Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
File: HgUGRdac54HkkMDzxJle5tTmB4s.mft (raw, json)
Hash identifier: BEmdTkKioYoZeQHEu44OPPUbtrUGdSimUln6phh60UQ=
Subject key identifier: 99:FD:E2:57:33:BC:F4:4B:21:C4:F3:F5:0C:18:E9:D9:89:00:02:98
Authority key identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
Certificate issuer: /CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Certificate serial: 0196D51AB5F1715A7B4150D551DFE1CF10DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
Manifest number: 071A
Signing time: Thu 15 May 2025 18:00:19 +0000
Manifest this update: Thu 15 May 2025 18:00:19 +0000
Manifest next update: Fri 16 May 2025 18:00:19 +0000
Files and hashes: 1: Cng8TcnIXSMG5gaf3EVbnwwbQjk.roa (hash: SlPAu0/v+q9AU8NTLPmY4PB0nlmzfGz86P4I7oW5+Ns=)
2: HgUGRdac54HkkMDzxJle5tTmB4s.crl (hash: /AxdugVrU7Zu0DmMQ4MW6StVSDAvJ97ZOAxXlBh7tyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:1a:b5:f1:71:5a:7b:41:50:d5:51:df:e1:cf:10:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Validity
Not Before: May 15 18:00:19 2025 GMT
Not After : May 16 18:00:19 2025 GMT
Subject: CN=99fde25733bcf44b21c4f3f50c18e9d989000298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:43:34:37:db:b5:7f:57:e4:5d:30:d1:6a:
f3:f2:a0:a9:29:64:87:79:c6:4c:d4:99:26:42:e2:
7c:c9:5a:e8:80:d2:70:9d:08:ce:5d:26:aa:b6:4c:
01:c4:67:7c:60:df:26:24:72:7f:d4:26:8b:af:63:
d2:42:1e:5e:a0:ca:f1:61:ae:d6:ea:22:02:9e:e1:
50:13:2e:17:0c:76:3a:7f:d1:da:c9:7f:12:70:82:
ba:6a:c0:86:df:ee:26:e5:6c:dc:5d:ac:61:ec:d6:
f4:18:9f:b3:da:38:1d:bc:72:1e:8a:29:77:c6:83:
73:18:65:c4:da:c8:54:69:ce:96:ed:9d:ec:84:5c:
16:2b:58:43:ae:15:82:e5:93:b1:b0:d7:c6:53:b7:
b6:f1:c5:1d:fa:81:2e:5c:0d:1e:70:4c:73:fa:f2:
1a:93:ca:bb:0b:27:ce:a5:e0:0e:51:39:56:63:8f:
80:03:dd:4e:4d:8c:e1:c7:92:a7:74:3e:e1:6a:62:
e0:a6:60:2b:e3:6b:f6:c8:51:2d:ae:24:95:fb:08:
8e:f2:4e:dd:34:db:28:fe:0b:16:17:5a:cc:04:87:
dc:17:95:4c:c3:2d:2f:60:20:c1:e6:8f:2c:a5:41:
8c:f7:05:52:3a:85:6f:fb:1a:0c:82:d8:30:f1:db:
43:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FD:E2:57:33:BC:F4:4B:21:C4:F3:F5:0C:18:E9:D9:89:00:02:98
X509v3 Authority Key Identifier:
keyid:1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a8:d0:83:46:18:b8:93:5c:41:76:c6:f5:62:76:8d:7f:be:
5e:d3:bc:a9:07:87:c8:04:3c:3e:7a:75:aa:bd:a1:26:74:9f:
3a:c9:17:12:57:67:2b:50:f2:f3:60:bf:0e:f4:fa:c2:a9:5f:
ac:95:35:8c:fe:6b:5e:0d:1f:ca:7c:42:ca:9e:6f:11:7a:a7:
c3:d3:04:5f:22:25:7c:ab:b7:51:ce:09:7a:b5:cb:e7:de:17:
bc:63:0c:70:39:49:c5:8a:27:ca:f1:d5:87:27:71:fd:2c:cb:
74:ab:70:17:85:12:6d:65:4c:25:73:29:a8:67:05:d0:ae:4d:
e2:98:b7:28:6b:f7:43:1f:e3:d7:4b:fa:37:1c:e9:94:a0:50:
a0:3d:d9:57:c3:92:b8:56:d2:5a:c0:31:f2:4a:e2:d5:5d:d6:
2c:4a:32:8c:3c:17:8f:f3:19:42:a5:69:fb:1a:bf:fe:f3:61:
a6:3a:3c:2f:04:5c:ea:1f:73:c6:e2:04:dd:0e:5e:8a:8c:b5:
47:ed:8f:99:a7:6b:27:20:7e:b0:fc:4e:f9:f6:91:21:81:d7:
1d:65:1f:14:09:ff:52:1e:44:58:31:e6:b8:5e:25:e5:24:b5:
5a:4a:35:94:98:d5:a6:ab:83:4c:54:f8:c1:5c:8e:7f:a6:1a:
0a:99:99:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbVGrXxcVp7QVDVUd/hzxDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMDUwNjQ1ZDY5Y2U3ODFlNDkwYzBmM2M0OTk1ZWU2ZDRl
NjA3OGIwHhcNMjUwNTE1MTgwMDE5WhcNMjUwNTE2MTgwMDE5WjAzMTEwLwYDVQQD
Eyg5OWZkZTI1NzMzYmNmNDRiMjFjNGYzZjUwYzE4ZTlkOTg5MDAwMjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo5DNDfbtX9X5F0w0Wrz8qCpKWSH
ecZM1JkmQuJ8yVrogNJwnQjOXSaqtkwBxGd8YN8mJHJ/1CaLr2PSQh5eoMrxYa7W
6iICnuFQEy4XDHY6f9HayX8ScIK6asCG3+4m5WzcXaxh7Nb0GJ+z2jgdvHIeiil3
xoNzGGXE2shUac6W7Z3shFwWK1hDrhWC5ZOxsNfGU7e28cUd+oEuXA0ecExz+vIa
k8q7CyfOpeAOUTlWY4+AA91OTYzhx5KndD7hamLgpmAr42v2yFEtriSV+wiO8k7d
NNso/gsWF1rMBIfcF5VMwy0vYCDB5o8spUGM9wVSOoVv+xoMgtgw8dtDCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJn94lczvPRLIcTz9QwY6dmJAAKYMB8GA1UdIwQY
MBaAFB4FBkXWnOeB5JDA88SZXubU5geLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGdVR1JkYWM1NEhra01EenhKbGU1dFRtQjRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jYjNhZjAtMDU2ZC00Mjc3LWE2ZGEt
MjI3YTg2YzQ3MmNlLzEvSGdVR1JkYWM1NEhra01EenhKbGU1dFRtQjRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jYjNhZjAtMDU2ZC00Mjc3LWE2ZGEtMjI3YTg2YzQ3MmNl
LzEvSGdVR1JkYWM1NEhra01EenhKbGU1dFRtQjRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqjQg0YY
uJNcQXbG9WJ2jX++XtO8qQeHyAQ8Pnp1qr2hJnSfOskXEldnK1Dy82C/DvT6wqlf
rJU1jP5rXg0fynxCyp5vEXqnw9MEXyIlfKu3Uc4JerXL594XvGMMcDlJxYonyvHV
hydx/SzLdKtwF4USbWVMJXMpqGcF0K5N4pi3KGv3Qx/j10v6NxzplKBQoD3ZV8OS
uFbSWsAx8kri1V3WLEoyjDwXj/MZQqVp+xq//vNhpjo8LwRc6h9zxuIE3Q5eioy1
R+2PmadrJyB+sPxO+faRIYHXHWUfFAn/Uh5EWDHmuF4l5SS1Wko1lJjVpquDTFT4
wVyOf6YaCpmZaQ==
-----END CERTIFICATE-----
Generated at Thu May 15 20:39:34 2025 by rpki-client