Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File: 1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier: EHu/8tXbpeLzNp303mOXKrGMZxvENH8qJDLzqLFq4G8=
Subject key identifier: 8E:B1:D0:98:D2:A8:AC:C7:71:E3:7E:25:76:32:1D:AE:E2:24:CE:2C
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial: 01968EB976BC378C79C831D34A5284B561D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number: 1269
Signing time: Fri 02 May 2025 02:00:41 +0000
Manifest this update: Fri 02 May 2025 02:00:41 +0000
Manifest next update: Sat 03 May 2025 02:00:41 +0000
Files and hashes: 1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: PBpZ12zdN1qm6O1sDE9eFbRHVxA6t0lFltbozP+VtoM=)
2: HtyuFwumqnKPMziahbUKFS0HWi4.roa (hash: +Ry2R7+vd5notaRsVNHJudJevoZS3UrzytB191N2Lxg=)
3: J_BkHOkhHT0AEp-6tEsjYFw6hs0.roa (hash: JAS00/5XA38hVRagh+vY9Urvk5gt+2KkIUuPK6DqVFc=)
4: nPGwQCzaguMv6zj3Fc1otRQL65Y.roa (hash: 8JiUrMWy4jhS7VoztMhcDmEoQ8qVt8FQ/VbezbbM4z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:b9:76:bc:37:8c:79:c8:31:d3:4a:52:84:b5:61:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Validity
Not Before: May 2 02:00:41 2025 GMT
Not After : May 3 02:00:41 2025 GMT
Subject: CN=8eb1d098d2a8acc771e37e2576321daee224ce2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:db:38:5b:e7:04:a3:c8:46:c2:a2:91:e2:
2a:35:22:3f:34:2e:ce:bc:9c:b4:85:6e:95:6d:e5:
91:42:01:03:3a:ec:7c:0b:32:f6:e6:75:bc:cd:09:
db:1e:a3:f9:43:8d:a7:4b:73:7a:e5:6d:af:09:b8:
f2:5c:7d:1b:c7:9d:56:09:81:0b:0a:bd:a7:46:5c:
62:94:93:3d:5e:0e:61:c1:ec:dd:f2:f4:5e:aa:a4:
d2:1f:89:70:38:85:f4:41:e8:24:4c:63:82:c2:c3:
c2:13:82:d5:b2:9b:32:db:a3:40:42:5e:64:9c:23:
f8:8b:ef:df:30:dd:e4:47:86:d0:10:ce:58:b0:a0:
e6:55:93:b9:e7:b9:32:f8:b4:cc:5c:c7:4f:27:60:
53:e2:c0:2e:db:1e:26:98:35:a4:26:fb:e0:71:5a:
78:90:be:6a:b3:ff:a0:71:0c:b4:47:53:4d:2a:df:
bb:b8:be:6d:23:ec:fe:5b:e9:86:69:63:bc:b1:23:
ff:c4:f8:46:7a:36:5a:b8:3c:66:5a:c0:4e:43:9a:
2a:0e:98:b2:7a:08:57:aa:12:9b:7b:f7:94:6f:ad:
73:91:7f:ba:3c:11:57:8f:6d:d4:f9:a9:d0:1b:02:
7d:83:fc:6a:1a:57:05:03:ff:01:1d:73:64:07:4b:
ee:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B1:D0:98:D2:A8:AC:C7:71:E3:7E:25:76:32:1D:AE:E2:24:CE:2C
X509v3 Authority Key Identifier:
keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:28:49:cb:18:f3:13:4a:f1:cb:03:21:84:77:62:96:b3:54:
c7:80:7d:95:10:68:41:62:72:3c:6e:94:74:5a:d0:45:bc:65:
1a:6e:29:16:aa:f7:37:af:3f:6e:35:9f:20:ca:e7:2f:f0:3f:
68:fc:bc:22:52:60:c0:f2:a9:38:b0:2c:3c:1c:17:4d:a5:f0:
94:ef:36:4d:76:42:d9:9b:f1:94:b8:cc:73:90:b0:94:63:01:
7c:9e:9b:9d:3d:ac:e5:d8:43:65:37:5e:dc:d0:63:80:83:9a:
a5:6b:6f:d1:d6:14:5b:42:45:6c:44:c0:d9:9d:d1:08:26:9d:
62:c5:3c:0d:6f:3b:b4:bd:71:25:ab:a7:d6:8d:0a:11:ee:a3:
45:af:5c:a5:c6:74:bf:cd:22:50:b8:5c:90:74:da:78:7b:0f:
a3:29:17:93:a0:33:7f:4a:07:91:74:bc:6d:16:ac:a9:3a:56:
8d:14:3f:2b:01:17:f8:1d:5a:92:83:04:50:38:07:05:95:10:
11:1a:26:3c:4a:42:64:40:37:46:1d:2f:69:e9:9f:6c:f7:3c:
35:98:ac:dd:65:dc:c1:fb:d1:41:87:84:75:6b:28:07:cc:e0:
29:1c:ea:c2:d1:0e:37:be:15:e9:2d:d0:16:fe:8c:e1:d8:3b:
04:d3:35:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaOuXa8N4x5yDHTSlKEtWHRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDFjZDQ3YTUzZWY1N2ViYjU2N2JjODgyYWQyOTg2ZmFh
YzVmMGQwHhcNMjUwNTAyMDIwMDQxWhcNMjUwNTAzMDIwMDQxWjAzMTEwLwYDVQQD
Eyg4ZWIxZDA5OGQyYThhY2M3NzFlMzdlMjU3NjMyMWRhZWUyMjRjZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5TbOFvnBKPIRsKikeIqNSI/NC7O
vJy0hW6VbeWRQgEDOux8CzL25nW8zQnbHqP5Q42nS3N65W2vCbjyXH0bx51WCYEL
Cr2nRlxilJM9Xg5hwezd8vReqqTSH4lwOIX0QegkTGOCwsPCE4LVspsy26NAQl5k
nCP4i+/fMN3kR4bQEM5YsKDmVZO557ky+LTMXMdPJ2BT4sAu2x4mmDWkJvvgcVp4
kL5qs/+gcQy0R1NNKt+7uL5tI+z+W+mGaWO8sSP/xPhGejZauDxmWsBOQ5oqDpiy
eghXqhKbe/eUb61zkX+6PBFXj23U+anQGwJ9g/xqGlcFA/8BHXNkB0vuewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6x0JjSqKzHceN+JXYyHa7iJM4sMB8GA1UdIwQY
MBaAFNXRzUelPvV+u1Z7yIKtKYb6rF8NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRITlI2VS05WDY3Vm52SWdxMHBodnFzWHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84NjE5NTMtNWY2NS00NDY1LTkwNDYt
ZjRkMDcxZjUwZjFkLzEvMWRITlI2VS05WDY3Vm52SWdxMHBodnFzWHcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS84NjE5NTMtNWY2NS00NDY1LTkwNDYtZjRkMDcxZjUwZjFk
LzEvMWRITlI2VS05WDY3Vm52SWdxMHBodnFzWHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPihJyxjz
E0rxywMhhHdilrNUx4B9lRBoQWJyPG6UdFrQRbxlGm4pFqr3N68/bjWfIMrnL/A/
aPy8IlJgwPKpOLAsPBwXTaXwlO82TXZC2ZvxlLjMc5CwlGMBfJ6bnT2s5dhDZTde
3NBjgIOapWtv0dYUW0JFbETA2Z3RCCadYsU8DW87tL1xJaun1o0KEe6jRa9cpcZ0
v80iULhckHTaeHsPoykXk6Azf0oHkXS8bRasqTpWjRQ/KwEX+B1akoMEUDgHBZUQ
ERomPEpCZEA3Rh0vaemfbPc8NZis3WXcwfvRQYeEdWsoB8zgKRzqwtEON74V6S3Q
Fv6M4dg7BNM1Dw==
-----END CERTIFICATE-----
Generated at Fri May 2 07:45:21 2025 by rpki-client