Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File: HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier: lIAQIkepj0yaoA6ySUwE9H1R68VJcPAHOgHSFNNX/g8=
Subject key identifier: 5D:A2:DD:62:05:8E:1B:12:50:81:67:B6:09:25:3B:D6:95:D9:C9:BF
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial: 0196A0519748AE127D3D60C343DF4DD2D89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 12:00:23 +0000
Manifest this update: Mon 05 May 2025 12:00:23 +0000
Manifest next update: Tue 06 May 2025 12:00:23 +0000
Files and hashes: 1: 2p9UhZ4f1RpCso5_KIEAEmFd_Cs.roa (hash: oRMeyyuTPK9dSZ9MmutE2TkHWIxlWdCs8LlZr1bRdaE=)
2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: xcmd+7+bmLXpbdpgbU1rVyRU8frIAuNRSiUClYYJYbs=)
3: IJNfARVzI865AIKgN_3yjxJwMgI.roa (hash: fusPL7W50hSr1S5X6R9RazY+w4yFVSYD9+IMtNP9M5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:97:48:ae:12:7d:3d:60:c3:43:df:4d:d2:d8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Validity
Not Before: May 5 12:00:23 2025 GMT
Not After : May 6 12:00:23 2025 GMT
Subject: CN=5da2dd62058e1b12508167b609253bd695d9c9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7e:62:5a:f8:82:77:d8:44:7e:71:b3:10:74:
44:99:61:d9:31:6d:b3:23:4e:d2:06:51:cf:a4:78:
0c:6a:31:08:69:36:42:55:94:a0:a9:7e:a2:e8:62:
e1:d0:eb:21:6a:e3:52:03:b8:5e:9e:2f:ef:de:ee:
6b:dd:04:6a:42:29:3f:f3:77:80:6e:c4:dc:ba:88:
df:9b:3a:9b:ca:6a:51:f7:86:17:16:0f:b9:fe:10:
87:28:0c:f2:ec:8f:08:27:cd:3b:d0:e0:a5:1d:64:
2d:82:b0:91:ba:67:ba:b0:30:b7:10:60:ee:f3:d4:
16:38:66:d8:57:1e:11:40:45:26:04:d7:37:02:7b:
47:30:05:fa:59:12:8f:3a:f1:d1:74:41:b8:a6:d9:
3b:77:a5:6f:43:76:2b:b8:d0:f8:b1:04:3e:6e:9f:
5f:69:e2:bd:cf:99:ba:8d:90:ae:0a:ce:62:a8:ff:
31:cc:2e:63:25:6b:4c:a7:e6:66:aa:b2:ed:66:e7:
75:a3:cd:97:6e:7b:3e:eb:9b:1b:9e:b0:8a:79:99:
e1:da:21:2c:69:b4:68:45:89:49:73:5e:06:b0:66:
94:42:9a:52:62:ec:5a:87:84:95:44:04:6d:33:e0:
e2:a3:14:05:0e:0b:c7:3f:b7:a6:0f:7a:2a:cb:66:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A2:DD:62:05:8E:1B:12:50:81:67:B6:09:25:3B:D6:95:D9:C9:BF
X509v3 Authority Key Identifier:
keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:35:d2:55:5a:33:7d:18:f2:44:83:cc:74:65:4b:70:0b:85:
41:42:bd:f7:1d:f0:6d:c5:41:7b:7b:33:22:64:00:2f:d7:46:
50:79:01:d6:a8:6b:16:78:2b:a1:fc:d7:84:aa:d3:af:f2:cd:
d3:e2:df:9d:9f:87:46:ea:68:1c:4f:85:be:d7:c6:4a:10:65:
a9:1f:76:2b:eb:38:35:37:04:18:c2:10:e9:4f:c0:e5:28:b9:
59:59:e3:f5:c3:2c:d0:12:31:f2:d1:ff:60:54:96:63:89:8a:
5a:04:ab:94:c4:07:e0:8d:4a:90:8e:4c:81:a2:e3:ee:f2:98:
b5:b8:7c:ca:e1:3f:2a:98:34:d7:e7:dc:c4:a8:ce:a8:40:6c:
23:86:aa:0c:0a:e2:7e:69:cf:e7:c5:54:4c:58:58:d7:3b:67:
1a:c5:78:b7:54:ee:de:29:95:34:0e:03:75:e8:39:7d:5e:01:
b3:e2:12:20:ee:06:54:86:43:61:be:5e:c5:68:5f:61:89:24:
3c:6d:37:ed:9a:91:84:f3:f3:9b:d1:0b:c6:77:19:b9:d8:d8:
d5:31:11:65:ec:ec:82:3d:e0:00:c9:e6:be:ca:09:45:cd:c0:
d3:28:1b:8e:bf:07:0f:24:fd:d2:51:a0:5d:bc:b8:5a:b7:5f:
cf:77:7b:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagUZdIrhJ9PWDDQ99N0ticMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNjgzZjk1Yzk4ZDJjZmU5ZDc5Y2RkM2RiOGVlODEzOGJi
MzU3NzIwHhcNMjUwNTA1MTIwMDIzWhcNMjUwNTA2MTIwMDIzWjAzMTEwLwYDVQQD
Eyg1ZGEyZGQ2MjA1OGUxYjEyNTA4MTY3YjYwOTI1M2JkNjk1ZDljOWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX5iWviCd9hEfnGzEHREmWHZMW2z
I07SBlHPpHgMajEIaTZCVZSgqX6i6GLh0OshauNSA7heni/v3u5r3QRqQik/83eA
bsTcuojfmzqbympR94YXFg+5/hCHKAzy7I8IJ8070OClHWQtgrCRume6sDC3EGDu
89QWOGbYVx4RQEUmBNc3AntHMAX6WRKPOvHRdEG4ptk7d6VvQ3YruND4sQQ+bp9f
aeK9z5m6jZCuCs5iqP8xzC5jJWtMp+ZmqrLtZud1o82Xbns+65sbnrCKeZnh2iEs
abRoRYlJc14GsGaUQppSYuxah4SVRARtM+DioxQFDgvHP7emD3oqy2ZaNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2i3WIFjhsSUIFntgklO9aV2cm/MB8GA1UdIwQY
MBaAFBxoP5XJjSz+nXnN09uO6BOLs1dyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81MDZmM2QtYzg2My00NjJmLTg3ZWIt
YjNhZTFlNGMzMmI3LzEvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81MDZmM2QtYzg2My00NjJmLTg3ZWItYjNhZTFlNGMzMmI3
LzEvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzXSVVoz
fRjyRIPMdGVLcAuFQUK99x3wbcVBe3szImQAL9dGUHkB1qhrFngrofzXhKrTr/LN
0+LfnZ+HRupoHE+FvtfGShBlqR92K+s4NTcEGMIQ6U/A5Si5WVnj9cMs0BIx8tH/
YFSWY4mKWgSrlMQH4I1KkI5MgaLj7vKYtbh8yuE/Kpg01+fcxKjOqEBsI4aqDAri
fmnP58VUTFhY1ztnGsV4t1Tu3imVNA4Ddeg5fV4Bs+ISIO4GVIZDYb5exWhfYYkk
PG037ZqRhPPzm9ELxncZudjY1TERZezsgj3gAMnmvsoJRc3A0ygbjr8HDyT90lGg
Xby4Wrdfz3d7ow==
-----END CERTIFICATE-----
Generated at Mon May 5 20:11:50 2025 by rpki-client