Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json)
Hash identifier: E1aoYM7AtQQwqTGo79fwYSKMgfM1pGEl7tbCXy+ZuKU=
Subject key identifier: 07:6B:5C:89:95:A6:F0:24:F6:EC:D1:72:CA:A2:C1:5A:F2:57:1C:BE
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial: 0196BB91FE6F136C24B920C4D8953E432414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 19:00:29 +0000
Manifest this update: Sat 10 May 2025 19:00:29 +0000
Manifest next update: Sun 11 May 2025 19:00:29 +0000
Files and hashes: 1: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: ZIgOBr5WkdPg5gnzeiSM0k0BYOFKrAFN/twIL5VfqLE=)
2: oaiKe9BUmU6ux91XLaQvZC7XqN0.roa (hash: uC3IsodMVYaUiVMHtDRZahUGbsjXFHZTUvnA/e2zbi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:91:fe:6f:13:6c:24:b9:20:c4:d8:95:3e:43:24:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Validity
Not Before: May 10 19:00:29 2025 GMT
Not After : May 11 19:00:29 2025 GMT
Subject: CN=076b5c8995a6f024f6ecd172caa2c15af2571cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ad:20:5b:3d:c5:dd:fa:0c:67:23:0a:66:ee:
2e:ac:18:ee:67:22:f9:9a:54:aa:68:f2:ad:21:a6:
d4:bc:1a:2c:91:4d:62:4e:c8:ae:42:a1:d7:fb:0d:
9f:c8:8b:c3:e2:a0:8e:12:e6:10:9b:79:a5:bd:f7:
8e:98:1a:1d:ce:20:90:08:a5:76:eb:a5:28:bf:af:
89:1a:8c:bb:7d:3e:5f:dc:02:a3:80:ef:05:89:4f:
b5:ee:27:b2:86:11:ca:c4:63:a4:4a:55:98:f0:68:
03:b7:c9:a1:62:f0:37:fd:88:f8:f5:ad:05:ca:0e:
a9:65:5d:26:8f:43:e2:3b:a3:2a:18:b7:08:91:ba:
8e:2e:6e:6f:7c:25:6e:5c:51:bb:79:61:88:e1:d3:
a2:f8:4e:c4:36:04:da:75:ce:70:2e:b1:3d:62:78:
95:95:e4:62:bd:ad:91:6f:b1:35:11:d5:fd:2f:f1:
90:7e:91:50:16:7f:ce:ff:20:43:59:9d:26:67:3d:
6b:36:02:fb:e4:cb:f1:00:71:87:f5:0e:ef:06:98:
20:eb:7c:a0:57:e8:08:64:08:7b:9e:c9:eb:f2:a9:
9f:08:af:04:d9:ff:41:fa:aa:91:33:ed:3e:4c:c9:
5d:52:98:c6:25:2b:2d:fc:5b:4c:6b:b4:cb:38:62:
17:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6B:5C:89:95:A6:F0:24:F6:EC:D1:72:CA:A2:C1:5A:F2:57:1C:BE
X509v3 Authority Key Identifier:
keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:39:6d:f0:75:68:69:b0:52:d3:98:b9:73:c0:c5:36:3d:26:
6d:da:52:25:f6:24:a7:af:a9:be:9a:cb:97:bb:f5:79:26:b2:
bb:83:18:65:a1:25:26:8c:45:1b:72:cb:b3:dd:ae:a5:19:fd:
00:0a:30:42:88:61:b6:9e:88:09:13:42:58:a3:b9:5b:4c:ec:
9d:24:9b:fb:f5:28:81:ed:cb:cd:10:90:94:a8:48:e4:c0:c8:
fd:fc:48:9b:6e:8c:bc:b5:c3:26:0a:89:e2:08:5c:6d:1d:00:
7b:25:21:24:19:21:59:30:7c:0e:a2:c1:c5:85:53:1b:20:c0:
35:e5:ac:e3:6b:84:06:bb:bb:e4:c1:10:56:5e:00:ec:07:cb:
3c:66:53:28:aa:1b:54:6f:04:33:a4:83:89:36:c7:15:aa:e6:
c4:92:7a:47:16:e2:93:9f:ab:6b:cb:86:24:ef:92:b3:27:7e:
1e:c1:86:2e:98:99:f2:2d:78:34:a7:7c:82:e1:f6:a4:65:f2:
28:de:34:e2:11:89:37:c2:26:69:1d:9a:69:54:95:8b:41:5a:
24:e7:51:97:48:0c:e7:61:0b:e6:fc:f6:1b:31:1b:c6:94:04:
52:0c:82:8b:80:fe:58:61:47:7a:e9:d6:61:71:15:b4:28:7b:
d2:bc:d8:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7kf5vE2wkuSDE2JU+QyQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMDQzNmRkNjk4ZWJhM2VhYjVhOTJkYjFkNjRmMmYzMTRl
ZDMxMTYwHhcNMjUwNTEwMTkwMDI5WhcNMjUwNTExMTkwMDI5WjAzMTEwLwYDVQQD
EygwNzZiNWM4OTk1YTZmMDI0ZjZlY2QxNzJjYWEyYzE1YWYyNTcxY2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4q0gWz3F3foMZyMKZu4urBjuZyL5
mlSqaPKtIabUvBoskU1iTsiuQqHX+w2fyIvD4qCOEuYQm3mlvfeOmBodziCQCKV2
66Uov6+JGoy7fT5f3AKjgO8FiU+17ieyhhHKxGOkSlWY8GgDt8mhYvA3/Yj49a0F
yg6pZV0mj0PiO6MqGLcIkbqOLm5vfCVuXFG7eWGI4dOi+E7ENgTadc5wLrE9YniV
leRiva2Rb7E1EdX9L/GQfpFQFn/O/yBDWZ0mZz1rNgL75MvxAHGH9Q7vBpgg63yg
V+gIZAh7nsnr8qmfCK8E2f9B+qqRM+0+TMldUpjGJSst/FtMa7TLOGIXGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdrXImVpvAk9uzRcsqiwVryVxy+MB8GA1UdIwQY
MBaAFB4ENt1pjro+q1qS2x1k8vMU7TEWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGdRMjNXbU91ajZyV3BMYkhXVHk4eFR0TVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zY2UwNDctZDg1OC00ZTdmLWEwNzAt
ZDQzMTlkMTNjNzc1LzEvSGdRMjNXbU91ajZyV3BMYkhXVHk4eFR0TVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zY2UwNDctZDg1OC00ZTdmLWEwNzAtZDQzMTlkMTNjNzc1
LzEvSGdRMjNXbU91ajZyV3BMYkhXVHk4eFR0TVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDlt8HVo
abBS05i5c8DFNj0mbdpSJfYkp6+pvprLl7v1eSayu4MYZaElJoxFG3LLs92upRn9
AAowQohhtp6ICRNCWKO5W0zsnSSb+/Uoge3LzRCQlKhI5MDI/fxIm26MvLXDJgqJ
4ghcbR0AeyUhJBkhWTB8DqLBxYVTGyDANeWs42uEBru75MEQVl4A7AfLPGZTKKob
VG8EM6SDiTbHFarmxJJ6Rxbik5+ra8uGJO+Ssyd+HsGGLpiZ8i14NKd8guH2pGXy
KN404hGJN8ImaR2aaVSVi0FaJOdRl0gM52EL5vz2GzEbxpQEUgyCi4D+WGFHeunW
YXEVtCh70rzY5w==
-----END CERTIFICATE-----
Generated at Sat May 10 22:02:28 2025 by rpki-client