Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
File: hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json)
Hash identifier: IvqeWvkaF9XALD1Di6jcFyStyH79EHkeRmBVUM2alek=
Subject key identifier: 6F:51:63:36:38:D2:83:25:D7:D4:51:6C:F7:7B:F9:93:BA:15:76:95
Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674
Certificate serial: 01974E8E9A6935AB84720F344CB0F4B3C90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
Manifest number: 0A70
Signing time: Sun 08 Jun 2025 08:00:57 +0000
Manifest this update: Sun 08 Jun 2025 08:00:57 +0000
Manifest next update: Mon 09 Jun 2025 08:00:57 +0000
Files and hashes: 1: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: O9feJJNPVBgM9huqg29lUUE04pHzihYfsoUG0Zatb3A=)
2: wWq59skVXk0ZG4IFLK9dggmPZBc.roa (hash: G7C47jomjQ8yRWntSox+zS/AjFvrINeu+2AEHacLP1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:9a:69:35:ab:84:72:0f:34:4c:b0:f4:b3:c9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674
Validity
Not Before: Jun 8 08:00:57 2025 GMT
Not After : Jun 9 08:00:57 2025 GMT
Subject: CN=6f51633638d28325d7d4516cf77bf993ba157695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:4e:ad:4e:15:ac:60:62:f3:4d:57:3a:1c:
63:dd:ef:53:c2:ef:ad:92:27:ef:a1:32:e6:16:eb:
42:81:a6:d8:32:5e:9f:77:05:8c:ac:62:7f:48:6a:
3e:06:47:bd:7b:42:8c:bb:a3:b1:7c:50:01:35:37:
a6:48:b0:8d:ec:1b:ce:a9:20:94:c6:c1:0b:76:78:
3c:44:0d:ce:a1:d2:d1:b1:cf:c5:84:50:80:1a:70:
86:5d:5e:3a:ad:d0:9a:bd:1e:80:89:7c:ea:7c:da:
74:2f:1c:95:51:c9:4c:f1:71:12:26:4a:9c:0f:74:
17:ca:39:fd:b2:65:45:98:1d:a9:c4:32:f3:ca:f4:
4c:13:5f:77:9b:08:9e:ab:86:c5:0a:1a:98:43:48:
43:16:21:af:99:76:ff:d4:f1:a6:b4:08:00:17:43:
44:e1:82:59:c5:30:00:ef:5c:5a:cd:ec:a3:e8:25:
bd:b2:04:ee:bc:0d:13:df:5a:81:7a:9a:96:6e:94:
7f:58:da:de:55:10:21:cc:ef:5c:18:cc:78:04:b7:
87:9a:9e:43:7d:97:45:21:c5:16:3b:7d:c8:6a:5a:
2a:44:05:c7:33:74:19:b2:b3:6b:6b:8d:30:0d:82:
0b:1c:c0:4d:4a:7b:3e:73:8f:95:ca:f7:93:c3:58:
7c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:51:63:36:38:D2:83:25:D7:D4:51:6C:F7:7B:F9:93:BA:15:76:95
X509v3 Authority Key Identifier:
keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4c:78:16:55:a6:80:9e:4f:fc:15:68:a3:51:30:6b:c2:bf:
83:b2:87:db:9e:f5:d3:d6:e0:93:bd:d0:93:65:6b:11:9b:f1:
94:9b:ff:ed:f6:98:eb:69:50:98:09:69:69:87:0c:7c:2e:0b:
0d:9f:d9:a4:a2:03:8e:9d:e3:99:80:32:45:91:32:c8:ff:84:
b9:09:84:50:0c:5f:ee:42:be:4d:a8:1d:48:93:aa:b9:c2:72:
88:a3:04:b8:87:e7:8a:f3:13:a7:89:3b:da:24:ec:e9:57:f2:
d3:19:18:7b:77:26:9a:ac:cc:10:7b:b6:82:3e:00:7e:7e:3e:
ff:15:52:ec:87:91:28:76:cd:a2:20:27:32:09:37:07:6b:29:
bd:04:ab:2c:3f:ad:bd:fb:ad:69:0f:55:e5:75:3a:89:c2:30:
53:9b:8f:2b:6b:b5:dc:4e:60:2c:69:9a:fa:40:35:3d:dc:d5:
13:6f:95:ce:b7:41:1c:f2:0f:4b:39:90:a6:7d:71:5b:9d:2e:
89:69:5c:d0:2a:6d:14:79:35:7b:ec:05:26:fe:32:3c:b1:02:
15:b7:3d:6c:ee:5f:cb:13:9d:96:51:f5:01:07:d7:f6:d2:c6:
28:9a:b3:18:44:49:d3:96:b1:4f:70:98:90:20:03:14:db:c4:
f3:a3:fe:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOjpppNauEcg80TLD0s8kOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OWIzNjAwZmQ3MzhlNjk4ZDEyZmVmMjBlMTA2ZTZhOTRl
M2I2NzQwHhcNMjUwNjA4MDgwMDU3WhcNMjUwNjA5MDgwMDU3WjAzMTEwLwYDVQQD
Eyg2ZjUxNjMzNjM4ZDI4MzI1ZDdkNDUxNmNmNzdiZjk5M2JhMTU3Njk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAFOrU4VrGBi801XOhxj3e9Twu+t
kifvoTLmFutCgabYMl6fdwWMrGJ/SGo+Bke9e0KMu6OxfFABNTemSLCN7BvOqSCU
xsELdng8RA3OodLRsc/FhFCAGnCGXV46rdCavR6AiXzqfNp0LxyVUclM8XESJkqc
D3QXyjn9smVFmB2pxDLzyvRME193mwieq4bFChqYQ0hDFiGvmXb/1PGmtAgAF0NE
4YJZxTAA71xazeyj6CW9sgTuvA0T31qBepqWbpR/WNreVRAhzO9cGMx4BLeHmp5D
fZdFIcUWO33IaloqRAXHM3QZsrNra40wDYILHMBNSns+c4+VyveTw1h8BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9RYzY40oMl19RRbPd7+ZO6FXaVMB8GA1UdIwQY
MBaAFIabNgD9c45pjRL+8g4QbmqU47Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUt
NDI0M2U4OGJkNzZjLzEvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUtNDI0M2U4OGJkNzZj
LzEvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0x4FlWm
gJ5P/BVoo1Ewa8K/g7KH257109bgk73Qk2VrEZvxlJv/7faY62lQmAlpaYcMfC4L
DZ/ZpKIDjp3jmYAyRZEyyP+EuQmEUAxf7kK+TagdSJOqucJyiKMEuIfnivMTp4k7
2iTs6Vfy0xkYe3cmmqzMEHu2gj4Afn4+/xVS7IeRKHbNoiAnMgk3B2spvQSrLD+t
vfutaQ9V5XU6icIwU5uPK2u13E5gLGma+kA1PdzVE2+VzrdBHPIPSzmQpn1xW50u
iWlc0CptFHk1e+wFJv4yPLECFbc9bO5fyxOdllH1AQfX9tLGKJqzGERJ05axT3CY
kCADFNvE86P+ZA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:31:26 2025 by rpki-client