Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier: U5AO1ppQHoPatgqij+96Fh505SyUWYdkQz+BCRge+3s=
Subject key identifier: C5:DD:9F:94:75:D9:49:15:C6:11:31:2F:44:29:F7:70:B4:C3:FD:94
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 0196BDEE5BBA6B52311B5080FF84188F6D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number: 0213
Signing time: Sun 11 May 2025 06:00:36 +0000
Manifest this update: Sun 11 May 2025 06:00:36 +0000
Manifest next update: Mon 12 May 2025 06:00:36 +0000
Files and hashes: 1: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: hazkEJcMIHQnwo4ZGLHIITn30FmTlOiuuXO5Rxp56Bw=)
2: nKTvZPJPqdCXiSwzyA9j5IjgzXg.roa (hash: IlnUSzXgTeo7Aecj19DyZcjG2TpAU9jXATfOU6kk97U=)
3: zNxBSM9LhOTwYtAP52MRH2hzZ_o.roa (hash: 51C5X4gm2WkYmwXfFe/uw6oyIL71jLkdgjDOyTD+5rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:5b:ba:6b:52:31:1b:50:80:ff:84:18:8f:6d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: May 11 06:00:36 2025 GMT
Not After : May 12 06:00:36 2025 GMT
Subject: CN=c5dd9f9475d94915c611312f4429f770b4c3fd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:68:ae:f9:44:63:da:46:6a:2b:bf:52:81:
8d:d7:d4:21:f2:89:89:b3:20:d8:28:c7:f1:de:81:
34:20:ef:74:a0:fa:53:3d:23:ca:a0:6f:ed:e8:6e:
f6:c0:3c:7c:51:20:f3:d1:25:27:8c:e7:7d:6f:dd:
3f:ad:10:67:6e:25:b5:12:22:35:9e:47:f9:a5:71:
3a:a0:d9:56:ca:1c:18:15:f5:6f:1c:a6:16:ea:42:
1f:b2:bc:a1:b1:a2:ec:e1:bc:62:f7:90:e6:6d:2d:
bb:a3:ee:cc:c9:0b:fe:85:f5:cb:7b:02:4a:ee:9a:
c6:ea:af:a2:18:69:5e:22:8b:d5:8a:af:c9:1f:94:
80:a8:d5:83:42:90:ae:25:fa:b0:b6:69:da:10:78:
1c:10:2c:20:df:e9:a3:88:5b:6d:9c:f2:83:a0:9e:
b3:80:11:be:8f:7d:15:15:16:ac:74:11:aa:da:71:
18:0c:8b:54:e2:7c:31:30:fd:90:97:d8:d5:65:99:
7e:d6:d6:4e:7f:90:25:33:8c:c1:86:d7:88:08:d6:
b8:4b:fb:91:fb:33:fc:f8:4a:9e:5e:07:76:74:c5:
04:c7:cb:82:71:a2:ae:ab:ec:3b:8a:44:71:77:18:
a2:3c:08:22:01:d0:53:c6:db:90:67:e6:b4:0b:7b:
fb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DD:9F:94:75:D9:49:15:C6:11:31:2F:44:29:F7:70:B4:C3:FD:94
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:48:53:e3:42:4f:85:48:00:47:f4:89:f6:41:d6:51:4b:eb:
48:99:ee:a6:a5:37:2e:41:19:e7:23:5d:d6:b3:73:67:21:4d:
ca:e0:45:81:4f:e4:05:4f:0c:94:6e:d8:fe:2c:ce:11:13:3a:
f7:e8:79:58:f3:bc:7b:17:b1:eb:5e:d4:33:91:5e:f0:7d:11:
94:e6:ea:80:9c:15:7f:6b:21:94:da:55:b9:00:d4:94:b9:7a:
f1:d5:33:dd:5f:2a:55:68:68:80:45:a1:59:9e:f4:9e:6d:c4:
19:d2:e6:4c:26:e1:86:30:a3:ba:dc:be:0e:e9:2f:bf:8e:ba:
2d:5f:3e:94:f5:57:10:d1:83:98:7b:df:57:09:2b:d0:6f:77:
8b:92:a0:3c:90:36:78:bd:94:b6:ed:48:97:d1:8b:49:bf:1f:
e2:88:5e:24:9e:78:84:c0:9b:13:dc:ae:20:48:fd:43:38:9f:
f0:7f:d3:81:7f:62:a1:6c:6e:0e:47:2d:e6:e8:fe:4f:c7:97:
e0:a0:d8:27:7f:24:a7:b6:10:ab:24:02:fa:72:cd:71:69:75:
f9:6f:bb:8e:48:72:94:bc:4c:44:0d:f2:d5:fb:0d:cf:4f:6a:
86:17:47:1c:a3:b5:66:a2:48:49:f8:de:27:67:ff:37:76:01:
2d:67:21:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97lu6a1IxG1CA/4QYj20JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGUyYTIwN2Y2OTc3MjE0YTk1N2E4ZTE0OGQxZjhiNWE1
Y2QwODIwHhcNMjUwNTExMDYwMDM2WhcNMjUwNTEyMDYwMDM2WjAzMTEwLwYDVQQD
EyhjNWRkOWY5NDc1ZDk0OTE1YzYxMTMxMmY0NDI5Zjc3MGI0YzNmZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyRorvlEY9pGaiu/UoGN19Qh8omJ
syDYKMfx3oE0IO90oPpTPSPKoG/t6G72wDx8USDz0SUnjOd9b90/rRBnbiW1EiI1
nkf5pXE6oNlWyhwYFfVvHKYW6kIfsryhsaLs4bxi95DmbS27o+7MyQv+hfXLewJK
7prG6q+iGGleIovViq/JH5SAqNWDQpCuJfqwtmnaEHgcECwg3+mjiFttnPKDoJ6z
gBG+j30VFRasdBGq2nEYDItU4nwxMP2Ql9jVZZl+1tZOf5AlM4zBhteICNa4S/uR
+zP8+EqeXgd2dMUEx8uCcaKuq+w7ikRxdxiiPAgiAdBTxtuQZ+a0C3v7TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXdn5R12UkVxhExL0Qp93C0w/2UMB8GA1UdIwQY
MBaAFIcOKiB/aXchSpV6jhSNH4taXNCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80MjExNTgtZjBjNi00NjE5LWFmYTUt
OGE5NDY4N2RiYTZmLzEvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi80MjExNTgtZjBjNi00NjE5LWFmYTUtOGE5NDY4N2RiYTZm
LzEvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEhT40JP
hUgAR/SJ9kHWUUvrSJnupqU3LkEZ5yNd1rNzZyFNyuBFgU/kBU8MlG7Y/izOERM6
9+h5WPO8exex617UM5Fe8H0RlObqgJwVf2shlNpVuQDUlLl68dUz3V8qVWhogEWh
WZ70nm3EGdLmTCbhhjCjuty+Dukvv466LV8+lPVXENGDmHvfVwkr0G93i5KgPJA2
eL2Utu1Il9GLSb8f4oheJJ54hMCbE9yuIEj9Qzif8H/TgX9ioWxuDkct5uj+T8eX
4KDYJ38kp7YQqyQC+nLNcWl1+W+7jkhylLxMRA3y1fsNz09qhhdHHKO1ZqJISfje
J2f/N3YBLWchpQ==
-----END CERTIFICATE-----
Generated at Sun May 11 08:14:11 2025 by rpki-client