Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier: 7/zpCZ3fhgfzBqDTF1eJHflGWJKqk0EmL/jNvol5pFU=
Subject key identifier: CD:41:B5:D7:DD:FE:A9:26:1D:C6:D8:3E:28:5B:A3:78:EF:B1:F4:A0
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial: 019690A7923F65E4CEF9A69E889119F61C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number: 14B0
Signing time: Fri 02 May 2025 11:00:23 +0000
Manifest this update: Fri 02 May 2025 11:00:23 +0000
Manifest next update: Sat 03 May 2025 11:00:23 +0000
Files and hashes: 1: GYb1F3991igV-Xs-ZoTKTm-Vg7M.roa (hash: oDfsrWpPRTbFkqWOBaawHb+IseXIbMKYHakcvEvzdXQ=)
2: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: Sirf1lhjuI2rSUAn0BcVVpDSwrzljOzw8U3aN28wEjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:a7:92:3f:65:e4:ce:f9:a6:9e:88:91:19:f6:1c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Validity
Not Before: May 2 11:00:23 2025 GMT
Not After : May 3 11:00:23 2025 GMT
Subject: CN=cd41b5d7ddfea9261dc6d83e285ba378efb1f4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:00:79:d1:be:37:00:8c:1b:d3:ef:94:6e:
3e:a0:ed:de:ea:ae:e9:09:97:1f:51:47:3a:f1:59:
cf:00:0a:a7:5c:3d:d3:f3:8d:c8:de:8d:06:ca:fc:
d5:dc:bc:a6:fa:fd:25:5d:d6:92:43:33:84:e4:1e:
31:a0:81:51:c5:a4:3c:a1:06:1e:94:f3:1b:c8:a9:
97:35:92:0e:78:99:b2:54:2b:bb:ca:27:e0:97:50:
73:87:b5:ba:9a:ad:e8:ed:a2:c5:7b:4a:f4:66:64:
92:a7:2c:c5:51:14:0d:0e:c3:67:8b:cc:c4:6c:a7:
ad:8f:97:9b:ca:30:ea:08:7e:71:cf:d6:8b:d6:17:
c6:fa:fa:8b:63:3a:09:ce:f5:24:86:a3:fa:7a:9b:
10:c5:ed:54:27:e6:57:d9:13:dc:75:11:8e:0d:8d:
a2:28:0c:0f:5f:8f:85:46:28:5e:06:99:b3:55:f8:
05:25:e5:fe:a8:0f:0d:38:aa:40:25:7f:0a:77:d6:
54:46:83:01:8f:85:8c:03:2b:50:20:c4:6f:58:dc:
7f:05:8b:2e:c8:c0:df:1d:29:e8:03:0a:ff:a2:71:
f6:1b:b9:fb:fe:18:df:8e:ad:28:1e:eb:ce:a3:d1:
40:33:5e:dd:c3:81:8d:d9:d0:af:8b:05:82:1f:1d:
bd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:41:B5:D7:DD:FE:A9:26:1D:C6:D8:3E:28:5B:A3:78:EF:B1:F4:A0
X509v3 Authority Key Identifier:
keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a6:0c:4c:96:38:cc:a3:a5:69:ed:dc:82:c7:ec:8c:6c:f7:
ac:7a:42:35:ea:9c:f5:4c:44:95:f4:c4:95:63:8b:4a:15:58:
aa:99:89:d3:1a:24:1a:b0:39:13:39:b0:54:97:40:a7:90:04:
d2:e4:40:72:24:79:f4:d5:e9:cb:68:cb:0c:14:50:dc:f7:b8:
ae:ab:72:1d:01:ba:66:07:bd:7e:68:28:8a:72:b0:38:07:38:
a5:b1:01:a9:b1:8e:4d:2a:44:e1:1f:36:a9:dc:cb:f3:17:fa:
f6:ab:30:3b:07:f6:c3:53:79:af:ea:4f:ee:86:ed:4f:de:77:
93:35:80:a9:7d:2a:0d:d6:55:5b:81:96:ff:85:8e:d3:48:b2:
ef:a8:1b:5b:18:e1:67:10:3f:f6:ed:ab:1b:fa:ce:91:50:81:
76:e1:a4:79:65:b8:39:a7:8b:85:1e:ff:b1:4b:8f:96:9d:eb:
85:68:7a:55:df:27:17:9f:8c:a5:44:96:81:2c:05:37:65:82:
ac:02:6c:c5:07:43:b7:e1:1f:8a:89:fa:be:2d:c7:17:f1:34:
5f:b0:2a:28:ab:8d:0e:70:d0:8b:42:97:8b:0c:ea:06:5c:56:
0f:32:5c:23:e3:62:86:c6:1b:96:a9:3d:ce:8b:20:e6:42:e2:
f6:a3:35:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaQp5I/ZeTO+aaeiJEZ9hyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOWZmZDhlZTMyYjNlMzU3OTc4ZDljYjk5MjE2Y2NlODEz
N2EzMjQwHhcNMjUwNTAyMTEwMDIzWhcNMjUwNTAzMTEwMDIzWjAzMTEwLwYDVQQD
EyhjZDQxYjVkN2RkZmVhOTI2MWRjNmQ4M2UyODViYTM3OGVmYjFmNGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt4AedG+NwCMG9PvlG4+oO3e6q7p
CZcfUUc68VnPAAqnXD3T843I3o0GyvzV3Lym+v0lXdaSQzOE5B4xoIFRxaQ8oQYe
lPMbyKmXNZIOeJmyVCu7yifgl1Bzh7W6mq3o7aLFe0r0ZmSSpyzFURQNDsNni8zE
bKetj5ebyjDqCH5xz9aL1hfG+vqLYzoJzvUkhqP6epsQxe1UJ+ZX2RPcdRGODY2i
KAwPX4+FRiheBpmzVfgFJeX+qA8NOKpAJX8Kd9ZURoMBj4WMAytQIMRvWNx/BYsu
yMDfHSnoAwr/onH2G7n7/hjfjq0oHuvOo9FAM17dw4GN2dCviwWCHx29VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1Btdfd/qkmHcbYPihbo3jvsfSgMB8GA1UdIwQY
MBaAFB+f/Y7jKz41eXjZy5khbM6BN6MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUt
YWFlNjM4ZGJiMWMxLzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUtYWFlNjM4ZGJiMWMx
LzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqYMTJY4
zKOlae3cgsfsjGz3rHpCNeqc9UxElfTElWOLShVYqpmJ0xokGrA5EzmwVJdAp5AE
0uRAciR59NXpy2jLDBRQ3Pe4rqtyHQG6Zge9fmgoinKwOAc4pbEBqbGOTSpE4R82
qdzL8xf69qswOwf2w1N5r+pP7obtT953kzWAqX0qDdZVW4GW/4WO00iy76gbWxjh
ZxA/9u2rG/rOkVCBduGkeWW4OaeLhR7/sUuPlp3rhWh6Vd8nF5+MpUSWgSwFN2WC
rAJsxQdDt+Efion6vi3HF/E0X7AqKKuNDnDQi0KXiwzqBlxWDzJcI+NihsYblqk9
zosg5kLi9qM14Q==
-----END CERTIFICATE-----
Generated at Fri May 2 19:17:15 2025 by rpki-client