Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
File: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft (raw, json)
Hash identifier: NQIHGZOARakvtmRxKc+O1Z+X2U60RhhULob3ITRIARs=
Subject key identifier: 84:3B:A5:C6:3E:98:AA:6E:6F:D9:05:27:F4:07:F9:A1:54:2A:59:76
Authority key identifier: D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
Certificate issuer: /CN=d47d79c78a830699781b3e4331be092597c34b90
Certificate serial: 0196BE5C8724CF914A0E32777092D1FC42A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 08:00:57 +0000
Manifest this update: Sun 11 May 2025 08:00:57 +0000
Manifest next update: Mon 12 May 2025 08:00:57 +0000
Files and hashes: 1: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl (hash: sL/hzp9NHOp17Qx+7mgUuR9SurujXcuP5HS059EHmpY=)
2: oP_NZCckorWlK08uLtq1ZhjEmNw.roa (hash: TmGRTgVUIXQXGjYy9QqbbgsvjEEm+TAtLS3xKb+xEyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:87:24:cf:91:4a:0e:32:77:70:92:d1:fc:42:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d79c78a830699781b3e4331be092597c34b90
Validity
Not Before: May 11 08:00:57 2025 GMT
Not After : May 12 08:00:57 2025 GMT
Subject: CN=843ba5c63e98aa6e6fd90527f407f9a1542a5976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:d7:03:e7:82:0e:e7:1f:01:9c:b2:8e:b4:
ee:3a:a8:9f:2d:93:31:57:ba:b8:9e:73:3e:62:0a:
19:d8:17:0e:fd:21:5f:6e:be:4b:86:51:e6:88:ed:
20:e8:bb:91:4d:7e:05:f5:7b:32:03:61:19:9a:65:
3d:e6:e7:c8:56:1f:73:63:19:c6:b6:00:6b:c5:2d:
f7:ad:0c:f3:b2:1d:d7:c2:29:38:91:ae:50:86:4d:
9a:ec:08:a9:dc:bd:48:6e:b1:76:0d:25:0b:17:7d:
76:b7:59:50:9c:f1:03:4e:cd:76:27:3e:1e:83:33:
7f:29:85:2b:97:20:43:6b:46:ab:47:e6:85:35:1f:
a2:56:39:38:8b:07:3f:27:46:79:39:7c:3e:ef:aa:
55:76:34:bc:82:83:19:a1:d5:24:bd:75:92:14:a7:
ea:6f:13:61:e1:ce:0f:11:a6:c7:1a:ca:c7:db:6b:
cf:00:88:52:f5:3c:a4:68:0d:10:4c:00:df:a5:a5:
6a:a9:46:40:4d:e3:ef:ef:a0:86:ad:da:bb:e4:41:
0b:2a:31:43:4b:45:d0:7c:53:9b:fd:dc:06:55:a1:
b7:e7:17:63:ad:89:a8:bf:87:78:58:4f:6e:c1:95:
ae:82:c6:04:ba:b2:07:0d:b2:67:b3:32:d4:b2:08:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3B:A5:C6:3E:98:AA:6E:6F:D9:05:27:F4:07:F9:A1:54:2A:59:76
X509v3 Authority Key Identifier:
keyid:D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:46:b3:63:c0:0d:6c:9d:7f:83:80:6e:bf:b8:61:13:0f:7d:
53:f8:30:8b:03:42:f2:06:89:da:a2:23:da:05:8b:d7:1a:dd:
fd:67:cd:bc:e7:1b:75:0f:ce:42:e2:2d:d6:74:15:cb:ab:58:
94:b5:e4:20:ee:40:59:0d:63:41:2b:7d:7a:63:f9:0f:40:ca:
2f:25:dc:f0:52:60:fd:3a:4b:1b:69:77:6d:0b:d5:d6:86:fd:
9e:45:1d:ce:32:37:7d:9a:62:ab:68:58:5d:ee:ef:90:c3:0a:
8a:a0:bb:d1:51:5b:40:e0:df:0c:fd:60:26:d7:0e:f0:07:7b:
96:f7:28:d3:a8:56:cd:47:97:2e:dc:89:16:40:e7:44:e6:c8:
7e:0e:5b:cf:79:68:c0:ba:a4:7b:57:38:15:00:34:4d:8a:a9:
80:47:a6:46:ec:c7:a3:11:92:31:d2:88:b9:f3:55:97:c3:9f:
ad:79:e2:c6:c9:d5:c0:9f:87:97:dd:71:62:d2:8f:0e:34:ee:
d4:b8:4f:0d:6c:94:4a:a2:9d:9f:da:1a:33:32:c1:e2:60:c6:
5c:7e:2d:16:6f:0c:b4:1e:03:7a:2a:dd:c8:6d:de:92:5f:20:
28:20:47:69:23:19:b4:bf:e4:92:d5:79:37:b7:c8:10:41:d4:
cd:62:6d:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XIckz5FKDjJ3cJLR/EKgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0N2Q3OWM3OGE4MzA2OTk3ODFiM2U0MzMxYmUwOTI1OTdj
MzRiOTAwHhcNMjUwNTExMDgwMDU3WhcNMjUwNTEyMDgwMDU3WjAzMTEwLwYDVQQD
Eyg4NDNiYTVjNjNlOThhYTZlNmZkOTA1MjdmNDA3ZjlhMTU0MmE1OTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrTXA+eCDucfAZyyjrTuOqifLZMx
V7q4nnM+YgoZ2BcO/SFfbr5LhlHmiO0g6LuRTX4F9XsyA2EZmmU95ufIVh9zYxnG
tgBrxS33rQzzsh3Xwik4ka5Qhk2a7Aip3L1IbrF2DSULF312t1lQnPEDTs12Jz4e
gzN/KYUrlyBDa0arR+aFNR+iVjk4iwc/J0Z5OXw+76pVdjS8goMZodUkvXWSFKfq
bxNh4c4PEabHGsrH22vPAIhS9TykaA0QTADfpaVqqUZATePv76CGrdq75EELKjFD
S0XQfFOb/dwGVaG35xdjrYmov4d4WE9uwZWugsYEurIHDbJnszLUsggWtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQ7pcY+mKpub9kFJ/QH+aFUKll2MB8GA1UdIwQY
MBaAFNR9eceKgwaZeBs+QzG+CSWXw0uQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUgxNXg0cURCcGw0R3o1RE1iNEpKWmZEUzVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lMzlhNDItNjdiNy00NzNjLTgzY2Qt
MTk2NDU1NTI0YTYyLzEvMUgxNXg0cURCcGw0R3o1RE1iNEpKWmZEUzVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lMzlhNDItNjdiNy00NzNjLTgzY2QtMTk2NDU1NTI0YTYy
LzEvMUgxNXg0cURCcGw0R3o1RE1iNEpKWmZEUzVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEazY8AN
bJ1/g4Buv7hhEw99U/gwiwNC8gaJ2qIj2gWL1xrd/WfNvOcbdQ/OQuIt1nQVy6tY
lLXkIO5AWQ1jQSt9emP5D0DKLyXc8FJg/TpLG2l3bQvV1ob9nkUdzjI3fZpiq2hY
Xe7vkMMKiqC70VFbQODfDP1gJtcO8Ad7lvco06hWzUeXLtyJFkDnRObIfg5bz3lo
wLqke1c4FQA0TYqpgEemRuzHoxGSMdKIufNVl8OfrXnixsnVwJ+Hl91xYtKPDjTu
1LhPDWyUSqKdn9oaMzLB4mDGXH4tFm8MtB4DeirdyG3ekl8gKCBHaSMZtL/kktV5
N7fIEEHUzWJtfg==
-----END CERTIFICATE-----
Generated at Sun May 11 16:43:21 2025 by rpki-client