Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier: /LHFy6CCyxvQ+w+/TsVtSs+whaGclPoXAx16qbdD9Mc=
Subject key identifier: A1:8C:67:3F:4C:D4:B1:5E:CE:55:F8:0C:E6:CF:2D:E9:FE:26:8C:D3
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 0196B17C715B9992DC1D14AD80924CE8D0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number: 126F
Signing time: Thu 08 May 2025 20:00:44 +0000
Manifest this update: Thu 08 May 2025 20:00:44 +0000
Manifest next update: Fri 09 May 2025 20:00:44 +0000
Files and hashes: 1: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: lqv3iojasCe+PdDJu4YUY1coa9tDd27gzOEsAuOVwno=)
2: _TB_DSwnuCOKtWool6QsRH-BI2c.roa (hash: IfCRqnm3tSTnJ1oqOSYusfB1IFZQtEWpYBfMbK20Izo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:7c:71:5b:99:92:dc:1d:14:ad:80:92:4c:e8:d0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: May 8 20:00:44 2025 GMT
Not After : May 9 20:00:44 2025 GMT
Subject: CN=a18c673f4cd4b15ece55f80ce6cf2de9fe268cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6a:8e:17:7c:56:47:87:98:7a:3b:a1:ca:f3:
9b:04:11:a7:a5:9a:0d:e7:a8:5f:32:ed:31:cb:d4:
88:cf:4a:29:67:26:1c:38:fa:69:11:35:a1:04:f7:
cc:ec:d4:b8:11:96:b4:ef:7e:08:e0:b3:d1:3c:28:
77:27:a9:86:92:2b:b9:51:74:ed:19:8c:c8:b9:6e:
1f:3a:aa:5c:45:6a:90:f9:3d:86:d3:5b:40:9c:3e:
ad:39:5d:38:18:61:1f:d0:e3:d0:d0:e9:35:5f:fd:
58:95:11:9d:78:e2:c0:91:1d:65:81:a5:1d:f1:7c:
e3:b4:1b:ec:56:6b:81:bb:76:b6:4b:26:b2:32:dd:
62:2c:88:10:bd:42:06:13:70:55:df:5b:f6:33:1b:
67:e6:a9:1a:9e:d6:56:4a:33:f5:ca:b2:49:0b:fc:
87:8b:24:f2:9d:fe:7f:cc:ab:db:34:b0:a9:96:c9:
2c:76:07:59:aa:6f:d3:01:72:d5:4c:10:1b:aa:40:
73:8d:68:60:24:4b:c3:2c:cb:ee:69:f2:a2:30:d8:
91:f3:53:1c:73:17:ed:78:f4:27:e3:5f:4a:d1:5b:
34:33:f5:15:97:d3:3c:ed:2f:c1:a1:f8:36:85:50:
e3:64:a6:77:be:90:ac:22:ff:8e:e2:fc:15:0d:70:
6b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8C:67:3F:4C:D4:B1:5E:CE:55:F8:0C:E6:CF:2D:E9:FE:26:8C:D3
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:08:7d:8d:29:a7:0d:23:e8:08:3e:60:b4:96:3b:98:70:dd:
19:0a:0c:c8:ff:2e:2d:78:72:d1:80:df:4e:7c:0b:5b:10:8c:
be:d3:f0:df:f9:e8:d2:97:20:a5:49:97:c7:fb:5c:0f:a9:9c:
42:d6:7d:26:97:72:29:ee:53:09:3b:59:e6:be:c2:4d:f0:0c:
69:cd:bf:b0:d1:09:d6:b7:e3:91:cb:15:d1:6a:77:8a:a0:23:
e3:75:36:8d:2d:0e:2c:17:9a:5d:69:ca:81:9c:9b:f5:e8:20:
06:dc:85:fd:86:c9:7b:55:cd:36:f8:72:30:69:6a:1a:57:15:
38:bc:12:5d:a5:53:97:e1:0d:16:93:aa:01:c4:bc:7f:57:8e:
db:af:0a:7c:50:b5:f4:3c:ec:42:fe:2a:2c:cc:48:ac:2a:63:
e7:ac:eb:d5:d8:f5:2e:08:0c:70:f8:6c:2c:f8:ab:f8:a9:67:
19:92:d2:2a:fc:5f:3b:68:13:7d:8a:6b:6c:56:88:ac:78:e1:
83:50:7a:13:69:ff:11:33:cb:b1:84:6a:f8:b3:bc:41:55:86:
86:01:69:48:71:f9:b2:83:1f:bf:4f:01:43:0e:cc:20:8d:df:
0d:cb:02:4a:99:f4:3a:24:60:49:00:d8:31:66:e5:f3:3d:77:
77:62:9d:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaxfHFbmZLcHRStgJJM6NDWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjliY2JkNWNmY2MxOTVlNzZiNzBhMWJmMGRkOTkxZWM3
ZTMzZDQwHhcNMjUwNTA4MjAwMDQ0WhcNMjUwNTA5MjAwMDQ0WjAzMTEwLwYDVQQD
EyhhMThjNjczZjRjZDRiMTVlY2U1NWY4MGNlNmNmMmRlOWZlMjY4Y2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2qOF3xWR4eYejuhyvObBBGnpZoN
56hfMu0xy9SIz0opZyYcOPppETWhBPfM7NS4EZa0734I4LPRPCh3J6mGkiu5UXTt
GYzIuW4fOqpcRWqQ+T2G01tAnD6tOV04GGEf0OPQ0Ok1X/1YlRGdeOLAkR1lgaUd
8XzjtBvsVmuBu3a2SyayMt1iLIgQvUIGE3BV31v2Mxtn5qkantZWSjP1yrJJC/yH
iyTynf5/zKvbNLCplsksdgdZqm/TAXLVTBAbqkBzjWhgJEvDLMvuafKiMNiR81Mc
cxftePQn419K0Vs0M/UVl9M87S/Bofg2hVDjZKZ3vpCsIv+O4vwVDXBr6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGMZz9M1LFezlX4DObPLen+JozTMB8GA1UdIwQY
MBaAFB8pvL1c/MGV52twob8N2ZHsfjPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEt
ZDRkMzVkOTk5ODFkLzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEtZDRkMzVkOTk5ODFk
LzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwh9jSmn
DSPoCD5gtJY7mHDdGQoMyP8uLXhy0YDfTnwLWxCMvtPw3/no0pcgpUmXx/tcD6mc
QtZ9JpdyKe5TCTtZ5r7CTfAMac2/sNEJ1rfjkcsV0Wp3iqAj43U2jS0OLBeaXWnK
gZyb9eggBtyF/YbJe1XNNvhyMGlqGlcVOLwSXaVTl+ENFpOqAcS8f1eO268KfFC1
9DzsQv4qLMxIrCpj56zr1dj1LggMcPhsLPir+KlnGZLSKvxfO2gTfYprbFaIrHjh
g1B6E2n/ETPLsYRq+LO8QVWGhgFpSHH5soMfv08BQw7MII3fDcsCSpn0OiRgSQDY
MWbl8z13d2KdQw==
-----END CERTIFICATE-----
Generated at Fri May 9 00:01:42 2025 by rpki-client