Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
File: HJe0gj08nhIexkmCHgDwp5rrm40.mft (raw, json)
Hash identifier: DOH+xPA/Oy2c2hSl4s10JII5YSaUXuX5MKFyYZ5C0YU=
Subject key identifier: 70:90:CE:43:C6:E4:C8:10:92:5F:D4:04:DF:97:0C:12:BB:56:86:2E
Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Certificate serial: 01974DB2CF678943217045FC43E7F0C182C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 04:00:53 +0000
Manifest this update: Sun 08 Jun 2025 04:00:53 +0000
Manifest next update: Mon 09 Jun 2025 04:00:53 +0000
Files and hashes: 1: 8jvY6gdKf49fsHMa8JzUxLXy6Co.roa (hash: zq4v0B4wOz8tRoHJTPQ0OEhJqUOFXXY6z/cXiV3Bsic=)
2: HJe0gj08nhIexkmCHgDwp5rrm40.crl (hash: tTcdiQYEAgez1JfUr0Eg+jyYydfDYjgL0WJyANu+mGI=)
3: MKGyJdFY_R5aFNPzG6jh9qi5L8g.roa (hash: 4xTLRWvAhNdFnC4rR2yT1xCAEdrH5/3kjyyJfVcTeSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:cf:67:89:43:21:70:45:fc:43:e7:f0:c1:82:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Validity
Not Before: Jun 8 04:00:53 2025 GMT
Not After : Jun 9 04:00:53 2025 GMT
Subject: CN=7090ce43c6e4c810925fd404df970c12bb56862e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:76:5b:07:5b:84:d8:28:ec:aa:49:8c:51:
25:f3:20:07:5d:90:87:db:d1:d0:b3:97:82:1c:6c:
c8:9a:02:22:e3:e8:d7:29:36:26:ae:c2:1b:11:45:
9a:cd:1c:43:0a:f3:bf:ee:80:3b:21:b9:25:c7:49:
ca:22:62:dd:e7:0c:3b:2a:57:16:04:5c:4c:7a:93:
39:da:66:f1:bb:ef:ed:27:93:7b:83:2e:25:a7:3d:
70:93:c7:6d:fa:6b:74:09:1e:a9:0e:c7:74:ec:1a:
cb:08:5a:0e:fe:a6:62:bc:d7:e7:c1:be:d9:02:24:
b1:ef:12:57:6a:e1:2e:93:71:8e:0e:7d:a0:04:7f:
6b:99:79:b5:b3:12:23:81:6b:24:e1:4f:c7:5d:2b:
90:80:71:1f:bd:6a:84:7b:a6:4e:e3:1d:a5:d1:d8:
2a:28:7a:7d:c0:65:59:e8:62:1a:ea:73:f6:b1:d5:
ea:8a:17:97:51:cf:73:26:2f:f1:29:5d:b9:90:2f:
94:18:10:5d:8d:1d:4c:56:31:72:34:57:70:fc:d5:
b8:66:aa:11:1f:6f:c3:f5:95:05:c8:ce:54:5d:6a:
29:01:76:9e:ae:3f:48:a2:51:f8:64:cd:6a:dc:80:
18:e4:71:9b:c8:ba:84:49:6c:07:45:79:a1:37:50:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:90:CE:43:C6:E4:C8:10:92:5F:D4:04:DF:97:0C:12:BB:56:86:2E
X509v3 Authority Key Identifier:
keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:74:3f:93:d4:4e:9d:fe:e3:e0:40:68:2d:c1:e7:d7:67:7c:
9b:2b:70:96:6d:4e:e8:8e:37:59:08:a4:70:4c:30:e3:dd:0a:
af:d6:fb:8a:92:80:e1:22:85:e3:20:53:b0:d3:59:ad:33:f2:
2f:01:e1:ac:bc:77:95:dd:dc:04:87:f9:91:33:8c:6c:dd:af:
59:ec:73:31:df:f4:94:cf:5b:ca:e4:ad:18:f1:3a:5f:c9:b3:
00:67:15:a3:33:8c:d1:59:ed:a6:6c:c1:74:9c:b0:17:f2:b9:
7f:33:05:34:c0:44:db:4d:77:0d:19:95:7b:e4:a6:58:b5:a1:
b0:14:ca:1c:39:66:19:7c:44:df:18:90:1b:dd:60:88:13:8b:
da:53:2f:cb:f4:97:c8:c4:fd:12:4e:7c:ab:5b:10:50:de:9d:
05:ee:b1:e4:ca:01:01:66:b7:fa:e6:02:6e:0c:53:60:fe:9f:
7d:43:04:cb:30:ee:6b:75:e1:66:12:3b:42:42:36:9a:0b:27:
b3:46:e8:17:93:18:2d:5a:c7:e8:dd:e3:95:05:9a:bc:8b:96:
a0:46:04:8e:f8:68:b1:71:78:c9:4c:3e:e5:4d:0f:ff:1f:05:
f2:a9:86:60:d2:5d:3d:16:36:77:f9:bd:0d:40:c9:0d:45:a0:
1a:61:6b:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNss9niUMhcEX8Q+fwwYLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTdiNDgyM2QzYzllMTIxZWM2NDk4MjFlMDBmMGE3OWFl
YjliOGQwHhcNMjUwNjA4MDQwMDUzWhcNMjUwNjA5MDQwMDUzWjAzMTEwLwYDVQQD
Eyg3MDkwY2U0M2M2ZTRjODEwOTI1ZmQ0MDRkZjk3MGMxMmJiNTY4NjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDV2WwdbhNgo7KpJjFEl8yAHXZCH
29HQs5eCHGzImgIi4+jXKTYmrsIbEUWazRxDCvO/7oA7Ibklx0nKImLd5ww7KlcW
BFxMepM52mbxu+/tJ5N7gy4lpz1wk8dt+mt0CR6pDsd07BrLCFoO/qZivNfnwb7Z
AiSx7xJXauEuk3GODn2gBH9rmXm1sxIjgWsk4U/HXSuQgHEfvWqEe6ZO4x2l0dgq
KHp9wGVZ6GIa6nP2sdXqiheXUc9zJi/xKV25kC+UGBBdjR1MVjFyNFdw/NW4ZqoR
H2/D9ZUFyM5UXWopAXaerj9IolH4ZM1q3IAY5HGbyLqESWwHRXmhN1ALvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCQzkPG5MgQkl/UBN+XDBK7VoYuMB8GA1UdIwQY
MBaAFByXtII9PJ4SHsZJgh4A8Kea65uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTkt
OWI5Y2Q4OTY1OWUwLzEvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTktOWI5Y2Q4OTY1OWUw
LzEvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHQ/k9RO
nf7j4EBoLcHn12d8mytwlm1O6I43WQikcEww490Kr9b7ipKA4SKF4yBTsNNZrTPy
LwHhrLx3ld3cBIf5kTOMbN2vWexzMd/0lM9byuStGPE6X8mzAGcVozOM0VntpmzB
dJywF/K5fzMFNMBE2013DRmVe+SmWLWhsBTKHDlmGXxE3xiQG91giBOL2lMvy/SX
yMT9Ek58q1sQUN6dBe6x5MoBAWa3+uYCbgxTYP6ffUMEyzDua3XhZhI7QkI2mgsn
s0boF5MYLVrH6N3jlQWavIuWoEYEjvhosXF4yUw+5U0P/x8F8qmGYNJdPRY2d/m9
DUDJDUWgGmFrZA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:42:54 2025 by rpki-client