Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
File: H0guXkEsHeu3dt7fr0XDMXTnZC4.mft (raw, json)
Hash identifier: J2RP+8UxzdkVtmbC3RMd2xhSZCFIWrIqGXq8Sp5SYQk=
Subject key identifier: CD:09:73:21:98:7B:3A:B5:BA:46:D1:5C:8C:A9:39:81:0A:8C:59:03
Authority key identifier: 1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
Certificate issuer: /CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Certificate serial: 0196BE25986DD132FB55BCB2F1222B94A5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
Manifest number: 037F
Signing time: Sun 11 May 2025 07:00:56 +0000
Manifest this update: Sun 11 May 2025 07:00:56 +0000
Manifest next update: Mon 12 May 2025 07:00:56 +0000
Files and hashes: 1: H0guXkEsHeu3dt7fr0XDMXTnZC4.crl (hash: TLV9LcAi+i6xxd4wM9yUYKYnRwubt9yhGZXZEvVlX9Y=)
2: StsIBWXPkUmDPSa1M3nyv0UDUR4.roa (hash: rqGYqeTGV9tyOvnudhslVeQEEchE0GwN6rysMNZqs1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:98:6d:d1:32:fb:55:bc:b2:f1:22:2b:94:a5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Validity
Not Before: May 11 07:00:56 2025 GMT
Not After : May 12 07:00:56 2025 GMT
Subject: CN=cd097321987b3ab5ba46d15c8ca939810a8c5903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:9a:97:cf:e3:df:84:cd:bc:e3:64:19:77:
98:6b:fc:df:eb:8c:0a:7f:92:88:bd:10:f3:32:73:
ea:45:fc:57:d0:40:ef:a5:4b:d8:4e:1f:30:02:06:
a4:73:ad:10:fd:2e:0b:b1:d0:c7:2c:02:31:22:cd:
b4:b0:c4:69:61:14:0d:e0:15:eb:1b:e5:95:d2:11:
8a:3f:b4:be:51:2f:28:78:f9:8f:d3:cc:ef:c8:57:
12:6b:5a:5f:1b:4b:af:86:6c:98:c0:16:ac:84:69:
2c:0c:3a:00:fb:52:f7:3d:c4:63:e7:29:14:c8:89:
f4:50:66:2a:43:64:65:69:2f:d4:d8:ba:a0:c0:4d:
65:b2:35:50:cb:9e:70:e9:4d:58:b7:7e:d0:0f:18:
7d:a2:ff:3e:c3:34:85:4c:92:29:b3:39:b3:7b:c7:
bb:9e:43:cb:b8:1c:6a:b2:ff:74:25:52:d9:5b:89:
88:d2:a0:1d:b4:84:bf:6f:fb:83:1c:6e:60:84:78:
c2:71:c6:e6:5e:ae:b3:37:4b:e6:fd:e6:76:5e:5a:
d3:1d:53:87:0d:7e:9b:bd:50:2d:a8:97:d8:74:3a:
9c:e9:c5:d7:a8:91:d9:cd:64:47:1f:83:f6:50:48:
8d:14:21:00:de:bc:9b:fd:ca:32:32:2c:e7:cd:15:
89:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:09:73:21:98:7B:3A:B5:BA:46:D1:5C:8C:A9:39:81:0A:8C:59:03
X509v3 Authority Key Identifier:
keyid:1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8e:c0:f2:42:59:eb:75:6d:ea:88:f5:19:23:23:b0:83:5f:
a2:ff:6b:70:b6:ac:a6:e4:7b:09:6e:06:01:95:d5:cb:6a:90:
13:4b:4b:c9:b1:ce:4a:6e:f5:4c:6e:f1:21:4e:7c:a8:c8:9e:
d7:d6:b6:81:3c:ee:99:81:2b:7e:50:fc:56:e3:ae:1d:5d:e7:
5b:06:92:a7:e1:53:5f:c1:71:c0:59:c8:f2:e4:cd:1a:04:cd:
94:b6:eb:ec:4b:d7:c2:c6:96:6a:cc:7a:57:d7:b6:98:c5:ac:
5a:bd:c0:4e:fd:94:f8:f2:34:91:bf:e0:c7:bb:6f:b5:7c:27:
d3:03:b4:aa:0d:56:62:22:48:9f:a8:35:4b:a3:c2:4c:9c:78:
06:6d:1e:6f:9c:79:0d:40:c4:d6:50:c8:ef:bb:75:94:3c:1b:
a3:07:6e:39:7b:e8:fc:3f:c6:a4:4e:20:0e:ae:80:d6:f3:3a:
1b:a3:3c:cd:0b:9b:25:62:cd:52:d3:3e:81:9a:74:66:20:c6:
bc:7d:fd:42:be:16:2b:f4:e0:46:fb:3a:fe:b3:7b:62:8e:12:
c7:fb:67:77:9e:03:a5:04:d7:5d:cd:c0:c7:73:9f:24:54:40:
ef:00:a7:14:e7:80:6f:d4:7c:cb:0e:16:80:82:b2:0a:70:4f:
31:71:42:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+JZht0TL7Vbyy8SIrlKXnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDgyZTVlNDEyYzFkZWJiNzc2ZGVkZmFmNDVjMzMxNzRl
NzY0MmUwHhcNMjUwNTExMDcwMDU2WhcNMjUwNTEyMDcwMDU2WjAzMTEwLwYDVQQD
EyhjZDA5NzMyMTk4N2IzYWI1YmE0NmQxNWM4Y2E5Mzk4MTBhOGM1OTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7Kal8/j34TNvONkGXeYa/zf64wK
f5KIvRDzMnPqRfxX0EDvpUvYTh8wAgakc60Q/S4LsdDHLAIxIs20sMRpYRQN4BXr
G+WV0hGKP7S+US8oePmP08zvyFcSa1pfG0uvhmyYwBashGksDDoA+1L3PcRj5ykU
yIn0UGYqQ2RlaS/U2LqgwE1lsjVQy55w6U1Yt37QDxh9ov8+wzSFTJIpszmze8e7
nkPLuBxqsv90JVLZW4mI0qAdtIS/b/uDHG5ghHjCccbmXq6zN0vm/eZ2XlrTHVOH
DX6bvVAtqJfYdDqc6cXXqJHZzWRHH4P2UEiNFCEA3ryb/coyMiznzRWJ6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0JcyGYezq1ukbRXIypOYEKjFkDMB8GA1UdIwQY
MBaAFB9ILl5BLB3rt3be369FwzF052QuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBndVhrRXNIZXUzZHQ3ZnIwWERNWFRuWkM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83ZGRlOTYtMTBkZC00MzIzLTgxZDIt
ZDJlMzM3MmFjMjljLzEvSDBndVhrRXNIZXUzZHQ3ZnIwWERNWFRuWkM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83ZGRlOTYtMTBkZC00MzIzLTgxZDItZDJlMzM3MmFjMjlj
LzEvSDBndVhrRXNIZXUzZHQ3ZnIwWERNWFRuWkM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPo7A8kJZ
63Vt6oj1GSMjsINfov9rcLaspuR7CW4GAZXVy2qQE0tLybHOSm71TG7xIU58qMie
19a2gTzumYErflD8VuOuHV3nWwaSp+FTX8FxwFnI8uTNGgTNlLbr7EvXwsaWasx6
V9e2mMWsWr3ATv2U+PI0kb/gx7tvtXwn0wO0qg1WYiJIn6g1S6PCTJx4Bm0eb5x5
DUDE1lDI77t1lDwbowduOXvo/D/GpE4gDq6A1vM6G6M8zQubJWLNUtM+gZp0ZiDG
vH39Qr4WK/TgRvs6/rN7Yo4Sx/tnd54DpQTXXc3Ax3OfJFRA7wCnFOeAb9R8yw4W
gIKyCnBPMXFCdA==
-----END CERTIFICATE-----
Generated at Sun May 11 14:38:51 2025 by rpki-client