Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
File: HCF8gIa-KdUPg8j9j8kXsAnePIE.mft (raw, json)
Hash identifier: Pyq2a9SR7O5Djc+Y3qpZToTjHLM9PipGyr7qtEQO4Lc=
Subject key identifier: B1:20:61:94:26:6A:8E:00:9D:DA:39:C8:FF:67:97:22:23:74:82:58
Authority key identifier: 1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
Certificate issuer: /CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Certificate serial: 0196CB736D47C13C8123DC5D65BB7E54C7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
Manifest number: 61
Signing time: Tue 13 May 2025 21:01:01 +0000
Manifest this update: Tue 13 May 2025 21:01:01 +0000
Manifest next update: Wed 14 May 2025 21:01:01 +0000
Files and hashes: 1: 0Ai9U12mBfKyiWOFnwxyJgomY7A.roa (hash: w93SlMAnXeNUWu2aTB2M64qmn0qVbSFDgVMubrcribE=)
2: HCF8gIa-KdUPg8j9j8kXsAnePIE.crl (hash: FPglHlNSloqnam7vurRzNa6Umk/CKHg52Gu4kQ/CpW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:6d:47:c1:3c:81:23:dc:5d:65:bb:7e:54:c7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Validity
Not Before: May 13 21:01:01 2025 GMT
Not After : May 14 21:01:01 2025 GMT
Subject: CN=b1206194266a8e009dda39c8ff67972223748258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:c1:e1:05:86:04:3a:08:55:31:e6:0f:46:
84:7b:e1:8a:89:81:c9:9d:c9:e9:b0:e3:19:da:7c:
43:9b:0f:d5:ac:cc:2f:19:1b:42:6b:0d:63:5f:b9:
28:f0:a6:38:a7:b4:4e:10:e9:6a:cf:f5:5d:de:e5:
81:93:51:87:ba:1b:0e:4e:ce:f6:cd:3f:32:2f:49:
a3:4b:c9:b9:a2:d5:51:99:76:af:1e:6c:13:ff:14:
86:8d:0c:2f:56:56:fe:00:99:30:de:bd:0f:a1:91:
5a:30:f1:6f:43:ae:0c:60:eb:31:2a:0b:2a:39:f4:
e4:8d:09:4f:3f:b3:d1:6c:7d:00:6e:7a:b9:10:bd:
f5:90:49:27:68:2a:2c:3d:26:46:8b:62:f0:cb:47:
38:41:d8:7c:71:20:c9:90:82:63:a5:c9:cd:a9:14:
f0:8d:a2:1b:a0:b1:0d:c4:0a:1f:5f:ef:dc:83:67:
6e:e2:30:44:ea:b4:6d:44:79:fe:fc:77:9c:4c:33:
dd:bb:02:d5:5a:e2:05:9b:4a:1d:d4:0f:50:e5:d7:
f8:be:3f:66:63:60:6a:cc:93:46:f8:7e:c8:e4:61:
b0:9f:02:8b:40:e3:2d:95:24:4c:c5:2e:cc:13:b4:
73:a8:0b:00:40:3a:6e:9b:15:51:46:c8:ce:a4:9e:
ca:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:20:61:94:26:6A:8E:00:9D:DA:39:C8:FF:67:97:22:23:74:82:58
X509v3 Authority Key Identifier:
keyid:1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:93:62:07:cc:92:79:bd:35:90:6a:81:35:89:8c:1c:12:26:
4c:c9:3b:43:7b:83:ea:63:b6:a4:90:1a:05:9a:9a:e2:b8:2a:
72:64:95:41:fc:c9:b9:83:27:c9:1a:0e:5b:ee:54:bc:ef:92:
6e:36:b2:95:50:47:49:9f:a7:a7:00:b7:b3:7e:2e:6b:06:a7:
71:64:88:3d:e4:7d:41:7b:2c:2b:7d:85:95:b3:63:be:6b:cd:
77:63:5d:94:1f:06:cb:71:37:25:3d:12:3e:89:20:31:95:da:
0e:d5:36:19:b6:f6:66:65:7c:be:03:8a:63:a1:21:9c:c6:b5:
38:a3:5b:0b:ea:7c:f5:9f:9a:2a:a2:e2:48:32:07:f0:79:f6:
12:1e:47:d2:08:1c:8f:9c:06:c6:dd:01:1f:7d:0e:60:6d:f2:
32:4b:be:7e:65:1d:0c:4f:1d:95:09:fb:c8:5d:e4:5d:17:ab:
1a:f1:94:7d:53:7a:a8:bd:0e:91:ee:70:f8:5c:b5:e5:27:3b:
8f:2d:f0:5c:da:a8:30:05:e7:a1:50:c7:74:ca:2e:5a:7a:39:
a0:bf:9e:1d:7f:fa:9c:86:5d:53:a7:79:3e:a6:56:a2:ba:9e:
6c:8a:03:c1:9c:b4:c1:52:02:cb:65:7d:45:aa:0e:37:e7:54:
e9:95:a4:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLc21HwTyBI9xdZbt+VMeuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjE3YzgwODZiZTI5ZDUwZjgzYzhmZDhmYzkxN2IwMDlk
ZTNjODEwHhcNMjUwNTEzMjEwMTAxWhcNMjUwNTE0MjEwMTAxWjAzMTEwLwYDVQQD
EyhiMTIwNjE5NDI2NmE4ZTAwOWRkYTM5YzhmZjY3OTcyMjIzNzQ4MjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbjB4QWGBDoIVTHmD0aEe+GKiYHJ
ncnpsOMZ2nxDmw/VrMwvGRtCaw1jX7ko8KY4p7ROEOlqz/Vd3uWBk1GHuhsOTs72
zT8yL0mjS8m5otVRmXavHmwT/xSGjQwvVlb+AJkw3r0PoZFaMPFvQ64MYOsxKgsq
OfTkjQlPP7PRbH0Abnq5EL31kEknaCosPSZGi2Lwy0c4Qdh8cSDJkIJjpcnNqRTw
jaIboLENxAofX+/cg2du4jBE6rRtRHn+/HecTDPduwLVWuIFm0od1A9Q5df4vj9m
Y2BqzJNG+H7I5GGwnwKLQOMtlSRMxS7ME7RzqAsAQDpumxVRRsjOpJ7KSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEgYZQmao4Ando5yP9nlyIjdIJYMB8GA1UdIwQY
MBaAFBwhfICGvinVD4PI/Y/JF7AJ3jyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENGOGdJYS1LZFVQZzhqOWo4a1hzQW5lUElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84NmJiMDQtMDlkZi00MjJhLWI1Zjkt
ZjM0YjMxZDNiNDNjLzEvSENGOGdJYS1LZFVQZzhqOWo4a1hzQW5lUElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC84NmJiMDQtMDlkZi00MjJhLWI1ZjktZjM0YjMxZDNiNDNj
LzEvSENGOGdJYS1LZFVQZzhqOWo4a1hzQW5lUElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJNiB8yS
eb01kGqBNYmMHBImTMk7Q3uD6mO2pJAaBZqa4rgqcmSVQfzJuYMnyRoOW+5UvO+S
bjaylVBHSZ+npwC3s34uawancWSIPeR9QXssK32FlbNjvmvNd2NdlB8Gy3E3JT0S
PokgMZXaDtU2Gbb2ZmV8vgOKY6EhnMa1OKNbC+p89Z+aKqLiSDIH8Hn2Eh5H0ggc
j5wGxt0BH30OYG3yMku+fmUdDE8dlQn7yF3kXRerGvGUfVN6qL0Oke5w+Fy15Sc7
jy3wXNqoMAXnoVDHdMouWno5oL+eHX/6nIZdU6d5PqZWorqebIoDwZy0wVICy2V9
RaoON+dU6ZWk1Q==
-----END CERTIFICATE-----
Generated at Wed May 14 02:40:20 2025 by rpki-client