Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier: e5JxXPbN/jQqWzJTC3TC6Vx+KpI44rNT85gS9Gx6cEU=
Subject key identifier: 68:5B:D3:10:F0:C9:95:B1:DE:CB:08:C3:19:2A:A8:CC:DB:7F:32:B8
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 019747799BC7DB1BD9C920ABE92593C13026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number: 0E88
Signing time: Fri 06 Jun 2025 23:00:41 +0000
Manifest this update: Fri 06 Jun 2025 23:00:41 +0000
Manifest next update: Sat 07 Jun 2025 23:00:41 +0000
Files and hashes: 1: 1-TKHNCKbZE8g4XJcuPLU9wUNwXw.roa (hash: 4YE3N5IWvrJIb1gbK5UKUvbBqNqAEHWjC5reIu6mjb8=)
2: KPSPKR5CERt24RgHkaAIVOQ-_3Y.roa (hash: /B2g+d8SvUFH1wq4gYFhblNg4apBCw0hfFmzBcRbekw=)
3: bFD1sjNrlT8-Exv5RMapq_1KPJ0.roa (hash: dms0tmgxNyDbB9rboVPonFSAfotpbIdMya/cvQRCIY0=)
4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: yN5urbmyMxuvQYcZHjVIb0NtwgES6aer71jh3ZPd8Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:9b:c7:db:1b:d9:c9:20:ab:e9:25:93:c1:30:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Jun 6 23:00:41 2025 GMT
Not After : Jun 7 23:00:41 2025 GMT
Subject: CN=685bd310f0c995b1decb08c3192aa8ccdb7f32b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:e2:67:20:c9:9a:9e:d3:e5:cd:15:0f:50:
b4:03:43:83:f5:aa:6c:ba:5e:b3:5e:b2:19:9f:46:
dc:68:9e:e6:1e:d4:66:4b:9e:bc:b3:18:fc:7f:f5:
64:bd:9c:df:9a:ad:a0:79:b3:60:65:91:50:eb:3c:
5c:38:dc:b0:84:0e:a7:c3:31:ea:64:98:96:d3:77:
44:52:fc:e8:38:20:3d:df:22:7b:52:98:5a:b9:99:
6b:30:b1:29:ee:c9:cd:81:31:dc:31:e1:a5:4e:50:
a6:28:ca:54:8e:ea:13:59:f9:f7:6b:20:ed:d9:d9:
42:f3:98:82:dc:41:4e:02:87:98:53:c3:fd:6b:69:
07:43:0b:f7:b6:45:e1:f8:7b:41:e4:d9:2e:71:6e:
03:40:0b:4a:d0:67:16:36:4a:14:7a:27:92:ce:45:
23:fa:8f:f5:c7:f0:20:45:2a:8a:46:f1:05:70:84:
85:42:b3:c5:ea:5f:a8:57:93:c3:b3:75:7a:2b:25:
84:9e:d5:82:fc:c3:be:4b:0c:37:98:b0:56:0e:28:
3e:82:71:8e:5a:ad:e7:08:4f:6c:c8:f1:c5:35:95:
56:d6:9c:03:fe:3e:a2:97:5a:66:fa:46:6e:fd:ba:
70:e3:df:6f:98:75:c2:67:7e:eb:e1:73:90:c7:f2:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5B:D3:10:F0:C9:95:B1:DE:CB:08:C3:19:2A:A8:CC:DB:7F:32:B8
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:5f:14:91:30:19:6a:34:ee:49:12:f6:5c:1d:b9:af:af:80:
c7:cd:bf:cb:c2:0a:83:f7:88:0d:03:27:e3:66:e3:23:70:bc:
b6:dd:af:e0:e1:3c:4b:f5:7f:d8:71:39:0b:98:35:fe:e8:ca:
54:94:b8:95:08:7d:45:cc:9f:79:91:8a:1f:37:89:c7:2b:fb:
bd:98:e8:e6:f2:5f:d2:a7:0a:96:65:e0:5c:ee:1a:6a:be:f5:
04:99:24:0e:97:05:ae:ee:b2:25:ce:e2:e6:45:0a:6c:95:fa:
7c:20:63:b9:4a:a4:48:e9:18:f8:c6:3a:04:b4:43:28:79:58:
46:a9:8a:47:2d:18:0a:2c:57:cb:6b:c2:32:62:ea:17:cb:a9:
5d:7a:b4:7c:e4:2d:99:2b:af:ab:9a:df:f3:95:f2:4f:cf:4b:
28:ff:a0:fc:9b:60:38:5f:a2:a4:53:19:a3:34:ab:69:cd:51:
c2:fa:75:e1:f0:05:75:fb:f0:1b:e8:85:90:45:6b:26:37:48:
a4:4d:3f:a0:83:62:d9:eb:86:72:78:43:e0:e8:2a:fb:fb:0e:
32:47:22:f3:3c:df:84:6c:c8:3a:3b:c7:11:65:58:5b:ca:47:
32:c1:75:17:6a:bc:7d:84:93:fd:52:16:80:23:13:06:77:39:
5d:04:f1:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeZvH2xvZySCr6SWTwTAmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2I3NDJhMDNiYzljODU1MDcyMTdhMjUyMDRkZmZmODJm
Y2NkZjkwHhcNMjUwNjA2MjMwMDQxWhcNMjUwNjA3MjMwMDQxWjAzMTEwLwYDVQQD
Eyg2ODViZDMxMGYwYzk5NWIxZGVjYjA4YzMxOTJhYThjY2RiN2YzMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdbiZyDJmp7T5c0VD1C0A0OD9aps
ul6zXrIZn0bcaJ7mHtRmS568sxj8f/VkvZzfmq2gebNgZZFQ6zxcONywhA6nwzHq
ZJiW03dEUvzoOCA93yJ7UphauZlrMLEp7snNgTHcMeGlTlCmKMpUjuoTWfn3ayDt
2dlC85iC3EFOAoeYU8P9a2kHQwv3tkXh+HtB5NkucW4DQAtK0GcWNkoUeieSzkUj
+o/1x/AgRSqKRvEFcISFQrPF6l+oV5PDs3V6KyWEntWC/MO+Sww3mLBWDig+gnGO
Wq3nCE9syPHFNZVW1pwD/j6il1pm+kZu/bpw499vmHXCZ37r4XOQx/ICCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhb0xDwyZWx3ssIwxkqqMzbfzK4MB8GA1UdIwQY
MBaAFIbLdCoDvJyFUHIXolIE3/+C/M35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgt
MDVmMThmYzIxMmE3LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgtMDVmMThmYzIxMmE3
LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyF8UkTAZ
ajTuSRL2XB25r6+Ax82/y8IKg/eIDQMn42bjI3C8tt2v4OE8S/V/2HE5C5g1/ujK
VJS4lQh9RcyfeZGKHzeJxyv7vZjo5vJf0qcKlmXgXO4aar71BJkkDpcFru6yJc7i
5kUKbJX6fCBjuUqkSOkY+MY6BLRDKHlYRqmKRy0YCixXy2vCMmLqF8upXXq0fOQt
mSuvq5rf85XyT89LKP+g/JtgOF+ipFMZozSrac1Rwvp14fAFdfvwG+iFkEVrJjdI
pE0/oINi2euGcnhD4Ogq+/sOMkci8zzfhGzIOjvHEWVYW8pHMsF1F2q8fYST/VIW
gCMTBnc5XQTxZw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:04:47 2025 by rpki-client