Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
File: H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft (raw, json)
Hash identifier: gHvJCDbJmeLOXHOiQHEE51VhU3hCAlrlLqNxcOYWvmU=
Subject key identifier: 4E:37:C0:CF:29:A4:6B:D0:F6:1D:04:7D:48:E3:12:21:4A:29:73:56
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Certificate issuer: /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial: 01974B8D537B245F16628A51E7465C6C9B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 18:00:42 +0000
Manifest this update: Sat 07 Jun 2025 18:00:42 +0000
Manifest next update: Sun 08 Jun 2025 18:00:42 +0000
Files and hashes: 1: H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl (hash: H9oGZl2nR+sv5ktckfrRoEPAzbdPhQL23cSehvnV514=)
2: JExy0vnBpyXtQRXrczW-rXsvlvc.roa (hash: uayvEFxY8m7ytIfb/FnA/i1VKT8AyOarqBsheJam/Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:53:7b:24:5f:16:62:8a:51:e7:46:5c:6c:9b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f74988332069e1835246a85a1094125152b3765
Validity
Not Before: Jun 7 18:00:42 2025 GMT
Not After : Jun 8 18:00:42 2025 GMT
Subject: CN=4e37c0cf29a46bd0f61d047d48e312214a297356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:3c:0f:17:1a:f7:2e:e4:97:da:de:c3:0e:
3d:6e:d1:a0:dd:f4:31:d1:0f:d0:fb:7e:ec:d9:7a:
f7:fa:ba:09:3c:b4:9f:ab:a8:f6:91:6e:72:5b:b9:
98:71:06:c9:4e:0c:9b:c5:dd:8b:03:2c:3f:ea:94:
45:6d:89:36:40:c7:83:84:c1:e5:ad:0e:30:94:fd:
a1:01:d8:04:76:4d:56:d2:67:9e:c6:12:ed:23:f8:
77:00:41:6b:55:a4:31:98:83:cd:53:9f:0a:b5:ea:
7c:bf:b9:4e:db:12:4a:e0:46:9a:48:46:d6:08:4e:
8b:fa:18:a1:db:b3:cb:db:3c:9c:6f:4f:cf:48:d7:
e6:72:91:4e:85:66:39:18:be:1a:b1:6a:6a:97:c7:
0a:58:67:53:ef:bf:54:73:f6:86:1d:bb:be:62:52:
70:a8:77:65:f2:cf:31:1f:39:ec:0c:03:d8:59:92:
4f:7d:f1:7a:c9:63:f6:27:a0:35:d7:6e:87:51:a6:
ca:07:42:94:54:dd:41:06:43:79:91:0c:4f:92:81:
76:6b:54:aa:dc:1d:80:eb:4a:7e:72:31:bb:f3:b2:
31:ef:fc:b6:61:5d:24:6e:65:ce:80:a7:9d:0b:24:
c4:a0:e6:a0:19:10:d9:36:72:18:40:0e:e2:a9:93:
9b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:37:C0:CF:29:A4:6B:D0:F6:1D:04:7D:48:E3:12:21:4A:29:73:56
X509v3 Authority Key Identifier:
keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:18:31:8a:81:d7:ab:da:b1:41:52:5d:04:1f:d4:dd:ff:9d:
8a:34:ce:dd:54:93:a4:cf:85:32:7b:ef:23:ad:3a:d9:78:78:
a0:4e:06:89:16:c7:c7:a3:aa:42:71:c1:2b:9b:b6:66:fe:64:
0e:90:88:41:52:55:16:10:13:1a:16:f5:a7:c0:ee:ec:ff:25:
e2:7b:a6:de:81:82:6a:44:44:15:77:be:d7:cb:f7:ce:85:89:
e8:ed:63:af:55:7a:23:75:71:41:e1:ed:4d:c4:43:83:08:2f:
9b:d1:cb:77:ea:b2:2d:38:0a:e3:f4:0f:18:f4:13:b8:0f:07:
da:35:c7:04:69:4c:5f:7b:1e:20:16:32:47:88:a5:ab:f6:88:
e5:8c:0b:3a:7d:20:8d:62:73:e5:38:93:a0:b2:88:f9:66:4d:
bc:61:28:b2:d0:71:4d:13:2c:bd:3f:fb:b9:96:e0:75:77:83:
a7:a5:16:65:4b:10:5e:4d:02:59:8a:8b:bc:56:d6:07:6f:5e:
99:e6:e6:bd:f8:e2:7b:7c:30:c8:e9:e4:39:4f:ab:dd:ec:7a:
a5:89:41:6f:1e:73:c7:db:89:68:d4:45:8b:35:bf:ac:c7:ba:
3e:ef:6e:aa:55:f3:80:58:f9:99:b7:d7:74:25:f6:17:90:5d:
cb:c7:78:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjVN7JF8WYopR50ZcbJt3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNzQ5ODgzMzIwNjllMTgzNTI0NmE4NWExMDk0MTI1MTUy
YjM3NjUwHhcNMjUwNjA3MTgwMDQyWhcNMjUwNjA4MTgwMDQyWjAzMTEwLwYDVQQD
Eyg0ZTM3YzBjZjI5YTQ2YmQwZjYxZDA0N2Q0OGUzMTIyMTRhMjk3MzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbY8Dxca9y7kl9reww49btGg3fQx
0Q/Q+37s2Xr3+roJPLSfq6j2kW5yW7mYcQbJTgybxd2LAyw/6pRFbYk2QMeDhMHl
rQ4wlP2hAdgEdk1W0meexhLtI/h3AEFrVaQxmIPNU58Ktep8v7lO2xJK4EaaSEbW
CE6L+hih27PL2zycb0/PSNfmcpFOhWY5GL4asWpql8cKWGdT779Uc/aGHbu+YlJw
qHdl8s8xHznsDAPYWZJPffF6yWP2J6A1126HUabKB0KUVN1BBkN5kQxPkoF2a1Sq
3B2A60p+cjG787Ix7/y2YV0kbmXOgKedCyTEoOagGRDZNnIYQA7iqZObWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE43wM8ppGvQ9h0EfUjjEiFKKXNWMB8GA1UdIwQY
MBaAFB90mIMyBp4YNSRqhaEJQSUVKzdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDNTWWd6SUduaGcxSkdxRm9RbEJKUlVyTjJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8zZmE0NWQtNjFiNi00YTI2LThkN2Yt
OGQ5ZDc1MmM0ZjRhLzEvSDNTWWd6SUduaGcxSkdxRm9RbEJKUlVyTjJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8zZmE0NWQtNjFiNi00YTI2LThkN2YtOGQ5ZDc1MmM0ZjRh
LzEvSDNTWWd6SUduaGcxSkdxRm9RbEJKUlVyTjJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRgxioHX
q9qxQVJdBB/U3f+dijTO3VSTpM+FMnvvI6062Xh4oE4GiRbHx6OqQnHBK5u2Zv5k
DpCIQVJVFhATGhb1p8Du7P8l4num3oGCakREFXe+18v3zoWJ6O1jr1V6I3VxQeHt
TcRDgwgvm9HLd+qyLTgK4/QPGPQTuA8H2jXHBGlMX3seIBYyR4ilq/aI5YwLOn0g
jWJz5TiToLKI+WZNvGEostBxTRMsvT/7uZbgdXeDp6UWZUsQXk0CWYqLvFbWB29e
mebmvfjie3wwyOnkOU+r3ex6pYlBbx5zx9uJaNRFizW/rMe6Pu9uqlXzgFj5mbfX
dCX2F5Bdy8d42A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:53:30 2025 by rpki-client