Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: aTxKzi7hCeAtdtJyY24KPeYx7IAvsKXX5GWUPCk+01k=
Subject key identifier: 2B:FC:6F:F6:57:BB:BB:0E:50:AF:52:27:7F:BC:AF:73:AC:E1:59:AB
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 0196D9657FF062814D40710170D7EEC188FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 1542
Signing time: Fri 16 May 2025 14:00:29 +0000
Manifest this update: Fri 16 May 2025 14:00:29 +0000
Manifest next update: Sat 17 May 2025 14:00:29 +0000
Files and hashes: 1: 2eNuQu_p5ginCAZ1GWglFgX2Ois.roa (hash: w05SWnwARvBa6z4mKj9c93WMw5hgy4MoXYoHU2TqLvA=)
2: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: vM06YiSi57/ZTAL8s+/5j2oDkvglxHLYkvQFLzY1vUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:65:7f:f0:62:81:4d:40:71:01:70:d7:ee:c1:88:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: May 16 14:00:29 2025 GMT
Not After : May 17 14:00:29 2025 GMT
Subject: CN=2bfc6ff657bbbb0e50af52277fbcaf73ace159ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9a:f7:72:50:09:e1:63:f1:1b:b9:ab:7c:d1:
2b:8b:03:58:2d:34:90:fc:62:e6:73:93:4a:76:10:
11:aa:64:c1:fc:5a:57:3a:25:44:8a:96:b8:1e:9d:
e0:18:4b:b2:1d:51:30:a5:22:e2:51:b8:95:10:77:
0b:2f:8e:29:6b:9d:af:62:09:2a:f5:ab:cc:47:c3:
f3:cb:b1:1e:61:12:3d:4f:5c:37:5e:75:06:a0:a2:
96:07:9c:59:72:cb:71:28:8e:a4:d7:5b:41:32:0e:
09:39:2c:e5:07:b6:bb:4a:3a:c8:b7:f4:9e:60:62:
8c:df:a5:15:09:75:0a:5d:30:53:bb:c6:c2:d8:c9:
5e:68:49:b8:fc:81:29:a5:aa:6f:6f:31:30:c9:a1:
fe:7d:c7:8c:de:ad:a9:39:98:2d:2f:04:7f:52:c1:
eb:99:7d:6a:4f:bf:ea:fa:53:2d:19:f7:12:8c:9b:
0e:ad:b9:dc:28:20:a5:ee:e4:65:ad:22:fe:38:cd:
01:65:2e:1a:e4:a1:3d:cb:f1:75:d0:57:6d:c5:0a:
18:99:9f:a7:95:15:d4:84:0b:65:0f:4f:be:04:0b:
b2:2f:61:30:19:a3:e8:90:c8:ca:27:9a:2f:b3:e7:
ad:fa:a8:e9:1a:04:e0:b1:8b:0c:e0:31:0b:09:3e:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FC:6F:F6:57:BB:BB:0E:50:AF:52:27:7F:BC:AF:73:AC:E1:59:AB
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ae:87:e5:ef:98:2a:e4:e6:f6:d6:ce:4e:1b:3a:23:32:27:
ab:1d:45:c6:60:7f:c4:93:6a:fe:96:fa:95:f5:cd:03:bd:fb:
4c:c2:1c:7d:18:ba:0d:47:4b:e2:94:ee:87:91:4a:9e:fd:df:
32:20:45:ec:09:e5:be:6f:48:0d:be:2c:a4:32:82:90:f3:98:
ae:cc:96:28:e9:6e:db:c1:66:11:e9:b8:90:48:37:1c:40:e9:
23:80:d7:a5:c8:61:e8:a3:28:1b:3a:84:1e:89:87:c2:72:86:
68:cc:2a:a7:59:5e:f6:27:0e:af:03:57:27:f3:e1:ed:45:32:
f6:f5:a4:c7:7f:3d:d1:ed:08:e5:34:0e:f8:34:20:4b:36:d6:
09:61:a9:e8:cf:3f:d1:04:88:9c:e8:21:1b:26:e2:61:37:ee:
b1:79:25:2e:a8:36:2b:e1:34:b9:24:00:aa:d9:27:34:ef:f5:
8d:ba:96:eb:ef:f9:f1:1c:af:2e:73:7a:9c:a4:92:a7:27:cc:
48:aa:12:72:d7:02:1b:48:0c:b5:11:28:6d:52:33:01:f6:00:
ee:e0:01:d4:a8:72:ea:fa:45:49:c1:9b:b1:08:be:06:a4:d3:
58:54:de:a2:e2:8c:fe:c0:22:c7:55:f3:10:b0:68:10:bf:f1:
e3:a6:c6:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbZZX/wYoFNQHEBcNfuwYj7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWQ3YjlmMWM0OWY4ZDEzZTFhNjdhYmNmMmZiYTM1YjBh
NjZkMTgwHhcNMjUwNTE2MTQwMDI5WhcNMjUwNTE3MTQwMDI5WjAzMTEwLwYDVQQD
EygyYmZjNmZmNjU3YmJiYjBlNTBhZjUyMjc3ZmJjYWY3M2FjZTE1OWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pr3clAJ4WPxG7mrfNEriwNYLTSQ
/GLmc5NKdhARqmTB/FpXOiVEipa4Hp3gGEuyHVEwpSLiUbiVEHcLL44pa52vYgkq
9avMR8Pzy7EeYRI9T1w3XnUGoKKWB5xZcstxKI6k11tBMg4JOSzlB7a7SjrIt/Se
YGKM36UVCXUKXTBTu8bC2MleaEm4/IEppapvbzEwyaH+fceM3q2pOZgtLwR/UsHr
mX1qT7/q+lMtGfcSjJsOrbncKCCl7uRlrSL+OM0BZS4a5KE9y/F10FdtxQoYmZ+n
lRXUhAtlD0++BAuyL2EwGaPokMjKJ5ovs+et+qjpGgTgsYsM4DELCT4NzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCv8b/ZXu7sOUK9SJ3+8r3Os4VmrMB8GA1UdIwQY
MBaAFB2te58cSfjRPhpnq88vujWwpm0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zYzM5ZjAtN2U5Ny00ZWY3LTg5NDQt
NWViZDhlYWVlMmM2LzEvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zYzM5ZjAtN2U5Ny00ZWY3LTg5NDQtNWViZDhlYWVlMmM2
LzEvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhK6H5e+Y
KuTm9tbOThs6IzInqx1FxmB/xJNq/pb6lfXNA737TMIcfRi6DUdL4pTuh5FKnv3f
MiBF7Anlvm9IDb4spDKCkPOYrsyWKOlu28FmEem4kEg3HEDpI4DXpchh6KMoGzqE
HomHwnKGaMwqp1le9icOrwNXJ/Ph7UUy9vWkx3890e0I5TQO+DQgSzbWCWGp6M8/
0QSInOghGybiYTfusXklLqg2K+E0uSQAqtknNO/1jbqW6+/58RyvLnN6nKSSpyfM
SKoSctcCG0gMtREobVIzAfYA7uAB1Khy6vpFScGbsQi+BqTTWFTeouKM/sAix1Xz
ELBoEL/x46bGew==
-----END CERTIFICATE-----
Generated at Fri May 16 22:55:40 2025 by rpki-client