Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: huT5M5tFzBwWSih0mu2J99qIOxboiQWBw6MRCYE1G2c=
Subject key identifier: 97:B3:5D:78:05:89:59:2B:6E:3D:FA:42:33:2D:95:71:C5:0D:C7:7C
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 0196CBE149898152D83FF4D92DB06DBFED9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 23:01:01 +0000
Manifest this update: Tue 13 May 2025 23:01:01 +0000
Manifest next update: Wed 14 May 2025 23:01:01 +0000
Files and hashes: 1: 01CHf_9w14ZNhv9S3Xhmvi90F8Q.roa (hash: ArkBvOvd5Ct0Kx1EUTZrG268WQ9wBIinLxbgoX9Nw3c=)
2: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: shbbHj5fjlOaBuqke9eoHZKnR/t4KPpHfLFWJisKGuk=)
3: tDdZfF9_zffjxvEpEwDvjqS4I9k.roa (hash: U2TiVT1eXbO5ylElonLSsn5yN8P2ofyhgwF0HWpyq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e1:49:89:81:52:d8:3f:f4:d9:2d:b0:6d:bf:ed:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: May 13 23:01:01 2025 GMT
Not After : May 14 23:01:01 2025 GMT
Subject: CN=97b35d780589592b6e3dfa42332d9571c50dc77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:93:07:d3:5f:f1:ac:10:f8:1f:a9:9d:ee:95:
b0:be:0e:a4:49:2c:f2:bc:12:e9:f3:4d:32:08:57:
1a:81:75:5a:ec:62:09:48:0c:93:90:79:7f:29:1f:
5b:1d:62:30:63:74:35:93:51:70:52:91:99:74:5e:
fc:de:f3:58:17:69:b9:f7:7e:c2:ae:5c:f4:93:06:
2a:2b:c6:f7:d2:f4:76:c8:b0:6e:e8:cb:69:c9:c4:
2d:eb:07:56:12:3e:97:68:f1:06:a6:a4:bf:3c:88:
c0:b5:a8:54:db:ae:ce:5c:bc:8d:b6:78:f1:8c:eb:
fb:67:d8:e6:b0:8c:75:98:ab:b6:43:c5:e1:b0:ac:
dc:3e:da:0b:6f:c1:68:59:c6:4c:a2:28:51:91:d4:
6d:a5:b4:fd:45:ea:0d:bb:3b:2e:79:78:9c:b1:74:
be:13:11:84:00:06:47:c3:68:bf:a6:19:a2:a6:3e:
62:d7:06:6c:27:6d:a6:bb:6a:a4:87:42:0e:74:9a:
28:05:2a:a8:8f:10:0a:51:59:64:1b:ba:92:e1:1b:
ae:c2:59:77:ef:c3:10:f7:78:19:40:bd:4e:e8:98:
21:1c:c2:44:d2:d5:c5:96:cf:ba:b4:19:d4:e1:20:
c6:03:e9:98:b7:91:b1:74:aa:94:10:41:6b:96:41:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B3:5D:78:05:89:59:2B:6E:3D:FA:42:33:2D:95:71:C5:0D:C7:7C
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9a:76:76:9b:8c:e9:d2:25:a1:4f:be:13:c6:e5:7b:f1:c4:
1d:65:2e:da:f8:22:25:39:21:87:f5:56:05:1e:1e:7c:30:58:
0e:98:f9:96:e2:6f:2e:df:a5:01:53:4c:f1:e3:9d:e9:2e:13:
cf:43:cb:86:a3:ef:37:df:82:1f:a7:13:4d:b2:aa:fb:c4:9e:
00:35:49:0c:53:2d:79:33:de:2a:35:fb:35:d6:f3:be:28:45:
f9:bd:0f:ce:27:78:12:01:63:a5:d8:a3:3e:44:1d:4e:63:9e:
83:6e:b9:d3:6e:32:dd:78:39:85:08:63:91:d2:69:ed:0b:6c:
2c:86:67:43:ec:d4:67:f3:0e:48:2e:8e:b8:2b:da:38:0b:72:
c2:79:de:c4:f0:3c:20:e0:22:42:36:70:f5:91:67:5d:95:37:
95:6a:47:a8:ef:10:49:6b:7a:0e:d1:ea:a1:62:3b:30:7f:07:
9e:1f:8d:f6:97:a5:9b:69:aa:ac:d3:fb:8a:ee:e7:ea:b5:46:
32:49:e5:74:a9:bd:2c:55:4c:1d:71:47:0a:dd:98:46:75:ee:
9d:fd:5e:9c:51:c7:f2:33:8b:f2:04:28:07:1c:05:b3:6e:91:
07:bd:02:0f:c5:72:5a:c1:82:25:fd:1a:26:0f:a3:10:f7:6e:
a4:60:ca:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbL4UmJgVLYP/TZLbBtv+2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZDYwZDJkYzZhZDgyYTI1NzBlMDAwMGZkZDk5Mzk0OGJj
NDU0ZDgwHhcNMjUwNTEzMjMwMTAxWhcNMjUwNTE0MjMwMTAxWjAzMTEwLwYDVQQD
Eyg5N2IzNWQ3ODA1ODk1OTJiNmUzZGZhNDIzMzJkOTU3MWM1MGRjNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZMH01/xrBD4H6md7pWwvg6kSSzy
vBLp800yCFcagXVa7GIJSAyTkHl/KR9bHWIwY3Q1k1FwUpGZdF783vNYF2m5937C
rlz0kwYqK8b30vR2yLBu6MtpycQt6wdWEj6XaPEGpqS/PIjAtahU267OXLyNtnjx
jOv7Z9jmsIx1mKu2Q8XhsKzcPtoLb8FoWcZMoihRkdRtpbT9ReoNuzsueXicsXS+
ExGEAAZHw2i/phmipj5i1wZsJ22mu2qkh0IOdJooBSqojxAKUVlkG7qS4Ruuwll3
78MQ93gZQL1O6JghHMJE0tXFls+6tBnU4SDGA+mYt5GxdKqUEEFrlkG+2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJezXXgFiVkrbj36QjMtlXHFDcd8MB8GA1UdIwQY
MBaAFITWDS3GrYKiVw4AAP3Zk5SLxFTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE5ZTkxjYXRncUpYRGdBQV9kbVRsSXZFVk5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81MGQ5YzYtZjI0YS00NGFmLThhZTAt
NTRmNmJjODVhYWMwLzEvaE5ZTkxjYXRncUpYRGdBQV9kbVRsSXZFVk5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni81MGQ5YzYtZjI0YS00NGFmLThhZTAtNTRmNmJjODVhYWMw
LzEvaE5ZTkxjYXRncUpYRGdBQV9kbVRsSXZFVk5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZp2dpuM
6dIloU++E8ble/HEHWUu2vgiJTkhh/VWBR4efDBYDpj5luJvLt+lAVNM8eOd6S4T
z0PLhqPvN9+CH6cTTbKq+8SeADVJDFMteTPeKjX7NdbzvihF+b0Pzid4EgFjpdij
PkQdTmOeg265024y3Xg5hQhjkdJp7QtsLIZnQ+zUZ/MOSC6OuCvaOAtywnnexPA8
IOAiQjZw9ZFnXZU3lWpHqO8QSWt6DtHqoWI7MH8Hnh+N9pelm2mqrNP7iu7n6rVG
MknldKm9LFVMHXFHCt2YRnXunf1enFHH8jOL8gQoBxwFs26RB70CD8VyWsGCJf0a
Jg+jEPdupGDKWA==
-----END CERTIFICATE-----
Generated at Wed May 14 01:01:19 2025 by rpki-client