Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier: upXAPTIemabIGs5vSZHH3TAJFSV+mRBFgaCBFr5ay2Q=
Subject key identifier: BD:B8:4A:9C:E3:86:D6:C1:24:CE:F4:83:D6:91:A7:9C:49:52:7F:68
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial: 0196AEE93A129F020AFACF67699FA57183FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number: 0D42
Signing time: Thu 08 May 2025 08:00:42 +0000
Manifest this update: Thu 08 May 2025 08:00:42 +0000
Manifest next update: Fri 09 May 2025 08:00:42 +0000
Files and hashes: 1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: 0UPRCgLKBunj7CvEzAUGWcxgqGE30cXlHtAlVKg0av4=)
2: UGBpl3oHNIS2Cd9_Sczzu0VBiiE.roa (hash: wSoOj4MFImWuZ5Z3plItyJ7lOAnvxzo7omn+Vgq6Vio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:e9:3a:12:9f:02:0a:fa:cf:67:69:9f:a5:71:83:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Validity
Not Before: May 8 08:00:42 2025 GMT
Not After : May 9 08:00:42 2025 GMT
Subject: CN=bdb84a9ce386d6c124cef483d691a79c49527f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a9:5b:90:95:6e:76:15:86:82:11:e7:99:60:
36:c4:7e:7a:9c:0e:6f:2e:b5:20:26:ec:1a:14:cc:
99:f8:73:04:98:c4:38:5a:26:bf:76:24:98:05:4e:
33:e7:29:15:9b:3c:1b:36:0f:69:93:67:8a:9e:ff:
02:da:92:d5:99:ea:f6:56:ac:89:6f:06:f3:38:ed:
c7:37:dd:70:dc:3e:d1:73:41:64:f1:ff:eb:df:46:
6a:a1:34:6f:2b:da:0a:6a:f5:9d:2c:dc:cd:7e:71:
ce:d0:ea:dd:be:15:6e:24:a9:5f:23:d7:cf:67:bc:
1d:4f:3a:3b:26:c7:18:31:1f:68:af:0d:e5:8f:8f:
1b:0f:a4:74:24:d7:71:ca:4d:63:9f:68:7d:82:83:
f8:4a:1c:dd:5e:a0:c6:0a:a3:93:6b:3a:26:be:6f:
20:90:09:1c:d8:40:af:af:52:ce:4a:d1:bd:67:e3:
d5:58:c5:07:d0:f2:c7:4e:ac:42:95:e6:55:c7:ef:
c7:b0:40:d9:e2:b4:59:6b:eb:45:d1:1c:69:6e:d4:
75:ec:c1:bf:2e:7d:0d:64:91:54:46:57:bf:43:8b:
4f:c4:66:c5:07:f8:92:40:c3:20:3b:19:c3:cb:3a:
49:d6:e4:11:a7:5e:a4:75:8e:0f:07:c9:d6:d5:4f:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B8:4A:9C:E3:86:D6:C1:24:CE:F4:83:D6:91:A7:9C:49:52:7F:68
X509v3 Authority Key Identifier:
keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f2:1c:aa:0b:ff:65:68:fa:d6:d8:65:44:5c:10:8f:e1:80:
d3:bf:3d:cd:cc:6a:a9:cd:f6:91:43:67:cc:f7:c1:06:f2:53:
24:1a:24:d0:5f:f2:e8:8e:82:b9:77:3f:ee:e7:24:f9:37:5c:
b4:c7:a3:f0:5e:33:81:ea:19:6e:89:3d:41:51:7b:f8:36:76:
a9:4a:e0:70:7d:75:cc:fb:1e:b7:0e:1d:fc:76:c3:d2:84:a0:
64:61:2b:5b:e8:3c:ec:12:6d:ba:0b:ca:84:63:f2:cf:dc:dd:
cf:c4:cc:79:a7:92:80:51:42:45:88:6a:70:ec:e3:93:39:c0:
df:59:17:87:a5:ec:13:d5:92:f3:78:b1:4c:08:80:40:29:d5:
50:60:21:54:46:dd:a2:00:b9:9e:41:11:11:df:19:64:74:3f:
45:f5:50:25:66:bf:25:e9:92:1b:cb:85:64:90:37:84:0d:25:
0a:4c:4e:ec:30:fd:63:67:4e:9f:93:8e:fc:80:c7:22:f8:71:
51:78:91:ed:93:73:cd:f4:ef:e0:d4:21:ff:ad:f7:bb:fa:c9:
f2:c2:22:74:a3:6f:98:79:fe:b4:72:92:e0:03:62:2b:ba:3c:
0a:3c:36:25:40:46:0b:36:14:37:e7:fb:bd:46:9c:01:0b:e3:
41:db:aa:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZau6ToSnwIK+s9naZ+lcYP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzhiMTgzNmRlY2FiNGZmNWJkZmE1ZTM3N2EzZGY4N2Yx
OGZjMGYwHhcNMjUwNTA4MDgwMDQyWhcNMjUwNTA5MDgwMDQyWjAzMTEwLwYDVQQD
EyhiZGI4NGE5Y2UzODZkNmMxMjRjZWY0ODNkNjkxYTc5YzQ5NTI3ZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6lbkJVudhWGghHnmWA2xH56nA5v
LrUgJuwaFMyZ+HMEmMQ4Wia/diSYBU4z5ykVmzwbNg9pk2eKnv8C2pLVmer2VqyJ
bwbzOO3HN91w3D7Rc0Fk8f/r30ZqoTRvK9oKavWdLNzNfnHO0OrdvhVuJKlfI9fP
Z7wdTzo7JscYMR9orw3lj48bD6R0JNdxyk1jn2h9goP4ShzdXqDGCqOTazomvm8g
kAkc2ECvr1LOStG9Z+PVWMUH0PLHTqxCleZVx+/HsEDZ4rRZa+tF0RxpbtR17MG/
Ln0NZJFURle/Q4tPxGbFB/iSQMMgOxnDyzpJ1uQRp16kdY4PB8nW1U9GMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL24SpzjhtbBJM70g9aRp5xJUn9oMB8GA1UdIwQY
MBaAFBx4sYNt7KtP9b36Xjd6Pfh/GPwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jNjE1MmQtMWM5MC00MGNjLWEyMDYt
ZWMzY2IzNmQxMDI2LzEvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jNjE1MmQtMWM5MC00MGNjLWEyMDYtZWMzY2IzNmQxMDI2
LzEvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/Icqgv/
ZWj61thlRFwQj+GA0789zcxqqc32kUNnzPfBBvJTJBok0F/y6I6CuXc/7uck+Tdc
tMej8F4zgeoZbok9QVF7+DZ2qUrgcH11zPsetw4d/HbD0oSgZGErW+g87BJtugvK
hGPyz9zdz8TMeaeSgFFCRYhqcOzjkznA31kXh6XsE9WS83ixTAiAQCnVUGAhVEbd
ogC5nkEREd8ZZHQ/RfVQJWa/JemSG8uFZJA3hA0lCkxO7DD9Y2dOn5OO/IDHIvhx
UXiR7ZNzzfTv4NQh/633u/rJ8sIidKNvmHn+tHKS4ANiK7o8Cjw2JUBGCzYUN+f7
vUacAQvjQduq6g==
-----END CERTIFICATE-----
Generated at Thu May 8 15:36:36 2025 by rpki-client