Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
File: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft (raw, json)
Hash identifier: EhaTbpWNn4qXKEFtHvIeOacEcZR5Kq2FEITbA5QL9Y0=
Subject key identifier: 8E:85:98:F7:3E:40:40:B7:6A:D1:7D:56:85:BD:7D:D2:CB:53:CC:85
Authority key identifier: AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
Certificate issuer: /CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Certificate serial: 0196BAED43DC1D93B6E28C9721AB517557E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
Manifest number: 0E40
Signing time: Sat 10 May 2025 16:00:33 +0000
Manifest this update: Sat 10 May 2025 16:00:33 +0000
Manifest next update: Sun 11 May 2025 16:00:33 +0000
Files and hashes: 1: a7s4IVc6pbucBFcHXkR0racHnFI.roa (hash: 8KV2P9IHJpLQQ3jZXVSSowUOoz10VVeNpPastctIMEs=)
2: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl (hash: hkVSlhz2aWDCOICKHii97qEhzdOB9ULwQMTSY2hBZgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:43:dc:1d:93:b6:e2:8c:97:21:ab:51:75:57:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Validity
Not Before: May 10 16:00:33 2025 GMT
Not After : May 11 16:00:33 2025 GMT
Subject: CN=8e8598f73e4040b76ad17d5685bd7dd2cb53cc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:5a:09:3b:1a:d2:aa:44:6d:33:45:d4:fe:
80:a0:b7:c4:f3:ef:0f:18:81:e6:67:00:38:e9:80:
4c:10:a7:d6:07:f4:13:1b:66:11:42:2d:33:55:1f:
5b:d7:d2:f0:42:7b:36:2b:06:4c:a4:9a:f7:98:ce:
b0:47:06:ae:38:85:5f:99:69:d3:d8:45:b3:38:fd:
70:30:99:f6:a7:16:90:47:0e:28:b5:2c:7e:87:93:
5c:05:24:c0:2b:e7:d0:0f:2e:56:f7:e7:62:be:20:
15:c8:e0:04:32:27:12:f0:e5:46:16:43:b3:b9:6a:
37:21:b5:7b:a5:74:b7:d0:c3:e8:b8:16:1d:e0:eb:
0b:79:97:67:7d:a6:1d:2b:fa:cf:a3:e4:b6:cb:b9:
65:af:60:45:d5:e5:36:9f:86:91:5b:16:75:2b:73:
d9:45:5d:bb:81:04:03:f9:f7:1e:41:25:9f:e8:06:
5a:66:c9:24:44:d6:ba:f0:e7:6d:63:36:0c:90:75:
4a:0d:bd:57:17:eb:de:69:53:83:83:73:f6:73:98:
ca:30:53:2d:39:fa:25:d7:e6:9a:1b:c8:c7:34:e2:
ff:c7:60:e0:61:f6:07:45:88:ea:85:a3:66:36:3a:
a3:61:5a:88:36:57:f1:8a:9e:d4:6f:8f:70:ad:a9:
3b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:85:98:F7:3E:40:40:B7:6A:D1:7D:56:85:BD:7D:D2:CB:53:CC:85
X509v3 Authority Key Identifier:
keyid:AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f9:b9:f0:21:09:a3:3a:4c:68:fa:46:a1:16:dc:8c:fe:8a:
a0:28:88:ed:34:a7:06:a3:ed:c9:2f:01:fd:34:14:7c:7c:d4:
4f:78:f3:79:42:64:fd:7d:45:d3:af:07:d2:a7:84:a0:9c:8d:
e4:c4:31:2e:83:8b:df:a8:4b:96:83:57:c2:cb:85:75:22:d6:
69:ea:6f:38:25:be:6f:8f:4a:9d:0c:d6:f7:49:e2:2e:55:bc:
fd:68:ab:24:07:58:ef:80:e4:67:7e:51:65:85:40:65:b9:63:
1f:54:03:ee:6c:85:be:45:7c:92:2c:45:54:11:3c:f0:1a:41:
dd:f2:bc:8f:8e:f3:38:00:9b:32:3b:7d:f3:e2:a0:7a:47:0a:
cd:c9:e8:8b:be:50:fd:c8:20:c3:cf:75:81:6b:b4:1a:28:9a:
77:d3:b5:86:58:3b:47:99:ec:4e:1b:82:82:0f:39:32:91:64:
53:9f:b6:73:37:a1:fc:7b:aa:09:ad:67:e4:c2:f7:43:45:fe:
1e:79:45:38:ca:38:29:02:d2:0a:98:09:55:14:d0:f3:9c:b4:
8d:59:72:63:4b:0f:10:42:fc:89:2e:f9:4f:58:31:7f:19:b5:
79:36:40:33:65:c0:34:f5:02:ff:e7:6d:87:45:7a:a4:65:2d:
b8:0a:fb:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa67UPcHZO24oyXIatRdVfhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjN2JlOTJkYmZlMzg1NjE1NjQwNmZhNzI1ZTE1ZGY1OTg4
ZTVjMTAwHhcNMjUwNTEwMTYwMDMzWhcNMjUwNTExMTYwMDMzWjAzMTEwLwYDVQQD
Eyg4ZTg1OThmNzNlNDA0MGI3NmFkMTdkNTY4NWJkN2RkMmNiNTNjYzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGlaCTsa0qpEbTNF1P6AoLfE8+8P
GIHmZwA46YBMEKfWB/QTG2YRQi0zVR9b19LwQns2KwZMpJr3mM6wRwauOIVfmWnT
2EWzOP1wMJn2pxaQRw4otSx+h5NcBSTAK+fQDy5W9+diviAVyOAEMicS8OVGFkOz
uWo3IbV7pXS30MPouBYd4OsLeZdnfaYdK/rPo+S2y7llr2BF1eU2n4aRWxZ1K3PZ
RV27gQQD+fceQSWf6AZaZskkRNa68OdtYzYMkHVKDb1XF+veaVODg3P2c5jKMFMt
Ofol1+aaG8jHNOL/x2DgYfYHRYjqhaNmNjqjYVqINlfxip7Ub49wrak7DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6FmPc+QEC3atF9VoW9fdLLU8yFMB8GA1UdIwQY
MBaAFKx76S2/44VhVkBvpyXhXfWYjlwQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZmFlMmYtMjY5MS00YzdlLWEwMTgt
OTlkNzI1MmY1YmUwLzEvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8wZmFlMmYtMjY5MS00YzdlLWEwMTgtOTlkNzI1MmY1YmUw
LzEvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfm58CEJ
ozpMaPpGoRbcjP6KoCiI7TSnBqPtyS8B/TQUfHzUT3jzeUJk/X1F068H0qeEoJyN
5MQxLoOL36hLloNXwsuFdSLWaepvOCW+b49KnQzW90niLlW8/WirJAdY74DkZ35R
ZYVAZbljH1QD7myFvkV8kixFVBE88BpB3fK8j47zOACbMjt98+KgekcKzcnoi75Q
/cggw891gWu0Giiad9O1hlg7R5nsThuCgg85MpFkU5+2czeh/HuqCa1n5ML3Q0X+
HnlFOMo4KQLSCpgJVRTQ85y0jVlyY0sPEEL8iS75T1gxfxm1eTZAM2XANPUC/+dt
h0V6pGUtuAr7jw==
-----END CERTIFICATE-----
Generated at Sat May 10 20:04:17 2025 by rpki-client