Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
File: H4mVTcWspw-Dcs96YrWry4oXwrc.mft (raw, json)
Hash identifier: h1YIGny2YpuZDtYhgI7SlnWYLyIwhR42fFpe9LRbV40=
Subject key identifier: 99:BA:F0:1A:89:72:4C:63:95:47:C8:99:41:A0:62:84:CE:7A:F2:07
Authority key identifier: 1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
Certificate issuer: /CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Certificate serial: 01974779B8F4095DB08AA9243A92F03D12DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 23:00:48 +0000
Manifest this update: Fri 06 Jun 2025 23:00:48 +0000
Manifest next update: Sat 07 Jun 2025 23:00:48 +0000
Files and hashes: 1: H4mVTcWspw-Dcs96YrWry4oXwrc.crl (hash: cCRCJgYiXnwJ4GcjyAZNT0ogvuXP4zbUXrrWGVub28k=)
2: VPSZKXOomg68CX3e2czb5vATzV0.roa (hash: u5eUOziaSNihoip6mFV/l4VWIAiX36Jv1InorW26yng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:b8:f4:09:5d:b0:8a:a9:24:3a:92:f0:3d:12:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Validity
Not Before: Jun 6 23:00:48 2025 GMT
Not After : Jun 7 23:00:48 2025 GMT
Subject: CN=99baf01a89724c639547c89941a06284ce7af207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:75:be:3f:46:d2:22:64:67:6f:83:41:9a:
e8:bd:a1:d7:68:44:81:49:f7:71:dd:30:2a:b6:ac:
59:de:c2:42:6b:07:4f:4c:7d:0b:66:26:b6:9a:8b:
b8:39:b6:67:6d:ba:97:ca:79:43:ce:e2:a2:52:b7:
9d:61:e8:8a:3a:6d:56:df:90:b7:39:fd:7f:11:f5:
5c:cf:01:e3:2a:a6:ba:72:e0:9f:9d:9c:a4:06:4f:
33:34:c4:c7:7a:1c:6c:42:a4:b0:d0:23:9f:cd:06:
11:76:b7:84:62:9d:b8:02:7a:38:00:77:c4:6c:09:
78:cc:64:63:35:e2:ff:22:cc:e4:45:d3:0d:0a:9a:
01:5c:ce:93:2d:18:cd:2f:06:51:ca:53:c5:67:5b:
ba:89:17:ca:0d:e7:1b:b1:2c:61:b2:fd:10:d3:1c:
6e:93:57:f8:3a:30:85:ae:1f:8f:3c:f7:0f:0d:29:
1a:4c:33:4a:a8:da:35:e9:46:8d:76:be:ba:6e:84:
e6:78:0d:f3:f3:d6:b0:e5:40:3b:75:5e:30:e9:b3:
56:05:87:2e:a0:27:49:b8:19:6f:28:da:c5:23:59:
6c:21:1a:1f:6c:0c:75:bc:ee:84:f1:f1:2c:8e:b4:
cd:c8:23:32:95:79:3e:25:b3:1d:7a:44:b0:0a:01:
95:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BA:F0:1A:89:72:4C:63:95:47:C8:99:41:A0:62:84:CE:7A:F2:07
X509v3 Authority Key Identifier:
keyid:1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:69:60:35:98:13:f1:6a:43:b3:e8:8c:15:80:28:d4:4e:bd:
84:22:18:ba:d6:58:1c:36:76:30:db:3a:9c:0d:7c:d0:96:0e:
ac:05:e9:2a:b2:57:2e:2e:97:c2:3f:73:39:4f:83:fe:8f:3f:
0d:e8:a2:2c:94:a8:86:70:57:92:46:a7:61:0e:3f:15:f2:f3:
7a:fc:99:26:5a:f1:d7:73:db:99:6f:62:ab:11:41:d0:b2:5b:
b6:92:b9:b5:48:29:de:68:be:16:5b:0e:4c:37:bb:9e:04:3c:
f9:97:a5:ba:04:4b:d5:71:3b:21:a5:a9:27:3e:06:c3:be:a3:
7d:a2:75:52:fe:55:37:1b:63:3e:8b:ab:de:83:08:98:ce:0e:
c0:08:3c:d9:89:d6:10:f9:10:a8:d2:dd:ce:3b:c6:80:f9:57:
dd:27:17:7b:88:45:cc:aa:c8:e9:b2:1c:3c:45:42:24:e6:c0:
54:21:3c:1f:38:dd:52:2b:c2:2b:e1:85:bc:af:fc:d2:41:3a:
d3:2e:0f:87:97:7f:3f:4d:ed:4f:8c:d7:a8:e0:f1:23:cd:e7:
1f:a3:8a:54:05:2e:76:b3:5e:aa:dd:80:3a:5e:ea:5c:51:79:
8f:c2:4b:a6:51:8f:c7:41:5b:c4:2b:27:ca:76:15:92:73:85:
e3:d6:ab:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHebj0CV2wiqkkOpLwPRLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmODk5NTRkYzVhY2E3MGY4MzcyY2Y3YTYyYjVhYmNiOGEx
N2MyYjcwHhcNMjUwNjA2MjMwMDQ4WhcNMjUwNjA3MjMwMDQ4WjAzMTEwLwYDVQQD
Eyg5OWJhZjAxYTg5NzI0YzYzOTU0N2M4OTk0MWEwNjI4NGNlN2FmMjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzp1vj9G0iJkZ2+DQZrovaHXaESB
Sfdx3TAqtqxZ3sJCawdPTH0LZia2mou4ObZnbbqXynlDzuKiUredYeiKOm1W35C3
Of1/EfVczwHjKqa6cuCfnZykBk8zNMTHehxsQqSw0COfzQYRdreEYp24Ano4AHfE
bAl4zGRjNeL/IszkRdMNCpoBXM6TLRjNLwZRylPFZ1u6iRfKDecbsSxhsv0Q0xxu
k1f4OjCFrh+PPPcPDSkaTDNKqNo16UaNdr66boTmeA3z89aw5UA7dV4w6bNWBYcu
oCdJuBlvKNrFI1lsIRofbAx1vO6E8fEsjrTNyCMylXk+JbMdekSwCgGVYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJm68BqJckxjlUfImUGgYoTOevIHMB8GA1UdIwQY
MBaAFB+JlU3FrKcPg3LPemK1q8uKF8K3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDRtVlRjV3Nwdy1EY3M5NllyV3J5NG9Yd3JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mYmU5ZjMtYjk4Zi00ZGQzLThjOTkt
NGUyZTdlODc0YTQwLzEvSDRtVlRjV3Nwdy1EY3M5NllyV3J5NG9Yd3JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9mYmU5ZjMtYjk4Zi00ZGQzLThjOTktNGUyZTdlODc0YTQw
LzEvSDRtVlRjV3Nwdy1EY3M5NllyV3J5NG9Yd3JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWlgNZgT
8WpDs+iMFYAo1E69hCIYutZYHDZ2MNs6nA180JYOrAXpKrJXLi6Xwj9zOU+D/o8/
DeiiLJSohnBXkkanYQ4/FfLzevyZJlrx13PbmW9iqxFB0LJbtpK5tUgp3mi+FlsO
TDe7ngQ8+ZelugRL1XE7IaWpJz4Gw76jfaJ1Uv5VNxtjPour3oMImM4OwAg82YnW
EPkQqNLdzjvGgPlX3ScXe4hFzKrI6bIcPEVCJObAVCE8HzjdUivCK+GFvK/80kE6
0y4Ph5d/P03tT4zXqODxI83nH6OKVAUudrNeqt2AOl7qXFF5j8JLplGPx0FbxCsn
ynYVknOF49ar1g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:08 2025 by rpki-client