Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
File: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft (raw, json)
Hash identifier: Mcoap20pGtTUbnltCgaQXyPFllFS4OI/UkAGvi12c8E=
Subject key identifier: F3:64:06:C6:A8:D1:BC:72:4B:8A:7E:1E:60:A5:DC:78:70:73:37:E6
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 0196C0142DFCCBC60A867FF55D63BB6F31F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
Manifest number: 1551
Signing time: Sun 11 May 2025 16:01:09 +0000
Manifest this update: Sun 11 May 2025 16:01:09 +0000
Manifest next update: Mon 12 May 2025 16:01:09 +0000
Files and hashes: 1: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl (hash: SjW5COUmhFX0TNSyH/Bqk0BSkZn374scKhgzxeujl4M=)
2: PDE_xx1gzmPAVxOZXpeIJmNjp-w.roa (hash: rsisC5jLLAQc/j1oflIAdcSgTWRxBAcfuySQlAiOJsc=)
3: Zg0aTO_s-s5vOZoxmmqg_5sQSgQ.roa (hash: QOvTkDAZBFbf1/F4gCK1ncg1KiM7Id/ni6wFdDr4R+8=)
4: tUG2gp-hSdDfUJYQlaFq0NzbX94.roa (hash: IvkQwvvwCRW0GZATlVei8Jb/Mr/PuuQNS0wQyy4KpD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:14:2d:fc:cb:c6:0a:86:7f:f5:5d:63:bb:6f:31:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: May 11 16:01:09 2025 GMT
Not After : May 12 16:01:09 2025 GMT
Subject: CN=f36406c6a8d1bc724b8a7e1e60a5dc78707337e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:1d:ad:2a:e9:71:79:5f:96:e8:33:3b:14:
07:3c:16:eb:8e:09:0d:74:cc:d5:08:75:10:ad:65:
68:2a:17:ad:ee:05:5d:f7:f7:f9:47:81:78:d0:b9:
37:ff:79:71:8c:09:36:27:cf:91:e3:4f:1f:41:7a:
10:b0:24:eb:e4:15:9a:08:27:8c:6b:bb:6c:80:d9:
ba:e1:ba:0b:4e:bb:ae:c6:24:d5:d3:dd:e1:5d:27:
7d:37:bf:6c:39:eb:34:88:52:63:3e:a1:91:df:50:
c8:e1:7c:e8:f7:d8:84:c3:71:ef:5a:4f:4c:93:cb:
c3:db:2d:10:40:b5:1c:6b:c1:c4:b5:47:b1:38:0b:
47:3d:1b:b2:87:28:02:ff:f8:4d:3a:f4:42:33:96:
cc:33:d3:6b:97:72:65:de:6b:cd:69:b8:97:ed:08:
44:93:78:37:2d:16:80:e0:2b:90:3b:2f:f4:1f:9a:
d9:7b:53:4b:b7:45:3e:89:f6:76:d5:f8:ac:67:e3:
42:19:f7:e5:3a:eb:0c:e6:3a:c5:55:48:95:8f:c0:
ee:89:35:65:8f:e8:b0:c1:31:4f:d1:db:d3:31:eb:
2e:0c:1f:24:1c:04:06:4a:81:bb:27:3b:d7:dc:6b:
f5:d8:04:de:03:2c:bf:40:5d:b4:70:34:98:09:dd:
8b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:64:06:C6:A8:D1:BC:72:4B:8A:7E:1E:60:A5:DC:78:70:73:37:E6
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:39:0f:40:00:f8:86:f5:e1:5d:80:eb:e7:99:34:61:df:31:
21:4b:5e:8b:5b:08:14:9e:a6:02:ce:7e:13:3c:a1:b3:2f:0e:
9d:43:eb:8e:fc:b9:ca:0c:1d:d1:b5:91:b7:ad:b1:3f:bb:bb:
7f:c0:ee:d6:a6:c4:99:91:0f:7d:f3:f0:f9:0f:06:38:29:93:
61:08:04:48:97:7f:49:d9:a7:c5:48:2f:74:40:16:c3:3a:bb:
8c:df:94:aa:98:38:30:ba:99:52:2c:e8:6f:63:f8:1f:0c:fd:
d5:6f:af:b8:45:cb:16:5c:27:6a:32:28:c5:3c:57:3a:5e:63:
07:fe:db:4c:b4:53:47:74:ce:62:a1:3a:17:df:ea:f7:50:c2:
18:87:8b:8e:c8:84:de:5b:7d:e0:ba:04:81:fa:2d:3d:2a:5d:
c4:1c:c6:6d:a6:e1:32:2e:60:fe:29:4d:07:e6:ec:a0:53:1c:
5e:62:61:0d:3e:17:1f:1c:ef:c5:c6:5c:84:1d:be:6f:11:21:
0f:89:2f:9e:56:67:58:5b:49:cc:cd:a8:cf:d8:73:67:1e:16:
94:4e:d0:0f:67:f8:76:54:cb:76:4f:56:f3:4d:87:e7:1e:6b:
2a:8d:c1:7c:74:3b:55:a6:c3:d1:18:08:ca:79:47:f8:ac:cb:
d5:bc:a1:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAFC38y8YKhn/1XWO7bzH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NzgyMWE3Yzg3NjFlMDgxMjFlNzBjOWZmNDJmZjliNmFk
MzRlNTEwHhcNMjUwNTExMTYwMTA5WhcNMjUwNTEyMTYwMTA5WjAzMTEwLwYDVQQD
EyhmMzY0MDZjNmE4ZDFiYzcyNGI4YTdlMWU2MGE1ZGM3ODcwNzMzN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE0drSrpcXlflugzOxQHPBbrjgkN
dMzVCHUQrWVoKhet7gVd9/f5R4F40Lk3/3lxjAk2J8+R408fQXoQsCTr5BWaCCeM
a7tsgNm64boLTruuxiTV093hXSd9N79sOes0iFJjPqGR31DI4Xzo99iEw3HvWk9M
k8vD2y0QQLUca8HEtUexOAtHPRuyhygC//hNOvRCM5bMM9Nrl3Jl3mvNabiX7QhE
k3g3LRaA4CuQOy/0H5rZe1NLt0U+ifZ21fisZ+NCGfflOusM5jrFVUiVj8DuiTVl
j+iwwTFP0dvTMesuDB8kHAQGSoG7JzvX3Gv12ATeAyy/QF20cDSYCd2L3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNkBsao0bxyS4p+HmCl3HhwczfmMB8GA1UdIwQY
MBaAFNh4IafIdh4IEh5wyf9C/5tq005RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lNTcyNWItMzEyOC00NGIzLTlmODMt
NWFhNjIwYTgxMTQ5LzEvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9lNTcyNWItMzEyOC00NGIzLTlmODMtNWFhNjIwYTgxMTQ5
LzEvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjkPQAD4
hvXhXYDr55k0Yd8xIUtei1sIFJ6mAs5+Ezyhsy8OnUPrjvy5ygwd0bWRt62xP7u7
f8Du1qbEmZEPffPw+Q8GOCmTYQgESJd/SdmnxUgvdEAWwzq7jN+Uqpg4MLqZUizo
b2P4Hwz91W+vuEXLFlwnajIoxTxXOl5jB/7bTLRTR3TOYqE6F9/q91DCGIeLjsiE
3lt94LoEgfotPSpdxBzGbabhMi5g/ilNB+bsoFMcXmJhDT4XHxzvxcZchB2+bxEh
D4kvnlZnWFtJzM2oz9hzZx4WlE7QD2f4dlTLdk9W802H5x5rKo3BfHQ7VabD0RgI
ynlH+KzL1byhAQ==
-----END CERTIFICATE-----
Generated at Sun May 11 18:18:40 2025 by rpki-client