Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json)
Hash identifier: /OubfJDjdXi75g8YRLzSj/zE1f4MESJZcDrpwPtE9ZU=
Subject key identifier: 35:B8:C8:87:66:10:87:9B:C6:8B:EE:D4:5D:6F:DA:8F:CD:5C:43:8A
Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Certificate serial: 0196C5DEDC7513053E90464B265CF2B12B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 19:00:38 +0000
Manifest this update: Mon 12 May 2025 19:00:38 +0000
Manifest next update: Tue 13 May 2025 19:00:38 +0000
Files and hashes: 1: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: 2gEXhfXTNI7VoXdLTxHyu57MPY/AC1F/GbrbmG06Rp8=)
2: qzdc_fwaLRJwIIHpIg8vA5h4lo0.roa (hash: V/FGmYc5ZjOuTnWlxFYXLE8AFUo6wdD1TCze3ez9KOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:dc:75:13:05:3e:90:46:4b:26:5c:f2:b1:2b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Validity
Not Before: May 12 19:00:38 2025 GMT
Not After : May 13 19:00:38 2025 GMT
Subject: CN=35b8c8876610879bc68beed45d6fda8fcd5c438a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:d3:a4:91:a3:97:6c:81:2f:4d:2f:b6:e2:
d7:99:30:6b:f9:16:3b:1d:03:1d:0c:4c:12:e8:64:
94:9f:d1:0a:13:ec:17:e4:c6:0f:11:e0:51:f9:3d:
a4:be:35:93:78:da:4f:a0:84:11:bc:a7:08:74:70:
2b:ff:23:17:ce:68:07:fb:b4:c8:9e:c4:22:53:52:
24:77:1e:85:11:81:f3:96:bb:34:83:23:32:f2:85:
86:88:c0:e3:ab:57:02:55:dc:d6:65:75:7b:b7:64:
cc:33:3b:70:28:f7:05:13:b9:e8:17:ba:5c:fd:ac:
3a:a1:1d:77:b8:2f:2c:4b:db:54:6c:f9:58:ef:37:
ae:3b:12:28:e9:11:2f:74:24:29:d7:98:aa:d5:ed:
e6:a9:5a:13:0f:38:5d:44:ac:14:b7:ef:f1:a3:17:
65:0e:ca:75:e6:b0:7e:72:ae:1c:78:2d:32:9b:9a:
25:23:f0:fb:85:3c:bc:f0:86:56:f9:d2:e3:73:71:
a0:42:d3:15:3f:8e:e9:a7:9d:c2:87:68:aa:ac:e3:
08:9b:e9:b3:3e:05:09:e5:ef:a9:50:2d:ab:14:c7:
a1:3d:b8:1c:b9:91:2b:55:73:bd:7a:5e:73:25:e8:
f8:18:61:02:bb:6d:4c:e0:de:b4:b7:d5:0a:44:9a:
98:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B8:C8:87:66:10:87:9B:C6:8B:EE:D4:5D:6F:DA:8F:CD:5C:43:8A
X509v3 Authority Key Identifier:
keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:23:2f:74:04:31:9c:4b:57:ff:64:0c:16:38:db:6d:f3:13:
6c:03:b0:3f:0b:3d:05:ae:96:54:1f:6c:2c:70:9e:b3:1f:de:
ec:15:11:62:e2:3b:79:e2:db:a8:65:a1:d2:3d:41:54:a5:54:
b6:64:ed:53:90:d5:39:3d:1e:f4:ec:d2:4b:37:51:55:1a:ce:
03:b3:98:3f:9f:ad:fa:bd:81:58:f6:34:d0:8a:ba:fb:79:c2:
71:32:83:18:2a:38:21:89:26:ea:15:48:0f:f5:30:e6:3e:ce:
b4:10:69:80:e5:ef:48:4e:33:90:02:90:6c:12:43:14:04:d5:
c0:b4:7c:23:d4:1f:92:5e:5c:34:70:34:53:c5:86:19:fc:a2:
8a:28:57:bc:93:0d:a2:76:af:c7:b7:de:a6:c9:ca:fa:7e:32:
06:4c:27:be:a6:8c:ce:35:67:e3:8b:b7:93:a6:57:f5:2f:c2:
57:99:50:1d:0a:19:7b:5d:87:11:1d:3a:9a:42:fc:a8:fc:ec:
2d:91:32:db:24:f9:74:7e:03:09:e1:54:59:37:c2:bf:dd:16:
2a:49:91:93:9d:b3:e0:7b:70:57:68:c3:4f:ed:2d:e5:33:7e:
53:2a:8b:92:fc:60:a7:d2:fd:88:94:95:89:18:a8:90:72:c6:
db:d0:c9:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbF3tx1EwU+kEZLJlzysStiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZGY1NGJkYzEwNDEwNmNkYjI5OWUwMWVmMDhhNjA5ODVl
YzM1ZmIwHhcNMjUwNTEyMTkwMDM4WhcNMjUwNTEzMTkwMDM4WjAzMTEwLwYDVQQD
EygzNWI4Yzg4NzY2MTA4NzliYzY4YmVlZDQ1ZDZmZGE4ZmNkNWM0MzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB/TpJGjl2yBL00vtuLXmTBr+RY7
HQMdDEwS6GSUn9EKE+wX5MYPEeBR+T2kvjWTeNpPoIQRvKcIdHAr/yMXzmgH+7TI
nsQiU1Ikdx6FEYHzlrs0gyMy8oWGiMDjq1cCVdzWZXV7t2TMMztwKPcFE7noF7pc
/aw6oR13uC8sS9tUbPlY7zeuOxIo6REvdCQp15iq1e3mqVoTDzhdRKwUt+/xoxdl
Dsp15rB+cq4ceC0ym5olI/D7hTy88IZW+dLjc3GgQtMVP47pp53Ch2iqrOMIm+mz
PgUJ5e+pUC2rFMehPbgcuZErVXO9el5zJej4GGECu21M4N60t9UKRJqYmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDW4yIdmEIebxovu1F1v2o/NXEOKMB8GA1UdIwQY
MBaAFITfVL3BBBBs2ymeAe8IpgmF7DX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE45VXZjRUVFR3piS1o0Qjd3aW1DWVhzTmZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9mOTNkYTItMTQ1Ny00Y2Q5LTkwNzMt
ODA2YTMxNWRkMWZkLzEvaE45VXZjRUVFR3piS1o0Qjd3aW1DWVhzTmZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9mOTNkYTItMTQ1Ny00Y2Q5LTkwNzMtODA2YTMxNWRkMWZk
LzEvaE45VXZjRUVFR3piS1o0Qjd3aW1DWVhzTmZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSMvdAQx
nEtX/2QMFjjbbfMTbAOwPws9Ba6WVB9sLHCesx/e7BURYuI7eeLbqGWh0j1BVKVU
tmTtU5DVOT0e9OzSSzdRVRrOA7OYP5+t+r2BWPY00Iq6+3nCcTKDGCo4IYkm6hVI
D/Uw5j7OtBBpgOXvSE4zkAKQbBJDFATVwLR8I9Qfkl5cNHA0U8WGGfyiiihXvJMN
onavx7fepsnK+n4yBkwnvqaMzjVn44u3k6ZX9S/CV5lQHQoZe12HER06mkL8qPzs
LZEy2yT5dH4DCeFUWTfCv90WKkmRk52z4HtwV2jDT+0t5TN+UyqLkvxgp9L9iJSV
iRiokHLG29DJYw==
-----END CERTIFICATE-----
Generated at Tue May 13 03:43:32 2025 by rpki-client