Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
File: HUOiSEVp0g4_U8F757n7KcNO5b4.mft (raw, json)
Hash identifier: uaaGNTWd0R1tQ9f0/yeHnKwaULe3e0DU+qu8f5LprzE=
Subject key identifier: C5:00:13:5F:A9:C7:9A:58:99:87:30:D5:47:B3:D6:9D:AF:B1:24:87
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial: 0196BFDD0DD51FEE867197FDCCE89BC502D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
Manifest number: 0240
Signing time: Sun 11 May 2025 15:00:57 +0000
Manifest this update: Sun 11 May 2025 15:00:57 +0000
Manifest next update: Mon 12 May 2025 15:00:57 +0000
Files and hashes: 1: 1-AdV1gWt78vpwXoV5m3jLVJq008.roa (hash: rb2fY0MrPmvpwUyFgkdg3rhj3G+c6kP1oiV1yXrQAuM=)
2: 7oayGcY3Qdt9R-HR-VvUkK4tdUQ.roa (hash: JBF3Cz4Y9X2mzfXIi45uJ7vNKUzCzYVEwRnol0zS7Q4=)
3: GbNjA0u4LTGo9TpkOSKtWC1n_q8.roa (hash: WyAfLfQQ5UiJ33gbz0ra750pAYV6TxSwmrlHqd6QFdQ=)
4: HUOiSEVp0g4_U8F757n7KcNO5b4.crl (hash: oVudhx7kSmuWfBox7/qRBI7UFGtU4EFCvOtwUuLwxWY=)
5: K5H9J-OAc8ll4c6vgE8iPlmXFGA.roa (hash: CuPpoOyCcIww5/+3+pdtgh8blZSDt1yjsk5707ldvp8=)
6: NxOAGrTxofYBFKIpjjp74BEE4ck.roa (hash: czQx6WXfZ8CdpvYil+i0WrvTtgukRGCx1yKLUOoXK04=)
7: Xrc0g_6FSG8ZFIg-M8j_EmbMaBk.roa (hash: Rc7LlFZsQD6UtspfP1hY2HJq001uYyMfvHYShOgLlRs=)
8: pUDcLqhd8k-OHqhDTMHEWLFxtNI.roa (hash: zmsnQNHG6rnZC/5WP217xaq98ZpVSxzIVkPlWZUUiFE=)
9: rplcEHwnzrs9ea4yV0c2pW2uUSU.roa (hash: F6kcOWEqyk9+Z0k9BnSlsmaw3fMe2/8X0jrKTuWJCk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dd:0d:d5:1f:ee:86:71:97:fd:cc:e8:9b:c5:02:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Validity
Not Before: May 11 15:00:57 2025 GMT
Not After : May 12 15:00:57 2025 GMT
Subject: CN=c500135fa9c79a58998730d547b3d69dafb12487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:c2:dc:d6:24:bf:a1:63:e4:81:c6:5f:cb:
a8:93:a7:f4:d9:52:73:ef:59:79:1d:ab:0e:b2:80:
fb:35:22:11:08:85:77:3d:70:5a:5f:b8:ac:52:13:
48:73:a0:ba:a5:7a:f1:38:70:03:f4:83:a2:a9:4a:
ea:e0:b8:66:94:90:80:f8:a7:47:77:28:30:71:f5:
9f:f4:5e:35:22:a7:4c:ba:4e:6d:6a:1f:73:e1:af:
e3:8b:07:a4:3d:b0:d2:1e:74:10:73:63:34:0d:9d:
79:f0:9d:d7:63:71:c2:62:37:d0:c2:b5:32:02:b6:
ed:b3:83:02:ed:01:db:80:50:13:17:88:98:95:6c:
e2:06:95:63:2f:7f:62:cd:85:48:aa:d5:e2:69:9b:
3f:4b:6d:b8:de:42:e7:7e:5a:72:b1:c6:5c:30:e2:
fa:ea:5a:41:8b:dc:ad:38:0f:8c:83:83:f2:a1:54:
d5:6d:1d:bd:0b:a1:92:48:a3:34:25:8d:b8:f9:3e:
29:cd:c3:ef:be:61:c8:8c:7a:e1:fa:9b:6d:c8:5f:
62:82:d9:66:ee:88:98:76:76:c1:3c:cc:07:57:5a:
32:eb:a7:87:39:0c:09:5a:8f:d5:79:15:64:ba:00:
46:1b:26:f8:bd:be:c5:aa:79:65:bb:12:d3:30:3f:
c4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:00:13:5F:A9:C7:9A:58:99:87:30:D5:47:B3:D6:9D:AF:B1:24:87
X509v3 Authority Key Identifier:
keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:69:1d:bf:ff:ac:0e:cb:66:24:16:73:bc:af:d0:6a:08:8d:
3e:57:c7:48:b1:13:7f:4e:06:4d:7b:67:19:50:19:73:ab:b2:
95:3f:b0:25:fa:a2:1b:7a:dd:b2:06:14:98:d1:5e:57:9f:9f:
ea:14:73:ef:96:ff:7f:11:73:6a:72:bc:c1:a5:ed:bb:13:05:
76:f8:ac:ef:86:04:71:4a:9a:91:43:e5:6e:9c:fe:b7:81:3c:
4d:0c:a6:98:e6:85:60:71:db:0f:cd:fe:9a:0a:7a:cd:06:13:
eb:2b:28:4e:37:94:d9:83:bb:9f:0b:b4:55:80:83:29:cb:8d:
9d:b7:01:4a:76:a3:62:4d:16:2d:46:c9:7a:47:36:c9:5a:2e:
cd:9b:f1:4e:58:f0:7e:31:5d:63:01:5b:fa:96:af:4e:56:58:
6e:7f:d8:ac:1b:47:e0:46:21:31:19:81:35:53:0a:77:87:97:
b8:c2:be:bd:a2:06:46:b0:af:a1:7c:75:37:b7:ad:05:33:e3:
f6:28:ce:b0:cf:87:c5:bf:97:12:53:18:e3:1b:3e:7f:a2:6c:
a0:dd:28:15:47:f6:ed:9f:aa:35:12:dd:04:ea:cc:60:15:b2:
5f:df:44:c0:04:d2:94:64:f7:b9:10:0b:29:75:9e:24:79:aa:
bb:57:9e:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/3Q3VH+6GcZf9zOibxQLVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0
ZWU1YmUwHhcNMjUwNTExMTUwMDU3WhcNMjUwNTEyMTUwMDU3WjAzMTEwLwYDVQQD
EyhjNTAwMTM1ZmE5Yzc5YTU4OTk4NzMwZDU0N2IzZDY5ZGFmYjEyNDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiXC3NYkv6Fj5IHGX8uok6f02VJz
71l5HasOsoD7NSIRCIV3PXBaX7isUhNIc6C6pXrxOHAD9IOiqUrq4LhmlJCA+KdH
dygwcfWf9F41IqdMuk5tah9z4a/jiwekPbDSHnQQc2M0DZ158J3XY3HCYjfQwrUy
Arbts4MC7QHbgFATF4iYlWziBpVjL39izYVIqtXiaZs/S2243kLnflpyscZcMOL6
6lpBi9ytOA+Mg4PyoVTVbR29C6GSSKM0JY24+T4pzcPvvmHIjHrh+pttyF9igtlm
7oiYdnbBPMwHV1oy66eHOQwJWo/VeRVkugBGGyb4vb7FqnlluxLTMD/ENwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUAE1+px5pYmYcw1Uez1p2vsSSHMB8GA1UdIwQY
MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt
NjM0NTE1NDg5NzlkLzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk
LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2kdv/+s
DstmJBZzvK/QagiNPlfHSLETf04GTXtnGVAZc6uylT+wJfqiG3rdsgYUmNFeV5+f
6hRz75b/fxFzanK8waXtuxMFdvis74YEcUqakUPlbpz+t4E8TQymmOaFYHHbD83+
mgp6zQYT6ysoTjeU2YO7nwu0VYCDKcuNnbcBSnajYk0WLUbJekc2yVouzZvxTljw
fjFdYwFb+pavTlZYbn/YrBtH4EYhMRmBNVMKd4eXuMK+vaIGRrCvoXx1N7etBTPj
9ijOsM+Hxb+XElMY4xs+f6JsoN0oFUf27Z+qNRLdBOrMYBWyX99EwATSlGT3uRAL
KXWeJHmqu1eeug==
-----END CERTIFICATE-----
Generated at Sun May 11 22:14:47 2025 by rpki-client