Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
File: HcdSIyHCPRae0zL_SYeczCRRcts.mft (raw, json)
Hash identifier: LkyL0fxg0Ak8/DjhrT/XXEJj68J8n3vFvwNG7ngykhE=
Subject key identifier: C1:62:38:65:93:8C:E4:5A:17:CE:40:B5:C9:1C:D4:8F:17:70:67:09
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial: 0196A9C2CC87237C3175EE5ACF8D82298283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
Manifest number: 152B
Signing time: Wed 07 May 2025 08:00:37 +0000
Manifest this update: Wed 07 May 2025 08:00:37 +0000
Manifest next update: Thu 08 May 2025 08:00:37 +0000
Files and hashes: 1: HcdSIyHCPRae0zL_SYeczCRRcts.crl (hash: nqgbvy0Sflw5puhvwT+mJx7c/3ReopGvwvCVyW1pH28=)
2: eNFG-PCCE4y-AFcmWiHx3RyG7nQ.roa (hash: UjvYsBltNXDFlhfaOzku1vtdcH3iWC+A6hFXawcbjCc=)
3: hRJ0dFuJTo0f67z5A3zupA3p9Eg.roa (hash: DEPtmvNaAFnv4bw8oxA9ykREwTuLcaBuOAc2e9nbKqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:c2:cc:87:23:7c:31:75:ee:5a:cf:8d:82:29:82:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
Validity
Not Before: May 7 08:00:37 2025 GMT
Not After : May 8 08:00:37 2025 GMT
Subject: CN=c1623865938ce45a17ce40b5c91cd48f17706709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e9:90:3f:03:55:b9:a7:3a:fe:1d:de:6f:85:
96:fb:cb:ce:80:21:73:01:7a:a3:32:c6:d3:9c:e7:
c1:d2:ec:b1:8d:68:42:98:4a:26:3f:43:05:9f:22:
0d:08:d0:86:79:64:48:a3:cf:ae:e0:53:1f:e5:6e:
a7:6a:f0:4e:b9:51:32:3f:4a:92:35:24:e0:69:9a:
6a:8f:a8:40:03:d9:de:07:b7:1a:76:96:ef:d6:82:
ce:5f:2e:0b:04:4e:67:40:13:67:a8:26:2e:4e:fb:
15:e6:70:14:7c:f9:e5:1b:ed:5a:b5:9b:8f:73:98:
aa:d0:41:8d:2b:29:2e:35:c2:87:7d:cd:9d:9e:52:
f6:12:da:e3:78:f5:10:b7:7b:4b:b3:86:a6:9a:ea:
32:e4:62:d1:4d:d1:e0:a0:1e:02:fd:14:44:6d:c7:
4f:62:05:08:d5:42:4d:e9:6c:17:f3:0d:ac:d0:0f:
b1:f1:cb:51:13:70:74:30:ef:6d:76:7d:87:49:63:
ba:9b:d5:03:bf:73:03:8e:1d:f2:c4:4f:65:d4:3f:
ea:8e:c6:cd:9c:f4:e0:67:81:75:02:82:3b:14:e4:
af:2a:41:79:1b:57:25:d1:9c:4a:de:87:28:9d:4f:
3f:b6:a2:53:60:b8:03:4c:f9:91:3c:37:de:97:b4:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:62:38:65:93:8C:E4:5A:17:CE:40:B5:C9:1C:D4:8F:17:70:67:09
X509v3 Authority Key Identifier:
keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7f:da:30:e3:64:e5:86:98:1d:44:d3:34:5b:7a:f7:30:e3:
c7:fa:71:1c:bc:58:43:01:39:0f:a9:d2:78:d0:f7:60:c7:9c:
00:37:4d:c0:6c:5d:19:e0:02:66:5f:83:02:8b:ca:96:ec:71:
88:2d:11:a3:8b:6f:99:27:4d:af:8b:36:61:19:74:f4:af:3c:
8b:8d:c7:1d:3c:71:2a:2d:48:78:8f:f2:f6:f5:37:a6:e3:f9:
3c:73:f6:ae:7f:49:74:42:78:1c:c3:34:97:55:b9:50:8c:87:
1c:f3:78:57:d4:93:8e:0a:fc:e0:eb:79:fb:d6:2d:ab:09:66:
d2:a7:5c:3b:aa:69:4b:80:e3:dd:78:15:46:f8:a1:92:dd:bb:
61:a9:1a:b3:27:0f:94:f4:b2:f3:0a:80:64:b9:ef:05:a5:0e:
e4:e6:a3:c7:ac:7f:fd:0a:41:17:e6:26:14:de:aa:b4:a0:1e:
17:20:46:2c:f2:f5:ab:72:89:65:6c:cd:cc:a1:09:a6:4a:11:
a7:91:5a:0e:93:50:17:c7:ba:61:01:23:f6:a5:17:25:c8:23:
d4:b4:cf:a0:4b:6e:36:31:15:9d:d2:de:02:2f:94:e7:99:6a:
5e:b2:82:75:c9:c1:e6:c8:91:5f:7d:39:8b:52:ce:a0:e0:fc:
93:a2:eb:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapwsyHI3wxde5az42CKYKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYzc1MjIzMjFjMjNkMTY5ZWQzMzJmZjQ5ODc5Y2NjMjQ1
MTcyZGIwHhcNMjUwNTA3MDgwMDM3WhcNMjUwNTA4MDgwMDM3WjAzMTEwLwYDVQQD
EyhjMTYyMzg2NTkzOGNlNDVhMTdjZTQwYjVjOTFjZDQ4ZjE3NzA2NzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnumQPwNVuac6/h3eb4WW+8vOgCFz
AXqjMsbTnOfB0uyxjWhCmEomP0MFnyINCNCGeWRIo8+u4FMf5W6navBOuVEyP0qS
NSTgaZpqj6hAA9neB7cadpbv1oLOXy4LBE5nQBNnqCYuTvsV5nAUfPnlG+1atZuP
c5iq0EGNKykuNcKHfc2dnlL2EtrjePUQt3tLs4ammuoy5GLRTdHgoB4C/RREbcdP
YgUI1UJN6WwX8w2s0A+x8ctRE3B0MO9tdn2HSWO6m9UDv3MDjh3yxE9l1D/qjsbN
nPTgZ4F1AoI7FOSvKkF5G1cl0ZxK3oconU8/tqJTYLgDTPmRPDfel7RazwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFiOGWTjORaF85Atckc1I8XcGcJMB8GA1UdIwQY
MBaAFB3HUiMhwj0WntMy/0mHnMwkUXLbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGNkU0l5SENQUmFlMHpMX1NZZWN6Q1JSY3RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi81MjBkMDQtZTkxMi00ZjQ2LWE5ZTYt
NzA1NTM5M2Y3NWZlLzEvSGNkU0l5SENQUmFlMHpMX1NZZWN6Q1JSY3RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi81MjBkMDQtZTkxMi00ZjQ2LWE5ZTYtNzA1NTM5M2Y3NWZl
LzEvSGNkU0l5SENQUmFlMHpMX1NZZWN6Q1JSY3RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnX/aMONk
5YaYHUTTNFt69zDjx/pxHLxYQwE5D6nSeND3YMecADdNwGxdGeACZl+DAovKluxx
iC0Ro4tvmSdNr4s2YRl09K88i43HHTxxKi1IeI/y9vU3puP5PHP2rn9JdEJ4HMM0
l1W5UIyHHPN4V9STjgr84Ot5+9Ytqwlm0qdcO6ppS4Dj3XgVRvihkt27YakasycP
lPSy8wqAZLnvBaUO5Oajx6x//QpBF+YmFN6qtKAeFyBGLPL1q3KJZWzNzKEJpkoR
p5FaDpNQF8e6YQEj9qUXJcgj1LTPoEtuNjEVndLeAi+U55lqXrKCdcnB5siRX305
i1LOoOD8k6Lr3g==
-----END CERTIFICATE-----
Generated at Wed May 7 10:50:18 2025 by rpki-client