Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: ri7MPqkVsn2+jeYOyDson77o1bN2tLkOPz2ux34W3xk=
Subject key identifier: DF:F5:B2:BB:5B:CE:DE:2E:76:96:A1:D2:9F:E0:81:88:87:A4:25:3B
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 0197628357E61C0A38254C92608FAC12F507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 1588
Signing time: Thu 12 Jun 2025 05:01:04 +0000
Manifest this update: Thu 12 Jun 2025 05:01:04 +0000
Manifest next update: Fri 13 Jun 2025 05:01:04 +0000
Files and hashes: 1: 01CHf_9w14ZNhv9S3Xhmvi90F8Q.roa (hash: ArkBvOvd5Ct0Kx1EUTZrG268WQ9wBIinLxbgoX9Nw3c=)
2: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: mL/rWepEea1RF5cCWU/+mEQ5pPd3b2M5UctsP69Fe5o=)
3: tDdZfF9_zffjxvEpEwDvjqS4I9k.roa (hash: U2TiVT1eXbO5ylElonLSsn5yN8P2ofyhgwF0HWpyq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:83:57:e6:1c:0a:38:25:4c:92:60:8f:ac:12:f5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Jun 12 05:01:04 2025 GMT
Not After : Jun 13 05:01:04 2025 GMT
Subject: CN=dff5b2bb5bcede2e7696a1d29fe0818887a4253b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:06:15:e4:bb:25:1f:2a:c5:6d:87:e0:5f:
18:19:e1:ef:47:60:b4:46:5f:5c:8f:09:90:e0:af:
d2:78:76:03:90:63:b1:4a:67:e7:08:5a:63:9c:ba:
33:92:08:4e:c9:7c:04:21:fd:d1:c7:94:f0:88:c7:
76:ae:5e:87:51:e1:ba:7b:60:6d:54:c3:ce:db:3d:
8b:c8:6a:e0:a5:bd:4d:55:58:2b:93:cc:7b:6f:a0:
25:04:5a:cd:5c:d7:33:a2:e3:e7:4e:2e:4a:6b:00:
dd:fc:98:86:bf:9f:c9:af:56:e4:49:69:b0:69:9f:
de:f5:f4:7c:4e:9f:36:fa:33:15:dc:43:68:34:19:
fa:a5:b4:17:98:4c:ec:e7:5d:5c:4e:17:d7:50:18:
1c:d8:fe:ea:b5:46:2e:ba:56:8b:19:51:4c:7c:9f:
dd:d1:d2:96:55:47:0e:b9:6e:d8:87:f9:64:f9:50:
f1:22:de:30:9f:93:f3:5c:91:d5:78:9b:4e:05:d5:
d6:15:ee:88:f7:d5:64:47:ba:23:d2:30:12:83:1e:
ba:9c:e8:1c:e9:16:1f:d2:85:79:43:08:fc:be:b5:
b0:d8:d0:52:28:ef:cc:88:1c:dc:e8:5e:24:d7:a6:
ec:b8:0d:c4:c3:7b:ef:92:17:5e:8f:70:85:9e:f8:
bd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F5:B2:BB:5B:CE:DE:2E:76:96:A1:D2:9F:E0:81:88:87:A4:25:3B
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:09:f7:71:52:01:f6:c2:01:13:ac:ce:b6:8c:d2:39:dc:d5:
2d:55:a9:c1:fe:16:b6:2c:06:ca:4a:2e:6c:5d:da:51:97:d3:
d6:32:4c:e9:b5:9e:81:94:ad:c3:56:07:b7:c5:cf:4a:5d:6c:
bd:a2:b4:94:c2:2c:39:af:1e:6f:2b:31:46:47:5e:ea:e9:fe:
d2:68:ca:ae:44:c7:3c:a2:82:6a:04:57:df:06:5f:65:ea:de:
ba:b7:ad:05:ec:f3:5a:00:ca:b9:20:66:3a:a7:eb:57:a6:8e:
e8:f2:dd:2a:66:b2:c7:6f:b8:85:10:5b:37:43:ef:e6:02:4a:
fe:75:f8:69:f0:24:52:8e:ed:dd:89:ef:ce:f5:71:64:c9:22:
4b:d0:4c:2d:d8:8f:a3:37:5f:ce:58:17:84:fe:a9:2e:ee:91:
fc:e0:26:eb:03:9a:95:91:2e:53:b8:78:fd:55:89:dd:8b:e4:
f9:a6:7b:50:b7:df:64:60:1e:72:b1:64:f5:eb:d7:bd:cf:32:
ae:ac:f4:13:70:35:06:e3:54:77:10:d2:68:7b:cd:46:63:6e:
12:ab:41:8e:d0:0c:99:2d:9f:70:b4:35:ab:9f:22:36:f2:b4:
18:65:15:7d:40:d7:1e:63:c3:8f:a4:1b:0e:f7:4f:24:f4:47:
9d:f2:bf:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdig1fmHAo4JUySYI+sEvUHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZDYwZDJkYzZhZDgyYTI1NzBlMDAwMGZkZDk5Mzk0OGJj
NDU0ZDgwHhcNMjUwNjEyMDUwMTA0WhcNMjUwNjEzMDUwMTA0WjAzMTEwLwYDVQQD
EyhkZmY1YjJiYjViY2VkZTJlNzY5NmExZDI5ZmUwODE4ODg3YTQyNTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrUGFeS7JR8qxW2H4F8YGeHvR2C0
Rl9cjwmQ4K/SeHYDkGOxSmfnCFpjnLozkghOyXwEIf3Rx5TwiMd2rl6HUeG6e2Bt
VMPO2z2LyGrgpb1NVVgrk8x7b6AlBFrNXNczouPnTi5KawDd/JiGv5/Jr1bkSWmw
aZ/e9fR8Tp82+jMV3ENoNBn6pbQXmEzs511cThfXUBgc2P7qtUYuulaLGVFMfJ/d
0dKWVUcOuW7Yh/lk+VDxIt4wn5PzXJHVeJtOBdXWFe6I99VkR7oj0jASgx66nOgc
6RYf0oV5Qwj8vrWw2NBSKO/MiBzc6F4k16bsuA3Ew3vvkhdej3CFnvi9JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/1srtbzt4udpah0p/ggYiHpCU7MB8GA1UdIwQY
MBaAFITWDS3GrYKiVw4AAP3Zk5SLxFTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE5ZTkxjYXRncUpYRGdBQV9kbVRsSXZFVk5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81MGQ5YzYtZjI0YS00NGFmLThhZTAt
NTRmNmJjODVhYWMwLzEvaE5ZTkxjYXRncUpYRGdBQV9kbVRsSXZFVk5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni81MGQ5YzYtZjI0YS00NGFmLThhZTAtNTRmNmJjODVhYWMw
LzEvaE5ZTkxjYXRncUpYRGdBQV9kbVRsSXZFVk5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwn3cVIB
9sIBE6zOtozSOdzVLVWpwf4WtiwGykoubF3aUZfT1jJM6bWegZStw1YHt8XPSl1s
vaK0lMIsOa8ebysxRkde6un+0mjKrkTHPKKCagRX3wZfZereuretBezzWgDKuSBm
OqfrV6aO6PLdKmayx2+4hRBbN0Pv5gJK/nX4afAkUo7t3YnvzvVxZMkiS9BMLdiP
ozdfzlgXhP6pLu6R/OAm6wOalZEuU7h4/VWJ3Yvk+aZ7ULffZGAecrFk9evXvc8y
rqz0E3A1BuNUdxDSaHvNRmNuEqtBjtAMmS2fcLQ1q58iNvK0GGUVfUDXHmPDj6Qb
DvdPJPRHnfK/Eg==
-----END CERTIFICATE-----
Generated at Thu Jun 12 08:37:25 2025 by rpki-client