Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
File: hR1ONNTkhTnBcEUdTiYTiIf26SI.mft (raw, json)
Hash identifier: J7f/oYSGWmxrdnvTwePpwLuxMxETkaJZ3nWLFpVoTWg=
Subject key identifier: 79:02:DA:E3:90:4B:F7:D9:C7:03:91:03:E8:03:B9:84:BE:BF:6E:42
Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922
Certificate serial: 019748F9EF10A8E571E63DE0502010443B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
Manifest number: 1128
Signing time: Sat 07 Jun 2025 06:00:28 +0000
Manifest this update: Sat 07 Jun 2025 06:00:28 +0000
Manifest next update: Sun 08 Jun 2025 06:00:28 +0000
Files and hashes: 1: EgrdXaLN-vc8C2zZS8RN3DywvDo.roa (hash: hzm54PDUPW3onP/qtSLZRsQOvKv3wuQ4riGx7IRQcQA=)
2: hR1ONNTkhTnBcEUdTiYTiIf26SI.crl (hash: SBTlglBbF6huK/5im87zOlI/JkQMse/D0uAwKw9E0f0=)
3: rAaiXMvO9i5snovqluPbyo_QCN0.roa (hash: pt3vDzVbNzSpy4PSZ8+XX3gpZBn6uEG/ZRILx9TbDQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:ef:10:a8:e5:71:e6:3d:e0:50:20:10:44:3b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922
Validity
Not Before: Jun 7 06:00:28 2025 GMT
Not After : Jun 8 06:00:28 2025 GMT
Subject: CN=7902dae3904bf7d9c7039103e803b984bebf6e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:33:a3:90:e0:d4:56:59:3f:69:0c:6f:ec:72:
6c:b3:b6:3b:3b:9e:57:46:27:a0:1d:9a:b8:95:c2:
9a:16:27:46:75:ec:19:c6:d2:59:e8:87:13:db:46:
33:9e:0a:7e:05:f0:fc:5b:ad:ec:d9:55:12:56:82:
ff:d8:31:b1:d1:f7:88:95:71:51:be:16:cd:d7:54:
e8:d7:29:b5:17:dc:7f:4a:e7:3a:92:f2:f3:ee:08:
9a:52:1f:51:61:70:54:1b:d4:e1:2e:41:4f:c0:0c:
57:8d:31:8a:1d:df:fa:16:10:e6:8b:1b:0d:51:9b:
fc:6b:f3:d2:3e:0c:7e:46:e2:5c:a8:eb:2e:b7:0d:
ea:49:dc:5d:5a:09:59:7f:49:11:62:9a:0b:b7:60:
62:5d:08:9d:78:15:47:d2:d4:f1:26:ef:b6:9d:17:
42:c8:57:2e:58:50:de:69:2e:0b:4c:e8:59:e9:50:
25:19:5e:0c:f2:11:19:ea:2e:82:77:66:7d:04:9c:
ff:5a:16:7c:46:b9:22:b5:c4:d4:54:ee:75:44:d8:
a8:b0:75:91:57:7b:59:e3:c8:61:12:c0:b9:ea:c6:
32:9d:97:59:f5:8b:27:14:07:88:19:ee:cd:7a:d5:
29:fa:cb:36:22:2e:91:86:d2:5f:50:3f:dd:45:57:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:02:DA:E3:90:4B:F7:D9:C7:03:91:03:E8:03:B9:84:BE:BF:6E:42
X509v3 Authority Key Identifier:
keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:49:cf:82:7a:91:7d:ef:1a:dc:6a:d2:91:1a:19:d1:d6:78:
7c:9f:09:7a:15:4e:be:13:a6:27:c8:2c:a5:17:b9:fe:0e:ae:
41:5d:f3:7e:ae:d7:91:b3:71:55:da:d5:a5:2e:c6:e9:c6:a3:
89:a3:f6:80:bd:1c:55:26:c6:cb:dc:30:d9:42:c5:8d:48:79:
e9:22:54:79:bb:97:88:36:22:c7:ce:ff:23:ea:cf:d5:07:d8:
66:cd:03:38:b3:0f:f1:c6:1d:54:60:8e:db:82:50:2b:be:0f:
b4:bc:c6:bc:36:a8:8a:e2:83:69:3f:85:ca:43:79:3b:a7:ad:
ad:a8:1a:84:ab:5c:8d:56:15:97:05:e3:94:40:88:ab:09:fe:
bd:15:59:e9:22:c1:35:3b:c8:ce:8e:a7:9c:23:71:31:48:6a:
23:f0:86:9e:b3:fa:e9:9a:13:5a:b8:be:47:a6:1b:c2:9a:e2:
7c:7d:5f:08:ff:4c:a3:45:34:db:0f:f1:f4:90:d3:84:08:0e:
d5:7a:03:96:0d:a1:30:d6:99:f6:16:95:dd:33:7f:0d:23:8f:
df:e6:44:98:5d:f2:be:e7:7d:96:8d:4e:60:0b:00:9f:e5:d5:
67:8c:3b:06:47:0f:fd:b1:83:4e:a2:02:34:61:27:d4:1e:69:
05:92:2d:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+e8QqOVx5j3gUCAQRDt1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MWQ0ZTM0ZDRlNDg1MzljMTcwNDUxZDRlMjYxMzg4ODdm
NmU5MjIwHhcNMjUwNjA3MDYwMDI4WhcNMjUwNjA4MDYwMDI4WjAzMTEwLwYDVQQD
Eyg3OTAyZGFlMzkwNGJmN2Q5YzcwMzkxMDNlODAzYjk4NGJlYmY2ZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TOjkODUVlk/aQxv7HJss7Y7O55X
RiegHZq4lcKaFidGdewZxtJZ6IcT20Yzngp+BfD8W63s2VUSVoL/2DGx0feIlXFR
vhbN11To1ym1F9x/Suc6kvLz7giaUh9RYXBUG9ThLkFPwAxXjTGKHd/6FhDmixsN
UZv8a/PSPgx+RuJcqOsutw3qSdxdWglZf0kRYpoLt2BiXQideBVH0tTxJu+2nRdC
yFcuWFDeaS4LTOhZ6VAlGV4M8hEZ6i6Cd2Z9BJz/WhZ8RrkitcTUVO51RNiosHWR
V3tZ48hhEsC56sYynZdZ9YsnFAeIGe7NetUp+ss2Ii6RhtJfUD/dRVc55QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkC2uOQS/fZxwORA+gDuYS+v25CMB8GA1UdIwQY
MBaAFIUdTjTU5IU5wXBFHU4mE4iH9ukiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9iZjE1ODktNmFkZi00NGIzLTk3NDYt
ODFjNDA1NTE0OGUwLzEvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9iZjE1ODktNmFkZi00NGIzLTk3NDYtODFjNDA1NTE0OGUw
LzEvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEnPgnqR
fe8a3GrSkRoZ0dZ4fJ8JehVOvhOmJ8gspRe5/g6uQV3zfq7XkbNxVdrVpS7G6caj
iaP2gL0cVSbGy9ww2ULFjUh56SJUebuXiDYix87/I+rP1QfYZs0DOLMP8cYdVGCO
24JQK74PtLzGvDaoiuKDaT+FykN5O6etragahKtcjVYVlwXjlECIqwn+vRVZ6SLB
NTvIzo6nnCNxMUhqI/CGnrP66ZoTWri+R6YbwprifH1fCP9Mo0U02w/x9JDThAgO
1XoDlg2hMNaZ9haV3TN/DSOP3+ZEmF3yvud9lo1OYAsAn+XVZ4w7BkcP/bGDTqIC
NGEn1B5pBZItDg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:47:41 2025 by rpki-client