Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
File: HqsBKTydvRqdatyGGCtSDNF2wAc.mft (raw, json)
Hash identifier: XElEwfeJkBA6WWnjuSQOjQi0sFuHhWen5S6pyA4vJYo=
Subject key identifier: C0:4D:57:F6:A1:46:B0:88:55:23:64:24:ED:15:CF:AC:D4:60:21:57
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial: 01969CAC74989424548F67E9ADDB532B30C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
Manifest number: 12D5
Signing time: Sun 04 May 2025 19:01:09 +0000
Manifest this update: Sun 04 May 2025 19:01:09 +0000
Manifest next update: Mon 05 May 2025 19:01:09 +0000
Files and hashes: 1: HqsBKTydvRqdatyGGCtSDNF2wAc.crl (hash: Z/QzlMfn9i6vrisiuEZAN0nLxyUMvM5wtgcoVG7MgTE=)
2: ub3jhWL8KmU55QyzLWlOgggBar8.roa (hash: uMoRi+7KkYToPIHx+yE4FpiPieRkes7ACBQfGkW0VCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ac:74:98:94:24:54:8f:67:e9:ad:db:53:2b:30:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Validity
Not Before: May 4 19:01:09 2025 GMT
Not After : May 5 19:01:09 2025 GMT
Subject: CN=c04d57f6a146b08855236424ed15cfacd4602157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:00:cd:0a:24:c2:35:25:6d:5c:74:f5:54:
1d:b2:4d:f6:6a:f8:83:91:c9:87:cb:14:12:29:07:
2c:de:70:a0:7b:20:c7:45:22:c7:d9:bc:98:00:aa:
b8:89:07:ce:3d:e1:48:d2:84:68:30:35:42:4e:bf:
bf:ff:f1:62:5b:91:c2:a7:27:78:c3:5b:c0:1b:39:
76:51:8d:b8:e8:55:cd:bb:85:1b:e8:16:9c:96:f7:
3a:0a:01:02:35:b5:6b:a4:8e:44:e6:d0:fb:7c:08:
62:81:99:2d:f7:40:89:ac:b7:c4:90:d8:d0:6a:d4:
3c:c4:e4:6a:d9:71:2f:83:00:7e:07:fd:e2:86:96:
2c:0a:87:91:d8:f3:bb:81:5b:1f:47:34:02:d9:65:
ed:75:1f:a6:9c:a6:67:1e:7f:bc:dd:f0:93:d3:5e:
6f:af:1c:23:17:4d:e7:2c:23:d2:7e:41:f9:0a:ad:
81:db:43:be:9b:76:96:9e:0f:59:8d:00:00:7c:05:
34:eb:90:ec:05:fe:65:b7:54:52:47:29:20:f7:5c:
82:df:5f:74:03:f7:f6:a6:30:d9:0d:8f:f1:94:01:
9d:ed:be:91:f3:9b:fb:02:04:c8:77:c7:3f:d2:55:
0d:b4:c1:bb:4c:d9:ed:fa:11:39:16:a1:92:c3:2b:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4D:57:F6:A1:46:B0:88:55:23:64:24:ED:15:CF:AC:D4:60:21:57
X509v3 Authority Key Identifier:
keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a2:87:05:9e:21:a3:54:36:be:a0:3b:4b:90:bc:b3:7b:f7:
af:d7:9a:91:47:89:5c:4b:3d:8d:68:75:ea:4a:5b:a5:ff:5d:
7d:3c:c2:5d:d4:6d:2b:dc:70:da:03:5c:cb:17:e7:59:1e:3c:
82:36:13:3e:ab:17:1c:11:02:65:20:15:3d:18:ee:fd:17:31:
e6:41:9f:d7:d6:6d:45:2b:4d:b2:7c:b8:f6:c0:0f:24:4d:29:
f9:81:19:34:37:94:bb:24:df:1c:82:03:9a:a3:4e:fe:6c:89:
bd:fe:35:05:45:4b:85:00:ac:fb:5f:55:80:91:23:e8:9f:ac:
c9:b1:eb:6c:bb:71:d3:bb:b3:8d:11:ef:0c:04:33:56:28:97:
36:a2:9f:f4:24:23:64:4a:58:38:5c:9f:25:c6:d0:3c:33:21:
1f:a9:2e:3d:d0:03:af:66:4f:46:61:c6:9e:48:c2:b9:79:9c:
a5:0d:89:1a:ea:80:d4:89:de:e5:d6:b7:c5:47:0b:b6:e5:15:
c4:7b:7c:da:60:72:ca:3a:d0:18:ae:b3:1c:7b:44:f8:3d:1b:
91:77:dc:ba:3b:b3:b8:a6:e7:69:47:32:7f:03:a6:36:67:0e:
a5:c3:a2:75:06:39:d1:67:21:cb:2f:bf:a0:b0:de:55:2d:4d:
c6:09:17:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZacrHSYlCRUj2fprdtTKzDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWIwMTI5M2M5ZGJkMWE5ZDZhZGM4NjE4MmI1MjBjZDE3
NmMwMDcwHhcNMjUwNTA0MTkwMTA5WhcNMjUwNTA1MTkwMTA5WjAzMTEwLwYDVQQD
EyhjMDRkNTdmNmExNDZiMDg4NTUyMzY0MjRlZDE1Y2ZhY2Q0NjAyMTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq98AzQokwjUlbVx09VQdsk32aviD
kcmHyxQSKQcs3nCgeyDHRSLH2byYAKq4iQfOPeFI0oRoMDVCTr+///FiW5HCpyd4
w1vAGzl2UY246FXNu4Ub6Baclvc6CgECNbVrpI5E5tD7fAhigZkt90CJrLfEkNjQ
atQ8xORq2XEvgwB+B/3ihpYsCoeR2PO7gVsfRzQC2WXtdR+mnKZnHn+83fCT015v
rxwjF03nLCPSfkH5Cq2B20O+m3aWng9ZjQAAfAU065DsBf5lt1RSRykg91yC3190
A/f2pjDZDY/xlAGd7b6R85v7AgTId8c/0lUNtMG7TNnt+hE5FqGSwyvGYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBNV/ahRrCIVSNkJO0Vz6zUYCFXMB8GA1UdIwQY
MBaAFB6rASk8nb0anWrchhgrUgzRdsAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjct
ZTAzYWM1ODlhMDNmLzEvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjctZTAzYWM1ODlhMDNm
LzEvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKKHBZ4h
o1Q2vqA7S5C8s3v3r9eakUeJXEs9jWh16kpbpf9dfTzCXdRtK9xw2gNcyxfnWR48
gjYTPqsXHBECZSAVPRju/Rcx5kGf19ZtRStNsny49sAPJE0p+YEZNDeUuyTfHIID
mqNO/myJvf41BUVLhQCs+19VgJEj6J+sybHrbLtx07uzjRHvDAQzViiXNqKf9CQj
ZEpYOFyfJcbQPDMhH6kuPdADr2ZPRmHGnkjCuXmcpQ2JGuqA1Ine5da3xUcLtuUV
xHt82mByyjrQGK6zHHtE+D0bkXfcujuzuKbnaUcyfwOmNmcOpcOidQY50Wchyy+/
oLDeVS1NxgkX7Q==
-----END CERTIFICATE-----
Generated at Mon May 5 03:58:42 2025 by rpki-client