Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier: TeapnC3uYos6g247MIKLTE4++H92AWG+GtU5oOxNCBk=
Subject key identifier: 75:DB:B4:92:13:25:68:24:BA:57:A4:8B:6E:AC:03:7C:38:8C:00:10
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer: /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial: 0197493150E65FE80254E73787A26A3A831F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 07:00:58 +0000
Manifest this update: Sat 07 Jun 2025 07:00:58 +0000
Manifest next update: Sun 08 Jun 2025 07:00:58 +0000
Files and hashes: 1: A4RzpDr3gOL8P149IxhrXzrosA4.roa (hash: yOCvJbe7MwqK0UFIIbITRG8d1PF4w5162JM6G8QiNYc=)
2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: e85CiyJDeAkcyCxxIGtoJ2NOvu6Rt6yVoMGjafvzZMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:50:e6:5f:e8:02:54:e7:37:87:a2:6a:3a:83:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Validity
Not Before: Jun 7 07:00:58 2025 GMT
Not After : Jun 8 07:00:58 2025 GMT
Subject: CN=75dbb49213256824ba57a48b6eac037c388c0010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:2f:6c:fa:76:86:52:ed:f9:b9:12:75:26:
c0:c3:d0:97:b3:e3:b2:cc:2d:0b:a0:12:7b:f1:53:
10:61:3f:65:bf:fe:a9:a8:15:63:86:99:00:72:d9:
8a:30:3c:4f:86:c0:53:98:42:78:7e:66:e9:fb:e2:
12:89:6b:72:4a:a0:80:72:b4:3e:24:97:22:61:c0:
fe:04:5b:22:9e:8c:0b:71:ba:ba:c1:ee:a0:59:e7:
b7:2b:14:8b:c6:3e:a1:a9:e2:bf:68:a0:55:7b:c3:
37:32:40:e9:73:6c:05:be:ce:11:2f:4b:5d:17:fb:
14:81:ff:56:05:0a:9a:b5:2d:71:fd:95:4e:5e:cd:
01:54:1e:29:b6:87:4b:99:37:b1:f1:37:53:9d:81:
1c:c4:fb:69:24:b4:77:bc:27:3e:2e:3d:2a:71:e9:
c0:0b:84:94:03:7c:3d:9f:00:1f:51:bb:dc:8f:22:
ed:90:f9:c8:37:8d:a2:4d:70:6d:1f:52:21:53:90:
0d:d9:e2:3f:b7:68:06:aa:70:bc:76:6d:d4:bc:6a:
86:74:a4:14:65:5f:2c:c3:fc:70:34:de:40:5c:6b:
8d:91:e1:92:00:7e:81:b5:1d:f4:8f:b1:0c:f3:ba:
36:b7:c9:85:32:c6:44:2e:37:82:a6:17:2d:c0:2b:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DB:B4:92:13:25:68:24:BA:57:A4:8B:6E:AC:03:7C:38:8C:00:10
X509v3 Authority Key Identifier:
keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:46:db:a6:e1:19:b5:50:42:7c:18:dd:cb:97:2c:b5:8b:6f:
ca:88:aa:87:98:fa:48:16:15:44:5f:d4:6a:32:51:f3:19:1a:
b2:ab:31:28:3d:1a:08:dd:0f:64:9d:cb:3b:28:cb:28:6d:65:
73:ed:97:eb:e4:82:8e:d0:74:ea:5d:6c:18:73:3a:3d:3f:dd:
83:84:c3:fe:ae:e2:3f:c1:42:dc:c3:ce:46:35:1e:6f:3c:b5:
41:8d:68:08:c9:76:f6:25:48:70:c4:07:7e:0b:62:d6:13:50:
2e:4a:0c:66:74:14:9e:48:1d:c2:3c:98:10:5d:dd:9e:ec:2f:
46:b8:0c:e4:cb:7f:2d:35:6a:c1:a6:e0:19:27:35:37:0e:b2:
8b:22:8e:79:0f:b2:6f:ce:9e:82:6a:70:41:8e:22:bb:a2:39:
8a:13:02:fd:ca:df:cf:1a:41:a8:ba:b2:0b:70:f5:00:0b:29:
f3:67:fe:4c:af:8a:01:92:a9:2d:76:b9:ca:c2:4a:5d:1c:72:
34:ee:9d:e2:7e:88:73:4f:a4:3e:3f:09:bd:e7:81:b9:e1:bd:
f8:bd:7d:7d:4d:d0:45:55:83:7a:1f:37:63:ff:eb:01:9e:e2:
70:1d:64:24:82:cf:6c:ba:25:3d:b0:ff:d0:69:d8:5e:94:22:
a6:88:af:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMVDmX+gCVOc3h6JqOoMfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MzU4OWZlZWNiZTRjNGFiNDQ0ZDkzODY0NDU0ZGJjZDdj
ZDBkZTcwHhcNMjUwNjA3MDcwMDU4WhcNMjUwNjA4MDcwMDU4WjAzMTEwLwYDVQQD
Eyg3NWRiYjQ5MjEzMjU2ODI0YmE1N2E0OGI2ZWFjMDM3YzM4OGMwMDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcUvbPp2hlLt+bkSdSbAw9CXs+Oy
zC0LoBJ78VMQYT9lv/6pqBVjhpkActmKMDxPhsBTmEJ4fmbp++ISiWtySqCAcrQ+
JJciYcD+BFsinowLcbq6we6gWee3KxSLxj6hqeK/aKBVe8M3MkDpc2wFvs4RL0td
F/sUgf9WBQqatS1x/ZVOXs0BVB4ptodLmTex8TdTnYEcxPtpJLR3vCc+Lj0qcenA
C4SUA3w9nwAfUbvcjyLtkPnIN42iTXBtH1IhU5AN2eI/t2gGqnC8dm3UvGqGdKQU
ZV8sw/xwNN5AXGuNkeGSAH6BtR30j7EM87o2t8mFMsZELjeCphctwCsLXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXbtJITJWgkuleki26sA3w4jAAQMB8GA1UdIwQY
MBaAFIY1if7svkxKtETZOGRFTbzXzQ3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGpXSl91eS1URXEwUk5rNFpFVk52TmZORGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81MTQwZmYtMDkwZS00M2RhLWI3Yzgt
NTllODE4YzZiNzFiLzEvaGpXSl91eS1URXEwUk5rNFpFVk52TmZORGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC81MTQwZmYtMDkwZS00M2RhLWI3YzgtNTllODE4YzZiNzFi
LzEvaGpXSl91eS1URXEwUk5rNFpFVk52TmZORGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEbbpuEZ
tVBCfBjdy5cstYtvyoiqh5j6SBYVRF/UajJR8xkasqsxKD0aCN0PZJ3LOyjLKG1l
c+2X6+SCjtB06l1sGHM6PT/dg4TD/q7iP8FC3MPORjUebzy1QY1oCMl29iVIcMQH
fgti1hNQLkoMZnQUnkgdwjyYEF3dnuwvRrgM5Mt/LTVqwabgGSc1Nw6yiyKOeQ+y
b86egmpwQY4iu6I5ihMC/crfzxpBqLqyC3D1AAsp82f+TK+KAZKpLXa5ysJKXRxy
NO6d4n6Ic0+kPj8JveeBueG9+L19fU3QRVWDeh83Y//rAZ7icB1kJILPbLolPbD/
0GnYXpQipoivvg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:16:34 2025 by rpki-client