Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
File: hX9MEi5PjGAfIcXIaHFtRgidheE.mft (raw, json)
Hash identifier: Q4RombezEzl0G72acTXtK/LFzKsGEq1A8BaUqujkatc=
Subject key identifier: 21:18:37:66:93:6C:64:52:FD:10:CF:A7:F2:43:8A:D9:61:7D:35:13
Authority key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
Certificate issuer: /CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Certificate serial: 01974D7C3972C719CA4103F74190F1F2AE8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
Manifest number: 0A46
Signing time: Sun 08 Jun 2025 03:01:16 +0000
Manifest this update: Sun 08 Jun 2025 03:01:16 +0000
Manifest next update: Mon 09 Jun 2025 03:01:16 +0000
Files and hashes: 1: hX9MEi5PjGAfIcXIaHFtRgidheE.crl (hash: /QryiZYKWfRhP6kB9sReNEtP+Gzl5+NVY1PH1d88VmY=)
2: wypxlBc1J8Bpx8wsCukzLkT7CzM.roa (hash: VSR04yRc8P3tg6W5nBtOO4BrNXPIDW2s4T0F9VJBzcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:39:72:c7:19:ca:41:03:f7:41:90:f1:f2:ae:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Validity
Not Before: Jun 8 03:01:16 2025 GMT
Not After : Jun 9 03:01:16 2025 GMT
Subject: CN=21183766936c6452fd10cfa7f2438ad9617d3513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:cf:65:1d:f0:b5:0c:6b:ed:3f:c0:d6:63:
71:e1:97:47:b8:38:2d:ff:62:fe:12:a0:98:03:4b:
f0:41:11:86:10:2d:d7:ce:1d:19:1f:76:dc:c3:aa:
67:d0:55:9b:f5:8e:fa:53:bd:c3:f4:17:c5:28:ed:
92:f1:0b:8a:0c:0f:a5:51:07:83:ab:d8:0a:4a:b7:
17:7f:2b:dd:0f:50:1c:93:5c:1d:a6:1d:ce:de:73:
b2:3b:70:9c:48:eb:e2:31:44:bc:b1:b7:b9:b0:15:
95:8a:aa:ed:da:05:3f:df:3f:67:af:bd:de:2e:8f:
6f:17:38:ef:e5:87:68:4c:45:b9:ae:21:d3:d1:35:
33:1e:9e:ef:3b:d6:16:66:01:7e:05:e2:8e:eb:30:
c5:67:b1:c8:4a:4b:52:28:08:b4:2f:f2:eb:ca:f3:
cf:e9:07:85:af:a3:bf:12:55:4b:d1:e5:eb:9d:8c:
c2:9a:02:f1:f1:c6:7a:7b:a9:9e:92:c0:18:69:a5:
9d:5a:b7:98:c1:ca:d9:86:2a:69:82:9a:79:db:0c:
ff:ad:d3:97:2f:88:23:16:97:7e:94:7e:24:2f:fb:
04:fe:02:69:cd:c5:69:a5:46:9f:19:b7:20:15:9d:
5d:20:00:da:95:6f:a8:5d:87:ee:b4:b6:d9:a6:6d:
66:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:18:37:66:93:6C:64:52:FD:10:CF:A7:F2:43:8A:D9:61:7D:35:13
X509v3 Authority Key Identifier:
keyid:85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fc:f0:65:df:f2:9d:57:b4:55:8c:32:4f:6f:f1:51:80:b3:
2c:d6:b8:ea:47:5f:75:01:c9:a5:d4:f3:d0:63:55:e8:35:c8:
a7:d1:57:19:3b:d5:28:71:55:71:70:dc:d5:75:0b:3a:a1:6a:
fb:2b:d7:ae:6b:64:73:95:23:a5:01:2c:00:8b:f1:7b:e7:0c:
32:f7:f7:c5:e6:cf:23:c5:f3:85:f5:3f:24:80:02:6f:25:61:
8e:9c:84:04:60:c0:0c:26:0e:e2:18:07:d0:9c:a9:ea:0e:57:
73:f6:60:b8:02:aa:1f:24:5c:f8:26:56:ac:35:61:a7:0c:0b:
61:c6:9f:fa:d3:6a:c2:51:20:6c:b7:65:40:a7:4b:46:be:fc:
16:7c:40:79:e7:df:c6:58:17:72:3f:82:e7:70:f5:97:76:86:
c6:f8:cf:cc:5d:64:ce:89:f8:12:fc:b6:66:58:0b:72:4e:26:
30:6e:44:2a:bf:cc:a5:41:88:42:23:da:b3:69:3b:d9:b5:a3:
29:e6:38:2d:a8:2c:6f:fc:7c:01:b0:b4:a5:e4:bb:7d:a4:7d:
57:9e:c0:5d:1e:db:b5:e0:e2:02:87:dd:30:6d:a9:83:8f:62:
d6:96:ce:5c:77:9d:9d:f1:16:3e:3c:3e:e9:24:f7:79:96:b4:
d3:0a:66:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNfDlyxxnKQQP3QZDx8q6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1N2Y0YzEyMmU0ZjhjNjAxZjIxYzVjODY4NzE2ZDQ2MDg5
ZDg1ZTEwHhcNMjUwNjA4MDMwMTE2WhcNMjUwNjA5MDMwMTE2WjAzMTEwLwYDVQQD
EygyMTE4Mzc2NjkzNmM2NDUyZmQxMGNmYTdmMjQzOGFkOTYxN2QzNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszHPZR3wtQxr7T/A1mNx4ZdHuDgt
/2L+EqCYA0vwQRGGEC3Xzh0ZH3bcw6pn0FWb9Y76U73D9BfFKO2S8QuKDA+lUQeD
q9gKSrcXfyvdD1Ack1wdph3O3nOyO3CcSOviMUS8sbe5sBWViqrt2gU/3z9nr73e
Lo9vFzjv5YdoTEW5riHT0TUzHp7vO9YWZgF+BeKO6zDFZ7HISktSKAi0L/LryvPP
6QeFr6O/ElVL0eXrnYzCmgLx8cZ6e6meksAYaaWdWreYwcrZhippgpp52wz/rdOX
L4gjFpd+lH4kL/sE/gJpzcVppUafGbcgFZ1dIADalW+oXYfutLbZpm1mNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEYN2aTbGRS/RDPp/JDitlhfTUTMB8GA1UdIwQY
MBaAFIV/TBIuT4xgHyHFyGhxbUYInYXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85NjE5MzktYWM4ZS00ZDEyLWIxMmYt
ZGE1Y2IwZmIxOWU3LzEvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85NjE5MzktYWM4ZS00ZDEyLWIxMmYtZGE1Y2IwZmIxOWU3
LzEvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvzwZd/y
nVe0VYwyT2/xUYCzLNa46kdfdQHJpdTz0GNV6DXIp9FXGTvVKHFVcXDc1XULOqFq
+yvXrmtkc5UjpQEsAIvxe+cMMvf3xebPI8XzhfU/JIACbyVhjpyEBGDADCYO4hgH
0Jyp6g5Xc/ZguAKqHyRc+CZWrDVhpwwLYcaf+tNqwlEgbLdlQKdLRr78FnxAeeff
xlgXcj+C53D1l3aGxvjPzF1kzon4Evy2ZlgLck4mMG5EKr/MpUGIQiPas2k72bWj
KeY4Lagsb/x8AbC0peS7faR9V57AXR7bteDiAofdMG2pg49i1pbOXHednfEWPjw+
6ST3eZa00wpmVA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:27:49 2025 by rpki-client