Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
File: H-AtvuYsmPAfIPR3DRakf3mr4yw.mft (raw, json)
Hash identifier: 5GE8tVHn3jZBptUubvrGF2wR2MpRUeU/XYnu4VLhJAg=
Subject key identifier: BD:7B:67:68:8B:E8:E5:0F:70:CC:F0:59:56:BC:D5:DD:75:28:B4:E6
Authority key identifier: 1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
Certificate issuer: /CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Certificate serial: 019747E78A60D489EB2FAFBEBE0A928CCFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 01:00:45 +0000
Manifest this update: Sat 07 Jun 2025 01:00:45 +0000
Manifest next update: Sun 08 Jun 2025 01:00:45 +0000
Files and hashes: 1: B_Zgbr5zHePzPX0kzYDR02lMQd0.roa (hash: oTbqq1QauLG6/LAk+F5PPgZYsS1F6hnMzvsYBg19oqU=)
2: H-AtvuYsmPAfIPR3DRakf3mr4yw.crl (hash: 5pKUD0dZEZPyTAO6KJturEaTqmw1JNWsktzDWCZdvs8=)
3: iB3qHj6jc-vYvyyZv2bCeRVUFSQ.roa (hash: GN+JMGlNiyjaBMnzgzzZxTHdUtxnuMF8sNkbCRGW38U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:8a:60:d4:89:eb:2f:af:be:be:0a:92:8c:cf:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Validity
Not Before: Jun 7 01:00:45 2025 GMT
Not After : Jun 8 01:00:45 2025 GMT
Subject: CN=bd7b67688be8e50f70ccf05956bcd5dd7528b4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:a1:41:0c:a4:a3:b4:01:6d:5c:f3:e1:81:
ab:a6:2c:b2:95:55:a1:40:10:a7:da:5b:e2:c5:fb:
8e:6a:fc:ff:5b:2c:c6:4c:69:8e:97:c1:4b:ef:17:
c5:6b:46:3c:a1:b2:5c:e0:1f:13:16:97:75:6e:fa:
5a:b1:c4:e5:86:ac:bf:bf:0b:2d:0f:3f:85:06:d8:
c8:a5:bf:5c:2a:3f:3c:98:fd:ff:fa:06:4d:a2:fd:
40:e4:81:21:68:ea:9c:72:fd:e3:db:29:28:be:0d:
da:6c:f2:3a:30:a5:35:9c:5e:d7:9a:44:76:b8:e7:
73:3b:fe:ad:80:dc:2c:6e:b8:3e:d9:07:2b:94:c2:
3c:67:ec:f9:a3:0a:03:98:ac:c7:5e:0c:46:54:d0:
55:34:45:f4:b9:42:bf:db:4a:08:7a:46:db:a3:e9:
c0:94:b6:bc:2f:bd:d2:5a:75:03:62:98:bc:f9:14:
dd:f0:90:99:5e:d4:1f:a4:17:d8:c8:27:87:66:f5:
6c:be:ad:3a:22:81:43:5d:34:01:18:42:8e:09:3d:
dd:23:37:10:85:b3:d5:2c:8b:ec:5c:62:9e:dd:0f:
19:84:37:4f:fd:1c:1b:35:1d:3b:fa:16:e3:f9:fe:
90:50:8a:79:7d:ce:90:b4:92:eb:26:60:21:fa:49:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7B:67:68:8B:E8:E5:0F:70:CC:F0:59:56:BC:D5:DD:75:28:B4:E6
X509v3 Authority Key Identifier:
keyid:1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:43:db:e5:0a:13:28:87:a3:85:c1:ef:d1:aa:95:f0:4c:84:
e3:91:f0:44:52:50:35:ee:c6:20:2f:f3:8f:13:d3:25:af:b0:
22:9e:04:0d:b1:da:f8:50:d1:78:6f:a2:ba:0f:0b:fa:24:0d:
3f:22:84:cc:76:fd:b6:fb:37:44:6b:61:4d:8e:dd:99:96:80:
f2:08:de:bc:4c:e7:5c:9e:ed:ca:ab:e9:95:4e:0b:fd:82:06:
56:dd:62:ed:40:65:42:08:97:08:43:60:03:06:11:1d:7f:82:
fe:d4:ee:68:79:24:87:e9:51:c7:8a:43:0c:f6:4d:6a:93:73:
6a:eb:f5:e8:c1:3e:da:ef:ca:fb:40:dd:63:a7:f6:6d:f1:14:
0b:00:bc:c3:2a:ab:45:2a:9e:b0:31:c3:2c:68:8f:a1:28:8c:
c9:f1:4f:a5:07:b0:8a:4e:df:5a:ee:04:5b:fe:c3:21:5b:80:
49:aa:35:ad:c9:f7:45:28:c8:3f:5d:93:85:7f:aa:8f:21:01:
10:a4:eb:56:01:cc:24:27:db:09:1f:7d:bd:ee:e9:d8:26:73:
aa:c5:ac:58:12:ff:f3:67:5b:e3:83:2e:10:b1:80:ba:92:2c:
c0:45:a6:2b:e9:0c:fb:e8:35:03:36:90:09:a0:e1:e7:9c:95:
6c:23:35:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH54pg1InrL6++vgqSjM/+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZTAyZGJlZTYyYzk4ZjAxZjIwZjQ3NzBkMTZhNDdmNzlh
YmUzMmMwHhcNMjUwNjA3MDEwMDQ1WhcNMjUwNjA4MDEwMDQ1WjAzMTEwLwYDVQQD
EyhiZDdiNjc2ODhiZThlNTBmNzBjY2YwNTk1NmJjZDVkZDc1MjhiNGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu+hQQyko7QBbVzz4YGrpiyylVWh
QBCn2lvixfuOavz/WyzGTGmOl8FL7xfFa0Y8obJc4B8TFpd1bvpascTlhqy/vwst
Dz+FBtjIpb9cKj88mP3/+gZNov1A5IEhaOqccv3j2ykovg3abPI6MKU1nF7XmkR2
uOdzO/6tgNwsbrg+2QcrlMI8Z+z5owoDmKzHXgxGVNBVNEX0uUK/20oIekbbo+nA
lLa8L73SWnUDYpi8+RTd8JCZXtQfpBfYyCeHZvVsvq06IoFDXTQBGEKOCT3dIzcQ
hbPVLIvsXGKe3Q8ZhDdP/RwbNR07+hbj+f6QUIp5fc6QtJLrJmAh+kn9nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL17Z2iL6OUPcMzwWVa81d11KLTmMB8GA1UdIwQY
MBaAFB/gLb7mLJjwHyD0dw0WpH95q+MsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC1BdHZ1WXNtUEFmSVBSM0RSYWtmM21yNHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9hMTJhMzAtZDYwZi00MDMyLTg4NjMt
MjEyNTNlYTlmM2E0LzEvSC1BdHZ1WXNtUEFmSVBSM0RSYWtmM21yNHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9hMTJhMzAtZDYwZi00MDMyLTg4NjMtMjEyNTNlYTlmM2E0
LzEvSC1BdHZ1WXNtUEFmSVBSM0RSYWtmM21yNHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0Pb5QoT
KIejhcHv0aqV8EyE45HwRFJQNe7GIC/zjxPTJa+wIp4EDbHa+FDReG+iug8L+iQN
PyKEzHb9tvs3RGthTY7dmZaA8gjevEznXJ7tyqvplU4L/YIGVt1i7UBlQgiXCENg
AwYRHX+C/tTuaHkkh+lRx4pDDPZNapNzauv16ME+2u/K+0DdY6f2bfEUCwC8wyqr
RSqesDHDLGiPoSiMyfFPpQewik7fWu4EW/7DIVuASao1rcn3RSjIP12ThX+qjyEB
EKTrVgHMJCfbCR99ve7p2CZzqsWsWBL/82db44MuELGAupIswEWmK+kM++g1AzaQ
CaDh55yVbCM1Sw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:29:01 2025 by rpki-client