Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json)
Hash identifier: 5z1J+USNKF2ZESWtZLqosNza6oOSgikR+nGhPl1Qmws=
Subject key identifier: 1A:0E:8C:E1:AD:BE:9B:9F:06:3C:0A:02:7E:FF:3D:0D:80:7B:BD:86
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial: 01974BC3F278FC067C7A0A5A24EDEF0ED61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
Manifest number: 1562
Signing time: Sat 07 Jun 2025 19:00:22 +0000
Manifest this update: Sat 07 Jun 2025 19:00:22 +0000
Manifest next update: Sun 08 Jun 2025 19:00:22 +0000
Files and hashes: 1: 5dE_GC4RYmruYsEQCosEswqhvMw.roa (hash: PKjCYy3vCzlACHchkXt5SVZDwsnRqMCgtgL6CJOnCUg=)
2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: aClQ0tVqlFvaSY2iPHHxpHdXTcChyZY6bWqtHwAfOag=)
3: wITBUH3fVii4QvavQf9IYQ9sIA4.roa (hash: sUVkY3RRTmkWlOCgQmin3wil/Gjs5wSpMGd2nMYWzJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c3:f2:78:fc:06:7c:7a:0a:5a:24:ed:ef:0e:d6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Validity
Not Before: Jun 7 19:00:22 2025 GMT
Not After : Jun 8 19:00:22 2025 GMT
Subject: CN=1a0e8ce1adbe9b9f063c0a027eff3d0d807bbd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1d:2a:a2:00:95:5b:cd:32:3c:0a:fe:60:08:
18:a4:17:e7:03:2c:45:23:47:3c:b7:f9:ca:2b:07:
1e:c9:4a:c2:a1:af:3a:d1:64:d8:2c:dc:e9:37:bf:
7d:aa:1a:a9:7a:b9:8f:59:2e:fd:34:8c:38:b0:81:
f7:ee:43:0b:27:61:74:05:24:14:34:a2:3a:2f:25:
c4:fe:a8:4f:78:b3:a3:93:65:3a:9e:08:3a:2c:b3:
fe:43:b1:e6:bc:dc:e2:28:86:d2:fa:d5:ee:03:e1:
a2:64:79:42:ab:e4:aa:2b:da:57:59:e0:82:5b:91:
80:45:cb:c5:da:75:00:a8:94:09:65:e8:85:ae:3e:
f4:2a:88:f8:c2:0b:a0:84:2d:bc:61:c1:0a:86:62:
99:13:62:72:7d:23:32:0f:c8:5d:0c:b0:59:b0:52:
29:17:4b:dd:00:7d:33:9f:0c:df:be:67:b6:d3:45:
a0:77:5d:33:11:c0:f0:16:65:02:3c:1c:3e:76:16:
66:3c:b3:05:06:72:e8:18:12:05:42:27:bb:63:d4:
06:d3:a0:18:bf:62:8a:f2:4e:fa:9f:c9:09:a5:a6:
67:68:2b:1a:4c:95:6f:c8:ba:82:90:fb:69:9a:47:
8a:03:6e:2f:5f:de:7c:47:97:29:35:93:8f:67:08:
b0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0E:8C:E1:AD:BE:9B:9F:06:3C:0A:02:7E:FF:3D:0D:80:7B:BD:86
X509v3 Authority Key Identifier:
keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7a:cc:6f:e6:5f:df:42:9b:97:33:b0:9b:7c:1f:a9:61:f0:
5b:9b:f3:15:8b:6b:db:d4:2a:71:52:9f:00:ab:a8:38:92:b0:
26:05:5c:59:c3:62:d9:b5:f8:6a:16:e2:f0:aa:85:bb:fd:cc:
d3:4d:86:d8:8b:4b:2e:86:f4:37:73:d4:55:b1:03:95:44:1f:
eb:cd:4e:fe:57:07:87:cc:70:5e:9e:9f:bb:06:7b:03:bf:ec:
f9:ca:84:5c:6e:da:e7:09:02:50:4c:5d:9e:10:d4:66:ca:19:
3b:87:b8:09:a9:b2:5d:d1:13:47:9f:60:87:ce:e8:fc:e7:b0:
75:8a:48:c2:3a:e9:f6:69:b0:8a:a8:cb:31:98:58:bc:8b:44:
b3:2f:12:f3:fd:1a:18:60:55:a5:b4:8e:5c:d3:4d:9a:6d:0f:
a7:52:c5:30:25:5a:61:47:37:d1:c3:66:90:c7:fc:b7:f9:18:
f6:87:a1:dd:c6:f1:3b:83:99:42:7f:e0:d6:0a:58:85:de:f9:
fe:52:a1:4f:6c:16:5a:14:38:e2:06:98:a1:77:2d:17:5e:65:
b3:f0:a6:dc:cf:b0:c9:aa:ed:79:2b:6f:df:74:18:50:05:f2:
3a:a7:90:8b:cc:9c:f6:23:74:58:3e:65:67:63:6a:ca:f3:2e:
42:13:02:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLw/J4/AZ8egpaJO3vDtYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjRjNzg3M2I3ZmVhNDlmZjZlYjkwZDUwMmMxZGJjM2E1
ZjhjMzMwHhcNMjUwNjA3MTkwMDIyWhcNMjUwNjA4MTkwMDIyWjAzMTEwLwYDVQQD
EygxYTBlOGNlMWFkYmU5YjlmMDYzYzBhMDI3ZWZmM2QwZDgwN2JiZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5R0qogCVW80yPAr+YAgYpBfnAyxF
I0c8t/nKKwceyUrCoa860WTYLNzpN799qhqpermPWS79NIw4sIH37kMLJ2F0BSQU
NKI6LyXE/qhPeLOjk2U6ngg6LLP+Q7HmvNziKIbS+tXuA+GiZHlCq+SqK9pXWeCC
W5GARcvF2nUAqJQJZeiFrj70Koj4wgughC28YcEKhmKZE2JyfSMyD8hdDLBZsFIp
F0vdAH0znwzfvme200Wgd10zEcDwFmUCPBw+dhZmPLMFBnLoGBIFQie7Y9QG06AY
v2KK8k76n8kJpaZnaCsaTJVvyLqCkPtpmkeKA24vX958R5cpNZOPZwiwcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoOjOGtvpufBjwKAn7/PQ2Ae72GMB8GA1UdIwQY
MBaAFIn0x4c7f+pJ/265DVAsHbw6X4wzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMt
YmM1MTdlMTIxZDU0LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMtYmM1MTdlMTIxZDU0
LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanrMb+Zf
30KblzOwm3wfqWHwW5vzFYtr29QqcVKfAKuoOJKwJgVcWcNi2bX4ahbi8KqFu/3M
002G2ItLLob0N3PUVbEDlUQf681O/lcHh8xwXp6fuwZ7A7/s+cqEXG7a5wkCUExd
nhDUZsoZO4e4CamyXdETR59gh87o/OewdYpIwjrp9mmwiqjLMZhYvItEsy8S8/0a
GGBVpbSOXNNNmm0Pp1LFMCVaYUc30cNmkMf8t/kY9oeh3cbxO4OZQn/g1gpYhd75
/lKhT2wWWhQ44gaYoXctF15ls/Cm3M+wyarteStv33QYUAXyOqeQi8yc9iN0WD5l
Z2NqyvMuQhMCYQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:07:51 2025 by rpki-client