Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
File: HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json)
Hash identifier: 6VxP/q37qcC1Mt3Y3B6Ode10ZiyjlxkbXzoX+tE+XWs=
Subject key identifier: C3:99:9F:88:EB:62:58:13:01:8B:71:D2:E9:38:E8:7E:A8:A0:B7:17
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial: 0196C7CD35F038A87E729587810AD455D780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
Manifest number: 0F39
Signing time: Tue 13 May 2025 04:00:36 +0000
Manifest this update: Tue 13 May 2025 04:00:36 +0000
Manifest next update: Wed 14 May 2025 04:00:36 +0000
Files and hashes: 1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: G0WubFURk/E67WkxP1YbqaQjkhPFw/JPEEXgOrtXyE4=)
2: eOnuHiStsO3O13pB5kbTSUIQpmU.roa (hash: kcBz+mRqFqqkTHe8HhDtwvud8iIZt9DbOQoP1ie6taQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cd:35:f0:38:a8:7e:72:95:87:81:0a:d4:55:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Validity
Not Before: May 13 04:00:36 2025 GMT
Not After : May 14 04:00:36 2025 GMT
Subject: CN=c3999f88eb625813018b71d2e938e87ea8a0b717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:6e:60:86:a2:98:c3:25:12:4a:ac:91:aa:
41:c7:48:c3:12:e5:c7:21:b7:39:50:da:61:86:bd:
c9:1f:a4:1a:48:da:38:52:8d:c5:d3:c9:2f:12:28:
de:25:91:ac:0e:d7:eb:aa:4c:25:e1:ee:f5:eb:8e:
8f:8e:80:3a:2c:69:29:80:cc:e0:30:1b:ef:79:1a:
fe:71:54:85:42:98:15:eb:64:82:f0:37:f4:89:13:
00:d8:6e:5a:de:68:e3:04:49:17:2b:a0:f9:4b:2b:
d1:05:cc:5b:55:e2:b8:15:c0:0c:d2:49:32:8a:b6:
a8:3b:36:35:96:0a:01:16:a0:b4:55:cd:05:cf:0f:
15:d3:c6:9b:f2:cd:8f:54:37:a2:a9:c6:95:c8:ae:
bf:28:1b:45:9b:85:76:4d:47:ff:de:1d:fc:7c:0e:
31:d7:41:38:42:08:d6:bf:2a:28:e0:36:35:ad:46:
24:15:c3:a6:29:07:b3:8f:71:e7:4f:f1:92:cb:d7:
97:e7:04:e5:42:55:6e:46:9b:08:89:9f:19:09:f7:
ea:19:80:5d:ac:cc:f8:87:74:b0:b3:2a:d0:93:1e:
88:15:07:7f:9e:2d:0c:ed:17:2d:46:51:08:e7:31:
8a:66:18:46:33:12:9e:f5:b6:7a:e6:c8:a8:ba:c2:
c1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:99:9F:88:EB:62:58:13:01:8B:71:D2:E9:38:E8:7E:A8:A0:B7:17
X509v3 Authority Key Identifier:
keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:34:6c:8c:4c:4f:0c:3f:65:d2:75:bb:fe:02:cf:db:9b:83:
92:5a:53:8f:79:18:86:3e:91:ff:63:c5:c6:87:fc:6d:f1:bf:
37:3f:be:ec:c3:25:b7:c5:67:13:14:b7:5e:4b:d9:7b:c3:40:
2f:bc:7a:b4:12:1d:67:60:04:c6:0c:87:de:42:43:84:d3:c2:
23:bb:0f:03:41:33:b6:5e:10:b9:4d:27:9e:91:20:f6:8e:5b:
9d:03:b9:b2:c4:6d:dc:bb:e2:30:73:b5:d6:f4:f0:ca:a8:2a:
be:e2:a7:54:30:c5:cc:a6:67:59:ce:54:fd:f3:de:39:0a:75:
6b:18:5f:d6:e3:81:ff:1c:0c:60:93:82:5f:67:e4:f0:54:5c:
b9:ca:73:16:ff:18:f3:92:aa:4c:9a:a5:e5:84:90:08:59:e4:
3e:68:51:35:cc:11:b2:f3:0e:5b:72:65:08:6c:71:08:38:55:
1a:30:aa:a6:b1:b0:8a:94:28:f7:23:fa:38:f9:47:03:be:95:
79:e2:e4:45:6a:7f:3a:c5:f6:b9:f7:43:30:49:e7:99:d8:ce:
38:82:a2:3f:e2:db:e4:85:b0:e1:cb:c5:f0:60:c4:90:b6:b4:
00:8e:a4:1f:ee:eb:bc:22:f5:11:fd:45:02:85:5c:2e:4f:7c:
cc:db:4a:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHzTXwOKh+cpWHgQrUVdeAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNzY3OTQzNTczZDZiMzVlYmFjZTFhMmYzNDhjYTNmMDA1
NmMxYWIwHhcNMjUwNTEzMDQwMDM2WhcNMjUwNTE0MDQwMDM2WjAzMTEwLwYDVQQD
EyhjMzk5OWY4OGViNjI1ODEzMDE4YjcxZDJlOTM4ZTg3ZWE4YTBiNzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI1uYIaimMMlEkqskapBx0jDEuXH
Ibc5UNphhr3JH6QaSNo4Uo3F08kvEijeJZGsDtfrqkwl4e71646PjoA6LGkpgMzg
MBvveRr+cVSFQpgV62SC8Df0iRMA2G5a3mjjBEkXK6D5SyvRBcxbVeK4FcAM0kky
iraoOzY1lgoBFqC0Vc0Fzw8V08ab8s2PVDeiqcaVyK6/KBtFm4V2TUf/3h38fA4x
10E4QgjWvyoo4DY1rUYkFcOmKQezj3HnT/GSy9eX5wTlQlVuRpsIiZ8ZCffqGYBd
rMz4h3SwsyrQkx6IFQd/ni0M7RctRlEI5zGKZhhGMxKe9bZ65siousLB+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOZn4jrYlgTAYtx0uk46H6ooLcXMB8GA1UdIwQY
MBaAFB52eUNXPWs166zhovNIyj8AVsGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZTA5NTctYzk1MS00NTAyLTlmZTct
YTQwOGQ2N2JmZjM3LzEvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83ZTA5NTctYzk1MS00NTAyLTlmZTctYTQwOGQ2N2JmZjM3
LzEvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzRsjExP
DD9l0nW7/gLP25uDklpTj3kYhj6R/2PFxof8bfG/Nz++7MMlt8VnExS3XkvZe8NA
L7x6tBIdZ2AExgyH3kJDhNPCI7sPA0Eztl4QuU0nnpEg9o5bnQO5ssRt3LviMHO1
1vTwyqgqvuKnVDDFzKZnWc5U/fPeOQp1axhf1uOB/xwMYJOCX2fk8FRcucpzFv8Y
85KqTJql5YSQCFnkPmhRNcwRsvMOW3JlCGxxCDhVGjCqprGwipQo9yP6OPlHA76V
eeLkRWp/OsX2ufdDMEnnmdjOOIKiP+Lb5IWw4cvF8GDEkLa0AI6kH+7rvCL1Ef1F
AoVcLk98zNtKIA==
-----END CERTIFICATE-----
Generated at Tue May 13 13:24:56 2025 by rpki-client