Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier: FyO3199NVvPwR6IEtpkib53g92ErRMV32JV+PDGqcjU=
Subject key identifier: D0:A2:30:D5:B5:FC:85:B2:9B:7E:0B:C9:1E:04:A2:4B:F4:23:90:38
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 01974E20A53360F3D1C99830A61D85FFA745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number: 1512
Signing time: Sun 08 Jun 2025 06:00:51 +0000
Manifest this update: Sun 08 Jun 2025 06:00:51 +0000
Manifest next update: Mon 09 Jun 2025 06:00:51 +0000
Files and hashes: 1: MmMjPcmgSnmpat_UrnnkwrG8N3M.roa (hash: P+6oU+/zVxV3KfOFEMlrjbqkg2yguA/0UthTHnReUm8=)
2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: HcPvXRwjmSSaoKnZny3xZhOw5gs+6kKyEJqXnkAmXKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:a5:33:60:f3:d1:c9:98:30:a6:1d:85:ff:a7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: Jun 8 06:00:51 2025 GMT
Not After : Jun 9 06:00:51 2025 GMT
Subject: CN=d0a230d5b5fc85b29b7e0bc91e04a24bf4239038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:a7:3f:56:33:c5:2c:57:49:88:b6:67:18:
95:f5:bb:b3:5e:55:cd:b5:e3:20:01:87:b8:1b:c3:
d2:9f:79:c9:3d:9b:42:e9:1a:f4:90:5c:09:6b:be:
cc:d9:22:10:04:ba:64:a9:27:03:16:bb:af:fe:c3:
75:d3:23:c8:a9:37:2e:3f:d6:5a:f8:1f:59:9a:77:
5a:28:f4:a3:ab:25:28:22:f1:bc:f9:c7:e2:20:04:
ef:e2:77:52:48:71:1d:ab:89:95:71:b8:77:10:eb:
61:31:31:90:ba:8a:fd:38:55:05:11:6d:1d:2b:0c:
8e:06:18:1e:3d:a8:ac:cf:33:ea:e6:01:76:69:a0:
26:8b:63:dd:d0:4b:87:93:f9:1e:3e:83:c9:98:29:
55:49:5d:54:f1:a3:66:99:75:c0:bc:12:f5:9d:27:
f4:4b:4a:6a:81:30:9d:39:f7:b8:b1:69:e2:87:2c:
52:71:f9:09:42:7b:6d:8f:0a:fc:49:0d:c2:ef:9b:
db:0f:21:ba:4a:d3:8d:f8:e9:e2:99:09:f3:c0:9b:
cc:d6:a7:f1:ce:9a:4d:6f:48:66:b9:1f:77:54:2b:
5f:59:af:1f:e4:85:09:ab:e6:8b:f7:f9:dd:eb:ad:
44:60:ff:b1:3f:40:47:c0:c6:39:8d:54:1a:6d:76:
52:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A2:30:D5:B5:FC:85:B2:9B:7E:0B:C9:1E:04:A2:4B:F4:23:90:38
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5e:7a:07:3e:73:09:4f:2d:43:46:82:f8:fd:3c:1c:e1:7c:
e4:4a:f5:ec:11:9b:55:24:48:2e:09:23:93:bf:e8:73:f0:a3:
82:92:01:dc:fe:e8:74:9f:84:91:e8:8c:9b:20:f1:ab:ed:ca:
73:94:e4:ff:1b:03:03:fa:66:4b:ed:d0:08:c7:96:5a:7f:dd:
ab:92:fd:79:b6:de:fb:7e:00:02:77:4b:5d:90:88:7e:ba:10:
ed:cb:4f:04:ea:46:60:49:0c:23:56:1d:4b:23:49:db:2d:c9:
8b:c1:fb:cb:04:fa:a8:f8:5b:f8:f6:c9:3e:05:62:df:41:f7:
29:f1:91:ca:cb:e7:eb:2a:6d:01:68:af:dc:e2:f5:37:a3:e7:
0e:c6:4e:d5:3f:9f:11:cf:78:c5:da:a8:be:73:45:96:da:fb:
86:9f:f7:2b:a6:c5:03:52:66:95:fb:98:37:62:39:07:16:89:
73:b5:d8:eb:52:7a:45:55:a7:b2:77:52:6b:5b:aa:45:c4:5b:
b4:5f:c7:ea:b1:38:de:a3:a2:c0:2a:c2:58:29:28:9c:fa:92:
80:1b:69:12:5f:a0:e8:29:0e:9f:fa:5b:21:0d:1c:15:47:f4:
a9:96:98:6c:31:ed:e7:da:98:22:41:18:29:89:11:01:f8:b6:
8f:fb:04:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOIKUzYPPRyZgwph2F/6dFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwN2YzZGFiYWVlMjRmYzQzYjg2NWFhZmEzZjNjOWMyZjM2
NGJmYzkwHhcNMjUwNjA4MDYwMDUxWhcNMjUwNjA5MDYwMDUxWjAzMTEwLwYDVQQD
EyhkMGEyMzBkNWI1ZmM4NWIyOWI3ZTBiYzkxZTA0YTI0YmY0MjM5MDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzOnP1YzxSxXSYi2ZxiV9buzXlXN
teMgAYe4G8PSn3nJPZtC6Rr0kFwJa77M2SIQBLpkqScDFruv/sN10yPIqTcuP9Za
+B9ZmndaKPSjqyUoIvG8+cfiIATv4ndSSHEdq4mVcbh3EOthMTGQuor9OFUFEW0d
KwyOBhgePaiszzPq5gF2aaAmi2Pd0EuHk/kePoPJmClVSV1U8aNmmXXAvBL1nSf0
S0pqgTCdOfe4sWnihyxScfkJQnttjwr8SQ3C75vbDyG6StON+OnimQnzwJvM1qfx
zppNb0hmuR93VCtfWa8f5IUJq+aL9/nd661EYP+xP0BHwMY5jVQabXZS/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCiMNW1/IWym34LyR4Eokv0I5A4MB8GA1UdIwQY
MBaAFHB/Pauu4k/EO4Zar6PzycLzZL/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUt
ZWNjZDY2NWYxZjAzLzEvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUtZWNjZDY2NWYxZjAz
LzEvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdV56Bz5z
CU8tQ0aC+P08HOF85Er17BGbVSRILgkjk7/oc/CjgpIB3P7odJ+EkeiMmyDxq+3K
c5Tk/xsDA/pmS+3QCMeWWn/dq5L9ebbe+34AAndLXZCIfroQ7ctPBOpGYEkMI1Yd
SyNJ2y3Ji8H7ywT6qPhb+PbJPgVi30H3KfGRysvn6yptAWiv3OL1N6PnDsZO1T+f
Ec94xdqovnNFltr7hp/3K6bFA1JmlfuYN2I5BxaJc7XY61J6RVWnsndSa1uqRcRb
tF/H6rE43qOiwCrCWCkonPqSgBtpEl+g6CkOn/pbIQ0cFUf0qZaYbDHt59qYIkEY
KYkRAfi2j/sELQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:52:37 2025 by rpki-client