Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
File: h5axwx_d4r1emPj7t3mKvEdJPPI.mft (raw, json)
Hash identifier: gyTcNyqIzNIxjzYtg52Gx2sVsg7j1Szb+waHgtFSbJI=
Subject key identifier: 90:D7:E3:EA:62:FB:84:76:79:D7:A4:74:60:96:72:F0:1B:E5:AB:42
Authority key identifier: 87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
Certificate issuer: /CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Certificate serial: 0196C5A82F73B639457421EF002CFD9F76AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
Manifest number: 11CA
Signing time: Mon 12 May 2025 18:00:55 +0000
Manifest this update: Mon 12 May 2025 18:00:55 +0000
Manifest next update: Tue 13 May 2025 18:00:55 +0000
Files and hashes: 1: Xaf_adaEk34l87Y0UzQQZjHD3uU.roa (hash: RtEuhMllYELC+PU6yqfyctqQo+07f0YVdbie5OODqqY=)
2: h5axwx_d4r1emPj7t3mKvEdJPPI.crl (hash: CM6iEFdHme75n9TWiQqyR9SInrFPzq7KYyl2VnnzAMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:2f:73:b6:39:45:74:21:ef:00:2c:fd:9f:76:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Validity
Not Before: May 12 18:00:55 2025 GMT
Not After : May 13 18:00:55 2025 GMT
Subject: CN=90d7e3ea62fb847679d7a474609672f01be5ab42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:6a:ae:8c:36:65:f8:2d:b8:22:8f:26:2b:
e2:a8:45:d7:bc:f8:9e:46:ac:37:f7:0a:10:eb:9d:
f5:cc:c8:42:fa:1c:0c:7c:c4:67:9c:12:f7:4a:2d:
0e:6b:07:77:ec:26:09:72:2b:62:7d:8f:63:8d:48:
e5:9a:04:94:40:e0:c8:d7:93:5b:f6:8c:66:4b:2e:
5e:17:27:fb:0e:6f:43:39:36:65:1e:07:e7:0f:b9:
5a:e9:66:2c:cf:a5:ee:c1:b6:e3:cd:1b:0f:73:5f:
5b:1a:68:76:f8:8c:2d:32:5d:83:5b:99:d1:ed:c1:
4a:ef:bf:9a:9f:18:5c:8e:5d:a7:15:90:eb:4f:80:
c8:eb:fd:72:89:c6:4f:35:e1:d3:1f:b1:38:d0:ed:
36:66:44:90:d5:b3:5d:07:18:af:98:2a:40:87:5d:
43:58:66:21:5d:f3:be:d3:31:db:ff:ae:d6:3b:1c:
88:93:4c:12:04:88:b1:6f:79:4b:26:11:18:80:35:
f6:06:db:52:87:12:f7:0b:e8:b5:89:81:22:c3:30:
1e:b8:4c:11:14:62:1a:c6:5a:3b:29:fc:f2:1a:53:
fe:da:33:e7:d2:1c:e1:fb:94:12:68:0e:93:a4:43:
ab:63:10:6a:d0:c3:cc:4d:76:1f:3a:91:37:b5:be:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D7:E3:EA:62:FB:84:76:79:D7:A4:74:60:96:72:F0:1B:E5:AB:42
X509v3 Authority Key Identifier:
keyid:87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:fe:54:fd:93:4e:72:46:e1:d7:14:ca:0b:fc:1e:c8:c8:76:
3f:06:52:8f:5d:84:07:d3:d9:c7:da:55:01:67:f3:18:d1:cb:
cd:e1:e6:b0:22:f2:9c:0e:48:78:95:6e:2a:ef:08:b0:7a:cd:
e9:94:6b:df:0c:0b:76:90:b3:9d:30:4f:2c:d4:10:b6:59:cf:
7d:84:84:6e:d9:de:15:59:d9:d9:98:55:24:cd:11:d4:9b:bd:
02:aa:f4:dd:59:e7:4c:a8:84:33:e7:3b:4c:07:2e:db:43:86:
37:2f:5c:21:19:34:bf:f0:bb:70:6b:8d:df:9b:5d:f6:af:02:
a6:28:82:ec:00:18:e4:86:e0:87:e9:25:d2:39:96:6d:f2:5a:
d7:24:68:76:45:ec:d2:f2:90:40:81:ba:6d:13:a8:9d:33:6d:
a1:10:dc:b6:51:0d:21:07:09:76:1b:43:e4:ee:bc:7b:12:b4:
1f:8b:b0:49:af:24:8e:9d:00:c2:cf:c9:f0:1b:80:ea:ab:37:
59:60:92:2e:b4:03:ef:25:71:27:c5:c8:9c:ce:69:e3:e9:fd:
7e:79:09:06:29:19:bd:14:b3:46:42:b5:84:cc:74:06:72:fd:
98:01:b8:ea:88:59:69:cb:f0:71:3f:f8:80:a5:36:d2:79:be:
ee:aa:7b:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFqC9ztjlFdCHvACz9n3aqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OTZiMWMzMWZkZGUyYmQ1ZTk4ZjhmYmI3Nzk4YWJjNDc0
OTNjZjIwHhcNMjUwNTEyMTgwMDU1WhcNMjUwNTEzMTgwMDU1WjAzMTEwLwYDVQQD
Eyg5MGQ3ZTNlYTYyZmI4NDc2NzlkN2E0NzQ2MDk2NzJmMDFiZTVhYjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzZqrow2ZfgtuCKPJiviqEXXvPie
Rqw39woQ6531zMhC+hwMfMRnnBL3Si0Oawd37CYJcitifY9jjUjlmgSUQODI15Nb
9oxmSy5eFyf7Dm9DOTZlHgfnD7la6WYsz6XuwbbjzRsPc19bGmh2+IwtMl2DW5nR
7cFK77+anxhcjl2nFZDrT4DI6/1yicZPNeHTH7E40O02ZkSQ1bNdBxivmCpAh11D
WGYhXfO+0zHb/67WOxyIk0wSBIixb3lLJhEYgDX2BttShxL3C+i1iYEiwzAeuEwR
FGIaxlo7KfzyGlP+2jPn0hzh+5QSaA6TpEOrYxBq0MPMTXYfOpE3tb4gFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDX4+pi+4R2edekdGCWcvAb5atCMB8GA1UdIwQY
MBaAFIeWscMf3eK9Xpj4+7d5irxHSTzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDVheHd4X2Q0cjFlbVBqN3QzbUt2RWRKUFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8yMzQzYTMtZDBmMi00ZThhLTg3ZDQt
NGFlMzMwNmRhNzkzLzEvaDVheHd4X2Q0cjFlbVBqN3QzbUt2RWRKUFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8yMzQzYTMtZDBmMi00ZThhLTg3ZDQtNGFlMzMwNmRhNzkz
LzEvaDVheHd4X2Q0cjFlbVBqN3QzbUt2RWRKUFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtf5U/ZNO
ckbh1xTKC/weyMh2PwZSj12EB9PZx9pVAWfzGNHLzeHmsCLynA5IeJVuKu8IsHrN
6ZRr3wwLdpCznTBPLNQQtlnPfYSEbtneFVnZ2ZhVJM0R1Ju9Aqr03VnnTKiEM+c7
TAcu20OGNy9cIRk0v/C7cGuN35td9q8CpiiC7AAY5Ibgh+kl0jmWbfJa1yRodkXs
0vKQQIG6bROonTNtoRDctlENIQcJdhtD5O68exK0H4uwSa8kjp0Aws/J8BuA6qs3
WWCSLrQD7yVxJ8XInM5p4+n9fnkJBikZvRSzRkK1hMx0BnL9mAG46ohZacvwcT/4
gKU20nm+7qp7kg==
-----END CERTIFICATE-----
Generated at Tue May 13 03:25:32 2025 by rpki-client