Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File: hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier: 0XBtX1IOOa8HnfJxt5cviGjCj4681co5WhALIaXIH7I=
Subject key identifier: 71:B3:00:E8:DB:D2:85:D5:1A:94:41:0F:55:CC:CB:D5:5B:F8:C5:DE
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer: /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial: 019751215F94CD73C59C851449A72F77B479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number: 152A
Signing time: Sun 08 Jun 2025 20:00:31 +0000
Manifest this update: Sun 08 Jun 2025 20:00:31 +0000
Manifest next update: Mon 09 Jun 2025 20:00:31 +0000
Files and hashes: 1: E5_9p_TGg2FNMpZSH1jH4wJ3rfA.roa (hash: GcTlxtoi4GEP2bLooVydD/oQvGI42+1RU87/9gjgDvc=)
2: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: yKvdKysy4njTdeklIlHWdsJxNACM/fPAWEA9cS82BOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:5f:94:cd:73:c5:9c:85:14:49:a7:2f:77:b4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Validity
Not Before: Jun 8 20:00:31 2025 GMT
Not After : Jun 9 20:00:31 2025 GMT
Subject: CN=71b300e8dbd285d51a94410f55cccbd55bf8c5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2c:af:f8:6c:da:ac:c3:0e:be:a5:79:2a:b2:
6a:52:52:df:57:a5:23:6e:2b:1f:f9:7d:79:c6:fb:
41:0d:f6:95:a9:70:cf:b3:e5:56:20:24:82:de:e1:
c5:d1:63:0c:ff:d6:04:51:da:1f:b1:7e:f8:ee:72:
3e:bb:16:17:fd:26:28:2c:2c:a8:eb:b0:81:c0:4d:
28:7d:15:14:c4:51:7e:46:64:e2:0f:4f:19:b9:ae:
a1:56:1b:70:d4:bf:51:b4:bb:0a:22:99:1b:80:22:
13:1b:ca:e7:bd:bc:47:51:f7:32:f9:eb:e7:cf:d9:
f9:e5:07:8d:76:4a:a2:1f:d0:07:e8:bf:1b:78:1a:
75:8b:89:ae:ae:8f:15:c1:f9:1f:2e:c0:fe:03:46:
6c:19:4a:b0:95:65:76:6f:22:39:cf:cd:84:c2:41:
b8:a5:cd:07:5f:d3:30:d8:9c:9b:39:0d:8a:a4:55:
84:3a:5a:ca:00:f9:92:1e:b0:e1:36:43:13:5f:cb:
c3:0e:dd:40:aa:e9:4e:97:e2:71:2b:f4:7e:ab:99:
99:34:88:81:a9:c1:48:7c:32:37:0d:d0:68:37:3b:
9e:22:d6:f8:8a:b4:a4:b2:17:76:66:8b:0f:5b:52:
7b:26:21:e5:da:df:1a:47:6a:f8:e1:87:4a:27:31:
6f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B3:00:E8:DB:D2:85:D5:1A:94:41:0F:55:CC:CB:D5:5B:F8:C5:DE
X509v3 Authority Key Identifier:
keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c0:44:2f:04:59:ec:7b:7c:24:a4:8d:f2:50:0c:f1:4f:1b:
c5:d5:60:73:fd:c6:81:d2:1f:8a:f3:9b:d2:13:b7:c5:c2:7c:
42:e2:6b:30:4d:85:00:87:30:b9:5e:82:bd:2a:7d:05:9f:f0:
01:30:76:1a:bb:13:a7:7a:31:4a:d3:5d:27:d5:ab:da:20:d9:
37:8e:a4:1c:4f:c8:db:ff:8f:36:45:ce:19:83:38:64:9e:a6:
7d:77:12:6f:33:3f:79:4e:73:53:f0:05:0e:63:aa:eb:5c:9d:
11:e5:b8:e7:03:ae:31:6c:07:88:49:ad:9e:aa:d7:9f:06:7f:
2d:0c:74:f0:87:0d:a9:fc:9c:ff:65:71:18:4b:99:20:fe:1f:
a6:bb:8e:05:b4:1e:03:14:bf:2a:97:9d:c0:b6:02:e6:0f:d7:
f3:85:5b:f9:d0:01:a0:ff:6e:6e:65:9e:35:47:27:fe:f9:d3:
e0:e2:2f:06:8c:8b:f8:27:10:1c:03:8d:a8:7a:04:d6:3b:3b:
85:a9:09:ea:be:e0:04:b3:45:a9:ca:bb:fb:c8:44:f8:67:51:
69:56:6c:e5:a7:38:d3:c3:ee:ed:fd:84:d4:7a:fd:86:e1:89:
9a:b7:99:71:21:5b:51:e1:88:fc:2f:32:b2:bd:94:ad:56:50:
51:b0:95:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRIV+UzXPFnIUUSacvd7R5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjlmMjEwMGMyZmM0NTRhZDA3YWRlYzc5NmI5ZTZmNjM2
NmYwNzEwHhcNMjUwNjA4MjAwMDMxWhcNMjUwNjA5MjAwMDMxWjAzMTEwLwYDVQQD
Eyg3MWIzMDBlOGRiZDI4NWQ1MWE5NDQxMGY1NWNjY2JkNTViZjhjNWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Cyv+GzarMMOvqV5KrJqUlLfV6Uj
bisf+X15xvtBDfaVqXDPs+VWICSC3uHF0WMM/9YEUdofsX747nI+uxYX/SYoLCyo
67CBwE0ofRUUxFF+RmTiD08Zua6hVhtw1L9RtLsKIpkbgCITG8rnvbxHUfcy+evn
z9n55QeNdkqiH9AH6L8beBp1i4muro8VwfkfLsD+A0ZsGUqwlWV2byI5z82EwkG4
pc0HX9Mw2JybOQ2KpFWEOlrKAPmSHrDhNkMTX8vDDt1AqulOl+JxK/R+q5mZNIiB
qcFIfDI3DdBoNzueItb4irSkshd2ZosPW1J7JiHl2t8aR2r44YdKJzFviwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGzAOjb0oXVGpRBD1XMy9Vb+MXeMB8GA1UdIwQY
MBaAFIVp8hAML8RUrQet7Hlrnm9jZvBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEt
MjMzNmNkYjliYTlmLzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEtMjMzNmNkYjliYTlm
LzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMBELwRZ
7Ht8JKSN8lAM8U8bxdVgc/3GgdIfivOb0hO3xcJ8QuJrME2FAIcwuV6CvSp9BZ/w
ATB2GrsTp3oxStNdJ9Wr2iDZN46kHE/I2/+PNkXOGYM4ZJ6mfXcSbzM/eU5zU/AF
DmOq61ydEeW45wOuMWwHiEmtnqrXnwZ/LQx08IcNqfyc/2VxGEuZIP4fpruOBbQe
AxS/KpedwLYC5g/X84Vb+dABoP9ubmWeNUcn/vnT4OIvBoyL+CcQHAONqHoE1js7
hakJ6r7gBLNFqcq7+8hE+GdRaVZs5ac408Pu7f2E1Hr9huGJmreZcSFbUeGI/C8y
sr2UrVZQUbCVrw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:11:44 2025 by rpki-client