Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
File: hVxdD-JZNayRq1qtpkUmAOWNJaU.mft (raw, json)
Hash identifier: uJc64KYJL12s8dZmNR3egwhTXo/2fLKtdJ2o00v7aG0=
Subject key identifier: 1F:33:32:27:73:2F:47:C9:B0:8D:5A:84:9A:C4:46:60:AC:2F:BC:70
Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Certificate serial: 01969DBE880FE88D76402CCBF48C2ACDFB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 00:00:31 +0000
Manifest this update: Mon 05 May 2025 00:00:31 +0000
Manifest next update: Tue 06 May 2025 00:00:31 +0000
Files and hashes: 1: G0GNUJP7OR8YupD74ZDHt57bEcw.roa (hash: H4bYVhJJbIf3r2c4VUmIGnEkOT0psTbbUXpiYyljGec=)
2: Y2TFuYLjHOh19Nsn9IXR0BXi0GA.roa (hash: EGQLXveu0rNxAJdauUxs2BGnjI8o9tZmq21wSdM7BEk=)
3: hVxdD-JZNayRq1qtpkUmAOWNJaU.crl (hash: s09M7+B339EgOAhbRC47Ozv2wyzaLxIKGroOKTKmunc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:88:0f:e8:8d:76:40:2c:cb:f4:8c:2a:cd:fb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Validity
Not Before: May 5 00:00:31 2025 GMT
Not After : May 6 00:00:31 2025 GMT
Subject: CN=1f333227732f47c9b08d5a849ac44660ac2fbc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:42:6b:43:21:9c:7e:2c:57:90:eb:39:04:d2:
98:96:f3:29:70:03:7b:cb:c6:2b:40:55:81:f1:02:
30:ad:74:53:b1:e5:b2:96:9f:47:50:b7:7f:d4:29:
ee:f3:86:8d:1b:e3:b6:cd:ac:f3:6e:bd:bf:41:b6:
1c:b4:92:ea:e1:6c:a1:f8:aa:46:b3:13:42:96:45:
bb:86:91:37:29:db:4f:33:af:b1:d3:89:72:26:eb:
1b:5f:f2:f4:56:80:1f:ce:6b:e8:30:d4:a7:41:75:
42:dd:80:54:ca:fb:78:d7:79:9d:1c:e9:a1:a0:4e:
f2:67:b5:9e:44:ae:9e:33:8c:ef:59:4a:0c:d5:5c:
18:2f:eb:52:f7:84:ff:01:78:ce:8f:af:72:43:3b:
84:1a:84:3f:a3:5d:e9:0a:8d:cf:46:8c:15:a4:70:
62:cb:bc:3a:6f:bc:d6:04:26:a1:fd:3b:75:00:4d:
22:5b:3a:af:91:9f:5e:23:0d:53:69:d3:54:3d:52:
0e:f7:5e:5b:d6:3d:ac:5d:e1:28:9a:44:b9:d8:74:
a8:d0:83:be:8c:3d:10:d1:cd:65:4f:5c:5c:6a:44:
c4:b8:03:db:c5:84:48:41:4a:09:59:e4:04:34:6a:
e2:3f:e1:3a:c2:0e:7f:51:82:8b:38:c4:95:a7:41:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:33:32:27:73:2F:47:C9:B0:8D:5A:84:9A:C4:46:60:AC:2F:BC:70
X509v3 Authority Key Identifier:
keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:17:b0:6b:62:8e:3b:78:fd:a5:37:9a:26:68:9c:4c:ee:59:
ea:ad:41:2c:e1:13:cd:81:9c:3e:36:13:d1:57:ca:19:c4:2c:
e2:5e:10:87:06:54:38:47:cf:9a:05:4b:bd:f2:7a:0c:5c:ed:
1c:0b:68:21:5f:b4:a2:fe:cb:4a:79:67:bd:91:d7:7f:90:f9:
e6:27:bc:0e:83:40:cf:ba:d4:7c:9a:dd:63:2e:a0:b0:2e:73:
b5:5d:1d:23:fc:16:53:25:c0:60:77:3e:08:22:f2:33:37:93:
49:f5:5c:ef:e8:94:4c:1b:71:94:a4:20:17:95:5b:68:c9:7a:
9d:d1:af:71:93:e9:38:ae:f9:74:14:bf:8b:3e:f1:2f:65:2f:
59:2f:ac:60:e5:d5:87:12:c9:99:cf:8d:14:f1:27:3d:e9:6b:
9a:c5:80:68:2a:1e:60:0e:90:ce:4b:68:15:36:4c:dd:ed:4d:
f1:4f:d9:f4:69:d1:f6:76:50:7d:ce:07:5e:72:57:2a:4c:be:
f7:f0:15:49:0d:a0:62:bc:d7:08:cb:60:93:cc:13:03:5e:8a:
3a:70:74:a2:f7:1e:72:c9:89:7f:dd:2c:aa:a2:45:55:9b:87:
dd:9c:06:cf:db:ea:85:51:30:c7:ef:c0:98:42:24:15:45:fc:
94:c8:47:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadvogP6I12QCzL9IwqzfstMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NWM1ZDBmZTI1OTM1YWM5MWFiNWFhZGE2NDUyNjAwZTU4
ZDI1YTUwHhcNMjUwNTA1MDAwMDMxWhcNMjUwNTA2MDAwMDMxWjAzMTEwLwYDVQQD
EygxZjMzMzIyNzczMmY0N2M5YjA4ZDVhODQ5YWM0NDY2MGFjMmZiYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0JrQyGcfixXkOs5BNKYlvMpcAN7
y8YrQFWB8QIwrXRTseWylp9HULd/1Cnu84aNG+O2zazzbr2/QbYctJLq4Wyh+KpG
sxNClkW7hpE3KdtPM6+x04lyJusbX/L0VoAfzmvoMNSnQXVC3YBUyvt413mdHOmh
oE7yZ7WeRK6eM4zvWUoM1VwYL+tS94T/AXjOj69yQzuEGoQ/o13pCo3PRowVpHBi
y7w6b7zWBCah/Tt1AE0iWzqvkZ9eIw1TadNUPVIO915b1j2sXeEomkS52HSo0IO+
jD0Q0c1lT1xcakTEuAPbxYRIQUoJWeQENGriP+E6wg5/UYKLOMSVp0FFGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8zMidzL0fJsI1ahJrERmCsL7xwMB8GA1UdIwQY
MBaAFIVcXQ/iWTWskataraZFJgDljSWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMmIwNTEtM2EyMy00ODM1LWIzMGQt
MmFmNDc5MWQ5NmViLzEvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMmIwNTEtM2EyMy00ODM1LWIzMGQtMmFmNDc5MWQ5NmVi
LzEvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhewa2KO
O3j9pTeaJmicTO5Z6q1BLOETzYGcPjYT0VfKGcQs4l4QhwZUOEfPmgVLvfJ6DFzt
HAtoIV+0ov7LSnlnvZHXf5D55ie8DoNAz7rUfJrdYy6gsC5ztV0dI/wWUyXAYHc+
CCLyMzeTSfVc7+iUTBtxlKQgF5VbaMl6ndGvcZPpOK75dBS/iz7xL2UvWS+sYOXV
hxLJmc+NFPEnPelrmsWAaCoeYA6QzktoFTZM3e1N8U/Z9GnR9nZQfc4HXnJXKky+
9/AVSQ2gYrzXCMtgk8wTA16KOnB0ovcecsmJf90sqqJFVZuH3ZwGz9vqhVEwx+/A
mEIkFUX8lMhHaw==
-----END CERTIFICATE-----
Generated at Mon May 5 09:46:51 2025 by rpki-client