ee:35:59:85:e6:13:b2:fd:f5:31:
58:4d:ee:2d:5f:68:9a:98:c1:80:f9:82:01:74:a2:87:bc:5f:
43:3c:f9:88:02:55:92:3e:fc:57:6d:f0:07:56:c0:83:72:8f:
39:be:d8:92:c1:b7:3b:4d:cb:2d:f8:fb:13:17:b0:40:b8:58:
4f:8f:7c:02:d8:2e:16:ff:7f:da:6d:66:8d:9c:c8:9c:58:db:
56:38:17:8b:b9:51:4f:ed:13:fa:1c:cb:ca:98:cd:ae:b5:3c:
47:6e:fa:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHefr9m5rQKOarMOvsvaluMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NzI4ZmIzMWM0ZWJkZmI5YmYxMjk3NDViOTFiZDJlMmVl
OGVmMzEwHhcNMjUwNjA2MjMwMTA1WhcNMjUwNjA3MjMwMTA1WjAzMTEwLwYDVQQD
Eyg3NDI5NGZjYmRkMWQ0NTUzOTlmMjFjYzVkMmIxNDBjODBhM2U1N2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov+FEhJSfIuFbH7S/9+CzlS5eBZH
ieWobFZaSCW0EBzBNvdWNjUgx2yob8pDZky6QR3wSVlQOu6/ewv2GyEPqi2GK8tL
nljIlAnGrw/VeWHeBfksRXJWeNBnSKlj5QGIAVgyh2n5pZzDCBJluEmfl5f+XSFq
iZQJ0PKeGVVFyCo68EGzqA4Y67yD8D0pDSPXa2Je+BcyvuDNKTPOEV5GzNpjR4N3
avcKrXBmUwOeI020NjO1eM78rkJbjfg2X//ign5mOUS6WxL9ItyKOCZnmlb4s9l0
U2kq2+VvP5wGDCVD8O6Icx5CuLW7iPBG+aXMa10WgXbzaLLUPxjA+88ilQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQpT8vdHUVTmfIcxdKxQMgKPlf/MB8GA1UdIwQY
MBaAFERyj7McTr37m/EpdFuRvS4u6O8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzIt
MWY1NWQ5OTk5ZWViLzEvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzItMWY1NWQ5OTk5ZWVi
LzEvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjmneUco
0BKc82ueUmfhyQYeamN2Wkqel8MNhVmw9l/MUfqmCiCyA3X3uu2I0mqo9/of24l0
1cRyye/zXadPPlqA00K/uhsn+JLhU1rcr9oUDwzz0JNhuUzOpr4FnJJ+kfPLkJ79
m+iwMLvLF+OJJvbsb8ccuWSk9kPR82NygZB8tA/Gf9ewoBAan1alYUqoSRWqLKEb
IfXuNVmF5hOy/fUxWE3uLV9ompjBgPmCAXSih7xfQzz5iAJVkj78V23wB1bAg3KP
Ob7YksG3O03LLfj7ExewQLhYT498AtguFv9/2m1mjZzInFjbVjgXi7lRT+0T+hzL
ypjNrrU8R276Ew==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:50 2025 by rpki-client