
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
File: hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft (raw, json)
Hash identifier: h8i3b4kOAWqEXJBGyThgZjKD7KwD4/ENKde9uB7tbKs=
Subject key identifier: B4:F4:FA:AD:EE:79:05:93:FE:C4:CB:36:52:9D:6A:B3:1A:EE:CF:F5
Authority key identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
Certificate issuer: /CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Certificate serial: 0196C08180CBBC68935CCB1D2FFC437F8EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
Manifest number: 05FD
Signing time: Sun 11 May 2025 18:00:34 +0000
Manifest this update: Sun 11 May 2025 18:00:34 +0000
Manifest next update: Mon 12 May 2025 18:00:34 +0000
Files and hashes: 1: EKLQu7iYylRaZbkh51ntRdvQ1sc.roa (hash: RK+Kru3PnFxl9Ll91ljugGNNYfjxqJD6II7naH011aw=)
2: hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl (hash: t6JCzT5o3xu43j3/yD3Pi1jU1YOS0/nrOS000w67/EA=)
3: lO9lnjMKShKR1lmHSBZdeXnPEkY.roa (hash: c7CjjG3dW9IskX6aNGKT3OeAaVeTmT4gSZizwrVUurs=)
4: maJ8CmpVji7iExXaEzUUxHgibH8.roa (hash: JObe+le+P4uoJGOeOZ+4H+wfXfvsZKVWkXVTp6TQq5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:80:cb:bc:68:93:5c:cb:1d:2f:fc:43:7f:8e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Validity
Not Before: May 11 18:00:34 2025 GMT
Not After : May 12 18:00:34 2025 GMT
Subject: CN=b4f4faadee790593fec4cb36529d6ab31aeecff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:f2:f9:3b:40:6b:ca:5c:50:9a:9f:46:a1:
23:7b:1d:dd:8e:b2:7e:9e:ef:b6:fb:72:29:1b:86:
e0:d0:5e:c1:cf:f7:e2:8b:4c:de:b5:0f:b9:b9:40:
30:74:e2:1a:7e:4a:46:cc:87:75:3a:3b:ab:9c:a1:
fe:d1:4a:a3:aa:40:9c:1f:86:24:f0:66:51:4b:ae:
51:ea:dc:7a:a7:a7:9e:00:cd:ce:ed:2d:cf:e2:a7:
20:80:47:d8:dc:f7:1c:84:ee:90:79:c1:e0:96:be:
86:c9:62:1b:5e:63:c6:15:1d:67:c3:c4:1e:13:c0:
ea:c5:37:fb:78:a7:88:9f:14:1c:4f:da:0d:31:d0:
86:0a:5c:1e:98:17:5c:bc:da:29:81:2e:74:6d:e1:
f4:38:5e:01:4e:2c:69:e9:54:8d:ec:7a:3f:fb:56:
8c:6f:eb:e2:de:f7:a6:79:d0:33:55:9f:05:2f:87:
ca:81:7c:79:5e:57:5d:96:d1:38:b3:ab:4f:e5:9b:
d1:dd:0f:95:48:3e:31:46:a6:2c:f6:a7:b7:7c:66:
98:1e:16:69:92:e7:23:7f:d0:ba:a2:3d:5a:a5:32:
b1:ee:1b:a9:88:84:63:d2:e5:03:d1:cb:c7:95:8d:
08:08:d4:07:57:ef:38:bf:f5:4d:a2:5f:0d:87:35:
2a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F4:FA:AD:EE:79:05:93:FE:C4:CB:36:52:9D:6A:B3:1A:EE:CF:F5
X509v3 Authority Key Identifier:
keyid:86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:92:2e:96:7f:92:65:0f:b1:ff:ee:7f:93:0d:5e:df:9a:4c:
01:44:71:cd:0a:05:85:a7:78:9e:96:bf:36:17:d5:f8:87:90:
a8:66:a3:f3:6a:82:c7:f4:ef:4e:19:96:18:4b:2a:10:af:87:
4f:93:30:5b:8d:c6:6d:e3:ae:ad:da:c7:ac:fe:26:08:24:09:
7d:e8:1c:aa:db:6e:77:9b:15:a2:0f:d3:b3:07:bd:ca:73:56:
5a:1e:40:11:cc:7a:2d:1a:c9:55:bf:f8:59:a5:d9:48:ff:36:
d7:27:d8:30:dc:fe:1f:71:a6:0c:e0:95:59:61:e8:6a:d0:fc:
15:46:a0:c7:90:7b:7f:2d:33:33:a8:72:05:6f:9e:9b:0b:63:
ff:76:47:c4:f9:f6:6d:07:59:d1:47:08:44:cd:56:ce:50:fe:
55:dc:05:e8:1e:41:65:42:3e:d1:e6:5e:11:61:88:73:76:e0:
54:ee:51:b9:02:57:8f:e7:da:fc:2e:32:75:84:68:24:00:20:
67:0c:d3:83:67:41:42:0c:21:49:df:e7:c8:88:d1:bd:a9:03:
c5:ed:8f:e6:cd:1e:a0:a0:15:f9:82:a5:46:33:6a:3c:67:62:
41:4d:2c:0e:6f:20:c0:5f:8f:60:6b:c9:06:cb:98:65:20:01:
82:25:df:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAgYDLvGiTXMsdL/xDf46mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MzZhNGUxNGE3MWRkZDUxMDE2NGI4NjMxYWQ5OWJiZmM3
NTk1M2EwHhcNMjUwNTExMTgwMDM0WhcNMjUwNTEyMTgwMDM0WjAzMTEwLwYDVQQD
EyhiNGY0ZmFhZGVlNzkwNTkzZmVjNGNiMzY1MjlkNmFiMzFhZWVjZmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3/y+TtAa8pcUJqfRqEjex3djrJ+
nu+2+3IpG4bg0F7Bz/fii0zetQ+5uUAwdOIafkpGzId1OjurnKH+0UqjqkCcH4Yk
8GZRS65R6tx6p6eeAM3O7S3P4qcggEfY3PcchO6QecHglr6GyWIbXmPGFR1nw8Qe
E8DqxTf7eKeInxQcT9oNMdCGClwemBdcvNopgS50beH0OF4BTixp6VSN7Ho/+1aM
b+vi3vemedAzVZ8FL4fKgXx5XlddltE4s6tP5ZvR3Q+VSD4xRqYs9qe3fGaYHhZp
kucjf9C6oj1apTKx7hupiIRj0uUD0cvHlY0ICNQHV+84v/VNol8NhzUquQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLT0+q3ueQWT/sTLNlKdarMa7s/1MB8GA1UdIwQY
MBaAFIY2pOFKcd3VEBZLhjGtmbv8dZU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZGVjYTMtNGVmMS00NWFkLTg5MjIt
MmY3Y2Y4NDQ2YTMxLzEvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZGVjYTMtNGVmMS00NWFkLTg5MjItMmY3Y2Y4NDQ2YTMx
LzEvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpIuln+S
ZQ+x/+5/kw1e35pMAURxzQoFhad4npa/NhfV+IeQqGaj82qCx/TvThmWGEsqEK+H
T5MwW43GbeOurdrHrP4mCCQJfegcqttud5sVog/Tswe9ynNWWh5AEcx6LRrJVb/4
WaXZSP821yfYMNz+H3GmDOCVWWHoatD8FUagx5B7fy0zM6hyBW+emwtj/3ZHxPn2
bQdZ0UcIRM1WzlD+VdwF6B5BZUI+0eZeEWGIc3bgVO5RuQJXj+fa/C4ydYRoJAAg
ZwzTg2dBQgwhSd/nyIjRvakDxe2P5s0eoKAV+YKlRjNqPGdiQU0sDm8gwF+PYGvJ
BsuYZSABgiXfbQ==
-----END CERTIFICATE-----
Generated at Mon May 12 00:11:51 2025 by rpki-client