Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: ZPzhyxu7/JJWwh5ZiMGItHlSrzzfwRuHF2NGEUGk9jU=
Subject key identifier: 46:BF:8A:B5:AD:24:78:FE:89:71:FD:75:D9:03:2A:D7:8E:E2:BD:EE
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 0196BDEE412C58E071D109A2351259A337B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 10A1
Signing time: Sun 11 May 2025 06:00:30 +0000
Manifest this update: Sun 11 May 2025 06:00:30 +0000
Manifest next update: Mon 12 May 2025 06:00:30 +0000
Files and hashes: 1: 572na8_zoYemqPBejFGMRRPd8ps.roa (hash: vVsm+nWWBvjJ+3tIYusnSlDq71JJ2TZXjTfrysKXq88=)
2: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: jHjC8hvm7D6GArhwZ32XD/3/SrJXaYTwv8bOtZonSp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:41:2c:58:e0:71:d1:09:a2:35:12:59:a3:37:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: May 11 06:00:30 2025 GMT
Not After : May 12 06:00:30 2025 GMT
Subject: CN=46bf8ab5ad2478fe8971fd75d9032ad78ee2bdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:38:61:5e:4b:1a:aa:f6:98:12:7d:d2:ca:
8d:13:62:58:7e:47:c4:01:c9:d3:1c:a0:6c:ad:a1:
44:8f:20:09:ea:df:08:00:7b:64:97:07:87:26:2a:
61:a3:67:b2:2d:4e:aa:4b:e8:1d:44:18:a5:eb:94:
80:af:7f:64:db:db:c5:54:a1:82:4b:c4:ad:4c:ce:
5d:1d:ba:e9:74:76:4b:77:1e:e3:e2:28:05:32:85:
54:36:67:52:28:b8:a4:99:5f:95:5e:07:8e:40:5d:
34:5e:db:9f:b9:3a:d0:8b:7d:1e:e1:b3:f9:4a:e4:
48:2e:2f:9f:cb:e4:63:56:a9:26:6a:37:71:f4:f5:
70:d3:c7:15:ae:93:ab:07:f6:d6:68:73:9c:3d:11:
ce:01:a3:b6:93:52:78:61:4f:3e:b3:c0:e9:06:17:
d0:50:19:5d:5f:bc:26:dc:52:66:43:03:bd:52:dc:
2d:e6:fd:ff:fb:44:67:b1:89:0b:0a:0c:f9:fa:67:
4d:46:13:5a:58:a0:a5:c7:6e:e5:4a:37:9f:45:95:
78:be:c2:8a:fc:4c:e4:54:d3:bb:51:7e:c9:66:28:
a7:88:e7:d7:3a:8e:ff:55:4a:2d:50:6b:9a:6a:8a:
7c:c1:21:0f:18:be:35:cf:bd:d0:14:fb:ec:73:49:
09:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BF:8A:B5:AD:24:78:FE:89:71:FD:75:D9:03:2A:D7:8E:E2:BD:EE
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1a:07:f8:9d:53:07:ac:ea:dd:50:d6:71:b3:eb:e2:0c:3b:
8d:5f:51:f6:79:b6:3c:f9:db:ba:3d:9a:05:c4:dd:d5:b5:da:
02:65:d6:93:6e:e8:eb:3c:61:64:ab:b0:1a:3a:f5:b7:b4:8e:
61:bf:e0:d4:60:56:e1:ee:5f:b5:51:d7:b2:84:bf:c6:87:89:
a7:cf:db:d0:16:7b:b4:05:90:5f:a7:2d:e2:bc:be:89:77:53:
be:5d:35:0a:ef:50:ce:af:a8:18:a7:ca:2f:4c:25:cb:8f:66:
25:25:b3:35:c6:83:52:a1:4a:b2:db:8d:a7:5d:92:8c:cf:ba:
28:04:6b:f5:53:1b:97:bf:b8:bd:86:68:19:4c:1c:65:b6:ef:
76:b7:2a:ab:e9:c3:1f:ef:c0:97:c9:bc:7f:86:d6:f1:eb:d0:
18:59:35:12:56:af:a7:68:4f:50:e1:33:78:0e:6a:ae:24:2f:
a8:6f:32:3e:77:08:73:31:a8:89:44:32:ea:28:a1:6b:ec:28:
00:48:a5:aa:37:78:6e:b2:b1:75:d6:d2:ab:db:ca:35:04:f0:
6d:05:bd:7e:77:a8:c1:f2:f8:01:02:73:6e:c1:f7:03:f9:4b:
41:d1:f1:d6:82:cc:87:ac:44:0f:77:88:1e:e7:f9:5e:6a:fb:
d4:75:b7:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97kEsWOBx0QmiNRJZoze3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDY3MmM5OWY4N2YwNWNkODNmMGI2MjdkMzE4NzFmZTgw
YmUwMWYwHhcNMjUwNTExMDYwMDMwWhcNMjUwNTEyMDYwMDMwWjAzMTEwLwYDVQQD
Eyg0NmJmOGFiNWFkMjQ3OGZlODk3MWZkNzVkOTAzMmFkNzhlZTJiZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y04YV5LGqr2mBJ90sqNE2JYfkfE
AcnTHKBsraFEjyAJ6t8IAHtklweHJipho2eyLU6qS+gdRBil65SAr39k29vFVKGC
S8StTM5dHbrpdHZLdx7j4igFMoVUNmdSKLikmV+VXgeOQF00XtufuTrQi30e4bP5
SuRILi+fy+RjVqkmajdx9PVw08cVrpOrB/bWaHOcPRHOAaO2k1J4YU8+s8DpBhfQ
UBldX7wm3FJmQwO9Utwt5v3/+0RnsYkLCgz5+mdNRhNaWKClx27lSjefRZV4vsKK
/EzkVNO7UX7JZiiniOfXOo7/VUotUGuaaop8wSEPGL41z73QFPvsc0kJUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa/irWtJHj+iXH9ddkDKteO4r3uMB8GA1UdIwQY
MBaAFB0Gcsmfh/Bc2D8LYn0xhx/oC+AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83ZTRmMDgtNjczMC00MDUxLTk3OTIt
NDk0ZjRjNGRhNDI2LzEvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83ZTRmMDgtNjczMC00MDUxLTk3OTItNDk0ZjRjNGRhNDI2
LzEvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBoH+J1T
B6zq3VDWcbPr4gw7jV9R9nm2PPnbuj2aBcTd1bXaAmXWk27o6zxhZKuwGjr1t7SO
Yb/g1GBW4e5ftVHXsoS/xoeJp8/b0BZ7tAWQX6ct4ry+iXdTvl01Cu9Qzq+oGKfK
L0wly49mJSWzNcaDUqFKstuNp12SjM+6KARr9VMbl7+4vYZoGUwcZbbvdrcqq+nD
H+/Al8m8f4bW8evQGFk1Elavp2hPUOEzeA5qriQvqG8yPncIczGoiUQy6iiha+wo
AEilqjd4brKxddbSq9vKNQTwbQW9fneowfL4AQJzbsH3A/lLQdHx1oLMh6xED3eI
Huf5Xmr71HW3kw==
-----END CERTIFICATE-----
Generated at Sun May 11 10:44:13 2025 by rpki-client