Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json)
Hash identifier: dZJNvLqxrYpjxPm/RyVzfdkVnbjmPm2PiffdSK4okUQ=
Subject key identifier: E0:92:14:05:14:DC:39:27:7C:6F:30:BF:21:C6:33:23:CB:0F:C0:0A
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial: 0196AA30D17EF56662D41975CB65CAA41B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
Manifest number: 152D
Signing time: Wed 07 May 2025 10:00:48 +0000
Manifest this update: Wed 07 May 2025 10:00:48 +0000
Manifest next update: Thu 08 May 2025 10:00:48 +0000
Files and hashes: 1: 3MF6BuznJ4OfS1C5J5sFom719Ag.roa (hash: SgA1M+YF5PTZbvqD1BRuBpZXk3sFWrE/PgQsVhuZ/S4=)
2: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: YZYboIGhvpY6Iz9BQxz3GdEMoHe/YOCsLaDad3FrkF4=)
3: pFxtApTW54EbBHD0oDAnh4jDG3E.roa (hash: gJNAVWKEII1RjZzGIybSB1Nkau8KmzUZnx0gYczpW88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:d1:7e:f5:66:62:d4:19:75:cb:65:ca:a4:1b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Validity
Not Before: May 7 10:00:48 2025 GMT
Not After : May 8 10:00:48 2025 GMT
Subject: CN=e092140514dc39277c6f30bf21c63323cb0fc00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fb:e9:8d:1c:b2:70:2a:c5:40:7d:f4:53:12:
de:50:75:16:ba:2e:a4:4b:5b:4b:f6:68:f0:24:dc:
73:b9:ac:da:4b:9d:f4:7b:c6:75:b5:81:af:f1:cf:
2a:a8:70:bb:50:ff:2a:a4:f0:92:8d:4d:9e:8a:d1:
f1:e8:b8:21:99:91:9b:ac:07:e7:2c:e8:b4:07:1e:
fe:aa:88:2f:25:89:a7:7c:1c:8a:f8:a9:58:05:5e:
b1:ee:5b:1c:60:91:47:dd:f9:d5:2f:1b:70:76:d0:
f0:67:65:57:05:3b:4d:77:f3:24:6c:d6:b1:e7:2e:
22:e9:09:fd:99:39:dc:c7:28:85:c4:83:52:76:53:
b3:af:47:93:a5:38:3a:59:ba:f6:6f:45:f9:90:27:
5f:f4:4f:8a:d8:d4:70:3f:9b:48:9b:78:03:31:48:
8f:68:de:e8:4c:7d:63:69:e8:74:c3:d3:76:1e:e3:
d3:35:67:59:29:e1:95:5d:5f:6f:5e:eb:32:47:24:
0a:9a:67:a4:4d:85:bb:bd:f5:57:fa:95:da:8f:7b:
f6:c0:b0:b5:1a:c0:99:76:19:97:f8:83:bf:a6:af:
72:78:55:3d:5b:ea:77:0b:63:69:8f:60:52:88:81:
fc:5f:31:f7:f8:b1:dd:6b:5a:68:66:b0:e2:69:cd:
e6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:92:14:05:14:DC:39:27:7C:6F:30:BF:21:C6:33:23:CB:0F:C0:0A
X509v3 Authority Key Identifier:
keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:5b:10:4a:87:d3:02:d9:96:ff:c2:62:1b:7e:35:c4:dc:30:
4e:a4:3c:33:18:61:f9:00:a1:41:d9:58:eb:06:fb:6f:5e:58:
7d:a5:35:b4:af:2c:33:eb:17:ea:6c:f5:80:e0:f9:cb:9e:d5:
82:eb:a9:29:62:37:26:93:d3:7c:c3:21:71:b1:66:d6:eb:d1:
03:bb:70:12:b5:fd:bb:58:db:a8:24:81:d4:15:53:e0:29:82:
90:78:5c:e8:cb:44:98:1f:0a:d7:6c:97:77:2a:82:88:8a:0d:
a4:b9:12:cb:b1:8f:62:73:24:91:9b:a4:18:83:83:1e:66:c6:
98:62:10:85:3e:bc:a7:ea:90:ce:88:ee:f0:d9:41:40:a9:3f:
62:2c:e2:30:58:ca:1d:22:f1:e6:59:fb:9d:85:f5:41:aa:33:
ff:18:56:53:0d:b3:76:d0:1b:4f:e9:b2:8e:1d:13:11:e1:1b:
93:6f:aa:54:8b:64:30:5d:6a:11:ce:4b:c2:b8:64:19:33:21:
22:d5:82:75:0a:d2:59:13:ba:ed:8d:ca:0b:0a:89:82:57:33:
d8:69:aa:9f:39:47:e8:13:85:fa:4e:69:3c:5b:27:03:4d:cf:
1f:fe:02:9e:f2:6b:dc:9a:ed:fc:63:ff:00:d3:68:4c:9a:94:
db:65:43:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaqMNF+9WZi1Bl1y2XKpBsBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGI1OTFiNWQ4ZjA3NmVhZjQ3MmUzZWE0NWQzYjVjOGUx
MzUwYTEwHhcNMjUwNTA3MTAwMDQ4WhcNMjUwNTA4MTAwMDQ4WjAzMTEwLwYDVQQD
EyhlMDkyMTQwNTE0ZGMzOTI3N2M2ZjMwYmYyMWM2MzMyM2NiMGZjMDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/vpjRyycCrFQH30UxLeUHUWui6k
S1tL9mjwJNxzuazaS530e8Z1tYGv8c8qqHC7UP8qpPCSjU2eitHx6LghmZGbrAfn
LOi0Bx7+qogvJYmnfByK+KlYBV6x7lscYJFH3fnVLxtwdtDwZ2VXBTtNd/MkbNax
5y4i6Qn9mTncxyiFxINSdlOzr0eTpTg6Wbr2b0X5kCdf9E+K2NRwP5tIm3gDMUiP
aN7oTH1jaeh0w9N2HuPTNWdZKeGVXV9vXusyRyQKmmekTYW7vfVX+pXaj3v2wLC1
GsCZdhmX+IO/pq9yeFU9W+p3C2Npj2BSiIH8XzH3+LHda1poZrDiac3mYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCSFAUU3DknfG8wvyHGMyPLD8AKMB8GA1UdIwQY
MBaAFIdLWRtdjwdur0cuPqRdO1yOE1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jYWQ1MjEtZGFiZS00OWE4LWJjZTQt
MGM2YTY3ODIwYTU4LzEvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jYWQ1MjEtZGFiZS00OWE4LWJjZTQtMGM2YTY3ODIwYTU4
LzEvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklsQSofT
AtmW/8JiG341xNwwTqQ8Mxhh+QChQdlY6wb7b15YfaU1tK8sM+sX6mz1gOD5y57V
guupKWI3JpPTfMMhcbFm1uvRA7twErX9u1jbqCSB1BVT4CmCkHhc6MtEmB8K12yX
dyqCiIoNpLkSy7GPYnMkkZukGIODHmbGmGIQhT68p+qQzoju8NlBQKk/YiziMFjK
HSLx5ln7nYX1Qaoz/xhWUw2zdtAbT+myjh0TEeEbk2+qVItkMF1qEc5LwrhkGTMh
ItWCdQrSWRO67Y3KCwqJglcz2GmqnzlH6BOF+k5pPFsnA03PH/4CnvJr3Jrt/GP/
ANNoTJqU22VD7g==
-----END CERTIFICATE-----
Generated at Wed May 7 20:51:16 2025 by rpki-client