Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
File: HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft (raw, json)
Hash identifier: HicQNF3GIU1+vV+V1IFQwROHCCtCv6vHDJdLe3IfUK4=
Subject key identifier: F8:3E:7C:F2:5C:54:C2:3A:8A:D5:A9:2E:4E:41:C3:02:70:BF:BC:E5
Authority key identifier: 1D:3B:64:D9:5F:61:31:68:2B:99:05:C4:40:A7:85:A6:0A:8A:C8:B8
Certificate issuer: /CN=1d3b64d95f6131682b9905c440a785a60a8ac8b8
Certificate serial: 0196AAD51A716D78A1DCEC0E4A83019AD3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
Manifest number: 0644
Signing time: Wed 07 May 2025 13:00:14 +0000
Manifest this update: Wed 07 May 2025 13:00:14 +0000
Manifest next update: Thu 08 May 2025 13:00:14 +0000
Files and hashes: 1: Ct9bHG4SWHTl9PMz5PXSs2vCxX8.roa (hash: N/U8cjrJKkb1U0RlpmtZn+cKz90pd4hkwgPvU1swCC0=)
2: HTtk2V9hMWgrmQXEQKeFpgqKyLg.crl (hash: bxAlsSXuAnAuNgvLGaNoWQeX9y2t5tq7X0GyOPm3GMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:d5:1a:71:6d:78:a1:dc:ec:0e:4a:83:01:9a:d3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3b64d95f6131682b9905c440a785a60a8ac8b8
Validity
Not Before: May 7 13:00:14 2025 GMT
Not After : May 8 13:00:14 2025 GMT
Subject: CN=f83e7cf25c54c23a8ad5a92e4e41c30270bfbce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:14:8a:88:1f:02:1f:54:34:57:46:a0:7b:
53:1d:1e:ab:61:eb:35:c6:f2:52:3c:92:2e:6d:75:
ae:72:39:01:b8:69:d4:8a:34:6f:eb:6c:d6:5f:28:
05:cd:53:32:24:d2:14:0b:c2:d0:4e:0e:9f:cd:f8:
3a:b8:6f:91:1b:09:f7:f6:f8:75:f6:20:06:22:53:
c5:e6:25:e7:4e:94:87:4d:71:a3:79:1c:3a:f2:e0:
e1:f3:38:ec:d6:04:71:90:fc:e1:11:35:29:61:7a:
8a:1c:56:02:d5:4d:82:80:cb:8f:d1:0b:85:e1:02:
bb:c5:8d:a1:c8:d5:e5:82:05:7b:c5:86:c3:b1:18:
19:c9:61:c7:ec:00:d3:a7:8c:20:0f:63:7a:2a:b8:
5e:b8:c2:2a:29:22:19:1d:04:1c:25:f2:b7:80:04:
30:74:67:17:5f:dd:1b:2a:ce:3a:2e:5f:cb:aa:e4:
49:71:bf:31:80:4e:66:59:e1:e1:d9:7c:ee:8d:6c:
1e:ed:c9:6b:69:70:b1:44:6b:cd:51:2f:15:d6:b9:
33:a1:f8:8e:3f:4b:f0:21:5e:e2:f4:a3:84:98:ce:
5c:92:35:84:93:cc:1c:2d:78:a2:c8:7a:11:89:c4:
e1:4d:57:76:9e:11:22:30:6d:01:e2:5f:81:b7:d9:
1a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3E:7C:F2:5C:54:C2:3A:8A:D5:A9:2E:4E:41:C3:02:70:BF:BC:E5
X509v3 Authority Key Identifier:
keyid:1D:3B:64:D9:5F:61:31:68:2B:99:05:C4:40:A7:85:A6:0A:8A:C8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:51:b8:a6:4d:43:6f:65:0b:9f:d5:21:59:17:7b:07:6d:72:
ae:9b:d0:15:b4:02:d0:d2:3f:e6:8d:5e:64:aa:19:7c:ca:9c:
ce:e3:fc:9f:44:ed:7c:2d:41:2d:91:65:e5:82:12:9a:08:56:
ea:c9:ee:b6:92:e1:e7:9e:88:77:97:ca:e9:d6:ec:e5:4a:cb:
a8:bd:b4:05:69:dd:26:1a:53:10:ab:2b:ac:0c:02:e6:b0:3f:
68:07:4a:24:b4:70:10:ef:e3:18:07:81:c2:1f:15:c0:30:b4:
8f:5f:e5:3e:39:7e:7f:46:a0:4a:23:20:f4:de:d2:db:b3:60:
6a:e1:64:01:41:ad:cc:f7:6c:47:03:76:df:7b:fa:5e:b8:d1:
a7:51:f7:76:ba:a8:b0:19:bb:50:92:fe:6b:cd:59:06:e1:66:
12:7f:89:19:34:8c:00:50:ab:63:05:6e:f3:91:06:d9:7c:06:
40:82:67:f1:92:8a:0b:fe:41:2b:5e:f5:16:47:1a:32:4a:d9:
f2:df:77:6d:26:3c:aa:7c:17:00:b5:61:8a:77:7f:32:53:31:
98:8c:1a:a6:d3:45:04:d5:20:06:f9:04:f3:6b:ea:d8:a9:19:
d3:be:e9:54:21:d8:80:77:58:1d:68:9c:fb:e0:cf:23:de:2e:
c4:fa:40:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaq1RpxbXih3OwOSoMBmtPUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkM2I2NGQ5NWY2MTMxNjgyYjk5MDVjNDQwYTc4NWE2MGE4
YWM4YjgwHhcNMjUwNTA3MTMwMDE0WhcNMjUwNTA4MTMwMDE0WjAzMTEwLwYDVQQD
EyhmODNlN2NmMjVjNTRjMjNhOGFkNWE5MmU0ZTQxYzMwMjcwYmZiY2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJIUiogfAh9UNFdGoHtTHR6rYes1
xvJSPJIubXWucjkBuGnUijRv62zWXygFzVMyJNIUC8LQTg6fzfg6uG+RGwn39vh1
9iAGIlPF5iXnTpSHTXGjeRw68uDh8zjs1gRxkPzhETUpYXqKHFYC1U2CgMuP0QuF
4QK7xY2hyNXlggV7xYbDsRgZyWHH7ADTp4wgD2N6KrheuMIqKSIZHQQcJfK3gAQw
dGcXX90bKs46Ll/LquRJcb8xgE5mWeHh2XzujWwe7clraXCxRGvNUS8V1rkzofiO
P0vwIV7i9KOEmM5ckjWEk8wcLXiiyHoRicThTVd2nhEiMG0B4l+Bt9kaYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPg+fPJcVMI6itWpLk5BwwJwv7zlMB8GA1UdIwQY
MBaAFB07ZNlfYTFoK5kFxECnhaYKisi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFR0azJWOWhNV2dybVFYRVFLZUZwZ3FLeUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zZTYyZDgtOWU0MS00Zjg2LTkzMTMt
NjE1Y2IzNzJlMDc3LzEvSFR0azJWOWhNV2dybVFYRVFLZUZwZ3FLeUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zZTYyZDgtOWU0MS00Zjg2LTkzMTMtNjE1Y2IzNzJlMDc3
LzEvSFR0azJWOWhNV2dybVFYRVFLZUZwZ3FLeUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlG4pk1D
b2ULn9UhWRd7B21yrpvQFbQC0NI/5o1eZKoZfMqczuP8n0TtfC1BLZFl5YISmghW
6snutpLh556Id5fK6dbs5UrLqL20BWndJhpTEKsrrAwC5rA/aAdKJLRwEO/jGAeB
wh8VwDC0j1/lPjl+f0agSiMg9N7S27NgauFkAUGtzPdsRwN233v6XrjRp1H3drqo
sBm7UJL+a81ZBuFmEn+JGTSMAFCrYwVu85EG2XwGQIJn8ZKKC/5BK171FkcaMkrZ
8t93bSY8qnwXALVhind/MlMxmIwaptNFBNUgBvkE82vq2KkZ077pVCHYgHdYHWic
++DPI94uxPpA1w==
-----END CERTIFICATE-----
Generated at Wed May 7 23:23:47 2025 by rpki-client