Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: cft51xyxV8c1qK6rOg68aO/E7kIjX+wcyOR7iB6vLZc=
Subject key identifier: 11:40:04:CF:B3:69:A5:FB:BE:60:7B:21:F9:71:0F:AC:7E:12:EE:B0
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 0196A2E4EBF55DA881152C5560CB92467CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: F1
Signing time: Tue 06 May 2025 00:00:33 +0000
Manifest this update: Tue 06 May 2025 00:00:33 +0000
Manifest next update: Wed 07 May 2025 00:00:33 +0000
Files and hashes: 1: f87u7kBdxRsndUbHafpkZkro0IU.roa (hash: zdIYsmtX/Gy6oFoVgbZrLwhX3d3gff2hTbpByuS7zVc=)
2: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: e+EIwCEXRS5PoatFyTQuHKaPDf1U8X5GB2RokeCtCHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:eb:f5:5d:a8:81:15:2c:55:60:cb:92:46:7c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: May 6 00:00:33 2025 GMT
Not After : May 7 00:00:33 2025 GMT
Subject: CN=114004cfb369a5fbbe607b21f9710fac7e12eeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:5a:df:ef:d6:8c:0e:ff:e1:1f:2c:3f:69:
84:1b:42:49:83:57:b1:0b:5b:20:29:4d:2a:fb:45:
51:df:de:88:db:94:cd:40:21:31:1f:ac:cc:02:8c:
8f:e4:5e:4e:bc:60:ee:d1:38:d1:78:d5:f5:37:fe:
8d:ee:f4:a3:34:da:49:75:f9:f1:0e:8b:cf:d7:18:
c2:e7:20:65:dc:13:0a:2b:bb:f2:dc:ff:11:e6:17:
32:06:6c:b7:7b:1a:77:06:85:d7:47:37:ab:c9:25:
35:be:87:e0:a6:2a:8e:aa:39:02:aa:4c:79:96:48:
29:27:11:06:ce:7f:2a:7d:ee:54:61:8b:9f:49:bc:
66:22:2b:2c:60:28:1d:2a:d5:b4:fb:e4:93:cd:c9:
c9:28:25:31:50:3c:e4:a3:9c:75:fb:91:92:79:35:
9b:54:af:96:2b:ce:da:f4:4e:db:88:88:62:e7:c3:
f7:f7:96:0d:0c:48:f4:1b:72:70:4d:e7:ae:a1:2d:
41:81:ec:f8:4b:0a:02:42:af:c1:9b:15:ec:93:28:
12:02:2e:b9:69:c1:08:27:6d:b4:90:e7:48:2f:c2:
0f:e4:7e:bc:34:34:5b:2e:18:46:f2:2a:50:f4:08:
82:6f:bb:04:bc:6d:bc:ad:75:8e:ee:b3:b3:fa:2b:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:40:04:CF:B3:69:A5:FB:BE:60:7B:21:F9:71:0F:AC:7E:12:EE:B0
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:36:93:71:33:12:44:a8:d7:46:e1:fe:82:3c:91:e9:ae:08:
e5:19:16:93:d4:c9:05:c0:8b:b9:e9:8e:7d:4e:9c:c5:18:9e:
c4:b8:fb:ec:23:97:79:fd:17:07:bc:74:8d:da:ab:4f:fd:d1:
c5:f6:b3:91:ac:f0:07:62:ce:11:81:d5:9a:ed:e9:13:7f:19:
8a:74:d2:43:72:30:06:da:fa:cc:33:04:5a:4b:81:09:7c:1b:
c0:a0:35:80:d0:47:33:76:67:1d:98:aa:49:1e:9f:1b:84:a3:
8d:09:e4:4e:fa:ee:82:bc:fe:03:5e:24:00:be:51:08:43:e8:
44:5e:f8:39:87:25:81:8d:14:2c:ba:56:0c:f0:dc:27:c2:fa:
ea:d8:1b:02:ca:c6:67:09:7f:bb:e3:d2:53:f0:98:56:82:17:
95:6d:de:7f:6c:d6:d7:39:67:97:a2:71:14:55:88:eb:0b:5b:
74:92:b0:2e:6e:b5:2a:b8:c8:8f:42:7d:3e:c1:79:b1:2b:54:
19:1f:b9:41:f1:40:cf:0d:35:6e:d7:ba:be:78:70:54:d7:8b:
14:cd:9b:49:e9:1e:69:e6:0c:36:95:0c:6e:b3:d4:46:fc:c6:
d4:38:95:34:a8:ae:11:0c:18:91:bf:c8:14:58:2c:3c:e5:d6:
7a:ab:0f:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZai5Ov1XaiBFSxVYMuSRnzvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZWI5N2Y5OGM4ODJlZjQyNmIzNjY2MzQxMWQ0MDgxNDMw
YWM0MjEwHhcNMjUwNTA2MDAwMDMzWhcNMjUwNTA3MDAwMDMzWjAzMTEwLwYDVQQD
EygxMTQwMDRjZmIzNjlhNWZiYmU2MDdiMjFmOTcxMGZhYzdlMTJlZWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqBa3+/WjA7/4R8sP2mEG0JJg1ex
C1sgKU0q+0VR396I25TNQCExH6zMAoyP5F5OvGDu0TjReNX1N/6N7vSjNNpJdfnx
DovP1xjC5yBl3BMKK7vy3P8R5hcyBmy3exp3BoXXRzerySU1vofgpiqOqjkCqkx5
lkgpJxEGzn8qfe5UYYufSbxmIissYCgdKtW0++STzcnJKCUxUDzko5x1+5GSeTWb
VK+WK87a9E7biIhi58P395YNDEj0G3JwTeeuoS1Bgez4SwoCQq/BmxXskygSAi65
acEIJ220kOdIL8IP5H68NDRbLhhG8ipQ9AiCb7sEvG28rXWO7rOz+isf1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFABM+zaaX7vmB7IflxD6x+Eu6wMB8GA1UdIwQY
MBaAFIfrl/mMiC70JrNmY0EdQIFDCsQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjkt
M2Y2ZDdkN2VhMWIwLzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjktM2Y2ZDdkN2VhMWIw
LzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojaTcTMS
RKjXRuH+gjyR6a4I5RkWk9TJBcCLuemOfU6cxRiexLj77COXef0XB7x0jdqrT/3R
xfazkazwB2LOEYHVmu3pE38ZinTSQ3IwBtr6zDMEWkuBCXwbwKA1gNBHM3ZnHZiq
SR6fG4SjjQnkTvrugrz+A14kAL5RCEPoRF74OYclgY0ULLpWDPDcJ8L66tgbAsrG
Zwl/u+PSU/CYVoIXlW3ef2zW1zlnl6JxFFWI6wtbdJKwLm61KrjIj0J9PsF5sStU
GR+5QfFAzw01bte6vnhwVNeLFM2bSekeaeYMNpUMbrPURvzG1DiVNKiuEQwYkb/I
FFgsPOXWeqsPVw==
-----END CERTIFICATE-----
Generated at Tue May 6 08:25:40 2025 by rpki-client