Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
File: hpY9ADE0zNpW_t_rJ496dop_QC8.mft (raw, json)
Hash identifier: 8SueDASl79KzaJH3neHioHV0Jvnx/0YMy5aYGHiZ5/k=
Subject key identifier: 3B:BA:10:16:3A:5A:2B:FF:88:03:AF:DD:74:13:C2:21:7E:57:90:B9
Authority key identifier: 86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
Certificate issuer: /CN=86963d003134ccda56fedfeb278f7a768a7f402f
Certificate serial: 0196A01AEE29C08098FD2DB7C228BB2F7386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
Manifest number: 06D2
Signing time: Mon 05 May 2025 11:00:41 +0000
Manifest this update: Mon 05 May 2025 11:00:41 +0000
Manifest next update: Tue 06 May 2025 11:00:41 +0000
Files and hashes: 1: Wz8gpxFEqCzA2qAsOF9aMTaoyYY.roa (hash: 8Yp0I8zuDn5gEhy8EguTTzeHbg2UtzMf6sSJEuTPZH4=)
2: hpY9ADE0zNpW_t_rJ496dop_QC8.crl (hash: 0GuKovEYqcZQ5CvExkfXL5Mi+cyWcMBhKr0HMZPF3FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:ee:29:c0:80:98:fd:2d:b7:c2:28:bb:2f:73:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86963d003134ccda56fedfeb278f7a768a7f402f
Validity
Not Before: May 5 11:00:41 2025 GMT
Not After : May 6 11:00:41 2025 GMT
Subject: CN=3bba10163a5a2bff8803afdd7413c2217e5790b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:9e:5d:fc:c9:43:8a:9f:6b:52:98:e0:ae:
1a:52:a3:ba:59:0b:84:87:59:b8:f6:30:db:5e:7c:
f8:59:97:8e:a3:4b:c2:9c:d4:5e:eb:20:06:13:03:
10:76:13:bd:38:eb:f2:13:cb:ce:e0:67:ca:6a:15:
c0:06:38:fa:fa:b4:96:92:79:d5:50:e9:bb:bd:0b:
eb:17:3f:95:6d:1d:7b:d2:0b:87:87:5a:a7:18:fa:
2a:4b:8a:c9:a1:30:3d:b7:38:2b:f1:d4:8e:6b:d5:
5c:de:f7:d0:80:0c:b5:62:d4:e1:fd:ef:c1:17:d0:
2d:e9:50:33:a4:78:b5:f6:f7:f5:16:6c:3e:b7:a3:
05:bd:85:0f:bd:17:28:be:e8:88:60:96:ff:e1:c2:
85:d5:95:30:29:10:76:d4:56:a3:3a:08:57:af:f8:
ea:f3:4a:ab:2a:57:74:f6:68:76:e2:23:d6:fd:8c:
9c:1a:71:b7:b9:f2:be:36:6c:14:4e:49:1e:ec:17:
3e:22:6e:ae:03:f1:d8:ab:1c:10:12:bf:6d:1d:2a:
08:bd:a1:cc:7e:e6:c7:52:38:19:65:52:15:b5:c3:
dd:cb:0b:47:2e:8d:68:c2:11:89:48:89:97:cd:8e:
76:e5:2f:59:db:ba:3c:3f:80:49:08:b0:9b:97:7e:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BA:10:16:3A:5A:2B:FF:88:03:AF:DD:74:13:C2:21:7E:57:90:B9
X509v3 Authority Key Identifier:
keyid:86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:b9:cb:2f:00:70:52:b5:de:ac:2e:49:7b:3f:c9:c0:5b:97:
7e:5c:11:a1:df:2d:6c:35:df:c0:46:c6:c1:0c:fd:c5:23:1e:
0d:f1:77:dd:e0:9c:4d:6f:d8:76:f5:8f:06:1d:e2:aa:27:08:
b7:94:40:61:96:0a:6c:34:e9:60:8d:1d:98:7d:3c:6c:4a:26:
5e:7f:ee:6a:4c:f1:82:c4:04:4c:3e:67:14:4a:2f:ac:90:a4:
71:ed:53:cc:d6:86:c2:f8:5e:29:fe:ac:13:31:53:5b:3c:5e:
42:5f:67:b1:37:be:a9:c1:cd:5c:3b:ef:2d:70:5f:12:6f:9d:
6d:d8:a7:70:fe:d0:18:c8:8d:51:02:93:f3:e9:df:ad:9d:b4:
10:6f:35:2e:54:39:8b:98:90:7c:9b:eb:de:ed:9b:6e:19:87:
42:7c:cf:e6:aa:ef:b7:38:64:3e:2f:95:ba:ab:a1:7b:69:b4:
8b:56:19:88:80:52:1e:ea:fa:d9:d1:f5:4a:35:ce:b1:9a:43:
03:3d:b3:93:30:22:70:b4:ff:90:2d:6a:f5:89:f9:d5:b3:c7:
28:f5:66:71:4d:7d:d8:c5:86:1e:7c:85:9c:d3:65:a1:24:d0:
49:9d:9d:cb:7a:28:ea:69:a7:ec:2a:08:c7:95:e7:e5:c0:28:
84:6d:e7:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagGu4pwICY/S23wii7L3OGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OTYzZDAwMzEzNGNjZGE1NmZlZGZlYjI3OGY3YTc2OGE3
ZjQwMmYwHhcNMjUwNTA1MTEwMDQxWhcNMjUwNTA2MTEwMDQxWjAzMTEwLwYDVQQD
EygzYmJhMTAxNjNhNWEyYmZmODgwM2FmZGQ3NDEzYzIyMTdlNTc5MGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbqeXfzJQ4qfa1KY4K4aUqO6WQuE
h1m49jDbXnz4WZeOo0vCnNRe6yAGEwMQdhO9OOvyE8vO4GfKahXABjj6+rSWknnV
UOm7vQvrFz+VbR170guHh1qnGPoqS4rJoTA9tzgr8dSOa9Vc3vfQgAy1YtTh/e/B
F9At6VAzpHi19vf1Fmw+t6MFvYUPvRcovuiIYJb/4cKF1ZUwKRB21FajOghXr/jq
80qrKld09mh24iPW/YycGnG3ufK+NmwUTkke7Bc+Im6uA/HYqxwQEr9tHSoIvaHM
fubHUjgZZVIVtcPdywtHLo1owhGJSImXzY525S9Z27o8P4BJCLCbl36mEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDu6EBY6Wiv/iAOv3XQTwiF+V5C5MB8GA1UdIwQY
MBaAFIaWPQAxNMzaVv7f6yePenaKf0AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBZOUFERTB6TnBXX3Rfcko0OTZkb3BfUUM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yYzA5NzEtYWVlZi00MTdlLThiNTQt
MTIxZDJjYmIyMWQ2LzEvaHBZOUFERTB6TnBXX3Rfcko0OTZkb3BfUUM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yYzA5NzEtYWVlZi00MTdlLThiNTQtMTIxZDJjYmIyMWQ2
LzEvaHBZOUFERTB6TnBXX3Rfcko0OTZkb3BfUUM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy7nLLwBw
UrXerC5Jez/JwFuXflwRod8tbDXfwEbGwQz9xSMeDfF33eCcTW/YdvWPBh3iqicI
t5RAYZYKbDTpYI0dmH08bEomXn/uakzxgsQETD5nFEovrJCkce1TzNaGwvheKf6s
EzFTWzxeQl9nsTe+qcHNXDvvLXBfEm+dbdincP7QGMiNUQKT8+nfrZ20EG81LlQ5
i5iQfJvr3u2bbhmHQnzP5qrvtzhkPi+Vuquhe2m0i1YZiIBSHur62dH1SjXOsZpD
Az2zkzAicLT/kC1q9Yn51bPHKPVmcU192MWGHnyFnNNloSTQSZ2dy3oo6mmn7CoI
x5Xn5cAohG3nSA==
-----END CERTIFICATE-----
Generated at Mon May 5 13:28:21 2025 by rpki-client