Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
File: hUxfKY2BrMVXP9WfsF3YbyCry6g.mft (raw, json)
Hash identifier: 1qTYyZqXOeReA1BsV7R2UWyZk9yTLkyEbsjdj2bhU/w=
Subject key identifier: 05:6D:C3:1E:23:FA:BE:A2:FB:E9:6E:FD:79:56:A0:2E:8A:63:E3:78
Authority key identifier: 85:4C:5F:29:8D:81:AC:C5:57:3F:D5:9F:B0:5D:D8:6F:20:AB:CB:A8
Certificate issuer: /CN=854c5f298d81acc5573fd59fb05dd86f20abcba8
Certificate serial: 0197488CBA48923375C3E7288CD9180904FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
Manifest number: 0FFB
Signing time: Sat 07 Jun 2025 04:01:11 +0000
Manifest this update: Sat 07 Jun 2025 04:01:11 +0000
Manifest next update: Sun 08 Jun 2025 04:01:11 +0000
Files and hashes: 1: CJqITen207ZODHzo1XtCMdI_VBo.roa (hash: f1FWG5pswdJQTpL1NXAace6jGLQD4G1flmSN2+tjCMo=)
2: hUxfKY2BrMVXP9WfsF3YbyCry6g.crl (hash: eN/eyyOnI9XkEfmsgu0dZzJsqQrCXmoCYvX5Qcarjls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:ba:48:92:33:75:c3:e7:28:8c:d9:18:09:04:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c5f298d81acc5573fd59fb05dd86f20abcba8
Validity
Not Before: Jun 7 04:01:11 2025 GMT
Not After : Jun 8 04:01:11 2025 GMT
Subject: CN=056dc31e23fabea2fbe96efd7956a02e8a63e378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:67:4b:9d:3b:0e:f4:40:ac:c5:8f:a5:53:
fe:4c:cc:f7:e9:1d:c1:0f:e5:e4:29:15:bf:48:fb:
5c:b3:d3:2b:96:07:12:6e:a9:bd:af:4f:97:ce:83:
ef:4b:e6:d3:c9:c1:e7:b7:3d:b7:5d:3d:c7:e9:ff:
58:9a:cb:8b:35:69:64:1e:9c:37:3b:30:8f:8d:af:
80:39:a3:f8:ed:8a:23:c3:46:8d:28:f2:14:c6:ab:
fa:31:10:c7:fd:9a:1f:b0:a4:d3:41:d1:2c:fc:2b:
3a:d3:d6:39:89:13:07:1b:7a:3d:95:56:70:a2:3e:
cf:66:21:63:3a:af:79:15:c5:f0:b6:ba:73:ef:d7:
a4:b4:b0:16:ed:9d:1f:1e:6e:ca:25:8f:c0:28:55:
ba:e1:74:13:c7:40:87:16:5c:ac:00:41:13:c4:2f:
fa:ef:4a:d6:b3:e9:d9:19:61:81:e5:47:2f:ab:da:
05:2a:e3:e4:b7:ff:bb:f8:a6:dc:bf:07:0e:da:34:
e4:6d:68:45:5b:78:4e:8b:b7:a8:b3:26:35:87:0c:
df:fb:18:eb:f0:82:2f:14:78:5a:ca:85:f1:8f:4a:
9a:b5:87:11:19:ce:0b:8b:25:9c:2a:a6:f2:a5:99:
52:c0:2d:a1:69:6b:75:57:33:39:ee:94:5c:2f:1d:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6D:C3:1E:23:FA:BE:A2:FB:E9:6E:FD:79:56:A0:2E:8A:63:E3:78
X509v3 Authority Key Identifier:
keyid:85:4C:5F:29:8D:81:AC:C5:57:3F:D5:9F:B0:5D:D8:6F:20:AB:CB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d8:b9:ae:de:3c:66:08:dd:63:e5:dc:16:48:72:a3:43:5c:
cd:33:ea:5d:da:68:b0:2d:81:42:9f:2e:c7:ba:8c:2d:de:70:
b5:6e:d0:73:92:39:6d:a0:44:55:a0:9b:1b:6b:81:27:cc:de:
8f:e5:5d:ef:49:62:1d:34:77:57:77:84:6a:b9:cc:91:3d:3b:
e8:41:6f:af:cb:68:f8:7e:67:c3:9f:fe:96:16:e0:87:ed:70:
b2:b4:36:ff:fc:d2:dc:e2:26:e4:80:36:b8:f5:fc:63:a4:b6:
6f:33:0e:cb:a3:51:11:8f:a7:09:2e:b3:a7:c4:c8:94:f1:dc:
80:f6:ad:1b:59:72:ff:87:24:c3:09:72:57:78:52:1c:e5:97:
6a:05:24:98:64:3f:df:f7:b7:2d:c6:b5:90:cf:6b:5e:09:83:
e6:a9:59:d7:f4:c0:36:e5:a2:2d:d9:54:14:5c:d7:91:ff:9e:
b4:f8:7c:10:ee:ae:ce:61:bc:4c:31:7f:03:b2:b9:91:85:61:
e1:2a:be:79:3a:a7:27:00:6f:61:44:a9:0f:e5:24:05:85:ab:
b9:6a:2a:f2:b2:74:fa:ff:58:48:30:b3:de:d9:a3:98:7a:e6:
1b:30:82:28:96:3f:f9:25:8e:f5:36:5e:7a:86:e0:41:ea:04:
e7:43:dd:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjLpIkjN1w+cojNkYCQT/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGM1ZjI5OGQ4MWFjYzU1NzNmZDU5ZmIwNWRkODZmMjBh
YmNiYTgwHhcNMjUwNjA3MDQwMTExWhcNMjUwNjA4MDQwMTExWjAzMTEwLwYDVQQD
EygwNTZkYzMxZTIzZmFiZWEyZmJlOTZlZmQ3OTU2YTAyZThhNjNlMzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eNnS507DvRArMWPpVP+TMz36R3B
D+XkKRW/SPtcs9MrlgcSbqm9r0+XzoPvS+bTycHntz23XT3H6f9YmsuLNWlkHpw3
OzCPja+AOaP47Yojw0aNKPIUxqv6MRDH/ZofsKTTQdEs/Cs609Y5iRMHG3o9lVZw
oj7PZiFjOq95FcXwtrpz79ektLAW7Z0fHm7KJY/AKFW64XQTx0CHFlysAEETxC/6
70rWs+nZGWGB5Ucvq9oFKuPkt/+7+KbcvwcO2jTkbWhFW3hOi7eosyY1hwzf+xjr
8IIvFHhayoXxj0qatYcRGc4LiyWcKqbypZlSwC2haWt1VzM57pRcLx2Y1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVtwx4j+r6i++lu/XlWoC6KY+N4MB8GA1UdIwQY
MBaAFIVMXymNgazFVz/Vn7Bd2G8gq8uoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFV4ZktZMkJyTVZYUDlXZnNGM1lieUNyeTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xMjk1ZDAtMzkxMS00YTE4LWE4ZDIt
NzUyZDU5YTA0MmMyLzEvaFV4ZktZMkJyTVZYUDlXZnNGM1lieUNyeTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xMjk1ZDAtMzkxMS00YTE4LWE4ZDItNzUyZDU5YTA0MmMy
LzEvaFV4ZktZMkJyTVZYUDlXZnNGM1lieUNyeTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndi5rt48
ZgjdY+XcFkhyo0NczTPqXdposC2BQp8ux7qMLd5wtW7Qc5I5baBEVaCbG2uBJ8ze
j+Vd70liHTR3V3eEarnMkT076EFvr8to+H5nw5/+lhbgh+1wsrQ2//zS3OIm5IA2
uPX8Y6S2bzMOy6NREY+nCS6zp8TIlPHcgPatG1ly/4ckwwlyV3hSHOWXagUkmGQ/
3/e3Lca1kM9rXgmD5qlZ1/TANuWiLdlUFFzXkf+etPh8EO6uzmG8TDF/A7K5kYVh
4Sq+eTqnJwBvYUSpD+UkBYWruWoq8rJ0+v9YSDCz3tmjmHrmGzCCKJY/+SWO9TZe
eobgQeoE50PdVw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:21 2025 by rpki-client