Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
File: HvNtbboJfqbUsq2k52PoTss9gXo.mft (raw, json)
Hash identifier: 5KEYKnyRq9At+hYwNXzMOJtIJUROWR7OP+lcKGw/XzY=
Subject key identifier: 50:7D:18:0F:0E:0D:B8:4B:E7:7C:BB:76:BD:1B:97:56:D4:C8:B6:B1
Authority key identifier: 1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
Certificate issuer: /CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Certificate serial: 01974B1F8A10ADEAA9452341C96F4080312D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
Manifest number: 0468
Signing time: Sat 07 Jun 2025 16:00:47 +0000
Manifest this update: Sat 07 Jun 2025 16:00:47 +0000
Manifest next update: Sun 08 Jun 2025 16:00:47 +0000
Files and hashes: 1: 1-fDLqnKfMZzfosw8Gra-kuHRukQ.roa (hash: 91Wi2oW4Wdmr3Kf24VCGVEfXWacp6jcVuiTMlTsIcZQ=)
2: HvNtbboJfqbUsq2k52PoTss9gXo.crl (hash: bPBvk+A03PgW7UBpf4ZgE7zdtvzRAVBPwAfBt888ttA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:8a:10:ad:ea:a9:45:23:41:c9:6f:40:80:31:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Validity
Not Before: Jun 7 16:00:47 2025 GMT
Not After : Jun 8 16:00:47 2025 GMT
Subject: CN=507d180f0e0db84be77cbb76bd1b9756d4c8b6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:82:77:10:b9:2c:55:d1:9f:32:ef:63:42:
7d:21:97:0b:7b:d2:a7:f9:cd:dc:3d:1f:ce:74:14:
f8:d2:e9:f2:ae:c3:2f:d7:17:0d:a2:0f:0a:80:37:
52:d5:60:38:d3:3f:8c:e6:95:f2:0f:46:65:f3:99:
3a:67:69:7e:b3:e6:c3:e0:11:c8:dc:d0:be:3a:fb:
28:26:49:2d:e1:34:5e:4e:38:31:31:24:61:58:1f:
60:88:f6:92:ee:59:69:78:08:92:9d:dd:1f:aa:43:
bd:a3:39:26:2b:09:d1:1c:26:30:7a:15:55:df:0d:
2a:c4:e2:85:f7:91:f8:b2:f4:ae:fd:7a:78:2c:1b:
b5:64:b7:e6:e9:fa:74:7f:c9:de:4f:8f:91:19:e7:
1e:21:97:6b:a9:f2:5e:b3:59:c6:df:a9:67:fd:a8:
a4:f9:96:f0:5c:24:26:a1:7a:bd:2b:77:f3:79:60:
3d:07:8a:4d:ad:e9:b5:36:75:78:d2:09:06:e6:1f:
16:06:47:58:99:10:29:f9:12:e6:81:bf:5e:a8:87:
07:a5:5c:3a:82:50:bc:32:85:cf:a8:45:af:ca:d2:
27:4b:0b:51:2a:5e:77:31:70:d1:be:9b:cc:f6:15:
e8:15:cd:d1:40:df:82:af:4f:ae:ee:0a:c5:aa:7c:
f3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7D:18:0F:0E:0D:B8:4B:E7:7C:BB:76:BD:1B:97:56:D4:C8:B6:B1
X509v3 Authority Key Identifier:
keyid:1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:78:50:ac:0c:cd:6c:9e:ed:b0:8f:51:d2:e7:7e:c7:15:bf:
61:c6:75:09:5b:8d:13:18:36:6d:2a:0b:6c:3b:4d:f4:35:2a:
39:db:1e:e2:b9:a0:9d:ef:d1:30:13:d2:f1:68:84:ed:6f:bb:
b1:66:56:48:82:f0:b1:58:cc:8a:71:6c:95:83:29:2c:15:1b:
c9:07:5a:c8:9a:e9:b9:36:4b:51:4b:ac:c8:8a:7d:07:27:2d:
3a:3f:fe:28:a3:bb:41:d9:54:28:2d:1b:77:59:8f:de:23:53:
73:83:25:b6:db:b0:f6:3c:a3:0b:d2:38:45:49:31:63:6e:bf:
5c:6a:5d:be:e0:7a:2b:2d:41:e1:d9:46:77:97:43:40:dc:d3:
7f:6d:ec:99:2e:ba:09:aa:46:d9:0d:d6:a5:8d:3e:45:8d:52:
50:94:e9:f8:fb:07:06:67:e5:77:7f:d5:c9:1e:c7:77:e3:01:
ec:99:b0:54:fb:cc:69:9d:c4:07:34:ea:18:90:a7:eb:71:33:
b4:e3:57:f7:87:52:4a:83:e8:a0:16:b4:64:8e:3c:1b:d2:50:
e0:d0:b2:74:1c:bb:c4:12:2d:19:d9:41:82:84:4b:7d:12:48:
0f:97:2b:57:1d:61:82:b0:fa:19:5c:ba:da:99:21:ad:ed:06:
ab:84:84:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLH4oQreqpRSNByW9AgDEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZjM2ZDZkYmEwOTdlYTZkNGIyYWRhNGU3NjNlODRlY2Iz
ZDgxN2EwHhcNMjUwNjA3MTYwMDQ3WhcNMjUwNjA4MTYwMDQ3WjAzMTEwLwYDVQQD
Eyg1MDdkMTgwZjBlMGRiODRiZTc3Y2JiNzZiZDFiOTc1NmQ0YzhiNmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylaCdxC5LFXRnzLvY0J9IZcLe9Kn
+c3cPR/OdBT40unyrsMv1xcNog8KgDdS1WA40z+M5pXyD0Zl85k6Z2l+s+bD4BHI
3NC+OvsoJkkt4TReTjgxMSRhWB9giPaS7llpeAiSnd0fqkO9ozkmKwnRHCYwehVV
3w0qxOKF95H4svSu/Xp4LBu1ZLfm6fp0f8neT4+RGeceIZdrqfJes1nG36ln/aik
+ZbwXCQmoXq9K3fzeWA9B4pNrem1NnV40gkG5h8WBkdYmRAp+RLmgb9eqIcHpVw6
glC8MoXPqEWvytInSwtRKl53MXDRvpvM9hXoFc3RQN+Cr0+u7grFqnzzFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFB9GA8ODbhL53y7dr0bl1bUyLaxMB8GA1UdIwQY
MBaAFB7zbW26CX6m1LKtpOdj6E7LPYF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZOdGJib0pmcWJVc3EyazUyUG9Uc3M5Z1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8zZWQzN2ItYjgwYS00YjEwLTkxNGIt
NTdjOTI0MzFkM2QzLzEvSHZOdGJib0pmcWJVc3EyazUyUG9Uc3M5Z1hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8zZWQzN2ItYjgwYS00YjEwLTkxNGItNTdjOTI0MzFkM2Qz
LzEvSHZOdGJib0pmcWJVc3EyazUyUG9Uc3M5Z1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXhQrAzN
bJ7tsI9R0ud+xxW/YcZ1CVuNExg2bSoLbDtN9DUqOdse4rmgne/RMBPS8WiE7W+7
sWZWSILwsVjMinFslYMpLBUbyQdayJrpuTZLUUusyIp9ByctOj/+KKO7QdlUKC0b
d1mP3iNTc4Mlttuw9jyjC9I4RUkxY26/XGpdvuB6Ky1B4dlGd5dDQNzTf23smS66
CapG2Q3WpY0+RY1SUJTp+PsHBmfld3/VyR7Hd+MB7JmwVPvMaZ3EBzTqGJCn63Ez
tONX94dSSoPooBa0ZI48G9JQ4NCydBy7xBItGdlBgoRLfRJID5crVx1hgrD6GVy6
2pkhre0Gq4SErQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:57 2025 by rpki-client