Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
File: hrIjA95LCocPz-e2VWwCT3XHajQ.mft (raw, json)
Hash identifier: Yw7/6b8Ai7z4SnwlCXORBY2y4AHdw+2Uk7QMUrUgydQ=
Subject key identifier: 05:78:F6:53:B0:3F:26:23:46:1B:2C:62:7D:C6:CE:F4:FD:20:CF:AB
Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Certificate serial: 0196CA29A6CE3D545BFB205565718A0B803A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
Manifest number: 103B
Signing time: Tue 13 May 2025 15:00:49 +0000
Manifest this update: Tue 13 May 2025 15:00:49 +0000
Manifest next update: Wed 14 May 2025 15:00:49 +0000
Files and hashes: 1: ZjB1G19DDx_6Q5oScLG5jMaC8XA.roa (hash: 7/c0oLP47xBtzbpIYR3dJCRfL58YizRnGJk+IU5Vsgc=)
2: bckQXnbwfKXBuJ2fgXGJ6V-6Qfk.roa (hash: v7e6EIu7w13jemXrMUjQBx6+ZKi093MMCQO7o8uB3rY=)
3: hrIjA95LCocPz-e2VWwCT3XHajQ.crl (hash: 0G0EQDL//MKLw+5a+PEYj+/faRxULi44XuyqPQak5Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:a6:ce:3d:54:5b:fb:20:55:65:71:8a:0b:80:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Validity
Not Before: May 13 15:00:49 2025 GMT
Not After : May 14 15:00:49 2025 GMT
Subject: CN=0578f653b03f2623461b2c627dc6cef4fd20cfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:40:20:79:80:26:a5:b4:15:9e:cd:6c:6d:
2e:0d:2e:6c:cd:51:91:1c:1b:40:eb:f9:b5:1f:4f:
30:be:f3:ff:71:0d:48:04:91:fe:c1:90:b7:63:5b:
2b:76:a8:23:93:bf:9e:90:d2:2f:49:18:33:80:31:
60:59:36:ea:6a:ae:b3:e0:da:b0:cc:9c:6c:3b:f9:
2e:c7:ea:1e:d1:f6:0e:83:16:80:9d:c2:4c:9f:d2:
1a:52:fb:87:26:29:fc:0b:ea:dd:81:8a:fa:d2:70:
ab:de:c5:f3:84:a4:a0:15:32:f6:05:c1:1c:b6:6c:
32:80:03:56:11:8f:41:0e:63:1e:fb:17:ce:44:65:
dd:01:51:e3:cb:7b:65:a3:21:17:8a:15:89:33:c5:
8d:b2:8e:d3:13:d5:7e:c5:05:56:78:b1:d8:0a:bd:
c0:22:ae:dc:53:64:1b:7c:25:8b:f8:2a:0b:6c:65:
39:af:e1:e3:c9:6d:86:32:70:55:4e:91:5a:88:f0:
6f:a2:31:e9:52:06:85:0a:67:32:fe:f2:59:df:38:
96:3e:6f:74:47:2b:8b:9b:e6:39:d1:5a:71:b5:3a:
6d:ff:64:ee:de:11:23:1b:ab:42:2d:66:6b:94:2a:
ed:64:9a:33:2e:ba:82:d7:e3:c2:89:e8:a1:9f:6a:
88:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:78:F6:53:B0:3F:26:23:46:1B:2C:62:7D:C6:CE:F4:FD:20:CF:AB
X509v3 Authority Key Identifier:
keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b7:58:10:28:16:1d:ce:af:4a:ad:e0:83:25:aa:7f:a7:65:
d0:a5:c6:bb:ab:17:a2:51:5e:95:26:64:75:5f:25:cc:45:6c:
cf:9d:65:b7:61:be:34:a2:ff:ad:31:8b:e0:65:17:36:b2:5a:
18:14:69:33:44:83:89:d6:eb:51:d6:8d:93:53:8d:92:e5:34:
44:62:05:8e:83:41:87:5a:63:ca:8e:73:12:9a:b2:83:f2:19:
b7:32:db:58:fd:ee:9c:ac:b0:51:46:d1:1b:73:5f:bc:2d:94:
bb:6f:a9:31:ff:ee:ad:96:1e:39:dc:cf:68:86:77:5f:ed:1d:
90:7d:01:51:70:79:f6:b5:37:c1:4c:ca:08:86:69:d5:40:9d:
07:22:18:6d:47:bc:7b:6b:e9:53:c7:f8:ac:f0:bd:bf:2b:e0:
50:97:28:22:ae:e6:1d:32:43:a5:a9:14:11:64:d5:05:a6:84:
29:7b:de:d4:d3:d3:d4:2e:94:50:f0:a9:43:95:5b:e0:d7:21:
4c:4c:ee:95:3b:87:f0:e8:2a:b6:8f:bf:f2:a6:4b:e6:4d:31:
a1:25:a5:72:77:2a:39:58:c6:86:61:80:2d:78:d5:f9:4b:62:
7e:22:fa:d9:ab:a8:67:22:63:73:e3:c6:7c:1c:3a:a3:c8:19:
51:67:5b:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbKKabOPVRb+yBVZXGKC4A6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YjIyMzAzZGU0YjBhODcwZmNmZTdiNjU1NmMwMjRmNzVj
NzZhMzQwHhcNMjUwNTEzMTUwMDQ5WhcNMjUwNTE0MTUwMDQ5WjAzMTEwLwYDVQQD
EygwNTc4ZjY1M2IwM2YyNjIzNDYxYjJjNjI3ZGM2Y2VmNGZkMjBjZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1lAIHmAJqW0FZ7NbG0uDS5szVGR
HBtA6/m1H08wvvP/cQ1IBJH+wZC3Y1srdqgjk7+ekNIvSRgzgDFgWTbqaq6z4Nqw
zJxsO/kux+oe0fYOgxaAncJMn9IaUvuHJin8C+rdgYr60nCr3sXzhKSgFTL2BcEc
tmwygANWEY9BDmMe+xfORGXdAVHjy3tloyEXihWJM8WNso7TE9V+xQVWeLHYCr3A
Iq7cU2QbfCWL+CoLbGU5r+HjyW2GMnBVTpFaiPBvojHpUgaFCmcy/vJZ3ziWPm90
RyuLm+Y50VpxtTpt/2Tu3hEjG6tCLWZrlCrtZJozLrqC1+PCieihn2qIswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAV49lOwPyYjRhssYn3GzvT9IM+rMB8GA1UdIwQY
MBaAFIayIwPeSwqHD8/ntlVsAk91x2o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3Mjkt
NzJhYjU5ODdmNjA5LzEvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3MjktNzJhYjU5ODdmNjA5
LzEvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7dYECgW
Hc6vSq3ggyWqf6dl0KXGu6sXolFelSZkdV8lzEVsz51lt2G+NKL/rTGL4GUXNrJa
GBRpM0SDidbrUdaNk1ONkuU0RGIFjoNBh1pjyo5zEpqyg/IZtzLbWP3unKywUUbR
G3NfvC2Uu2+pMf/urZYeOdzPaIZ3X+0dkH0BUXB59rU3wUzKCIZp1UCdByIYbUe8
e2vpU8f4rPC9vyvgUJcoIq7mHTJDpakUEWTVBaaEKXve1NPT1C6UUPCpQ5Vb4Nch
TEzulTuH8Ogqto+/8qZL5k0xoSWlcncqOVjGhmGALXjV+UtifiL62auoZyJjc+PG
fBw6o8gZUWdbZQ==
-----END CERTIFICATE-----
Generated at Wed May 14 01:08:52 2025 by rpki-client