Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
File: hhiHKrn6K6AssBpEzo64dkEoHBw.mft (raw, json)
Hash identifier: r/KJVV67aCzHl9EfR+sW2VW3aIAXpt/V/wd2Y8flrpI=
Subject key identifier: 1F:AA:5D:FA:C8:72:04:32:6E:41:A0:E5:AE:B2:77:1E:93:F4:B7:92
Authority key identifier: 86:18:87:2A:B9:FA:2B:A0:2C:B0:1A:44:CE:8E:B8:76:41:28:1C:1C
Certificate issuer: /CN=8618872ab9fa2ba02cb01a44ce8eb87641281c1c
Certificate serial: 0196BFDCCE5EDFC982839DEA5C66B6CFA5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
Manifest number: 04D4
Signing time: Sun 11 May 2025 15:00:41 +0000
Manifest this update: Sun 11 May 2025 15:00:41 +0000
Manifest next update: Mon 12 May 2025 15:00:41 +0000
Files and hashes: 1: hhiHKrn6K6AssBpEzo64dkEoHBw.crl (hash: T2pHI0Y2cgU68kFRONaV+J2g8CcHO4UteANYj5mydMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:ce:5e:df:c9:82:83:9d:ea:5c:66:b6:cf:a5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8618872ab9fa2ba02cb01a44ce8eb87641281c1c
Validity
Not Before: May 11 15:00:41 2025 GMT
Not After : May 12 15:00:41 2025 GMT
Subject: CN=1faa5dfac87204326e41a0e5aeb2771e93f4b792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5d:c3:cb:82:d4:63:7d:1c:ea:52:57:3c:71:
19:ae:36:46:17:91:41:68:fa:f5:c8:ff:84:bb:83:
6b:95:a6:d5:89:da:ac:1a:12:df:58:6e:a4:aa:de:
0b:0a:4e:98:77:a2:b0:87:10:8b:1e:8a:74:1d:1f:
3f:1a:0c:e7:41:73:7b:fe:5e:f0:eb:ec:15:2f:29:
6d:20:4b:02:5d:bf:09:27:1e:6c:11:ba:0c:92:70:
9d:75:31:9d:f8:c7:68:a3:08:65:7c:27:d5:e7:d7:
bd:b3:29:e9:fc:eb:ae:9d:e6:37:cc:ef:71:59:53:
82:13:f4:c5:46:ff:cb:0c:78:bd:1d:24:bd:45:28:
f9:c4:d4:2e:54:03:9e:64:09:27:21:0d:16:8f:c3:
68:70:18:10:e7:59:6c:54:44:7c:0b:af:62:4b:92:
d8:79:da:a8:d7:ae:2f:ab:82:75:80:bc:d9:30:7d:
33:30:e4:2a:8b:37:17:4d:14:6c:0a:f5:14:9f:58:
44:d8:2f:c0:82:f8:6a:4c:04:69:cd:f5:92:89:61:
09:73:37:d3:67:82:70:ae:50:28:6c:c6:7e:b8:1e:
2b:e5:ef:fa:de:33:7a:27:94:a1:ef:cf:f4:d0:fb:
73:6f:80:87:ae:8c:a3:f9:3f:77:d2:41:47:6e:01:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AA:5D:FA:C8:72:04:32:6E:41:A0:E5:AE:B2:77:1E:93:F4:B7:92
X509v3 Authority Key Identifier:
keyid:86:18:87:2A:B9:FA:2B:A0:2C:B0:1A:44:CE:8E:B8:76:41:28:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ba:9f:82:be:67:ca:4d:4c:6c:01:81:87:e7:12:2d:36:7e:
df:e7:7d:90:28:55:07:2c:14:1b:45:5f:dc:a0:ff:2b:c7:6e:
ed:ab:f2:50:0c:26:23:58:f4:3b:7a:b4:64:8d:7c:b5:8a:1c:
74:e5:a3:36:0e:4b:5d:c7:a0:19:10:86:fd:40:0f:49:19:24:
19:e5:d1:75:37:8d:4b:a1:2f:2f:8e:a5:62:0b:10:5a:ee:e0:
55:fa:52:8d:69:63:ca:01:19:62:43:65:bf:8f:ed:08:b8:e6:
06:02:9d:75:a4:65:51:39:64:3e:3d:c9:b6:cd:e9:3b:02:da:
02:84:04:c0:34:9d:cb:bd:58:66:f4:71:c6:df:26:27:fb:8c:
1f:ec:b2:0d:07:8b:4f:ea:db:a8:80:89:15:b8:a9:3f:32:fd:
1b:d4:7e:ca:27:fd:7f:ac:15:32:6a:05:6f:3c:9f:4e:84:a6:
da:3e:2e:f8:b4:87:90:07:6d:54:0a:5b:21:29:8c:1e:f1:30:
8d:3f:9b:2c:ff:5f:d7:84:bd:f7:4f:b8:6e:b3:fe:21:29:5f:
fb:50:27:9b:82:b0:9e:ac:ba:bf:00:c6:1b:e5:2e:78:28:17:
ce:4e:d8:b8:f4:cb:f4:62:68:46:33:0d:ff:70:21:e4:ef:89:
14:dc:d3:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/3M5e38mCg53qXGa2z6WrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MTg4NzJhYjlmYTJiYTAyY2IwMWE0NGNlOGViODc2NDEy
ODFjMWMwHhcNMjUwNTExMTUwMDQxWhcNMjUwNTEyMTUwMDQxWjAzMTEwLwYDVQQD
EygxZmFhNWRmYWM4NzIwNDMyNmU0MWEwZTVhZWIyNzcxZTkzZjRiNzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn13Dy4LUY30c6lJXPHEZrjZGF5FB
aPr1yP+Eu4NrlabVidqsGhLfWG6kqt4LCk6Yd6KwhxCLHop0HR8/GgznQXN7/l7w
6+wVLyltIEsCXb8JJx5sEboMknCddTGd+MdoowhlfCfV59e9synp/OuuneY3zO9x
WVOCE/TFRv/LDHi9HSS9RSj5xNQuVAOeZAknIQ0Wj8NocBgQ51lsVER8C69iS5LY
edqo164vq4J1gLzZMH0zMOQqizcXTRRsCvUUn1hE2C/AgvhqTARpzfWSiWEJczfT
Z4JwrlAobMZ+uB4r5e/63jN6J5Sh78/00Ptzb4CHroyj+T930kFHbgECBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+qXfrIcgQybkGg5a6ydx6T9LeSMB8GA1UdIwQY
MBaAFIYYhyq5+iugLLAaRM6OuHZBKBwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGhpSEtybjZLNkFzc0JwRXpvNjRka0VvSEJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84MjlhODctMjJmYS00NjMyLTg2MmMt
YmQ2OWY1MjYxODFiLzEvaGhpSEtybjZLNkFzc0JwRXpvNjRka0VvSEJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC84MjlhODctMjJmYS00NjMyLTg2MmMtYmQ2OWY1MjYxODFi
LzEvaGhpSEtybjZLNkFzc0JwRXpvNjRka0VvSEJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLqfgr5n
yk1MbAGBh+cSLTZ+3+d9kChVBywUG0Vf3KD/K8du7avyUAwmI1j0O3q0ZI18tYoc
dOWjNg5LXcegGRCG/UAPSRkkGeXRdTeNS6EvL46lYgsQWu7gVfpSjWljygEZYkNl
v4/tCLjmBgKddaRlUTlkPj3Jts3pOwLaAoQEwDSdy71YZvRxxt8mJ/uMH+yyDQeL
T+rbqICJFbipPzL9G9R+yif9f6wVMmoFbzyfToSm2j4u+LSHkAdtVApbISmMHvEw
jT+bLP9f14S990+4brP+ISlf+1Anm4Kwnqy6vwDGG+UueCgXzk7YuPTL9GJoRjMN
/3Ah5O+JFNzTsA==
-----END CERTIFICATE-----
Generated at Sun May 11 17:25:56 2025 by rpki-client