Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
File: HpUuiDc295y9nFZHBL88NmIbjso.mft (raw, json)
Hash identifier: sa4yX8xM91cmI00vd8L518fB41yE9qs9laWfXpK5ebo=
Subject key identifier: 3B:0E:C9:1C:1B:36:C9:D5:51:DD:49:B1:58:AF:C9:9C:CB:F6:B6:F4
Authority key identifier: 1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
Certificate issuer: /CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Certificate serial: 01967C0E3384ECA5E2F828B7A203B20FDC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
Manifest number: 1516
Signing time: Mon 28 Apr 2025 11:00:27 +0000
Manifest this update: Mon 28 Apr 2025 11:00:27 +0000
Manifest next update: Tue 29 Apr 2025 11:00:27 +0000
Files and hashes: 1: HpUuiDc295y9nFZHBL88NmIbjso.crl (hash: C6u0KSKusx4IUNaqA8Z+5iFf4MMjcp+nBvV9cOtEyGo=)
2: nfcB4W3-frcdsttLFxfqKvUAYPA.roa (hash: LSLZu1kedUT6p6v50vQ31LG0ikk6bjLybjbis0FT+ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:33:84:ec:a5:e2:f8:28:b7:a2:03:b2:0f:dc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Validity
Not Before: Apr 28 11:00:27 2025 GMT
Not After : Apr 29 11:00:27 2025 GMT
Subject: CN=3b0ec91c1b36c9d551dd49b158afc99ccbf6b6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:de:bb:8d:40:03:6e:56:b0:59:d8:fb:60:97:
45:ec:89:36:17:e8:af:5b:5a:25:39:78:67:aa:34:
c6:67:3c:2b:10:7c:0e:b0:cd:46:08:89:53:b3:a9:
e7:82:42:64:d2:4a:fc:f3:ae:89:49:4a:22:b4:56:
0e:9a:c5:d3:2d:e0:06:b1:d2:83:66:c7:82:9c:7a:
d7:7a:36:e6:e9:d2:06:08:8d:91:5c:46:75:01:92:
df:c1:0d:4c:85:ab:bc:60:75:ff:6e:14:4e:e3:cc:
59:18:65:44:d2:38:9d:bc:90:7c:fa:ad:57:ac:2e:
ca:59:f0:a0:f0:32:f7:7e:38:1a:7a:e1:df:b6:d1:
8a:2f:8b:32:47:17:f5:77:93:a0:f5:8a:ce:e2:5f:
e9:c4:75:22:cf:ab:48:c7:05:f4:77:0e:d1:5c:3b:
b2:ed:dc:6b:aa:24:d1:8c:6a:ca:19:99:b2:ea:c0:
e6:6d:50:ff:da:99:31:14:66:19:ce:a3:48:67:7a:
41:4a:af:d7:0b:15:e0:a9:76:91:f1:e8:db:09:99:
cc:d0:d4:8d:b8:bf:39:8a:77:07:bc:ab:82:de:6e:
95:74:2d:a4:cd:ac:b6:b8:9e:3f:6e:b6:2d:37:4b:
9e:b3:45:4b:ec:62:da:05:6e:0a:1e:5d:44:16:19:
24:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0E:C9:1C:1B:36:C9:D5:51:DD:49:B1:58:AF:C9:9C:CB:F6:B6:F4
X509v3 Authority Key Identifier:
keyid:1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1f:5e:f1:ca:c5:61:cb:54:a0:3e:8f:f8:a1:3c:40:ad:0f:
d7:21:1f:f8:d0:0f:11:02:9c:03:93:96:8f:9e:f1:f5:c7:84:
c7:42:49:72:c9:67:06:ac:c3:56:4a:81:70:c5:13:47:6b:11:
61:2d:f2:1c:f9:fd:5f:84:bd:dc:c2:8f:c8:dd:42:29:3b:e4:
03:67:95:2f:f3:5a:c2:7b:61:c5:ef:61:5c:8c:a1:ae:95:55:
40:c8:4d:31:06:d0:54:2c:7e:e4:c1:bd:0f:f4:5a:dd:31:98:
5b:6c:5d:40:51:12:4a:b7:30:a3:f6:4a:7a:50:37:2f:1e:d0:
9a:e4:22:4a:38:a3:f2:a4:39:f6:24:3c:2a:0f:27:b3:29:2f:
c0:b4:b1:97:7a:e8:7e:9d:23:de:b5:d1:b9:08:5d:a3:42:d4:
e6:61:c5:a9:e3:c1:fb:98:e2:33:28:20:e0:cd:57:ba:b9:62:
4d:d5:8f:18:b0:ae:09:50:36:b4:89:cd:65:1e:df:5a:c3:2e:
7b:90:8a:74:27:53:26:ef:bf:4a:0c:d5:9b:c8:3c:ab:d5:dd:
23:d1:dd:74:a8:af:20:c0:bd:10:dd:8d:80:d4:88:dd:f6:92:
7b:bb:04:71:0e:64:b3:86:43:cd:dc:b8:f0:c2:39:dc:21:02:
20:46:09:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8DjOE7KXi+Ci3ogOyD9xCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOTUyZTg4MzczNmY3OWNiZDljNTY0NzA0YmYzYzM2NjIx
YjhlY2EwHhcNMjUwNDI4MTEwMDI3WhcNMjUwNDI5MTEwMDI3WjAzMTEwLwYDVQQD
EygzYjBlYzkxYzFiMzZjOWQ1NTFkZDQ5YjE1OGFmYzk5Y2NiZjZiNmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6t67jUADblawWdj7YJdF7Ik2F+iv
W1olOXhnqjTGZzwrEHwOsM1GCIlTs6nngkJk0kr8866JSUoitFYOmsXTLeAGsdKD
ZseCnHrXejbm6dIGCI2RXEZ1AZLfwQ1Mhau8YHX/bhRO48xZGGVE0jidvJB8+q1X
rC7KWfCg8DL3fjgaeuHfttGKL4syRxf1d5Og9YrO4l/pxHUiz6tIxwX0dw7RXDuy
7dxrqiTRjGrKGZmy6sDmbVD/2pkxFGYZzqNIZ3pBSq/XCxXgqXaR8ejbCZnM0NSN
uL85incHvKuC3m6VdC2kzay2uJ4/brYtN0ues0VL7GLaBW4KHl1EFhkk0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsOyRwbNsnVUd1JsVivyZzL9rb0MB8GA1UdIwQY
MBaAFB6VLog3NvecvZxWRwS/PDZiG47KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBVdWlEYzI5NXk5bkZaSEJMODhObUlianNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iMTQwYWUtYzA0Ny00ZmY2LTg2NGYt
MzU2MDM1NjU3MWE3LzEvSHBVdWlEYzI5NXk5bkZaSEJMODhObUlianNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iMTQwYWUtYzA0Ny00ZmY2LTg2NGYtMzU2MDM1NjU3MWE3
LzEvSHBVdWlEYzI5NXk5bkZaSEJMODhObUlianNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkR9e8crF
YctUoD6P+KE8QK0P1yEf+NAPEQKcA5OWj57x9ceEx0JJcslnBqzDVkqBcMUTR2sR
YS3yHPn9X4S93MKPyN1CKTvkA2eVL/Nawnthxe9hXIyhrpVVQMhNMQbQVCx+5MG9
D/Ra3TGYW2xdQFESSrcwo/ZKelA3Lx7QmuQiSjij8qQ59iQ8Kg8nsykvwLSxl3ro
fp0j3rXRuQhdo0LU5mHFqePB+5jiMygg4M1XurliTdWPGLCuCVA2tInNZR7fWsMu
e5CKdCdTJu+/SgzVm8g8q9XdI9HddKivIMC9EN2NgNSI3faSe7sEcQ5ks4ZDzdy4
8MI53CECIEYJ+Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:12:02 2025 by rpki-client