Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: PSMj69gfrFYZaAlkhYhLaPzU004TySmGSCHjg/QLJNs=
Subject key identifier: F8:C3:7E:2C:5D:BF:AB:F4:8E:F5:82:0F:BA:B7:08:84:F5:65:BF:1D
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 0196A954D4301B84AEC77784C9D1BB9F9466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 0C1B
Signing time: Wed 07 May 2025 06:00:30 +0000
Manifest this update: Wed 07 May 2025 06:00:30 +0000
Manifest next update: Thu 08 May 2025 06:00:30 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: AK6+XWV4+9D4cct68rqfxxEE2SazM4FEEO4ZZ0U7ypg=)
2: NVrrhbZmq4fJCBokU32i6BZfN2w.roa (hash: wsW18ZwbqgPM3aB7Kh9k48/63qX+j0nBz3Q3dGVomcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:54:d4:30:1b:84:ae:c7:77:84:c9:d1:bb:9f:94:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: May 7 06:00:30 2025 GMT
Not After : May 8 06:00:30 2025 GMT
Subject: CN=f8c37e2c5dbfabf48ef5820fbab70884f565bf1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:3b:28:6f:f6:80:f0:49:68:2c:36:58:ec:
37:c3:0c:2b:c1:7c:ec:3f:1c:3f:73:24:f2:c4:aa:
d5:c0:5e:8d:75:73:89:66:8c:83:86:92:85:04:35:
13:20:22:fe:42:b5:29:cd:1a:e0:b3:2d:0f:2d:c5:
aa:eb:9e:1e:39:a2:69:be:2a:68:d5:50:03:29:89:
89:3a:79:f8:a3:8b:f9:c5:bd:2d:60:6f:1d:a0:54:
ef:23:8a:63:44:d2:66:8a:99:48:67:49:f6:f3:39:
72:35:b5:1d:fd:53:db:4a:08:cd:d1:d4:f8:42:ad:
1d:30:fd:33:66:6d:70:45:d7:60:44:01:77:b3:16:
11:81:51:6a:ef:08:97:11:9e:3c:74:aa:ac:f3:38:
cf:8e:f6:8c:8a:cf:11:bd:01:74:c3:ca:ac:f1:2a:
73:61:02:e0:00:bc:a7:7d:a6:68:f7:56:5a:66:fd:
7a:54:79:38:26:3c:61:7b:e7:d8:e9:00:e7:86:fe:
ae:69:ed:1d:4c:59:5e:bd:31:02:87:90:4e:1f:b8:
54:2c:cf:0e:c6:12:2b:93:3e:e1:91:c2:63:97:4c:
9f:af:a8:ac:cb:0d:5d:92:b0:87:83:6e:a2:65:76:
aa:2b:45:1f:f7:13:3b:cf:e5:20:65:ca:84:ee:bc:
2f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C3:7E:2C:5D:BF:AB:F4:8E:F5:82:0F:BA:B7:08:84:F5:65:BF:1D
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:af:58:b1:7e:5c:c6:f2:e6:d1:36:60:bd:22:60:79:f6:0f:
72:95:4c:4b:f3:45:8e:7f:82:e0:61:72:3f:59:8b:76:e3:a1:
a4:61:bc:d1:9b:6c:b5:bb:f5:fd:95:dc:5c:c0:a5:88:7f:4c:
1c:28:8d:b1:af:5a:f3:46:e6:12:13:0a:20:22:d6:28:08:8a:
5a:1c:83:83:59:0f:39:3d:c2:07:7c:92:92:34:76:66:fa:12:
96:6f:23:f1:7e:fd:1c:51:1a:73:95:00:07:b8:cd:09:d7:df:
bb:25:e4:dd:fb:b0:ee:04:57:ea:0d:7c:7c:72:18:37:9d:02:
2e:fd:31:00:ad:7c:50:56:b5:ac:6a:ea:88:41:a7:25:e1:11:
52:e1:af:fc:d3:87:78:ec:30:98:87:1c:f8:55:54:2f:b4:b4:
80:c1:48:99:a3:e8:d9:d4:56:4d:2e:f8:78:c5:d1:2f:67:ab:
15:d8:15:6c:26:9b:e7:e6:8e:4f:21:19:d1:86:32:48:85:94:
f1:58:76:e7:4b:61:41:ae:ae:ff:81:76:44:37:6f:c1:7d:19:
be:58:14:ef:b8:8a:76:06:8a:37:6a:d9:d4:b0:9a:db:da:78:
92:5b:ed:ca:7e:d0:f8:d0:d7:69:ef:8f:99:92:e3:92:45:c8:
fc:bc:54:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapVNQwG4Sux3eEydG7n5RmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDU2Y2M1YjdjZTNjMjA3OWY3ODZmZWMxZGZiY2IyNTI0
Mzk5NDEwHhcNMjUwNTA3MDYwMDMwWhcNMjUwNTA4MDYwMDMwWjAzMTEwLwYDVQQD
EyhmOGMzN2UyYzVkYmZhYmY0OGVmNTgyMGZiYWI3MDg4NGY1NjViZjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ07KG/2gPBJaCw2WOw3wwwrwXzs
Pxw/cyTyxKrVwF6NdXOJZoyDhpKFBDUTICL+QrUpzRrgsy0PLcWq654eOaJpvipo
1VADKYmJOnn4o4v5xb0tYG8doFTvI4pjRNJmiplIZ0n28zlyNbUd/VPbSgjN0dT4
Qq0dMP0zZm1wRddgRAF3sxYRgVFq7wiXEZ48dKqs8zjPjvaMis8RvQF0w8qs8Spz
YQLgALynfaZo91ZaZv16VHk4Jjxhe+fY6QDnhv6uae0dTFlevTECh5BOH7hULM8O
xhIrkz7hkcJjl0yfr6isyw1dkrCHg26iZXaqK0Uf9xM7z+UgZcqE7rwvEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjDfixdv6v0jvWCD7q3CIT1Zb8dMB8GA1UdIwQY
MBaAFB9FbMW3zjwgefeG/sHfvLJSQ5lBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzIt
YmQ3ZDM0NTFhYTY2LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzItYmQ3ZDM0NTFhYTY2
LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAa9YsX5c
xvLm0TZgvSJgefYPcpVMS/NFjn+C4GFyP1mLduOhpGG80Ztstbv1/ZXcXMCliH9M
HCiNsa9a80bmEhMKICLWKAiKWhyDg1kPOT3CB3ySkjR2ZvoSlm8j8X79HFEac5UA
B7jNCdffuyXk3fuw7gRX6g18fHIYN50CLv0xAK18UFa1rGrqiEGnJeERUuGv/NOH
eOwwmIcc+FVUL7S0gMFImaPo2dRWTS74eMXRL2erFdgVbCab5+aOTyEZ0YYySIWU
8Vh250thQa6u/4F2RDdvwX0ZvlgU77iKdgaKN2rZ1LCa29p4klvtyn7Q+NDXae+P
mZLjkkXI/LxU0Q==
-----END CERTIFICATE-----
Generated at Wed May 7 09:05:00 2025 by rpki-client