Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
File: hXLVrMJRZ2mcf886G4BOoyWsTl0.mft (raw, json)
Hash identifier: BmbPil3MMx2jPCyhuTz+7DjmlTqTLbgnXq2TfGZHIHs=
Subject key identifier: D9:D4:EC:71:F1:1B:F7:4B:4B:68:F2:3C:24:81:26:E8:E2:6E:F8:9E
Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
Certificate issuer: /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Certificate serial: 01974855285F6D545AB03611A5DBC042CE38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
Manifest number: 14AB
Signing time: Sat 07 Jun 2025 03:00:29 +0000
Manifest this update: Sat 07 Jun 2025 03:00:29 +0000
Manifest next update: Sun 08 Jun 2025 03:00:29 +0000
Files and hashes: 1: E_g8JEJGx2RzSEjGgXwsnLzhYuY.roa (hash: 1/I3aoM+yKdAzYPZU70IJvPWqKBQF4IK2mBQQ0GVymw=)
2: hXLVrMJRZ2mcf886G4BOoyWsTl0.crl (hash: epTv4/+3atHrbTZgSz4iSI+B3XlkNj41rHa/9hO4Mo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:28:5f:6d:54:5a:b0:36:11:a5:db:c0:42:ce:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Validity
Not Before: Jun 7 03:00:29 2025 GMT
Not After : Jun 8 03:00:29 2025 GMT
Subject: CN=d9d4ec71f11bf74b4b68f23c248126e8e26ef89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:ea:f8:77:22:7b:e2:25:5e:04:72:90:4c:
78:f5:32:4a:08:86:ac:6a:d5:60:5d:36:91:9c:a1:
96:35:a6:d6:04:76:f8:b0:fe:d3:4c:ed:aa:1c:34:
fc:8d:54:41:23:ea:cc:e2:35:41:74:12:1f:ae:8d:
6c:62:1b:3b:3b:bd:02:bf:94:c1:78:a2:c0:c5:a7:
1a:9a:cd:75:e0:db:89:4d:5c:06:bb:47:1c:d1:2c:
a2:9e:55:c3:54:2c:d7:d7:9f:42:fe:ce:44:63:22:
dc:5d:f0:e4:11:99:8a:1d:31:a1:6e:af:79:f8:05:
15:51:25:65:f7:dd:10:12:d4:6a:c1:42:bf:12:46:
1b:16:b2:24:d9:4a:ad:b1:d7:47:95:45:8e:12:cf:
69:dd:8e:36:f9:6d:3d:98:5b:8c:79:05:25:c6:e4:
51:83:19:b5:5d:d8:69:34:f6:27:7a:c1:56:47:84:
7b:b2:11:e6:15:58:81:de:59:a4:03:e8:ae:d7:1e:
ee:d0:72:41:3d:a6:d4:f5:e9:e3:04:6e:ce:0c:f4:
b1:49:e7:3b:f9:06:8a:ee:16:73:b2:51:a9:af:18:
91:51:18:f9:76:45:1b:99:08:5b:75:b5:36:fc:9f:
50:aa:f9:b6:5d:34:87:33:62:7a:02:83:a3:29:3f:
92:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D4:EC:71:F1:1B:F7:4B:4B:68:F2:3C:24:81:26:E8:E2:6E:F8:9E
X509v3 Authority Key Identifier:
keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0f:d4:e1:10:d3:8d:72:a7:16:86:f7:9d:dd:10:0e:fa:d9:
fd:7f:b4:5f:2d:12:54:a6:35:71:15:71:f7:a2:74:10:36:53:
cd:b0:96:17:af:a3:0c:62:16:bb:12:bc:70:10:ad:16:1f:9b:
fe:da:14:4f:3e:24:26:14:f4:e4:7b:09:a7:0f:8c:51:2b:3e:
01:db:0b:2a:7d:62:30:dc:97:6c:84:68:f2:b9:1c:ba:9f:5f:
b8:93:84:13:94:fa:90:e6:ba:ed:04:5f:56:a8:d3:6e:23:db:
4b:7f:b7:15:1c:6e:c7:3c:f4:26:f0:d4:70:11:9b:86:b3:fb:
b0:c0:c7:f5:2a:58:9d:8e:93:68:1b:33:34:1f:bd:aa:c7:17:
ce:1a:6f:c2:30:58:1b:59:3b:1f:b0:8e:a8:09:bf:27:db:7f:
1a:dd:ed:90:b8:a8:0f:0b:bf:f4:67:42:33:d4:16:6b:83:37:
5d:16:eb:0c:73:4f:9e:7e:22:c6:60:ae:ea:ff:87:a2:c9:e7:
2c:6a:f0:da:26:b6:d1:d2:9c:0e:58:0e:86:64:a9:11:cf:38:
26:0c:1d:61:bc:ac:41:a3:f0:53:74:11:54:3d:a0:82:ee:cf:
d5:20:d5:00:43:1f:56:07:9a:1b:46:8e:fa:bd:3a:d7:1d:5a:
e8:59:af:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVShfbVRasDYRpdvAQs44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NzJkNWFjYzI1MTY3Njk5YzdmY2YzYTFiODA0ZWEzMjVh
YzRlNWQwHhcNMjUwNjA3MDMwMDI5WhcNMjUwNjA4MDMwMDI5WjAzMTEwLwYDVQQD
EyhkOWQ0ZWM3MWYxMWJmNzRiNGI2OGYyM2MyNDgxMjZlOGUyNmVmODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLLq+Hcie+IlXgRykEx49TJKCIas
atVgXTaRnKGWNabWBHb4sP7TTO2qHDT8jVRBI+rM4jVBdBIfro1sYhs7O70Cv5TB
eKLAxacams114NuJTVwGu0cc0SyinlXDVCzX159C/s5EYyLcXfDkEZmKHTGhbq95
+AUVUSVl990QEtRqwUK/EkYbFrIk2UqtsddHlUWOEs9p3Y42+W09mFuMeQUlxuRR
gxm1XdhpNPYnesFWR4R7shHmFViB3lmkA+iu1x7u0HJBPabU9enjBG7ODPSxSec7
+QaK7hZzslGprxiRURj5dkUbmQhbdbU2/J9Qqvm2XTSHM2J6AoOjKT+SVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnU7HHxG/dLS2jyPCSBJujibvieMB8GA1UdIwQY
MBaAFIVy1azCUWdpnH/POhuATqMlrE5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFhMVnJNSlJaMm1jZjg4Nkc0Qk9veVdzVGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMTEyMzQtY2ZiNy00Mjc1LTlmNzkt
NDBkYzQ0NWM2NjlhLzEvaFhMVnJNSlJaMm1jZjg4Nkc0Qk9veVdzVGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wMTEyMzQtY2ZiNy00Mjc1LTlmNzktNDBkYzQ0NWM2Njlh
LzEvaFhMVnJNSlJaMm1jZjg4Nkc0Qk9veVdzVGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQ/U4RDT
jXKnFob3nd0QDvrZ/X+0Xy0SVKY1cRVx96J0EDZTzbCWF6+jDGIWuxK8cBCtFh+b
/toUTz4kJhT05HsJpw+MUSs+AdsLKn1iMNyXbIRo8rkcup9fuJOEE5T6kOa67QRf
VqjTbiPbS3+3FRxuxzz0JvDUcBGbhrP7sMDH9SpYnY6TaBszNB+9qscXzhpvwjBY
G1k7H7COqAm/J9t/Gt3tkLioDwu/9GdCM9QWa4M3XRbrDHNPnn4ixmCu6v+Hosnn
LGrw2ia20dKcDlgOhmSpEc84JgwdYbysQaPwU3QRVD2ggu7P1SDVAEMfVgeaG0aO
+r061x1a6Fmvmg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:28:50 2025 by rpki-client