Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
File: Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json)
Hash identifier: lcCxr0BQA0a3s4fd+0HYeWH77yoo7dpquEbAPuEPB8Q=
Subject key identifier: 8A:5F:63:A1:67:71:19:23:86:82:6E:71:08:CA:7C:5C:4B:4C:52:5E
Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Certificate serial: 0196C193FCDB591220D06F7BC63EFE76F432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
Manifest number: 0774
Signing time: Sun 11 May 2025 23:00:23 +0000
Manifest this update: Sun 11 May 2025 23:00:23 +0000
Manifest next update: Mon 12 May 2025 23:00:23 +0000
Files and hashes: 1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: GU/kxD0Fb7YvoCX48PYo5G8MDpzjCg1EGU+5hU9tnSo=)
2: tNV0WLevvOhvE4Dz0Ty7ZfGL67s.roa (hash: gW+2wImKwe5IWbdJKawQnrwYg8cWQ3fvjIqklFDzDgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:93:fc:db:59:12:20:d0:6f:7b:c6:3e:fe:76:f4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Validity
Not Before: May 11 23:00:23 2025 GMT
Not After : May 12 23:00:23 2025 GMT
Subject: CN=8a5f63a16771192386826e7108ca7c5c4b4c525e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:ce:5d:66:45:bf:4e:50:50:d1:44:78:34:
1c:a5:29:3e:f6:f1:52:df:66:b1:ca:65:82:2c:40:
a9:00:15:22:05:85:d5:f8:f7:eb:23:ab:c6:89:60:
02:fd:29:7e:86:60:24:4d:73:9d:42:23:df:fa:bc:
d0:52:d9:43:c2:06:6c:16:b8:6a:3c:e2:50:50:13:
2a:8c:48:dd:3d:79:e5:3a:b9:ab:59:87:90:d9:2b:
ce:4c:ac:f2:15:30:4b:a4:9a:06:1a:bf:58:12:87:
a8:8f:8c:a7:02:7a:6c:71:63:17:df:82:0e:e7:25:
10:9a:92:75:05:9b:6e:3a:99:46:f8:79:59:1a:09:
78:95:e4:85:50:39:1e:51:de:ee:19:dd:a6:d2:00:
cc:9a:a4:85:c9:96:b2:c1:db:59:68:9a:e4:7c:6e:
5d:91:38:b1:ed:19:91:a0:8c:ba:66:b8:8d:ab:f4:
67:33:e7:4c:9a:8c:ee:f5:ea:5d:b6:89:4a:c1:87:
c6:e6:e8:f7:76:ff:fd:b9:6c:37:39:76:28:4d:32:
48:ec:23:3a:4e:73:55:54:b7:ec:1c:6e:1c:b7:e2:
0e:29:60:f1:0d:83:a8:08:f6:83:7e:6d:29:7d:cb:
9c:ee:1a:71:4e:4d:14:6d:64:9e:6b:1c:89:74:2e:
e4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5F:63:A1:67:71:19:23:86:82:6E:71:08:CA:7C:5C:4B:4C:52:5E
X509v3 Authority Key Identifier:
keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e0:e6:8a:e2:2a:c5:09:91:39:73:a5:10:cf:68:f3:75:eb:
d5:e4:e3:70:73:0f:f1:ea:e7:93:f0:8f:09:0e:ae:d1:ef:e7:
f5:4b:f3:2f:68:74:b7:c8:fa:4b:70:d5:4a:63:4d:1e:51:89:
b2:a0:39:27:3c:ed:c2:41:b1:06:15:fb:4e:93:e0:d3:02:25:
3a:47:9c:b2:03:94:a4:6f:e3:34:fe:19:79:8f:f9:15:cf:20:
d1:c7:bd:8c:49:d2:e6:05:ff:be:0e:98:81:82:8d:db:76:e3:
af:0d:56:35:e3:80:cf:3d:84:11:98:da:06:8c:09:4b:17:a4:
76:33:3d:42:30:e4:3c:18:36:4e:a7:ae:f2:c9:b7:11:19:9d:
44:ad:60:50:da:44:c2:2f:e5:d3:1e:19:a9:2b:8c:f8:24:ec:
b9:12:1e:a8:7f:a5:27:6e:23:5a:3f:8f:9a:e9:f9:52:40:70:
a6:89:a8:79:b4:46:b9:70:c5:e9:41:c0:6d:5b:44:fc:f5:f3:
fc:8b:70:bf:85:ac:d8:e7:c4:93:fa:b9:97:e5:af:0b:f3:3e:
67:fd:ff:1d:de:03:c5:22:e3:1e:29:ec:e1:36:a5:db:94:52:
52:41:cb:ef:48:52:99:1d:bc:30:c7:26:38:3f:c7:12:a5:5d:
73:fd:bf:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBk/zbWRIg0G97xj7+dvQyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmM2UzYmY1NjBkYTBiMTI2MThiMDI3YWFjYTYxZmFjNzhk
NWZmNWMwHhcNMjUwNTExMjMwMDIzWhcNMjUwNTEyMjMwMDIzWjAzMTEwLwYDVQQD
Eyg4YTVmNjNhMTY3NzExOTIzODY4MjZlNzEwOGNhN2M1YzRiNGM1MjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1avOXWZFv05QUNFEeDQcpSk+9vFS
32axymWCLECpABUiBYXV+PfrI6vGiWAC/Sl+hmAkTXOdQiPf+rzQUtlDwgZsFrhq
POJQUBMqjEjdPXnlOrmrWYeQ2SvOTKzyFTBLpJoGGr9YEoeoj4ynAnpscWMX34IO
5yUQmpJ1BZtuOplG+HlZGgl4leSFUDkeUd7uGd2m0gDMmqSFyZaywdtZaJrkfG5d
kTix7RmRoIy6ZriNq/RnM+dMmozu9epdtolKwYfG5uj3dv/9uWw3OXYoTTJI7CM6
TnNVVLfsHG4ct+IOKWDxDYOoCPaDfm0pfcuc7hpxTk0UbWSeaxyJdC7k0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpfY6FncRkjhoJucQjKfFxLTFJeMB8GA1UdIwQY
MBaAFB8+O/Vg2gsSYYsCeqymH6x41f9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2Et
ZWE1NzMxNjg0OTE3LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2EtZWE1NzMxNjg0OTE3
LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouDmiuIq
xQmROXOlEM9o83Xr1eTjcHMP8ernk/CPCQ6u0e/n9UvzL2h0t8j6S3DVSmNNHlGJ
sqA5JzztwkGxBhX7TpPg0wIlOkecsgOUpG/jNP4ZeY/5Fc8g0ce9jEnS5gX/vg6Y
gYKN23bjrw1WNeOAzz2EEZjaBowJSxekdjM9QjDkPBg2Tqeu8sm3ERmdRK1gUNpE
wi/l0x4ZqSuM+CTsuRIeqH+lJ24jWj+Pmun5UkBwpomoebRGuXDF6UHAbVtE/PXz
/Itwv4Ws2OfEk/q5l+WvC/M+Z/3/Hd4DxSLjHins4Tal25RSUkHL70hSmR28MMcm
OD/HEqVdc/2/Kw==
-----END CERTIFICATE-----
Generated at Mon May 12 04:44:49 2025 by rpki-client