Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
File: pH9wjDSl5x2vPS5UuZq3Twae-As.mft (raw, json)
Hash identifier: BP+XdTEPttBUh54rMWaxEudlPMG8wZks1D/7jweFpSY=
Subject key identifier: 50:D3:2F:C6:CD:66:01:9C:97:86:E1:AB:0C:63:2C:F1:E9:FB:3A:CF
Authority key identifier: A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
Certificate issuer: /CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Certificate serial: 01974D0DC1BB354F0F58AFE3159B187A5B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
Manifest number: 0B18
Signing time: Sun 08 Jun 2025 01:00:36 +0000
Manifest this update: Sun 08 Jun 2025 01:00:36 +0000
Manifest next update: Mon 09 Jun 2025 01:00:36 +0000
Files and hashes: 1: 6y2PxXoNf17k752-h-Vh6181ybg.roa (hash: /D4LWQIJRMeiTsLLzqJFb6QygqeaBkt1FMx26cAAcmk=)
2: Uxq2zaQ3C0F2KaVo_-rxCUMMpzU.roa (hash: VbEHRBQ6CnI3V57/ypd9YP2tAsM8cgW+F1+a7XG3s5Q=)
3: pH9wjDSl5x2vPS5UuZq3Twae-As.crl (hash: kDNHM3l1N++2uFOX4ctA5F/p48ut1rtKN/jpCI14Gy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:c1:bb:35:4f:0f:58:af:e3:15:9b:18:7a:5b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Validity
Not Before: Jun 8 01:00:36 2025 GMT
Not After : Jun 9 01:00:36 2025 GMT
Subject: CN=50d32fc6cd66019c9786e1ab0c632cf1e9fb3acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:80:d9:c2:15:ed:d1:7f:3e:fd:4e:b6:5d:
a0:e6:37:6c:3f:51:7a:28:18:63:27:f3:da:14:a0:
9a:66:c2:ae:4e:ee:b3:a9:4e:fb:62:62:5f:4e:e0:
d2:16:cc:e0:79:4f:49:3c:be:f7:73:d1:8f:aa:33:
fd:5c:af:a8:78:9b:26:a5:63:fb:30:07:59:49:0d:
0f:4f:7a:95:44:27:35:fa:73:13:da:7a:e9:11:42:
09:68:8c:75:ed:92:09:36:bb:43:7d:95:c6:2b:d0:
8e:35:a3:43:f1:fb:dc:ab:e8:69:5e:33:d1:da:9b:
10:5c:2f:78:1a:0d:0a:4b:8d:e0:d6:aa:53:fc:a6:
2a:6f:b2:42:24:61:7d:1d:84:7f:5b:eb:03:18:ae:
71:f5:a8:74:ab:d7:c1:96:89:ae:3e:08:f2:61:a9:
f9:77:ba:2f:2d:08:ae:4d:e0:55:1b:be:80:be:07:
0b:79:53:64:e0:a5:4a:3c:2d:d3:50:6f:37:8b:bb:
63:64:a3:19:a2:d9:ea:c1:38:d8:e9:f1:fe:ce:f4:
d9:fa:1d:bb:a6:4a:9f:61:c1:15:87:91:74:9d:aa:
aa:8c:dd:a6:48:99:84:8e:ab:55:3a:f8:8b:77:cf:
8f:a5:ab:36:1e:d7:a7:75:80:60:7f:a6:19:66:56:
e8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D3:2F:C6:CD:66:01:9C:97:86:E1:AB:0C:63:2C:F1:E9:FB:3A:CF
X509v3 Authority Key Identifier:
keyid:A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5c:d8:24:77:5b:15:a9:1d:9e:45:4f:03:62:30:66:53:f9:
e0:8a:a0:1c:60:7f:15:7f:92:81:4e:1c:2f:1f:af:df:b9:24:
c9:f0:3e:38:04:41:99:4a:a0:4d:61:62:e0:2c:2c:e4:c3:1d:
c0:e3:07:7e:b8:0e:2a:7f:0c:72:ac:ee:0b:94:eb:b5:96:b0:
13:18:90:da:46:80:4e:8b:28:62:3c:c9:af:4d:0b:18:29:3f:
2c:cf:46:4c:8d:ed:ad:20:d2:8d:2e:b7:4a:eb:ea:60:9e:f5:
3a:4c:fd:77:89:f5:3f:62:30:4a:31:c0:c7:96:87:d0:30:13:
32:5c:99:47:47:5c:ec:6c:b7:d2:26:1b:3f:43:45:b3:51:8d:
5a:f5:6b:a6:ca:da:f0:01:97:99:90:99:8b:54:13:c9:81:37:
fd:1c:09:86:04:88:09:47:3f:76:5e:a5:3f:7c:fd:c0:b8:41:
8f:ed:fb:97:ab:0e:7c:4e:aa:49:d0:1b:bb:22:44:31:9f:8d:
a9:1e:f6:b4:bf:73:41:19:87:8c:d3:dc:9c:03:6b:55:8e:6e:
76:bb:fb:1a:db:3a:21:33:56:6e:f7:f4:be:e6:b7:bf:4f:a4:
82:a2:9d:69:f1:6a:ed:d7:59:2f:83:a0:d6:1c:39:85:8f:32:
86:8f:4d:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDcG7NU8PWK/jFZsYeltnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0N2Y3MDhjMzRhNWU3MWRhZjNkMmU1NGI5OWFiNzRmMDY5
ZWY4MGIwHhcNMjUwNjA4MDEwMDM2WhcNMjUwNjA5MDEwMDM2WjAzMTEwLwYDVQQD
Eyg1MGQzMmZjNmNkNjYwMTljOTc4NmUxYWIwYzYzMmNmMWU5ZmIzYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRCA2cIV7dF/Pv1Otl2g5jdsP1F6
KBhjJ/PaFKCaZsKuTu6zqU77YmJfTuDSFszgeU9JPL73c9GPqjP9XK+oeJsmpWP7
MAdZSQ0PT3qVRCc1+nMT2nrpEUIJaIx17ZIJNrtDfZXGK9CONaND8fvcq+hpXjPR
2psQXC94Gg0KS43g1qpT/KYqb7JCJGF9HYR/W+sDGK5x9ah0q9fBlomuPgjyYan5
d7ovLQiuTeBVG76AvgcLeVNk4KVKPC3TUG83i7tjZKMZotnqwTjY6fH+zvTZ+h27
pkqfYcEVh5F0naqqjN2mSJmEjqtVOviLd8+Ppas2HtendYBgf6YZZlboowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDTL8bNZgGcl4bhqwxjLPHp+zrPMB8GA1UdIwQY
MBaAFKR/cIw0pecdrz0uVLmat08GnvgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8wMTlhMWUtYmU5OC00MTRjLThjMmMt
NmIyN2ZmMjI1N2M2LzEvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8wMTlhMWUtYmU5OC00MTRjLThjMmMtNmIyN2ZmMjI1N2M2
LzEvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1zYJHdb
FakdnkVPA2IwZlP54IqgHGB/FX+SgU4cLx+v37kkyfA+OARBmUqgTWFi4Cws5MMd
wOMHfrgOKn8McqzuC5TrtZawExiQ2kaATosoYjzJr00LGCk/LM9GTI3trSDSjS63
SuvqYJ71Okz9d4n1P2IwSjHAx5aH0DATMlyZR0dc7Gy30iYbP0NFs1GNWvVrpsra
8AGXmZCZi1QTyYE3/RwJhgSICUc/dl6lP3z9wLhBj+37l6sOfE6qSdAbuyJEMZ+N
qR72tL9zQRmHjNPcnANrVY5udrv7Gts6ITNWbvf0vua3v0+kgqKdafFq7ddZL4Og
1hw5hY8yho9NMg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:15:25 2025 by rpki-client