Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
File: hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft (raw, json)
Hash identifier: 412gcFZNLBRfzx565obedTsBXv9ISEUCyAC8wz9agqA=
Subject key identifier: AD:14:E6:15:C9:DD:1C:8B:AE:5B:76:CF:8F:9C:41:70:88:B6:A5:6B
Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6
Certificate serial: 0196BB9206A3F2F6727F0D6869BF38DCFB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
Manifest number: 0242
Signing time: Sat 10 May 2025 19:00:31 +0000
Manifest this update: Sat 10 May 2025 19:00:31 +0000
Manifest next update: Sun 11 May 2025 19:00:31 +0000
Files and hashes: 1: UUl9tjMfoZ7A5klfeBDKB274xTs.roa (hash: SBvHQQieYmwuldne0ESh4KLqZuA1XSHveZCrpCqrHvQ=)
2: hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl (hash: 9cg2NwAr3xtnfcdufs/8NKX1HGUQbOcS+bDVHhnHI+U=)
3: k3kU5aAomwikuRNdsT68Tqjcik4.roa (hash: wCPtZXM9gkCUtgXFEirTaWeSRaiZvXJy0sUEtKPb0ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:06:a3:f2:f6:72:7f:0d:68:69:bf:38:dc:fb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6
Validity
Not Before: May 10 19:00:31 2025 GMT
Not After : May 11 19:00:31 2025 GMT
Subject: CN=ad14e615c9dd1c8bae5b76cf8f9c417088b6a56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:52:68:90:70:c3:7c:c0:df:4a:7a:24:c9:
b6:5d:21:4e:6a:3e:7a:36:23:ba:18:67:a1:86:58:
27:20:1e:bc:ec:a7:3c:35:7a:58:d9:b4:ca:6b:a5:
be:b3:80:87:7f:32:76:cf:c2:2c:7c:80:e7:dd:74:
86:66:04:86:66:e2:05:b5:b4:ed:b0:40:37:07:77:
bc:14:b2:16:48:ec:2c:20:6b:1a:af:b8:a6:3c:39:
99:4d:43:06:5e:45:e9:3b:b2:1f:9d:21:90:f7:ae:
2c:5f:91:34:a9:b5:c4:b4:b6:f0:25:48:62:c7:a3:
2c:f1:59:58:ba:f8:de:b3:8e:01:a9:ac:87:2d:aa:
bb:b7:9d:7b:57:2e:2f:ef:fe:d9:a6:cc:12:ae:0d:
47:64:fe:fa:2e:31:d6:a2:be:a0:01:55:a8:c3:34:
48:ef:12:7c:56:e6:a4:e4:00:41:9b:34:e3:d1:0f:
67:1d:c2:9d:23:b1:de:a0:fa:03:34:9d:23:11:2e:
2a:d6:dc:33:be:9a:63:ff:ad:7b:9a:bd:1b:70:05:
e7:e4:da:cb:d8:32:f0:92:88:b3:4c:7b:63:80:bb:
82:72:d0:02:99:5b:6b:87:f9:40:4c:f9:8a:4c:c6:
c0:48:ed:fe:78:28:1a:e9:aa:0e:cc:1b:03:99:0a:
30:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:14:E6:15:C9:DD:1C:8B:AE:5B:76:CF:8F:9C:41:70:88:B6:A5:6B
X509v3 Authority Key Identifier:
keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:08:67:68:59:80:7f:b2:0a:b8:ea:0c:d2:bc:68:53:0c:fa:
1c:eb:26:e7:63:e7:d7:6d:ea:79:be:79:e3:6e:eb:6e:94:ea:
de:dc:d4:91:12:6c:5b:7e:7a:0a:80:e5:da:6c:57:b8:df:06:
f5:c3:51:80:08:e7:b1:93:23:69:1b:dd:d6:41:49:02:02:e5:
dd:44:65:b5:fd:28:64:a8:55:ca:1e:54:72:32:a3:c5:ae:11:
4f:0b:9d:29:31:cf:95:70:e3:45:33:81:88:43:5c:e7:d2:1b:
15:90:6e:eb:c3:71:16:61:36:c0:11:45:7a:27:6b:19:c3:ab:
66:df:56:ee:a5:8b:5e:f2:68:fe:aa:f9:f7:05:30:37:c3:e0:
15:14:8f:9b:8e:91:ac:eb:b3:c0:f5:05:9f:64:d1:f5:27:8f:
42:2c:e5:da:eb:cb:46:79:b6:19:d0:f1:c5:77:6a:30:5c:af:
38:23:6c:17:c9:e1:b5:b6:85:6d:e8:6d:b3:df:66:08:8f:cf:
0e:de:d9:6c:18:f0:ad:1f:65:f9:ca:a8:48:90:9a:28:3f:b1:
05:3f:36:cc:25:c0:37:51:c4:92:df:0b:72:10:d9:48:25:96:
0a:0a:e5:4e:ed:9f:59:8a:b7:67:d9:5c:2b:80:3a:1a:2f:0d:
18:6c:12:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7kgaj8vZyfw1oab843PuEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MmJjMTQ1YzViMjIzOTRkNmZlYWU5OTZiYzBiYjI1MjU0
ODAxYzYwHhcNMjUwNTEwMTkwMDMxWhcNMjUwNTExMTkwMDMxWjAzMTEwLwYDVQQD
EyhhZDE0ZTYxNWM5ZGQxYzhiYWU1Yjc2Y2Y4ZjljNDE3MDg4YjZhNTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti1SaJBww3zA30p6JMm2XSFOaj56
NiO6GGehhlgnIB687Kc8NXpY2bTKa6W+s4CHfzJ2z8IsfIDn3XSGZgSGZuIFtbTt
sEA3B3e8FLIWSOwsIGsar7imPDmZTUMGXkXpO7IfnSGQ964sX5E0qbXEtLbwJUhi
x6Ms8VlYuvjes44BqayHLaq7t517Vy4v7/7ZpswSrg1HZP76LjHWor6gAVWowzRI
7xJ8Vuak5ABBmzTj0Q9nHcKdI7HeoPoDNJ0jES4q1twzvppj/617mr0bcAXn5NrL
2DLwkoizTHtjgLuCctACmVtrh/lATPmKTMbASO3+eCga6aoOzBsDmQowywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0U5hXJ3RyLrlt2z4+cQXCItqVrMB8GA1UdIwQY
MBaAFIUrwUXFsiOU1v6umWvAuyUlSAHGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFN2QlJjV3lJNVRXX3E2WmE4QzdKU1ZJQWNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jYTRmZjUtNDhhOC00ZWNjLWJhNzMt
OGQwNzEwZjNkMjc2LzEvaFN2QlJjV3lJNVRXX3E2WmE4QzdKU1ZJQWNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9jYTRmZjUtNDhhOC00ZWNjLWJhNzMtOGQwNzEwZjNkMjc2
LzEvaFN2QlJjV3lJNVRXX3E2WmE4QzdKU1ZJQWNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApghnaFmA
f7IKuOoM0rxoUwz6HOsm52Pn123qeb55427rbpTq3tzUkRJsW356CoDl2mxXuN8G
9cNRgAjnsZMjaRvd1kFJAgLl3URltf0oZKhVyh5UcjKjxa4RTwudKTHPlXDjRTOB
iENc59IbFZBu68NxFmE2wBFFeidrGcOrZt9W7qWLXvJo/qr59wUwN8PgFRSPm46R
rOuzwPUFn2TR9SePQizl2uvLRnm2GdDxxXdqMFyvOCNsF8nhtbaFbehts99mCI/P
Dt7ZbBjwrR9l+cqoSJCaKD+xBT82zCXAN1HEkt8LchDZSCWWCgrlTu2fWYq3Z9lc
K4A6Gi8NGGwS1g==
-----END CERTIFICATE-----
Generated at Sun May 11 00:36:53 2025 by rpki-client