Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
File: HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft (raw, json)
Hash identifier: OYKnMgTTmWQoGqLQ/4Ja0Bj524xMisA9K9JxrVmUB6U=
Subject key identifier: 88:C4:42:5B:6E:5E:3E:92:DA:93:5D:12:41:63:2B:92:3D:C7:FF:1B
Authority key identifier: 1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94
Certificate issuer: /CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94
Certificate serial: 01974F332F4CAA5BC55A6B3D2CFE22417D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
Manifest number: 92
Signing time: Sun 08 Jun 2025 11:00:43 +0000
Manifest this update: Sun 08 Jun 2025 11:00:43 +0000
Manifest next update: Mon 09 Jun 2025 11:00:43 +0000
Files and hashes: 1: 7VYSV9Ay8yH8mR2f5xUS2yDfX5k.roa (hash: FYts7NtxQ1ChJXJ4Lx+8grMMCFLF+de/KIR4Pob60LI=)
2: HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl (hash: I7PdxOPjfFRwPxagaDfqcKM/ZbjN8rosOtzrrBh+Noo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:2f:4c:aa:5b:c5:5a:6b:3d:2c:fe:22:41:7d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94
Validity
Not Before: Jun 8 11:00:43 2025 GMT
Not After : Jun 9 11:00:43 2025 GMT
Subject: CN=88c4425b6e5e3e92da935d1241632b923dc7ff1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:41:71:be:93:4f:7a:e0:07:19:f0:22:c7:
12:a3:33:f3:d5:63:31:38:c1:60:3d:6e:6e:b7:9e:
66:fd:82:64:f6:18:1a:31:83:86:af:34:5a:a3:26:
a3:14:7f:ec:6d:de:88:f5:77:f8:cb:2f:25:99:33:
5e:57:2f:30:cd:fd:bf:0f:04:1f:48:22:19:06:04:
cb:2b:cf:fc:92:ff:8f:da:70:46:f6:23:86:fb:e2:
ce:f1:8d:ca:50:c1:8c:ed:76:3c:bb:94:36:c9:7a:
2e:cd:a6:75:31:d7:61:62:e4:80:b5:7a:ec:67:22:
bf:ff:c7:7b:20:57:73:bb:3d:7b:61:17:ea:1c:21:
2f:a9:23:de:55:ca:6d:7b:e9:4a:46:dc:e1:17:28:
b0:13:27:b0:ce:c3:7e:47:6a:da:36:04:88:87:43:
c3:ea:7f:e7:33:cd:69:70:b3:59:b7:66:2d:ab:95:
6f:96:6a:ee:0b:aa:96:c7:de:eb:cb:75:ae:21:e2:
77:5a:32:48:ab:62:59:bf:c1:90:67:16:17:7d:97:
73:e5:13:b5:7b:7f:b8:58:b5:32:0a:ed:87:72:78:
b4:57:e9:c9:9e:ac:e9:2b:82:d0:79:dc:e6:33:a0:
2e:71:5f:aa:b5:a1:57:14:ca:58:ac:e1:dc:bc:1c:
c8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C4:42:5B:6E:5E:3E:92:DA:93:5D:12:41:63:2B:92:3D:C7:FF:1B
X509v3 Authority Key Identifier:
keyid:1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:dd:6d:3c:36:c4:95:40:e1:a0:b4:92:f3:5f:5f:e3:be:60:
97:86:aa:25:ad:c7:80:9b:80:b8:af:2b:b5:b5:65:b3:52:b8:
7b:ff:94:bb:9b:a2:a2:30:51:dc:41:99:8b:e0:c2:60:a4:72:
f8:5a:79:eb:9b:bf:20:0d:a6:1a:9b:55:b1:40:3d:84:52:8b:
77:7c:07:84:13:fa:49:67:6f:9d:20:4f:ed:2d:01:46:8f:dc:
59:e1:ea:7b:99:37:22:e4:00:ab:6c:25:64:f7:66:99:1e:58:
b3:f9:ee:97:12:fc:b8:39:fb:02:80:ea:b4:69:69:7c:c6:16:
25:20:81:f6:1e:ab:01:32:bf:61:80:fd:d6:2e:24:c9:68:63:
b4:d8:81:3f:d9:8a:49:9e:a0:83:8c:5b:e7:ae:e4:96:60:16:
da:45:ea:8b:d3:9e:d8:06:53:75:14:fb:69:6e:7a:41:c7:8c:
37:a5:59:e3:79:1a:36:12:54:24:6d:d5:7d:2f:e9:fb:b3:71:
0d:0c:bb:5a:e4:da:ee:97:4b:55:bd:e9:e1:d9:27:51:67:5c:
29:b9:97:61:b9:47:09:31:b9:55:30:0a:b3:e7:e2:b0:70:be:
0d:ce:c7:21:59:70:cb:56:45:4f:a0:e1:cc:b9:8f:cd:91:57:
aa:24:12:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPMy9MqlvFWms9LP4iQX13MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZWVkM2Q5MDFhYjBlOWQwZjY4M2UwZTcxYzI5NDNmZDZi
ZTZkOTQwHhcNMjUwNjA4MTEwMDQzWhcNMjUwNjA5MTEwMDQzWjAzMTEwLwYDVQQD
Eyg4OGM0NDI1YjZlNWUzZTkyZGE5MzVkMTI0MTYzMmI5MjNkYzdmZjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwylBcb6TT3rgBxnwIscSozPz1WMx
OMFgPW5ut55m/YJk9hgaMYOGrzRaoyajFH/sbd6I9Xf4yy8lmTNeVy8wzf2/DwQf
SCIZBgTLK8/8kv+P2nBG9iOG++LO8Y3KUMGM7XY8u5Q2yXouzaZ1MddhYuSAtXrs
ZyK//8d7IFdzuz17YRfqHCEvqSPeVcpte+lKRtzhFyiwEyewzsN+R2raNgSIh0PD
6n/nM81pcLNZt2Ytq5VvlmruC6qWx97ry3WuIeJ3WjJIq2JZv8GQZxYXfZdz5RO1
e3+4WLUyCu2Hcni0V+nJnqzpK4LQedzmM6AucV+qtaFXFMpYrOHcvBzIRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjEQltuXj6S2pNdEkFjK5I9x/8bMB8GA1UdIwQY
MBaAFBzu09kBqw6dD2g+DnHClD/Wvm2UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83Y2VjNWItNDU1Mi00ZWQyLTk5ZGQt
NjAzMjRhNmU0Mjc2LzEvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS83Y2VjNWItNDU1Mi00ZWQyLTk5ZGQtNjAzMjRhNmU0Mjc2
LzEvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAut1tPDbE
lUDhoLSS819f475gl4aqJa3HgJuAuK8rtbVls1K4e/+Uu5uiojBR3EGZi+DCYKRy
+Fp565u/IA2mGptVsUA9hFKLd3wHhBP6SWdvnSBP7S0BRo/cWeHqe5k3IuQAq2wl
ZPdmmR5Ys/nulxL8uDn7AoDqtGlpfMYWJSCB9h6rATK/YYD91i4kyWhjtNiBP9mK
SZ6gg4xb567klmAW2kXqi9Oe2AZTdRT7aW56QceMN6VZ43kaNhJUJG3VfS/p+7Nx
DQy7WuTa7pdLVb3p4dknUWdcKbmXYblHCTG5VTAKs+fisHC+Dc7HIVlwy1ZFT6Dh
zLmPzZFXqiQSNQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 17:16:13 2025 by rpki-client