Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
File: MHFOgRmzE03MBg_lkAp82Gj8WXM.mft (raw, json)
Hash identifier: edD0jVO7GvbY4zOA3JZKT2b0IN0wkuwrerzJqvBRSx4=
Subject key identifier: B5:54:E9:0D:AC:BB:D8:93:10:05:07:7E:54:FA:E4:86:C4:5E:7E:4C
Authority key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
Certificate issuer: /CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Certificate serial: 019748FA66859BDDF7D427EE01BB2EB55ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
Manifest number: 0121
Signing time: Sat 07 Jun 2025 06:00:59 +0000
Manifest this update: Sat 07 Jun 2025 06:00:59 +0000
Manifest next update: Sun 08 Jun 2025 06:00:59 +0000
Files and hashes: 1: MHFOgRmzE03MBg_lkAp82Gj8WXM.crl (hash: ufnz7OufSrOHGB9t2Z+vu+H8J3gkCcZZFsr+oJ+gpVg=)
2: n-uGHXU9mK8VqWn_-PLqMRGS8Ts.roa (hash: ygEEJ097SaCUzOmNUISceDFVrT5Qf+Tcg4RtFktgRHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:66:85:9b:dd:f7:d4:27:ee:01:bb:2e:b5:5e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Validity
Not Before: Jun 7 06:00:59 2025 GMT
Not After : Jun 8 06:00:59 2025 GMT
Subject: CN=b554e90dacbbd8931005077e54fae486c45e7e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:d8:f2:13:c5:10:1b:a8:72:61:09:6f:17:
86:57:67:ab:35:2f:68:1a:1c:16:b3:37:e3:b9:bf:
a7:e0:52:27:77:24:68:45:16:9c:88:64:cd:44:fe:
83:40:13:72:14:66:78:ec:32:36:12:6d:ad:fb:f0:
19:89:38:b7:1d:98:33:9b:40:cc:a7:83:51:e7:1e:
e9:12:e8:9f:a3:15:f8:7a:2e:0f:75:1e:3b:4d:71:
4e:a9:12:5a:84:87:8c:30:12:42:08:fa:c2:a3:84:
65:52:ad:27:91:37:36:60:99:e1:ea:99:cd:a4:be:
cc:0d:59:de:f4:fa:c2:e8:5b:7a:a6:78:70:bf:19:
78:8f:7d:9b:fb:48:a3:96:46:a2:4f:1e:40:12:12:
5d:2e:9f:5f:46:e9:48:3a:c8:b1:57:66:36:7a:f8:
f5:04:b6:3d:b7:30:3c:90:9c:be:1c:6a:30:26:03:
52:8d:91:6a:dc:cd:46:8f:ba:cc:c1:5f:b7:3b:6f:
9c:b0:57:75:7e:d9:c7:d7:53:7f:78:4b:e2:7c:c2:
b7:99:7a:56:ed:9f:30:6e:71:36:6c:fa:a0:af:d1:
ec:e8:78:8f:53:47:70:6b:f9:1c:bb:96:cc:07:19:
6b:5c:b1:61:84:3c:3d:cb:4c:eb:6f:a9:92:01:85:
90:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:54:E9:0D:AC:BB:D8:93:10:05:07:7E:54:FA:E4:86:C4:5E:7E:4C
X509v3 Authority Key Identifier:
keyid:30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f6:28:a9:ce:e7:db:fd:11:3a:a2:1a:7e:c4:4e:ea:b4:1d:
05:be:74:62:9f:c1:6e:96:68:01:87:34:f3:9b:81:ec:27:4c:
86:7a:b7:18:0e:e8:17:2c:83:fe:58:95:09:78:12:c0:5e:02:
a7:35:eb:d8:ed:12:c5:ba:b2:d7:c9:18:7a:46:b1:88:a1:58:
61:03:99:c0:02:9a:83:15:44:8c:69:2b:c3:20:04:53:de:71:
00:a9:98:6e:46:a8:ca:56:89:a5:eb:ad:70:9f:c3:d0:21:a6:
2e:2c:b7:42:04:0f:cb:b1:6d:79:b8:e2:a6:fd:7d:15:13:bc:
36:04:74:e2:64:3a:5f:37:d2:29:45:72:19:80:b9:1d:af:82:
cf:20:31:33:cb:66:19:69:85:3d:8b:78:b9:69:91:40:4f:61:
ea:bb:ea:9d:f7:24:36:d9:7b:ea:6d:62:ee:1a:3b:90:03:a4:
92:6a:26:8b:ce:85:4e:59:46:f3:b4:4d:36:f5:22:8b:01:29:
08:d3:21:88:21:16:c7:6a:7a:72:1f:ef:d5:c6:bc:cf:fa:1d:
16:f1:b0:ce:0f:f3:8f:ba:92:e2:30:ea:4f:ed:39:3f:1a:59:
87:07:56:9d:40:5d:86:24:5b:0b:87:a7:74:55:d2:38:44:bc:
ab:4e:2a:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+maFm9331CfuAbsutV7ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzE0ZTgxMTliMzEzNGRjYzA2MGZlNTkwMGE3Y2Q4Njhm
YzU5NzMwHhcNMjUwNjA3MDYwMDU5WhcNMjUwNjA4MDYwMDU5WjAzMTEwLwYDVQQD
EyhiNTU0ZTkwZGFjYmJkODkzMTAwNTA3N2U1NGZhZTQ4NmM0NWU3ZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvnY8hPFEBuocmEJbxeGV2erNS9o
GhwWszfjub+n4FIndyRoRRaciGTNRP6DQBNyFGZ47DI2Em2t+/AZiTi3HZgzm0DM
p4NR5x7pEuifoxX4ei4PdR47TXFOqRJahIeMMBJCCPrCo4RlUq0nkTc2YJnh6pnN
pL7MDVne9PrC6Ft6pnhwvxl4j32b+0ijlkaiTx5AEhJdLp9fRulIOsixV2Y2evj1
BLY9tzA8kJy+HGowJgNSjZFq3M1Gj7rMwV+3O2+csFd1ftnH11N/eEvifMK3mXpW
7Z8wbnE2bPqgr9Hs6HiPU0dwa/kcu5bMBxlrXLFhhDw9y0zrb6mSAYWQ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVU6Q2su9iTEAUHflT65IbEXn5MMB8GA1UdIwQY
MBaAFDBxToEZsxNNzAYP5ZAKfNho/FlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEt
OGYzNDcwZDgyMDU3LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEtOGYzNDcwZDgyMDU3
LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvYoqc7n
2/0ROqIafsRO6rQdBb50Yp/BbpZoAYc085uB7CdMhnq3GA7oFyyD/liVCXgSwF4C
pzXr2O0Sxbqy18kYekaxiKFYYQOZwAKagxVEjGkrwyAEU95xAKmYbkaoylaJpeut
cJ/D0CGmLiy3QgQPy7Ftebjipv19FRO8NgR04mQ6XzfSKUVyGYC5Ha+CzyAxM8tm
GWmFPYt4uWmRQE9h6rvqnfckNtl76m1i7ho7kAOkkmomi86FTllG87RNNvUiiwEp
CNMhiCEWx2p6ch/v1ca8z/odFvGwzg/zj7qS4jDqT+05PxpZhwdWnUBdhiRbC4en
dFXSOES8q04q7g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:21 2025 by rpki-client