Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
File: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft (raw, json)
Hash identifier: X0YE9U1/Zt9JGYmbI8KH6vqAEJrbPHL2mJEW/rZk9UA=
Subject key identifier: B8:21:BD:D6:50:7C:C0:7A:AD:BC:BF:CD:65:C1:20:73:64:26:47:6C
Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Certificate issuer: /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Certificate serial: 01974DB2CCC437E96A4B47C0F9DAF35ABFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 04:00:52 +0000
Manifest this update: Sun 08 Jun 2025 04:00:52 +0000
Manifest next update: Mon 09 Jun 2025 04:00:52 +0000
Files and hashes: 1: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl (hash: Xt7g0TGOkEqF0MYYFChxBD6L7UUCQrfJQhKcy8nWmwA=)
2: LiDek8ukAeDalnCmjHOSOx8ybkY.roa (hash: XaMtoZ+RB8cq+ljNgiN30o7Aneys4CKgmujbsMdFNUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:cc:c4:37:e9:6a:4b:47:c0:f9:da:f3:5a:bf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Validity
Not Before: Jun 8 04:00:52 2025 GMT
Not After : Jun 9 04:00:52 2025 GMT
Subject: CN=b821bdd6507cc07aadbcbfcd65c120736426476c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:d5:85:fc:bf:c2:66:74:d8:82:f8:ba:09:
69:25:37:7e:0e:73:ca:7a:93:b4:95:41:4f:dd:b8:
9f:1f:cd:ef:81:8c:7b:3b:6d:28:a3:7b:a2:ec:a3:
ca:b8:d6:26:9e:02:c2:d9:5c:1f:0d:1a:5b:85:e1:
d8:39:8f:a8:4a:81:54:ec:f3:81:c5:0e:9a:8e:c5:
cf:57:68:d0:f6:c8:a3:2a:07:85:9d:50:2a:35:4f:
8f:73:02:fd:7e:16:dd:e9:e4:ff:ff:55:1e:c3:d5:
77:5b:17:37:65:4c:45:60:70:d5:6c:6d:b3:0c:89:
76:95:c1:d8:1e:2e:c4:a1:b7:00:af:8c:03:42:0c:
71:80:3b:49:87:70:cb:cf:1f:62:97:c0:77:df:bc:
4f:aa:ed:50:66:50:45:f1:3c:57:e4:a8:86:fe:0e:
de:c8:b8:61:ab:c0:0b:e6:ff:41:3c:76:ee:86:8e:
38:d2:c6:1e:3a:06:44:74:12:c9:0f:d7:d2:7c:ba:
61:d8:78:b1:29:8a:f4:76:7c:61:a5:26:a9:99:40:
0d:de:7d:b6:7e:c8:9c:89:cf:57:1f:c7:bb:25:0f:
e9:ef:47:f8:81:45:d4:e4:13:c4:af:29:ed:99:e7:
c4:84:97:0d:19:25:2c:0d:b4:13:c6:3c:f3:39:04:
c8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:21:BD:D6:50:7C:C0:7A:AD:BC:BF:CD:65:C1:20:73:64:26:47:6C
X509v3 Authority Key Identifier:
keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:63:03:2a:59:5d:ab:1d:65:81:e0:dc:72:52:be:ff:79:0a:
7a:c0:0a:80:16:9a:55:c3:1d:0a:f4:57:50:35:36:a8:1d:4e:
0a:ed:b4:8d:d5:7c:88:47:ca:c7:83:f3:4a:83:28:3e:e2:8d:
df:74:46:ff:f7:59:8a:a8:3e:6f:79:aa:8e:d1:90:34:aa:91:
2d:ac:75:55:fa:16:3e:f9:68:9d:7e:f4:15:76:93:f0:c7:d2:
ea:b9:18:b6:16:d9:a1:27:18:ae:81:49:f1:e9:0d:dd:8f:5f:
6b:13:1d:7c:d8:82:e6:36:1b:25:61:c3:1f:b1:08:23:03:0d:
7f:31:bf:16:f5:fd:48:1c:83:43:fa:c4:f0:d7:e6:b2:42:01:
cd:61:3f:99:77:d6:7f:f0:fb:1c:a2:02:55:7a:7b:41:f2:1d:
0b:58:6d:23:1a:73:36:ea:d5:d8:df:94:be:c8:d6:71:b8:7c:
1c:1c:f3:a0:76:14:97:53:44:17:a7:d7:8f:86:9c:c3:63:52:
20:6f:9a:5b:08:3b:02:54:d7:c9:d5:db:89:05:4c:8a:b1:bf:
05:94:47:7e:50:07:d0:05:12:c7:54:f0:f2:c7:8b:f3:41:8c:
ba:0f:39:61:cc:24:3f:5e:b3:73:7d:4f:8a:85:cf:14:d1:4f:
e8:fa:f3:73
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdNsszEN+lqS0fA+drzWr+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMTI5Y2NiYjhjMjQxYTljOWIxZmYyMDczMGEyNjQ5NTZi
NTAyOTQwHhcNMjUwNjA4MDQwMDUyWhcNMjUwNjA5MDQwMDUyWjAzMTEwLwYDVQQD
EyhiODIxYmRkNjUwN2NjMDdhYWRiY2JmY2Q2NWMxMjA3MzY0MjY0NzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspXVhfy/wmZ02IL4uglpJTd+DnPK
epO0lUFP3bifH83vgYx7O20oo3ui7KPKuNYmngLC2VwfDRpbheHYOY+oSoFU7POB
xQ6ajsXPV2jQ9sijKgeFnVAqNU+PcwL9fhbd6eT//1Uew9V3Wxc3ZUxFYHDVbG2z
DIl2lcHYHi7EobcAr4wDQgxxgDtJh3DLzx9il8B337xPqu1QZlBF8TxX5KiG/g7e
yLhhq8AL5v9BPHbuho440sYeOgZEdBLJD9fSfLph2HixKYr0dnxhpSapmUAN3n22
fsicic9XH8e7JQ/p70f4gUXU5BPEryntmefEhJcNGSUsDbQTxjzzOQTIVwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLghvdZQfMB6rby/zWXBIHNkJkdsMB8GA1UdIwQY
MBaAFPoSnMu4wkGpybH/IHMKJklWtQKUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oS2N5N2pDUWFuSnNmOGdjd29tU1ZhMUFwUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvMzAwODM5LTE5MmUtNGVhOS05OWYy
LTE4ZmQ4NTZhNThiNy8xLzEtaEtjeTdqQ1FhbkpzZjhnY3dvbVNWYTFBcFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzhjLzMwMDgzOS0xOTJlLTRlYTktOTlmMi0xOGZkODU2YTU4
YjcvMS8xLWhLY3k3akNRYW5Kc2Y4Z2N3b21TVmExQXBRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWMD
Klldqx1lgeDcclK+/3kKesAKgBaaVcMdCvRXUDU2qB1OCu20jdV8iEfKx4PzSoMo
PuKN33RG//dZiqg+b3mqjtGQNKqRLax1VfoWPvlonX70FXaT8MfS6rkYthbZoScY
roFJ8ekN3Y9faxMdfNiC5jYbJWHDH7EIIwMNfzG/FvX9SByDQ/rE8NfmskIBzWE/
mXfWf/D7HKICVXp7QfIdC1htIxpzNurV2N+UvsjWcbh8HBzzoHYUl1NEF6fXj4ac
w2NSIG+aWwg7AlTXydXbiQVMirG/BZRHflAH0AUSx1Tw8seL80GMug85YcwkP16z
c31PioXPFNFP6Przcw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:37:11 2025 by rpki-client