Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: Tamy8G1wdKN9NdgDjuSD0+ghO9f9FWv8hd8fLOF1JgE=
Subject key identifier: D3:83:7D:B8:1A:A9:CC:4D:9D:DD:A7:E3:3D:04:A9:45:3C:D6:EB:5C
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 01974779E60DFD52A87076C6005C17B82B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 150D
Signing time: Fri 06 Jun 2025 23:01:00 +0000
Manifest this update: Fri 06 Jun 2025 23:01:00 +0000
Manifest next update: Sat 07 Jun 2025 23:01:00 +0000
Files and hashes: 1: 1-nOh_fcrGs71syqQUCrDnx6Dh5Q.roa (hash: MC3QMP1DMmNJPDq0RMEC/Cc+mBXhBq/i9gsriN4YbrY=)
2: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: CSco8YMlc9TyhICrxy+x5crVHL9SIq3ZdcNqX9S7kpE=)
3: c8vg0HClEXhcPioY22wCvZFQSNc.roa (hash: qmf3BkaUvFn3iXx2ay1H/G3dq4845AkTBF3dK41I618=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:e6:0d:fd:52:a8:70:76:c6:00:5c:17:b8:2b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Jun 6 23:01:00 2025 GMT
Not After : Jun 7 23:01:00 2025 GMT
Subject: CN=d3837db81aa9cc4d9ddda7e33d04a9453cd6eb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:a8:ba:e9:d0:f0:6f:de:8f:59:87:68:ee:
8d:33:14:7d:ab:a5:06:aa:ae:45:34:b3:01:26:59:
e9:da:f5:31:d0:ae:b5:9a:82:a6:fc:5e:6c:3d:fd:
bb:44:37:04:79:1c:b7:59:84:ff:56:69:a9:7b:84:
4e:91:3a:ac:c3:ea:22:99:d0:c1:1a:7e:f2:4b:0f:
2e:98:c0:6b:f8:db:80:f8:38:b6:31:0e:f4:4d:5d:
a2:a2:20:be:27:6f:43:32:7b:61:d3:de:3e:97:b5:
ce:28:0a:84:d3:bc:15:fa:6a:47:b7:db:1c:18:a3:
82:a3:f4:17:18:06:a5:27:08:85:20:78:5f:63:a2:
ed:17:cb:9d:26:59:e7:91:d7:a2:b8:4f:2e:92:c6:
03:5b:d1:43:d7:7f:a3:10:38:c0:66:c7:17:04:67:
ef:54:b3:2d:24:33:39:6a:64:a1:2e:f9:12:9e:d4:
6d:9d:a7:d3:e1:12:cb:5a:67:1c:64:78:f5:bc:3b:
42:58:c9:5f:3a:9a:00:cf:54:b2:63:e2:3f:48:ba:
9b:d7:31:7e:8f:04:fa:e0:20:5f:04:3e:b3:b6:a5:
9f:ec:1d:72:fd:9e:9e:54:9b:aa:3b:ff:64:ce:5d:
fd:de:6f:c8:a5:92:e4:4d:99:87:6d:7e:cf:88:9e:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:83:7D:B8:1A:A9:CC:4D:9D:DD:A7:E3:3D:04:A9:45:3C:D6:EB:5C
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3e:3a:1b:f7:3c:5e:0e:54:31:ca:5e:76:e4:2f:5c:97:8e:
04:27:0f:37:2b:8b:df:16:2f:3c:8e:0e:a3:9e:2d:72:06:04:
3a:61:c4:aa:4d:61:6b:e6:fa:b8:88:1a:02:f0:6e:f4:9e:41:
9d:e7:35:d8:53:db:5f:27:88:40:c2:dd:61:4a:86:9a:a9:6a:
97:b2:6d:fc:2c:0a:cf:44:46:3b:68:33:11:8e:66:91:8b:32:
e5:4b:7a:10:ec:d3:33:8a:36:c2:12:d6:76:94:d0:f0:3c:9e:
84:ae:f7:ac:08:6c:62:e3:42:dc:87:b0:d2:bf:3c:f9:52:e0:
4e:d5:df:c1:db:74:1f:ca:35:8e:90:8a:7e:16:19:bc:8c:a0:
6e:e0:8c:09:d8:a4:c4:24:d5:87:68:8b:d3:a0:5f:ac:82:7b:
ab:dd:06:40:d7:c4:1f:60:b1:5e:ba:bb:3b:24:0e:a9:5f:09:
37:83:9d:c3:15:92:2f:90:4a:77:f8:9f:2f:8b:26:cf:0c:10:
a3:c1:a1:00:5b:e4:b9:9e:fe:93:98:b1:56:d9:39:69:9f:c5:
75:0a:f8:14:87:b1:12:df:36:bf:d2:62:a1:f9:fb:e6:36:8e:
1d:31:ae:f9:35:19:f1:c6:2e:68:53:c0:6c:e4:e5:54:fd:c1:
4b:d1:0d:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeeYN/VKocHbGAFwXuCuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYmJmYTQ5ODc3YmM1ZDllNGNmNDQ2OTUwZmQxNDI3OTky
OWY0OWEwHhcNMjUwNjA2MjMwMTAwWhcNMjUwNjA3MjMwMTAwWjAzMTEwLwYDVQQD
EyhkMzgzN2RiODFhYTljYzRkOWRkZGE3ZTMzZDA0YTk0NTNjZDZlYjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkKouunQ8G/ej1mHaO6NMxR9q6UG
qq5FNLMBJlnp2vUx0K61moKm/F5sPf27RDcEeRy3WYT/Vmmpe4ROkTqsw+oimdDB
Gn7ySw8umMBr+NuA+Di2MQ70TV2ioiC+J29DMnth094+l7XOKAqE07wV+mpHt9sc
GKOCo/QXGAalJwiFIHhfY6LtF8udJlnnkdeiuE8uksYDW9FD13+jEDjAZscXBGfv
VLMtJDM5amShLvkSntRtnafT4RLLWmccZHj1vDtCWMlfOpoAz1SyY+I/SLqb1zF+
jwT64CBfBD6ztqWf7B1y/Z6eVJuqO/9kzl393m/IpZLkTZmHbX7PiJ6CjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNODfbgaqcxNnd2n4z0EqUU81utcMB8GA1UdIwQY
MBaAFBy7+kmHe8XZ5M9EaVD9FCeZKfSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYt
NDZiZjc2MjYxOGU3LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYtNDZiZjc2MjYxOGU3
LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApT46G/c8
Xg5UMcpeduQvXJeOBCcPNyuL3xYvPI4Oo54tcgYEOmHEqk1ha+b6uIgaAvBu9J5B
nec12FPbXyeIQMLdYUqGmqlql7Jt/CwKz0RGO2gzEY5mkYsy5Ut6EOzTM4o2whLW
dpTQ8DyehK73rAhsYuNC3Iew0r88+VLgTtXfwdt0H8o1jpCKfhYZvIygbuCMCdik
xCTVh2iL06BfrIJ7q90GQNfEH2CxXrq7OyQOqV8JN4OdwxWSL5BKd/ifL4smzwwQ
o8GhAFvkuZ7+k5ixVtk5aZ/FdQr4FIexEt82v9Jiofn75jaOHTGu+TUZ8cYuaFPA
bOTlVP3BS9EN7A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:31 2025 by rpki-client