Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
File: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft (raw, json)
Hash identifier: qVenjyoEVaeIdlgDz8IvQrIK46DNi/nHKMc9+/aMRpc=
Subject key identifier: B0:9C:BC:7E:34:5D:68:67:33:EB:9B:83:EF:5E:44:B3:88:99:4D:8D
Authority key identifier: 1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
Certificate issuer: /CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Certificate serial: 01976B4F4C1A98361899A62B927AF820D36B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 22:00:48 +0000
Manifest this update: Fri 13 Jun 2025 22:00:48 +0000
Manifest next update: Sat 14 Jun 2025 22:00:48 +0000
Files and hashes: 1: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl (hash: hTttAwa4lIWAjnSaPSJ+nM+cSDjE8YWwVpNTY2donl0=)
2: zWwWyLKfCmRpNmwFBTvojnygc1I.roa (hash: rn4lqHeH4XjZAogo04iFGrMuS15xr6iivrKPmjp5V94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:4f:4c:1a:98:36:18:99:a6:2b:92:7a:f8:20:d3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Validity
Not Before: Jun 13 22:00:48 2025 GMT
Not After : Jun 14 22:00:48 2025 GMT
Subject: CN=b09cbc7e345d686733eb9b83ef5e44b388994d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:82:c2:7a:b1:4e:28:11:2d:9a:f9:20:cd:6a:
7a:61:50:1f:93:8d:8c:e2:d4:07:e7:6c:17:99:60:
4d:e6:6b:73:01:cc:0e:9c:ae:f4:1b:22:b9:6b:17:
a2:5c:03:cd:76:72:17:b8:7a:55:36:8a:70:07:47:
45:9d:4b:c4:84:37:92:ab:98:28:72:8d:93:f9:7c:
e0:f7:f3:04:ac:69:17:a6:2f:0d:3c:c3:7e:6a:64:
5e:59:6d:d1:9a:75:e6:60:90:7f:79:4b:35:41:1f:
8a:60:e7:1f:e6:19:b4:88:1d:47:a3:1f:2b:0b:cc:
5a:3a:67:24:34:16:30:8e:79:98:14:81:f9:2f:f8:
7d:52:45:3b:82:ea:93:ab:46:ad:8f:72:07:2c:1b:
8e:ed:f2:8d:b9:96:da:be:64:c5:e3:13:6b:4a:f4:
ea:85:eb:ee:d6:13:61:37:4b:52:5a:68:e5:d2:d3:
7c:84:de:81:2c:93:0a:cb:1c:93:2b:6b:16:27:d5:
db:a1:89:b7:f5:06:76:b5:9c:ab:20:5f:91:09:47:
dd:38:1b:28:3e:29:a9:e8:35:43:4b:44:a0:91:3d:
55:58:4f:20:e0:f7:06:4a:0a:0a:8a:01:90:a4:18:
c9:e3:38:3d:75:22:77:f4:00:db:6a:11:86:6b:aa:
96:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9C:BC:7E:34:5D:68:67:33:EB:9B:83:EF:5E:44:B3:88:99:4D:8D
X509v3 Authority Key Identifier:
keyid:1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d4:1f:81:69:7a:1e:db:13:d6:00:6c:5c:e3:30:c3:2b:7a:
72:76:1b:85:19:cb:26:1d:fb:5f:b7:41:b5:7e:c7:14:57:58:
b8:45:83:94:e3:4d:4a:7b:f0:dd:1a:0b:40:20:fe:fc:d5:a1:
78:47:10:01:4a:27:1e:ff:69:f3:70:1d:c7:d2:bb:b8:0d:6c:
fc:d0:db:d8:33:22:24:16:47:21:6c:6e:fa:dc:ec:d8:d7:f4:
d6:ba:b1:51:ef:17:24:c1:0c:71:97:ba:65:c1:89:2d:73:d7:
e2:0e:25:f2:d6:9d:59:5a:40:21:a0:ce:e6:35:e5:12:99:25:
7d:aa:cf:cb:d3:79:bb:25:a8:54:c3:ed:eb:bb:77:2a:15:82:
0f:0a:fd:1c:97:8b:23:ef:02:2e:10:d3:27:09:70:a8:c5:6c:
34:e1:49:73:de:16:67:20:ae:15:5b:16:d2:e9:86:35:2b:fd:
dc:b7:22:a9:f7:b6:d3:ed:b3:1e:8a:d2:17:a5:dd:78:4e:f6:
16:12:fb:ea:c5:ad:e9:cd:47:b2:57:93:23:08:ba:d6:12:f7:
ab:aa:0d:a9:19:e3:ed:77:a7:28:07:57:6f:ff:86:c3:2d:17:
6a:c5:ab:ef:01:bd:6e:fb:74:b0:db:e7:2b:66:a5:c8:1d:41:
3b:11:7c:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrT0wamDYYmaYrknr4INNrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYWUxYTI2OTY3ZGZlMjg3ZWI2MDI3NDllYzJjNmYwNWFm
YmI1N2MwHhcNMjUwNjEzMjIwMDQ4WhcNMjUwNjE0MjIwMDQ4WjAzMTEwLwYDVQQD
EyhiMDljYmM3ZTM0NWQ2ODY3MzNlYjliODNlZjVlNDRiMzg4OTk0ZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YLCerFOKBEtmvkgzWp6YVAfk42M
4tQH52wXmWBN5mtzAcwOnK70GyK5axeiXAPNdnIXuHpVNopwB0dFnUvEhDeSq5go
co2T+Xzg9/MErGkXpi8NPMN+amReWW3RmnXmYJB/eUs1QR+KYOcf5hm0iB1Hox8r
C8xaOmckNBYwjnmYFIH5L/h9UkU7guqTq0atj3IHLBuO7fKNuZbavmTF4xNrSvTq
hevu1hNhN0tSWmjl0tN8hN6BLJMKyxyTK2sWJ9XboYm39QZ2tZyrIF+RCUfdOBso
Pimp6DVDS0SgkT1VWE8g4PcGSgoKigGQpBjJ4zg9dSJ39ADbahGGa6qWzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCcvH40XWhnM+ubg+9eRLOImU2NMB8GA1UdIwQY
MBaAFByuGiaWff4ofrYCdJ7CxvBa+7V8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEs0YUpwWjlfaWgtdGdKMG5zTEc4RnI3dFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMWI1MDAtMzRhNi00MjBhLWFhNDQt
NzQ5OTA1YzMyN2IxLzEvSEs0YUpwWjlfaWgtdGdKMG5zTEc4RnI3dFh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yMWI1MDAtMzRhNi00MjBhLWFhNDQtNzQ5OTA1YzMyN2Ix
LzEvSEs0YUpwWjlfaWgtdGdKMG5zTEc4RnI3dFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9QfgWl6
HtsT1gBsXOMwwyt6cnYbhRnLJh37X7dBtX7HFFdYuEWDlONNSnvw3RoLQCD+/NWh
eEcQAUonHv9p83Adx9K7uA1s/NDb2DMiJBZHIWxu+tzs2Nf01rqxUe8XJMEMcZe6
ZcGJLXPX4g4l8tadWVpAIaDO5jXlEpklfarPy9N5uyWoVMPt67t3KhWCDwr9HJeL
I+8CLhDTJwlwqMVsNOFJc94WZyCuFVsW0umGNSv93Lciqfe20+2zHorSF6XdeE72
FhL76sWt6c1HsleTIwi61hL3q6oNqRnj7XenKAdXb/+Gwy0XasWr7wG9bvt0sNvn
K2alyB1BOxF8mQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 01:43:58 2025 by rpki-client