Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
File: hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json)
Hash identifier: aufhySoBDtVr9CZklaXp6z3HViJxVgqdrtCliRtDW3Y=
Subject key identifier: BB:2B:8D:AE:01:9D:37:1A:7F:74:3D:B0:83:2D:D8:11:5F:DB:3B:46
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial: 0196C3F07E4BA2286C398487B694D4D999D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
Manifest number: 83
Signing time: Mon 12 May 2025 10:00:40 +0000
Manifest this update: Mon 12 May 2025 10:00:40 +0000
Manifest next update: Tue 13 May 2025 10:00:40 +0000
Files and hashes: 1: O5dJ1P8qPLvqN1TFZCJv-BCHVwE.roa (hash: 3xRQqmBaiPMEC6+BvwWE12p1a9per8d/4WLoxHZdLwY=)
2: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: EyTON/J1Db0hrQIF+SstW1//7lQtQxC+PziV6QnmFwg=)
3: hs1Ttmuuy8oKm2rJqVYgyDXaPIw.roa (hash: Byo6rO4TnKOVrKw6LlKH8flPLRHULJLiFuZMsf82Wv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:7e:4b:a2:28:6c:39:84:87:b6:94:d4:d9:99:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
Validity
Not Before: May 12 10:00:40 2025 GMT
Not After : May 13 10:00:40 2025 GMT
Subject: CN=bb2b8dae019d371a7f743db0832dd8115fdb3b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:4d:18:4b:fa:71:1d:b3:01:bb:04:2f:9c:
e3:94:07:ed:bc:45:08:85:db:92:46:7d:97:5f:4e:
53:91:61:32:3b:02:e1:00:ed:d6:18:9c:c6:51:be:
97:0f:5a:33:c2:b4:be:78:e1:9a:20:07:1c:f2:0a:
1c:15:b4:d4:87:08:db:86:68:0e:f0:97:9d:40:74:
43:f7:1b:88:e0:ca:8e:f1:3e:e3:c6:6b:12:b9:1f:
10:36:b8:4a:be:6a:ef:50:b7:98:38:b7:ca:50:1a:
01:22:f4:ea:15:11:38:b5:35:83:94:4f:b1:72:a5:
8b:74:35:b7:ea:56:6e:5e:51:b2:c6:93:b4:28:19:
12:04:5f:81:60:73:89:c4:00:62:96:c4:db:f1:41:
7a:71:1c:c0:9e:6a:07:4b:51:96:c4:55:f6:43:e1:
36:cf:2c:cf:a6:b7:fd:51:c2:3a:8d:3c:a8:92:9d:
62:7f:c7:38:45:12:91:f3:24:38:81:71:2b:01:82:
c4:56:33:8e:b0:85:d9:ff:9b:1c:9b:b5:9f:96:5d:
89:71:1d:38:ca:6e:77:ac:5a:e4:f4:39:af:1e:0f:
b6:eb:ce:25:60:ae:60:2c:8b:bb:c6:fd:f4:d3:8a:
0a:48:22:8a:34:22:2e:11:a1:25:b9:d3:2c:cc:72:
be:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2B:8D:AE:01:9D:37:1A:7F:74:3D:B0:83:2D:D8:11:5F:DB:3B:46
X509v3 Authority Key Identifier:
keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:78:99:a6:c8:5f:b3:aa:56:10:ca:70:bf:71:65:b3:99:fa:
c5:16:b2:fb:50:f1:76:b6:32:f6:a6:55:72:2b:b5:06:a0:b9:
85:c5:42:b3:6e:40:46:57:6a:7e:69:fe:e7:ce:ec:b8:3a:c1:
02:e0:d8:55:38:f0:db:2a:c2:ca:5c:5c:f3:dd:2e:6b:12:8e:
82:98:ba:3b:84:fb:82:55:b6:d4:cf:0a:e1:64:d7:9d:e7:08:
03:03:a3:e6:77:56:fc:9e:51:24:de:3e:eb:e2:e1:20:e3:54:
50:6f:bc:6b:79:be:43:ae:1e:25:16:a2:d7:23:2e:4a:e3:0c:
68:0e:60:10:58:b4:79:45:ae:14:de:f9:7e:cd:88:6b:fd:c4:
0b:23:10:e9:3b:a0:3a:c8:17:a0:86:8d:5a:e8:f2:d1:dc:c7:
d9:8c:cf:3b:20:2e:c9:f1:a8:4c:4d:99:90:f2:f9:d8:82:d7:
ac:72:86:e0:21:83:2a:4f:44:3e:e4:44:df:a2:f6:03:66:57:
60:99:51:f6:b2:f8:ff:7d:78:68:b9:58:c7:24:7e:1a:d9:e4:
ee:a2:75:16:da:84:09:dc:06:38:c4:ab:d4:cc:88:19:e6:94:
9c:98:75:a0:f9:97:86:c1:db:c0:4f:63:6d:e8:47:84:28:8a:
ba:d0:ba:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbD8H5LoihsOYSHtpTU2ZnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NmNkN2JjMTkxNDIwNTZhY2FmOTU3M2NhYTFhZjhkZTg3
MTgxNTYwHhcNMjUwNTEyMTAwMDQwWhcNMjUwNTEzMTAwMDQwWjAzMTEwLwYDVQQD
EyhiYjJiOGRhZTAxOWQzNzFhN2Y3NDNkYjA4MzJkZDgxMTVmZGIzYjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkJNGEv6cR2zAbsEL5zjlAftvEUI
hduSRn2XX05TkWEyOwLhAO3WGJzGUb6XD1ozwrS+eOGaIAcc8gocFbTUhwjbhmgO
8JedQHRD9xuI4MqO8T7jxmsSuR8QNrhKvmrvULeYOLfKUBoBIvTqFRE4tTWDlE+x
cqWLdDW36lZuXlGyxpO0KBkSBF+BYHOJxABilsTb8UF6cRzAnmoHS1GWxFX2Q+E2
zyzPprf9UcI6jTyokp1if8c4RRKR8yQ4gXErAYLEVjOOsIXZ/5scm7Wfll2JcR04
ym53rFrk9DmvHg+2684lYK5gLIu7xv3004oKSCKKNCIuEaEludMszHK+CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsrja4BnTcaf3Q9sIMt2BFf2ztGMB8GA1UdIwQY
MBaAFIRs17wZFCBWrK+Vc8qhr43ocYFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEd6WHZCa1VJRmFzcjVWenlxR3ZqZWh4Z1ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85OTA1OTAtNGE2My00YjJmLWE5MzMt
ZDE5NTlmM2UyZjc2LzEvaEd6WHZCa1VJRmFzcjVWenlxR3ZqZWh4Z1ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85OTA1OTAtNGE2My00YjJmLWE5MzMtZDE5NTlmM2UyZjc2
LzEvaEd6WHZCa1VJRmFzcjVWenlxR3ZqZWh4Z1ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXiZpshf
s6pWEMpwv3Fls5n6xRay+1DxdrYy9qZVciu1BqC5hcVCs25ARldqfmn+587suDrB
AuDYVTjw2yrCylxc890uaxKOgpi6O4T7glW21M8K4WTXnecIAwOj5ndW/J5RJN4+
6+LhIONUUG+8a3m+Q64eJRai1yMuSuMMaA5gEFi0eUWuFN75fs2Ia/3ECyMQ6Tug
OsgXoIaNWujy0dzH2YzPOyAuyfGoTE2ZkPL52ILXrHKG4CGDKk9EPuRE36L2A2ZX
YJlR9rL4/314aLlYxyR+Gtnk7qJ1FtqECdwGOMSr1MyIGeaUnJh1oPmXhsHbwE9j
behHhCiKutC6xg==
-----END CERTIFICATE-----
Generated at Mon May 12 19:56:45 2025 by rpki-client