Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json)
Hash identifier: YaDA3q41VA75sIj2dNqBXOI/0kTYnXhB6Mw2z020wKE=
Subject key identifier: E5:37:BC:8A:EE:82:95:E3:72:62:26:5D:CB:D8:DD:81:98:16:AC:9D
Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2
Certificate serial: 01968C266BA28EA9AD05B95D0CE3555FAC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
Manifest number: 04B8
Signing time: Thu 01 May 2025 14:00:50 +0000
Manifest this update: Thu 01 May 2025 14:00:50 +0000
Manifest next update: Fri 02 May 2025 14:00:50 +0000
Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: EukAtKVMswEFGOF1Vpkr7AX6EYmMgl4KH3X0DYV3Ico=)
2: neQhSGrd27w6Xn2chZDgwEsCrLI.roa (hash: 1tkSubS/cwYJgj12QwQ+XvFzRT5l/tNW9QOj+Oo5EeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:26:6b:a2:8e:a9:ad:05:b9:5d:0c:e3:55:5f:ac:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2
Validity
Not Before: May 1 14:00:50 2025 GMT
Not After : May 2 14:00:50 2025 GMT
Subject: CN=e537bc8aee8295e37262265dcbd8dd819816ac9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:ea:84:b9:f2:b7:ba:b4:40:4d:c0:69:b0:
26:5d:e2:ea:58:86:75:31:f8:0c:a0:f2:2e:02:95:
b2:18:f3:65:26:be:eb:ef:9e:e7:21:0d:13:0a:03:
df:80:34:59:a0:5a:1a:00:0a:2e:90:6c:14:6a:84:
9e:a4:50:0a:c8:f8:73:3a:18:0a:31:a3:10:37:10:
59:90:25:cf:fc:ba:82:9e:c9:b6:84:30:07:7b:c6:
6e:ae:88:7c:6b:75:b6:6a:b8:5d:b0:2d:af:3e:6e:
31:45:c4:c2:d8:1f:6c:ef:63:cf:b2:0f:fb:54:47:
ce:06:aa:8a:34:fb:1c:ba:d2:ed:84:46:81:59:06:
cd:2a:2f:e0:3b:56:3d:42:57:f9:fa:9b:27:c7:6a:
ef:78:9d:71:e2:9e:fa:4d:90:a1:73:a4:a7:f9:56:
a4:d2:aa:1f:6e:f2:7b:57:d0:f4:ff:47:23:a4:1d:
9f:cf:16:a4:3f:16:c3:90:7e:7a:4c:5f:66:54:eb:
1f:58:e1:68:da:39:d7:44:ef:22:7c:d9:28:39:85:
a4:3c:e1:31:f1:af:6e:43:50:fd:1f:fe:4b:f1:e1:
ed:12:21:e5:05:2f:8a:58:e2:59:3f:91:b7:bd:a4:
b3:28:88:56:42:6a:b6:5d:40:c0:c6:ea:db:5b:a0:
de:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:37:BC:8A:EE:82:95:E3:72:62:26:5D:CB:D8:DD:81:98:16:AC:9D
X509v3 Authority Key Identifier:
keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d7:9c:e5:a1:83:ed:c9:a4:80:61:64:7f:0e:f3:f9:49:bd:
ca:f2:59:6e:cf:eb:bf:66:8c:5f:a7:13:5b:bf:0c:89:52:51:
5e:e1:7e:52:ce:26:53:6c:48:fa:10:f0:c1:0a:d5:e0:aa:f4:
53:4a:46:11:3a:b1:74:94:ff:5b:4b:6b:95:0e:2d:35:07:d7:
a6:ef:96:42:67:ca:76:38:ae:e3:58:bd:94:ef:3c:ed:33:5f:
c0:25:47:32:4c:9b:f8:2c:4d:84:62:70:d2:cf:c7:07:ff:49:
e4:c4:d9:76:74:56:fa:bf:c4:85:45:0a:cd:73:cf:15:a6:1b:
2e:99:bd:c8:6b:a6:c3:55:d3:6e:1a:79:8a:19:7e:0e:ee:a1:
ac:c2:e4:e4:4f:4f:a6:b7:2c:18:61:ae:4e:f8:d8:f6:06:bd:
d1:63:9f:ea:a2:bc:82:c5:1e:21:24:0a:60:21:89:83:48:28:
68:0e:8d:45:07:41:aa:d1:4f:d3:33:23:22:da:45:02:1c:e3:
e1:04:6a:6f:ca:da:db:6b:e9:8d:bb:f5:91:b2:a9:3f:15:bb:
a4:58:a7:2b:da:7d:f4:69:90:45:a6:6a:19:0c:7b:fb:88:60:
f6:d8:ed:f1:18:46:cf:1e:c5:42:e9:97:5b:eb:8a:c4:cb:8b:
da:27:a7:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaMJmuijqmtBbldDONVX6wCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NWY0MTJhZGIxOGQ0MmZhZGQwYTg1ODczNzE4ZGFkYTkz
MWQxYzIwHhcNMjUwNTAxMTQwMDUwWhcNMjUwNTAyMTQwMDUwWjAzMTEwLwYDVQQD
EyhlNTM3YmM4YWVlODI5NWUzNzI2MjI2NWRjYmQ4ZGQ4MTk4MTZhYzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+bqhLnyt7q0QE3AabAmXeLqWIZ1
MfgMoPIuApWyGPNlJr7r757nIQ0TCgPfgDRZoFoaAAoukGwUaoSepFAKyPhzOhgK
MaMQNxBZkCXP/LqCnsm2hDAHe8Zuroh8a3W2arhdsC2vPm4xRcTC2B9s72PPsg/7
VEfOBqqKNPscutLthEaBWQbNKi/gO1Y9Qlf5+psnx2rveJ1x4p76TZChc6Sn+Vak
0qofbvJ7V9D0/0cjpB2fzxakPxbDkH56TF9mVOsfWOFo2jnXRO8ifNkoOYWkPOEx
8a9uQ1D9H/5L8eHtEiHlBS+KWOJZP5G3vaSzKIhWQmq2XUDAxurbW6DeaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOU3vIrugpXjcmImXcvY3YGYFqydMB8GA1UdIwQY
MBaAFIdfQSrbGNQvrdCoWHNxja2pMdHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iODQxY2MtZDY2My00NjMzLTljNDkt
MTQ3ZTM4NmMwMTUwLzEvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iODQxY2MtZDY2My00NjMzLTljNDktMTQ3ZTM4NmMwMTUw
LzEvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9ec5aGD
7cmkgGFkfw7z+Um9yvJZbs/rv2aMX6cTW78MiVJRXuF+Us4mU2xI+hDwwQrV4Kr0
U0pGETqxdJT/W0trlQ4tNQfXpu+WQmfKdjiu41i9lO887TNfwCVHMkyb+CxNhGJw
0s/HB/9J5MTZdnRW+r/EhUUKzXPPFaYbLpm9yGumw1XTbhp5ihl+Du6hrMLk5E9P
prcsGGGuTvjY9ga90WOf6qK8gsUeISQKYCGJg0goaA6NRQdBqtFP0zMjItpFAhzj
4QRqb8ra22vpjbv1kbKpPxW7pFinK9p99GmQRaZqGQx7+4hg9tjt8RhGzx7FQumX
W+uKxMuL2iendg==
-----END CERTIFICATE-----
Generated at Thu May 1 20:23:30 2025 by rpki-client