Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
File: HEwmJz2igh_OJgdaoKbiMB7ISSc.mft (raw, json)
Hash identifier: hr6LIqHKylLnlHdUQ9gpRQLqC2312sth+wZd7vAxZXk=
Subject key identifier: E6:4A:74:51:D9:25:B7:66:77:49:12:EF:02:5F:F0:20:B7:64:03:F4
Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Certificate serial: 01969FE3F22969F51C9347A71F67FCC90CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
Manifest number: 14B5
Signing time: Mon 05 May 2025 10:00:38 +0000
Manifest this update: Mon 05 May 2025 10:00:38 +0000
Manifest next update: Tue 06 May 2025 10:00:38 +0000
Files and hashes: 1: 5MK1ewnt7LozxEmddZiWa3omfKc.roa (hash: 7+tCKj1f1iwSFAN/o1/yY8fVwb73KSasEYzwGjDKXO0=)
2: DeHazeP3A9wAumTO_Rmx5RqWaqs.roa (hash: 0hOPuiiQ+UKk5lNFYgiHmEshvjQhpp/6FLqfnT4DM3I=)
3: HEwmJz2igh_OJgdaoKbiMB7ISSc.crl (hash: fjZN2nAFm39AVavvnJo1LrxwQMyUY+xb9JSQ5v3aUlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:f2:29:69:f5:1c:93:47:a7:1f:67:fc:c9:0c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Validity
Not Before: May 5 10:00:38 2025 GMT
Not After : May 6 10:00:38 2025 GMT
Subject: CN=e64a7451d925b766774912ef025ff020b76403f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d4:2d:19:4c:8d:e2:17:17:4f:c2:0b:32:2e:
31:b1:c5:38:bd:5c:ce:4c:49:66:98:6f:51:5a:8f:
53:e4:8e:96:a4:38:cc:e5:79:38:b4:62:2f:ac:99:
c4:52:45:e5:a5:2e:f4:31:b3:17:00:00:77:6f:05:
a0:f7:c8:08:9c:8a:ca:f5:27:3a:9a:2c:57:0a:95:
4d:31:1e:fc:44:a9:0d:81:08:4d:b6:22:71:2f:52:
ec:53:f1:af:4f:90:36:9e:0f:c5:fd:00:9c:9b:f6:
e5:75:88:d4:3a:30:49:16:2f:10:33:c5:70:97:d4:
27:3a:11:9d:1a:29:4f:c6:02:c7:6d:f5:24:80:30:
ee:9c:d9:47:23:b6:d5:4e:88:5c:e2:93:20:a3:eb:
83:cd:9e:c0:9a:17:ae:e3:f2:2e:8e:a9:a1:b4:0d:
c1:e6:0d:81:89:fc:7c:b5:5e:2e:f8:9e:61:2e:79:
83:88:88:b3:cf:35:78:61:d6:24:71:de:a7:87:ff:
81:c1:d1:91:15:0c:3a:9d:f3:62:66:cc:72:d8:12:
e0:da:5d:e8:12:09:f3:49:46:44:66:43:d5:e2:5a:
e2:ec:d6:6c:4e:ae:c2:46:aa:80:63:21:e6:1e:d5:
df:04:01:6a:10:32:37:f4:de:d6:03:41:be:eb:52:
38:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4A:74:51:D9:25:B7:66:77:49:12:EF:02:5F:F0:20:B7:64:03:F4
X509v3 Authority Key Identifier:
keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8a:50:e8:4b:7f:8a:3a:ff:e1:c9:fc:7a:8c:ea:d6:9d:bd:
bf:3a:94:aa:77:ec:a5:77:22:4e:13:8e:b0:79:23:fa:ae:51:
82:d8:a4:e2:3c:b9:b0:67:07:b4:02:6c:4d:40:17:fc:14:88:
99:8c:71:13:84:0e:e0:83:42:cd:f4:df:77:ca:ff:b9:c1:83:
3e:45:8a:bb:2c:fa:e3:d6:2c:63:ff:d6:ae:56:6a:83:68:20:
5f:f2:a4:ea:fc:7b:ea:54:a0:8b:e7:cd:ac:95:56:70:80:fa:
e0:94:76:7e:36:65:c3:e6:ad:7e:da:b6:96:aa:02:e3:c6:b6:
ee:67:42:03:44:35:c6:25:cc:d1:e5:f0:20:97:0d:f7:95:87:
48:3d:1e:71:66:73:15:55:0f:cf:bc:95:8f:84:4e:b4:b4:4f:
f9:ad:44:b9:0a:53:74:1a:7b:b5:4b:45:37:d7:80:1b:71:e0:
6d:a3:79:54:c8:af:44:f0:97:aa:67:ad:cb:2f:69:7f:03:35:
02:6a:a4:c5:da:68:83:4c:bc:be:22:04:b6:d4:8b:d2:a8:c4:
2d:a2:54:0e:43:07:b8:47:9f:cf:21:4f:e7:8a:3b:70:f3:a1:
38:ba:24:85:78:26:ea:e7:d7:74:7c:5e:88:d2:ec:70:b8:64:
c5:75:4b:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaf4/IpafUck0enH2f8yQzjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNGMyNjI3M2RhMjgyMWZjZTI2MDc1YWEwYTZlMjMwMWVj
ODQ5MjcwHhcNMjUwNTA1MTAwMDM4WhcNMjUwNTA2MTAwMDM4WjAzMTEwLwYDVQQD
EyhlNjRhNzQ1MWQ5MjViNzY2Nzc0OTEyZWYwMjVmZjAyMGI3NjQwM2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tQtGUyN4hcXT8ILMi4xscU4vVzO
TElmmG9RWo9T5I6WpDjM5Xk4tGIvrJnEUkXlpS70MbMXAAB3bwWg98gInIrK9Sc6
mixXCpVNMR78RKkNgQhNtiJxL1LsU/GvT5A2ng/F/QCcm/bldYjUOjBJFi8QM8Vw
l9QnOhGdGilPxgLHbfUkgDDunNlHI7bVTohc4pMgo+uDzZ7Amheu4/IujqmhtA3B
5g2Bifx8tV4u+J5hLnmDiIizzzV4YdYkcd6nh/+BwdGRFQw6nfNiZsxy2BLg2l3o
EgnzSUZEZkPV4lri7NZsTq7CRqqAYyHmHtXfBAFqEDI39N7WA0G+61I4lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZKdFHZJbdmd0kS7wJf8CC3ZAP0MB8GA1UdIwQY
MBaAFBxMJic9ooIfziYHWqCm4jAeyEknMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEV3bUp6MmlnaF9PSmdkYW9LYmlNQjdJU1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81NDVjY2UtYWYxMS00ZWY3LTlhNWQt
ZDM1YjQzMGFmMjZkLzEvSEV3bUp6MmlnaF9PSmdkYW9LYmlNQjdJU1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS81NDVjY2UtYWYxMS00ZWY3LTlhNWQtZDM1YjQzMGFmMjZk
LzEvSEV3bUp6MmlnaF9PSmdkYW9LYmlNQjdJU1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIpQ6Et/
ijr/4cn8eozq1p29vzqUqnfspXciThOOsHkj+q5Rgtik4jy5sGcHtAJsTUAX/BSI
mYxxE4QO4INCzfTfd8r/ucGDPkWKuyz649YsY//WrlZqg2ggX/Kk6vx76lSgi+fN
rJVWcID64JR2fjZlw+atftq2lqoC48a27mdCA0Q1xiXM0eXwIJcN95WHSD0ecWZz
FVUPz7yVj4ROtLRP+a1EuQpTdBp7tUtFN9eAG3HgbaN5VMivRPCXqmetyy9pfwM1
Amqkxdpog0y8viIEttSL0qjELaJUDkMHuEefzyFP54o7cPOhOLokhXgm6ufXdHxe
iNLscLhkxXVLlg==
-----END CERTIFICATE-----
Generated at Mon May 5 14:52:08 2025 by rpki-client