Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
File: hUwNsAZYRNlZTf6N2O_XftHkk_g.mft (raw, json)
Hash identifier: vtraV3v0wXqc6WdTwmuNSMQZiH400bsbqrHC8DSyyTQ=
Subject key identifier: 09:E6:95:3F:02:BB:23:7D:4A:30:89:BF:ED:ED:D6:42:ED:53:9D:4E
Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
Certificate issuer: /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Certificate serial: 0196C49557925937A980051575026A386637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 13:00:43 +0000
Manifest this update: Mon 12 May 2025 13:00:43 +0000
Manifest next update: Tue 13 May 2025 13:00:43 +0000
Files and hashes: 1: hUwNsAZYRNlZTf6N2O_XftHkk_g.crl (hash: 60m6pPKr+kJrLFZZZ9WZcNb7f+ClHHwad0tBcvUa/Bw=)
2: iM7SCQycar1nudDnDJd9cpfWE14.roa (hash: 7fSKbbU/ayenSU9Vz0FeCegebZtfdQUaQXiUz4lT3zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:57:92:59:37:a9:80:05:15:75:02:6a:38:66:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Validity
Not Before: May 12 13:00:43 2025 GMT
Not After : May 13 13:00:43 2025 GMT
Subject: CN=09e6953f02bb237d4a3089bfededd642ed539d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:75:b6:05:27:59:4e:c1:25:b4:6a:6e:d1:68:
bc:c8:20:44:7a:64:ba:a1:e9:8e:8f:54:b3:8b:3c:
05:b0:7b:d0:0c:a3:d3:fa:81:51:f1:b2:ce:9b:9d:
90:7c:17:1d:4b:86:3c:ce:96:e4:ab:b7:5f:8e:47:
6f:5b:b5:af:25:16:50:86:73:f9:94:1d:42:dc:50:
7e:ec:53:c9:3a:51:b7:de:dc:a4:25:a4:11:33:8f:
b2:70:21:b1:7c:94:19:82:69:32:79:f5:3e:a0:e3:
1e:bf:1b:dc:b5:79:bb:54:55:39:40:02:55:d1:66:
f2:27:1d:1d:62:63:55:6b:c5:06:d0:bf:c0:18:6a:
1c:7f:d9:69:4c:22:32:30:07:b5:62:5e:f9:9e:84:
cf:6f:0c:ed:1c:68:ae:c2:d8:f1:58:38:8a:06:55:
86:9b:ef:eb:44:85:64:bc:be:64:91:f1:65:b1:76:
c8:22:dc:ae:78:fa:c2:1a:01:b0:ae:e6:94:b7:d6:
b7:11:96:4f:ac:18:18:28:74:01:27:8b:21:c5:79:
1f:50:36:0a:ff:11:a6:97:fd:2c:67:fe:01:7f:e3:
46:48:ab:fb:4b:89:85:6b:7d:42:1b:ca:af:29:b1:
b8:c7:53:95:26:54:3d:9d:83:f7:7d:ee:bd:fd:ba:
24:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E6:95:3F:02:BB:23:7D:4A:30:89:BF:ED:ED:D6:42:ED:53:9D:4E
X509v3 Authority Key Identifier:
keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:38:5e:3d:78:56:f2:c4:6a:2e:93:35:81:12:d5:b0:a8:d9:
47:d8:03:83:ab:c8:66:ff:94:a3:97:56:a8:da:0e:84:73:38:
8f:cc:dc:b2:04:74:a7:c3:e0:86:f2:c5:44:0b:67:f9:94:a6:
89:e1:ee:67:c9:bb:51:24:5f:05:85:52:d3:5a:a2:4c:46:3d:
0a:f0:1b:db:7d:b7:e0:04:3d:4a:aa:ab:be:c4:26:3d:bd:75:
96:4e:a6:5c:bc:a4:ab:db:ff:82:4f:9c:bd:34:fb:27:f0:67:
e8:0e:6d:fe:13:c3:b5:df:26:91:68:6d:fa:af:5c:9f:76:53:
d8:24:9d:fe:7e:1e:ee:08:74:1d:be:d1:d5:b5:0e:5a:08:6a:
6a:4f:99:00:02:14:3d:d7:09:73:99:e3:72:fc:3b:81:54:f7:
b2:46:36:68:a1:dc:35:e9:2b:62:2e:e3:ad:09:37:80:a2:8f:
db:64:da:3e:39:47:36:ba:c0:43:a1:4c:62:6b:20:b0:45:40:
2b:7f:b7:2a:a0:da:dd:90:1b:44:06:1f:60:38:e4:29:20:a6:
d7:3e:83:03:73:80:f7:96:1e:94:2f:0a:7f:14:99:a1:ae:17:
58:67:e8:71:75:d2:a2:66:35:70:fa:50:90:85:eb:a8:b7:e5:
e6:b4:da:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbElVeSWTepgAUVdQJqOGY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGMwZGIwMDY1ODQ0ZDk1OTRkZmU4ZGQ4ZWZkNzdlZDFl
NDkzZjgwHhcNMjUwNTEyMTMwMDQzWhcNMjUwNTEzMTMwMDQzWjAzMTEwLwYDVQQD
EygwOWU2OTUzZjAyYmIyMzdkNGEzMDg5YmZlZGVkZDY0MmVkNTM5ZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nW2BSdZTsEltGpu0Wi8yCBEemS6
oemOj1SzizwFsHvQDKPT+oFR8bLOm52QfBcdS4Y8zpbkq7dfjkdvW7WvJRZQhnP5
lB1C3FB+7FPJOlG33tykJaQRM4+ycCGxfJQZgmkyefU+oOMevxvctXm7VFU5QAJV
0WbyJx0dYmNVa8UG0L/AGGocf9lpTCIyMAe1Yl75noTPbwztHGiuwtjxWDiKBlWG
m+/rRIVkvL5kkfFlsXbIItyuePrCGgGwruaUt9a3EZZPrBgYKHQBJ4shxXkfUDYK
/xGml/0sZ/4Bf+NGSKv7S4mFa31CG8qvKbG4x1OVJlQ9nYP3fe69/bokFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnmlT8CuyN9SjCJv+3t1kLtU51OMB8GA1UdIwQY
MBaAFIVMDbAGWETZWU3+jdjv137R5JP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYzY3ZGItYzdhMS00OGE2LWFiOTQt
NjBiOTM1OTViYWM5LzEvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lYzY3ZGItYzdhMS00OGE2LWFiOTQtNjBiOTM1OTViYWM5
LzEvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPThePXhW
8sRqLpM1gRLVsKjZR9gDg6vIZv+Uo5dWqNoOhHM4j8zcsgR0p8PghvLFRAtn+ZSm
ieHuZ8m7USRfBYVS01qiTEY9CvAb23234AQ9SqqrvsQmPb11lk6mXLykq9v/gk+c
vTT7J/Bn6A5t/hPDtd8mkWht+q9cn3ZT2CSd/n4e7gh0Hb7R1bUOWghqak+ZAAIU
PdcJc5njcvw7gVT3skY2aKHcNekrYi7jrQk3gKKP22TaPjlHNrrAQ6FMYmsgsEVA
K3+3KqDa3ZAbRAYfYDjkKSCm1z6DA3OA95YelC8KfxSZoa4XWGfocXXSomY1cPpQ
kIXrqLfl5rTaxg==
-----END CERTIFICATE-----
Generated at Mon May 12 16:58:16 2025 by rpki-client