Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
File: hGr1TmVYz8hiUpRuRpKrknd8DhA.mft (raw, json)
Hash identifier: 7wreBM/mLyVBuDOi/UUnZsCqriT/yxNAxoEklZv3kog=
Subject key identifier: 24:C8:E5:A8:64:0C:9D:94:09:61:10:C5:4C:33:85:AE:00:FF:0F:E6
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial: 0196BA485AC7C12073E971748500738F0B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
Manifest number: 1156
Signing time: Sat 10 May 2025 13:00:26 +0000
Manifest this update: Sat 10 May 2025 13:00:26 +0000
Manifest next update: Sun 11 May 2025 13:00:26 +0000
Files and hashes: 1: EAjdVmmPDgRsaYdJzqxZsWJ1dtQ.roa (hash: MpPa88zI8gAyzjuIqd3qZ9dmTTo9CAG0jQ+czPWKrY0=)
2: ZpIa8d84ZFXt_ZFQqAeQWbEn8cE.roa (hash: yg+iHdLIlyvv1zJT3FKVPdTj2ezKdgH8bzRxXJFfD+M=)
3: fw-9UYbBKED3FPK1cxwcKkMCFm0.roa (hash: jRUQB1Fr5hDxlkTn2IWZrgIhUE7mB/LkFsYZT2IUhmk=)
4: hGr1TmVYz8hiUpRuRpKrknd8DhA.crl (hash: dfUfayPoPP7xzwGfxeaKbbRb+AnZ/37h7dokD/r+f9w=)
5: pT_R2pT5fkigCUc46LgmyNvu26w.roa (hash: f5EDq84NioAgiZfb2l0opuOPnSnHoDIa4FyPu++58Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:5a:c7:c1:20:73:e9:71:74:85:00:73:8f:0b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
Validity
Not Before: May 10 13:00:26 2025 GMT
Not After : May 11 13:00:26 2025 GMT
Subject: CN=24c8e5a8640c9d94096110c54c3385ae00ff0fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:e1:53:ba:c2:d7:2c:56:a7:3f:63:f7:c8:
cf:8c:30:f2:32:eb:af:fe:ff:56:9f:eb:28:1f:4a:
60:ee:f6:3c:9a:f5:56:ed:ea:58:09:45:45:af:c5:
c5:e1:c1:61:47:11:50:bf:60:7a:52:c8:cb:b7:ec:
05:46:1b:08:10:e3:12:41:98:52:2b:be:1c:84:50:
7b:2f:83:d3:74:23:e6:e1:13:2f:a3:c3:5b:c9:00:
3b:95:ae:10:8a:a8:1d:bf:aa:26:f9:7c:43:3e:21:
b6:34:3e:e8:6a:80:c7:8c:6d:a1:94:c3:f2:29:66:
c8:2d:0f:ec:82:07:ad:d7:4e:0a:1d:a5:b4:49:c9:
32:3b:39:fa:3b:0f:75:2f:3a:1d:b1:ba:b4:80:f3:
9e:c2:b4:01:2d:0b:5c:bd:64:a5:a2:e3:ae:69:49:
79:2f:27:25:e8:3a:ef:c5:40:28:33:dd:15:4c:ce:
09:dc:31:cf:11:c2:6e:e1:7f:e8:5d:0c:82:23:68:
b6:0d:e8:e8:fd:6d:b3:ff:e1:fa:ed:3b:96:d0:7a:
2f:d1:e7:d2:df:58:a0:12:70:1c:22:76:18:ff:2b:
c5:96:e0:b3:3c:d3:da:cf:d8:57:67:d6:55:2a:66:
2c:a3:fd:dc:06:1c:33:4e:cf:f5:23:8a:4d:23:f3:
e7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C8:E5:A8:64:0C:9D:94:09:61:10:C5:4C:33:85:AE:00:FF:0F:E6
X509v3 Authority Key Identifier:
keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:31:bd:ef:5f:0d:c8:fc:f3:5d:3e:e8:1f:e1:7b:37:dc:3d:
3a:d5:d2:ac:24:b9:e1:9c:ae:23:a7:2a:35:e9:02:72:00:57:
0b:db:1d:12:9c:83:64:d2:03:e8:c6:0d:92:04:93:00:69:67:
9c:9f:02:c0:ce:c5:59:b2:f6:99:87:71:e1:fd:2c:c6:6f:82:
69:12:e1:19:98:30:49:17:89:c1:a3:22:13:cc:55:3c:43:80:
94:5e:64:47:5b:47:38:ea:54:f7:3e:fc:11:c0:a1:17:f3:b4:
06:43:52:8c:62:d1:21:ba:82:78:e7:40:5d:c1:3f:ef:98:0d:
e9:52:90:18:a4:9e:fc:45:cf:b3:eb:f7:6f:0b:8d:17:04:29:
43:71:18:e2:db:3c:62:23:1b:af:d3:52:64:e7:f2:91:19:00:
b5:c5:83:57:a7:80:8d:79:0d:b1:27:9f:c2:8a:58:3a:84:f4:
bc:77:0a:34:ba:59:9f:d7:e9:b6:22:e0:ad:c6:3c:bd:09:5b:
91:17:ac:dd:e5:1a:45:6a:8c:f0:1c:95:a3:55:a5:32:2d:81:
33:9c:f0:56:81:bb:1a:ae:3e:a6:11:70:9f:e7:a1:a4:bb:4c:
fd:43:bd:d7:84:83:75:af:fa:bd:1d:d3:b1:9c:b9:27:be:ee:
7d:53:3f:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6SFrHwSBz6XF0hQBzjwsmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NmFmNTRlNjU1OGNmYzg2MjUyOTQ2ZTQ2OTJhYjkyNzc3
YzBlMTAwHhcNMjUwNTEwMTMwMDI2WhcNMjUwNTExMTMwMDI2WjAzMTEwLwYDVQQD
EygyNGM4ZTVhODY0MGM5ZDk0MDk2MTEwYzU0YzMzODVhZTAwZmYwZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXXhU7rC1yxWpz9j98jPjDDyMuuv
/v9Wn+soH0pg7vY8mvVW7epYCUVFr8XF4cFhRxFQv2B6UsjLt+wFRhsIEOMSQZhS
K74chFB7L4PTdCPm4RMvo8NbyQA7la4Qiqgdv6om+XxDPiG2ND7oaoDHjG2hlMPy
KWbILQ/sgget104KHaW0SckyOzn6Ow91Lzodsbq0gPOewrQBLQtcvWSlouOuaUl5
Lycl6DrvxUAoM90VTM4J3DHPEcJu4X/oXQyCI2i2Dejo/W2z/+H67TuW0Hov0efS
31igEnAcInYY/yvFluCzPNPaz9hXZ9ZVKmYso/3cBhwzTs/1I4pNI/Pn7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTI5ahkDJ2UCWEQxUwzha4A/w/mMB8GA1UdIwQY
MBaAFIRq9U5lWM/IYlKUbkaSq5J3fA4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQt
MDdlMzZlZmM1ZTQyLzEvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQtMDdlMzZlZmM1ZTQy
LzEvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDG9718N
yPzzXT7oH+F7N9w9OtXSrCS54ZyuI6cqNekCcgBXC9sdEpyDZNID6MYNkgSTAGln
nJ8CwM7FWbL2mYdx4f0sxm+CaRLhGZgwSReJwaMiE8xVPEOAlF5kR1tHOOpU9z78
EcChF/O0BkNSjGLRIbqCeOdAXcE/75gN6VKQGKSe/EXPs+v3bwuNFwQpQ3EY4ts8
YiMbr9NSZOfykRkAtcWDV6eAjXkNsSefwopYOoT0vHcKNLpZn9fptiLgrcY8vQlb
kRes3eUaRWqM8ByVo1WlMi2BM5zwVoG7Gq4+phFwn+ehpLtM/UO914SDda/6vR3T
sZy5J77ufVM/fQ==
-----END CERTIFICATE-----
Generated at Sat May 10 19:12:45 2025 by rpki-client