Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: s2LxI9wPQYGb9/BTFdEib0uhjkEGZq8waHNhhqrf+Zw=
Subject key identifier: DB:1A:3C:E0:6A:FC:D9:EB:8D:1B:4E:A0:22:5C:F3:10:D0:43:5B:80
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 0196A01A836953C6748CCFEA4BEF4DA864EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 13EA
Signing time: Mon 05 May 2025 11:00:14 +0000
Manifest this update: Mon 05 May 2025 11:00:14 +0000
Manifest next update: Tue 06 May 2025 11:00:14 +0000
Files and hashes: 1: U-9gs6-HPp-63tFVTgK5YJ7Vtx0.roa (hash: is1qZnviSeshx9o2Nm8hFCS4enc7GdrzL/0sgsJwTiY=)
2: WeH1WlhYDBMKUix1j52cA9uy8vg.roa (hash: LDMrba3gzwSdDXVT+UZ/jMO8QMSCHSdMpFhiaPS/CDk=)
3: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: 5daArpFAIsbcDHI2sMkNPZ4bb0jffTWutr4c6O4P4q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:83:69:53:c6:74:8c:cf:ea:4b:ef:4d:a8:64:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: May 5 11:00:14 2025 GMT
Not After : May 6 11:00:14 2025 GMT
Subject: CN=db1a3ce06afcd9eb8d1b4ea0225cf310d0435b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:de:8f:f2:ae:4a:c2:1c:df:58:d8:79:92:
73:9c:56:2a:df:60:1b:1f:3a:fd:8d:a0:10:fc:60:
27:b6:fb:c8:d1:f0:d6:7c:34:d9:6f:a1:4d:66:73:
5f:cd:1d:fd:b2:e5:25:07:a5:1f:e8:03:96:0e:e9:
a4:19:61:c8:3b:34:9f:e3:07:3c:85:c1:5e:a7:2e:
aa:0c:0b:7d:6b:00:12:cc:44:74:ac:8d:59:fe:6f:
56:9e:6e:b5:de:d1:ce:04:81:2c:7a:03:df:cd:67:
97:75:33:1a:75:90:bc:99:71:8c:68:cc:66:e9:bd:
ff:66:04:5b:50:ac:a5:dd:8f:de:82:8d:be:9f:74:
a2:44:b7:6a:5f:56:8e:4a:75:aa:0d:25:f3:1d:08:
12:7b:de:c3:8c:3c:69:d3:c1:69:89:63:31:77:df:
e1:f2:7f:cd:f4:70:cc:f5:7c:eb:5e:9a:d5:17:e8:
16:c4:4f:51:27:91:77:7b:89:4b:ff:97:71:2c:be:
a0:d3:ab:e6:a6:0b:f9:67:ec:3b:36:b6:0b:f5:9f:
bd:a6:c3:11:d9:f4:89:82:6c:e7:18:7a:8f:9c:e3:
5a:f8:43:de:86:ee:d6:9d:be:89:df:aa:e1:67:1b:
f0:35:d9:df:42:16:e3:52:01:d7:e2:10:4e:65:66:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1A:3C:E0:6A:FC:D9:EB:8D:1B:4E:A0:22:5C:F3:10:D0:43:5B:80
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:11:d7:f0:20:45:a0:81:45:b5:ea:b6:d7:16:ce:ea:c1:b4:
22:20:fc:67:5d:82:c1:29:02:e8:46:a1:bd:43:70:cd:77:8d:
9e:ec:c0:21:2f:21:48:86:4a:12:e4:76:63:7e:72:6c:e4:5e:
ee:e3:f8:d3:1c:cb:63:5e:46:c0:7d:b3:c8:8f:c6:9d:e7:e2:
81:a3:02:91:96:a8:2f:2d:07:0c:21:ee:84:0f:ac:34:7b:be:
91:b1:d3:10:8e:df:6d:c2:cc:63:c1:45:5d:f6:b9:5d:74:36:
60:82:2f:13:b1:52:2c:6c:a0:ef:e0:6d:7e:11:84:15:5c:61:
03:64:18:96:95:49:bd:20:1a:1e:26:7b:38:6e:34:58:e0:cc:
3a:68:45:1b:bb:05:3e:e4:b0:62:a4:99:ce:e3:6a:2c:26:b9:
d0:cb:e0:10:e8:4a:9c:a0:6e:cb:46:a4:8d:c4:b0:3e:7c:bc:
2f:6d:03:21:45:2c:ad:e3:0c:5d:e3:a4:4c:eb:aa:d0:c7:3a:
26:3f:b3:d6:ec:5c:ef:0c:12:97:1d:68:fa:43:be:8b:d9:d2:
4e:27:54:e4:0e:bf:b9:54:99:25:70:b3:28:9b:d9:a7:4c:e7:
ea:07:87:9d:09:97:76:93:5f:68:9c:29:d3:fa:69:fe:28:20:
d2:9c:47:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagGoNpU8Z0jM/qS+9NqGTqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZGYxMjU5YjNhYTFkZTM0ZDEzZDFkODYzMTc4ODY0ZDlk
MTg1Y2IwHhcNMjUwNTA1MTEwMDE0WhcNMjUwNTA2MTEwMDE0WjAzMTEwLwYDVQQD
EyhkYjFhM2NlMDZhZmNkOWViOGQxYjRlYTAyMjVjZjMxMGQwNDM1YjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq33ej/KuSsIc31jYeZJznFYq32Ab
Hzr9jaAQ/GAntvvI0fDWfDTZb6FNZnNfzR39suUlB6Uf6AOWDumkGWHIOzSf4wc8
hcFepy6qDAt9awASzER0rI1Z/m9Wnm613tHOBIEsegPfzWeXdTMadZC8mXGMaMxm
6b3/ZgRbUKyl3Y/ego2+n3SiRLdqX1aOSnWqDSXzHQgSe97DjDxp08FpiWMxd9/h
8n/N9HDM9XzrXprVF+gWxE9RJ5F3e4lL/5dxLL6g06vmpgv5Z+w7NrYL9Z+9psMR
2fSJgmznGHqPnONa+EPehu7Wnb6J36rhZxvwNdnfQhbjUgHX4hBOZWZMywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsaPOBq/NnrjRtOoCJc8xDQQ1uAMB8GA1UdIwQY
MBaAFIbfElmzqh3jTRPR2GMXiGTZ0YXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kMDFhOTEtYTNhYi00ZTA4LTk1NjQt
YTUxYWEyM2E4ZmRkLzEvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kMDFhOTEtYTNhYi00ZTA4LTk1NjQtYTUxYWEyM2E4ZmRk
LzEvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5RHX8CBF
oIFFteq21xbO6sG0IiD8Z12CwSkC6EahvUNwzXeNnuzAIS8hSIZKEuR2Y35ybORe
7uP40xzLY15GwH2zyI/GnefigaMCkZaoLy0HDCHuhA+sNHu+kbHTEI7fbcLMY8FF
Xfa5XXQ2YIIvE7FSLGyg7+BtfhGEFVxhA2QYlpVJvSAaHiZ7OG40WODMOmhFG7sF
PuSwYqSZzuNqLCa50MvgEOhKnKBuy0akjcSwPny8L20DIUUsreMMXeOkTOuq0Mc6
Jj+z1uxc7wwSlx1o+kO+i9nSTidU5A6/uVSZJXCzKJvZp0zn6geHnQmXdpNfaJwp
0/pp/igg0pxHvQ==
-----END CERTIFICATE-----
Generated at Mon May 5 13:28:41 2025 by rpki-client