Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
File: HCtQ2u86DL23KyPKPbvvwVc1g_k.mft (raw, json)
Hash identifier: Xo0dEStAKg72b1WtPlatPafH6SlAX7C+TO4iURGs134=
Subject key identifier: CF:C5:24:1B:05:B6:77:CF:03:EB:27:24:79:55:7C:29:FC:FE:74:2C
Authority key identifier: 1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
Certificate issuer: /CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Certificate serial: 0196CC4EB9F9F4D903FAB88B8935509190CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
Manifest number: 0A61
Signing time: Wed 14 May 2025 01:00:33 +0000
Manifest this update: Wed 14 May 2025 01:00:33 +0000
Manifest next update: Thu 15 May 2025 01:00:33 +0000
Files and hashes: 1: HCtQ2u86DL23KyPKPbvvwVc1g_k.crl (hash: ElZsaHAm1WWYmOurS5EGTkAFiuA8C2JLg5QzuuG49oM=)
2: ZGoOUwMopHkREW85RzSsR457AEU.roa (hash: ll6YKs1Lb4wcNMvOVUUEMK6peyuIPU/LPfVQcksc3+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:4e:b9:f9:f4:d9:03:fa:b8:8b:89:35:50:91:90:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Validity
Not Before: May 14 01:00:33 2025 GMT
Not After : May 15 01:00:33 2025 GMT
Subject: CN=cfc5241b05b677cf03eb272479557c29fcfe742c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:e5:f5:54:ce:11:49:7b:51:2f:3b:ee:d6:
ac:e5:10:3b:fc:ed:f1:03:a4:a8:70:45:78:34:71:
43:8d:c0:d3:5e:53:27:48:2b:1e:08:c8:8f:59:00:
60:fd:f5:e0:a6:75:37:c7:38:2c:0b:c5:73:d5:c4:
f1:81:52:e6:09:21:04:91:d3:41:13:36:7d:8b:e4:
2f:0d:57:81:2c:bf:f3:16:b4:73:25:7c:53:77:06:
48:af:e1:11:27:b9:ec:4f:a2:ee:84:fc:a6:66:09:
7c:aa:4b:2f:8b:7c:6d:86:cb:7a:e0:99:34:00:cc:
f9:f0:22:fb:8e:75:dc:27:11:2f:32:bc:25:69:bc:
16:de:7d:ff:41:8c:1d:75:c9:1a:d0:69:07:a0:cc:
d1:3d:fe:6d:b7:63:a0:8d:c0:d1:46:ef:6d:84:ed:
59:82:66:b5:c0:d5:c9:d2:06:3f:df:03:77:0c:7b:
8b:e5:53:6a:84:eb:ab:e5:22:6b:c1:b4:db:8b:5a:
f0:18:fe:b2:88:90:be:92:db:0d:e1:7b:d9:2a:36:
5a:d1:c5:c4:5a:86:85:36:63:4c:e5:75:26:63:68:
6a:7d:d8:ee:bf:45:13:f0:41:78:01:ac:ec:21:31:
68:fb:68:cb:5a:08:06:78:d9:25:09:e4:c3:fd:cb:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C5:24:1B:05:B6:77:CF:03:EB:27:24:79:55:7C:29:FC:FE:74:2C
X509v3 Authority Key Identifier:
keyid:1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:51:01:6b:4c:11:89:d0:09:70:ff:0f:68:68:f5:8d:c0:d0:
95:34:97:43:8b:96:da:cd:1d:0b:1d:52:ca:46:0f:72:ed:85:
d3:51:11:cf:95:d7:8e:4e:06:77:b4:de:d0:29:47:73:c2:6d:
65:fe:4d:37:12:82:98:45:17:39:46:60:b4:e7:a6:3f:0e:b5:
60:9b:60:f8:a2:5e:ad:7b:91:20:1c:e3:bd:4b:ba:55:39:09:
eb:38:db:c7:8d:18:02:b9:5d:af:30:03:b5:20:ee:c2:dd:63:
89:21:39:81:33:c8:a9:35:68:d3:6e:69:b9:94:4f:8a:7e:60:
2b:48:3d:a6:b5:fa:eb:cf:52:37:67:de:56:69:61:b2:dd:99:
59:8b:fa:5a:9c:8d:00:d0:7f:dc:de:e3:1f:56:2e:f8:13:c9:
a1:13:36:ff:e5:6b:9e:56:8a:b0:6f:3b:d7:d6:ed:5c:73:ea:
d2:eb:af:5b:c4:2d:63:da:be:92:4e:08:96:1e:9f:3b:21:14:
87:7a:dd:45:76:84:1c:d8:3d:77:72:2a:7f:02:e3:e2:d8:05:
2b:10:12:82:68:e4:74:20:c8:13:9d:2c:bb:dc:ad:1d:82:2a:
60:a3:48:8b:5d:e4:d0:1b:9e:f0:ef:cb:dc:14:e1:80:3c:90:
c5:a9:c3:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbMTrn59NkD+riLiTVQkZDMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmI1MGRhZWYzYTBjYmRiNzJiMjNjYTNkYmJlZmMxNTcz
NTgzZjkwHhcNMjUwNTE0MDEwMDMzWhcNMjUwNTE1MDEwMDMzWjAzMTEwLwYDVQQD
EyhjZmM1MjQxYjA1YjY3N2NmMDNlYjI3MjQ3OTU1N2MyOWZjZmU3NDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY7l9VTOEUl7US877tas5RA7/O3x
A6SocEV4NHFDjcDTXlMnSCseCMiPWQBg/fXgpnU3xzgsC8Vz1cTxgVLmCSEEkdNB
EzZ9i+QvDVeBLL/zFrRzJXxTdwZIr+ERJ7nsT6LuhPymZgl8qksvi3xthst64Jk0
AMz58CL7jnXcJxEvMrwlabwW3n3/QYwddcka0GkHoMzRPf5tt2OgjcDRRu9thO1Z
gma1wNXJ0gY/3wN3DHuL5VNqhOur5SJrwbTbi1rwGP6yiJC+ktsN4XvZKjZa0cXE
WoaFNmNM5XUmY2hqfdjuv0UT8EF4AazsITFo+2jLWggGeNklCeTD/cuH3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/FJBsFtnfPA+snJHlVfCn8/nQsMB8GA1UdIwQY
MBaAFBwrUNrvOgy9tysjyj2778FXNYP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82ZjJiMzctMGQxNy00NWFiLTgyODIt
YWI0MjYzZWQ0MGRlLzEvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82ZjJiMzctMGQxNy00NWFiLTgyODItYWI0MjYzZWQ0MGRl
LzEvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlEBa0wR
idAJcP8PaGj1jcDQlTSXQ4uW2s0dCx1SykYPcu2F01ERz5XXjk4Gd7Te0ClHc8Jt
Zf5NNxKCmEUXOUZgtOemPw61YJtg+KJerXuRIBzjvUu6VTkJ6zjbx40YArldrzAD
tSDuwt1jiSE5gTPIqTVo025puZRPin5gK0g9prX6689SN2feVmlhst2ZWYv6WpyN
ANB/3N7jH1Yu+BPJoRM2/+VrnlaKsG8719btXHPq0uuvW8QtY9q+kk4Ilh6fOyEU
h3rdRXaEHNg9d3IqfwLj4tgFKxASgmjkdCDIE50su9ytHYIqYKNIi13k0Bue8O/L
3BThgDyQxanD9A==
-----END CERTIFICATE-----
Generated at Wed May 14 09:15:32 2025 by rpki-client