Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
File: hTodtQq3cdy1KTZ92VGmfKzEhSc.mft (raw, json)
Hash identifier: A3V1dJ0fxBiW98DmAZZj/lOEu+EmSs4iM0QoKc/6dh4=
Subject key identifier: 1C:D5:74:D6:9B:BE:48:50:05:7F:CB:F3:38:F2:C9:A7:3A:CB:39:5A
Authority key identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
Certificate issuer: /CN=853a1db50ab771dcb529367dd951a67cacc48527
Certificate serial: 0196BE5CD3A19389F8F24BEFEED6F0590B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 08:01:16 +0000
Manifest this update: Sun 11 May 2025 08:01:16 +0000
Manifest next update: Mon 12 May 2025 08:01:16 +0000
Files and hashes: 1: KFxs769oKYSlN9E-IJj7uVI5-Jk.roa (hash: oeJ8lNpcZ8slOJ+v6lew9m45/w6Rj6vHO1zS6reB6dA=)
2: hTodtQq3cdy1KTZ92VGmfKzEhSc.crl (hash: gimrkSIilDiicF9zR3bf4bwXRDRN1qu+dKm/iUFBUiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:d3:a1:93:89:f8:f2:4b:ef:ee:d6:f0:59:0b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853a1db50ab771dcb529367dd951a67cacc48527
Validity
Not Before: May 11 08:01:16 2025 GMT
Not After : May 12 08:01:16 2025 GMT
Subject: CN=1cd574d69bbe4850057fcbf338f2c9a73acb395a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a8:83:b5:a5:cc:f6:5f:b4:50:28:74:66:2d:
5a:e5:82:13:7d:f1:b9:83:41:21:04:16:0e:74:db:
12:fa:6d:23:a8:86:44:d3:d3:65:f6:0d:ee:49:61:
f5:0b:e4:ec:28:46:18:43:2a:78:cf:f2:d0:e0:50:
66:99:2e:6f:df:8f:ce:ee:08:f1:dc:89:f9:5a:19:
a3:75:b3:da:d1:f1:81:f2:03:74:f7:66:07:12:8c:
84:24:98:a3:0e:68:c7:b2:8e:20:2e:3d:c0:d6:67:
e0:aa:a7:67:06:e9:b8:bb:59:09:de:0a:a2:73:12:
b2:32:ae:e2:dd:b0:67:38:74:89:51:4f:db:77:ac:
a4:8d:28:12:86:9f:45:a4:9a:84:5b:f1:44:25:46:
3e:38:78:f6:33:65:c6:38:bf:39:c7:6f:21:ab:12:
c2:20:ee:30:94:93:85:c6:d1:6d:e4:5a:8f:a9:0d:
0d:43:90:2a:2c:26:ba:63:33:c8:28:a2:65:01:43:
00:2b:0f:12:4b:7e:4d:43:69:b3:49:28:7e:49:7e:
51:54:f4:f8:64:90:7e:a0:70:f7:0c:52:cc:f0:d9:
06:be:63:97:53:31:85:c0:4c:78:78:8e:f6:d1:30:
bc:9f:7b:e2:92:5d:10:2f:68:5e:5c:e3:51:4b:eb:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D5:74:D6:9B:BE:48:50:05:7F:CB:F3:38:F2:C9:A7:3A:CB:39:5A
X509v3 Authority Key Identifier:
keyid:85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:5b:b2:bf:ef:94:e7:18:f5:22:6d:82:51:bd:cd:62:3d:13:
f9:5c:4a:90:b4:75:65:2d:e5:c9:e2:19:2c:e7:7b:b4:d4:b0:
05:18:7c:9f:28:2e:96:1f:c1:06:23:ca:58:08:c0:a4:98:f2:
32:4d:38:d6:18:83:ab:8d:4b:4f:cc:58:32:df:43:c4:67:67:
69:e2:69:c7:45:e6:05:04:72:75:99:46:f9:fe:24:8d:e6:88:
5b:b7:ed:cc:f6:0f:25:18:44:5f:e1:63:17:dc:db:98:a0:ed:
4d:76:02:42:3d:2b:bc:2a:d0:30:20:fc:5e:69:45:60:2c:50:
db:64:bc:e2:c3:b5:a3:34:dc:cf:32:78:62:09:5d:b0:96:0f:
6f:39:59:1a:42:4b:d4:0c:a4:98:91:11:3d:34:d0:10:a0:bb:
6a:41:c6:91:e3:2d:5d:b8:81:db:05:e9:b5:97:8c:c2:18:2e:
db:c8:64:d0:a0:30:2b:bb:78:80:19:5d:29:1c:5d:fb:e3:70:
6a:7d:44:36:29:52:d9:6f:84:7c:f2:ae:aa:21:2a:49:0e:d5:
fe:b3:95:f8:ee:02:5d:be:85:97:96:e8:e4:14:6f:24:bd:50:
3f:2d:c1:56:6c:b1:71:3c:5d:e0:13:5e:b2:d9:d0:94:80:13:
48:91:6d:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XNOhk4n48kvv7tbwWQtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1M2ExZGI1MGFiNzcxZGNiNTI5MzY3ZGQ5NTFhNjdjYWNj
NDg1MjcwHhcNMjUwNTExMDgwMTE2WhcNMjUwNTEyMDgwMTE2WjAzMTEwLwYDVQQD
EygxY2Q1NzRkNjliYmU0ODUwMDU3ZmNiZjMzOGYyYzlhNzNhY2IzOTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aiDtaXM9l+0UCh0Zi1a5YITffG5
g0EhBBYOdNsS+m0jqIZE09Nl9g3uSWH1C+TsKEYYQyp4z/LQ4FBmmS5v34/O7gjx
3In5WhmjdbPa0fGB8gN092YHEoyEJJijDmjHso4gLj3A1mfgqqdnBum4u1kJ3gqi
cxKyMq7i3bBnOHSJUU/bd6ykjSgShp9FpJqEW/FEJUY+OHj2M2XGOL85x28hqxLC
IO4wlJOFxtFt5FqPqQ0NQ5AqLCa6YzPIKKJlAUMAKw8SS35NQ2mzSSh+SX5RVPT4
ZJB+oHD3DFLM8NkGvmOXUzGFwEx4eI720TC8n3vikl0QL2heXONRS+vcaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzVdNabvkhQBX/L8zjyyac6yzlaMB8GA1UdIwQY
MBaAFIU6HbUKt3HctSk2fdlRpnysxIUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kYzY2ZjMtOGFjOS00MWI5LThlYjgt
NzcyOTVjOWNlODY2LzEvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9kYzY2ZjMtOGFjOS00MWI5LThlYjgtNzcyOTVjOWNlODY2
LzEvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvFuyv++U
5xj1Im2CUb3NYj0T+VxKkLR1ZS3lyeIZLOd7tNSwBRh8nygulh/BBiPKWAjApJjy
Mk041hiDq41LT8xYMt9DxGdnaeJpx0XmBQRydZlG+f4kjeaIW7ftzPYPJRhEX+Fj
F9zbmKDtTXYCQj0rvCrQMCD8XmlFYCxQ22S84sO1ozTczzJ4YgldsJYPbzlZGkJL
1AykmJERPTTQEKC7akHGkeMtXbiB2wXptZeMwhgu28hk0KAwK7t4gBldKRxd++Nw
an1ENilS2W+EfPKuqiEqSQ7V/rOV+O4CXb6Fl5bo5BRvJL1QPy3BVmyxcTxd4BNe
stnQlIATSJFtwA==
-----END CERTIFICATE-----
Generated at Sun May 11 11:31:17 2025 by rpki-client