Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: Zf7iCU/bqdTQXcS7vRrHEz8wHYI/R1pL7rmTAa+o78w=
Subject key identifier: 2A:BB:BF:F3:94:D2:EA:66:06:F8:FB:D4:44:7A:7A:B3:93:A4:6D:06
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 01968C9441C710C587A776F0FCAAF4F8A037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 0F1E
Signing time: Thu 01 May 2025 16:00:48 +0000
Manifest this update: Thu 01 May 2025 16:00:48 +0000
Manifest next update: Fri 02 May 2025 16:00:48 +0000
Files and hashes: 1: JQTWtShPwGEwVFU8i8E82c7erRQ.roa (hash: AWyFT4kOA1zNKVFniNaOQlkLDIns54LN+qDhlyph/BU=)
2: WVdl-uCV2iOAd5QeDrWIMC8ZaZo.roa (hash: CehMTtzEG7E3qCdiNMcnQ4ftqXLEiDLiNKB1gOKsgck=)
3: nc7DP5U-Jl22CsJJw2phARU5j0c.roa (hash: rdcrf8/30vk8VHZdwnISLBUlsokPeOe7cBYMpoPH+B8=)
4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: AJ2fD0qK8Wk3+HRUmnjm+UjbQecapEcvl6sMAmNY13Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:94:41:c7:10:c5:87:a7:76:f0:fc:aa:f4:f8:a0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: May 1 16:00:48 2025 GMT
Not After : May 2 16:00:48 2025 GMT
Subject: CN=2abbbff394d2ea6606f8fbd4447a7ab393a46d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:9a:fd:3d:5c:de:77:50:c6:1a:a3:a2:ca:
d9:83:92:e3:92:02:88:3f:f6:35:fb:a9:42:aa:ef:
13:e0:0e:ec:d3:c4:a2:61:4e:ad:08:cd:e7:81:c2:
43:d2:23:ec:58:55:0a:f6:3b:fb:ea:5e:e0:19:2b:
3f:c4:a8:bc:ac:ca:a9:94:54:18:0b:ae:f6:13:0a:
84:e6:43:07:1c:cc:73:07:cb:1d:7a:93:02:db:b6:
ac:bf:f8:09:28:48:1f:93:ef:7e:1d:8a:96:4a:23:
7d:b1:80:6f:5a:d1:69:07:da:10:a7:21:6d:14:38:
84:19:0a:47:c8:3b:43:a3:61:f9:2a:63:ac:0e:56:
31:cb:72:e9:df:7b:93:cf:c7:90:c9:6a:05:7c:29:
d0:66:8b:4b:c3:be:85:8d:74:a9:d7:cd:7b:52:28:
ad:f9:6f:31:31:44:76:9e:29:e5:87:46:8f:81:7f:
93:2a:3d:22:d7:75:d4:63:e3:e4:94:54:d3:a8:3a:
a3:f5:f5:44:ba:36:f5:8a:e7:90:86:c5:09:33:d5:
c2:02:38:a2:47:18:aa:c1:37:9a:db:62:c2:89:3c:
17:56:6d:39:e7:bc:47:9e:4d:71:64:18:4d:80:bc:
3d:3f:d6:aa:be:0b:b9:3a:29:87:ba:df:2f:05:e8:
f5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BB:BF:F3:94:D2:EA:66:06:F8:FB:D4:44:7A:7A:B3:93:A4:6D:06
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:bb:1c:18:2a:17:fb:b8:cf:d5:ff:11:a8:34:dc:ee:4f:12:
64:8b:96:44:8a:27:8b:5b:3b:13:ef:14:7c:73:f2:fb:41:38:
20:3a:48:3a:19:3c:c4:f5:c6:37:6f:0c:c2:14:5a:b2:5d:38:
44:9e:50:89:06:be:89:36:58:3c:d0:47:8c:36:f2:4b:5d:bd:
3f:31:8a:f9:93:9d:50:e9:d3:3e:ae:37:15:2f:8a:e9:81:24:
25:4c:95:c6:72:b3:c3:39:51:dc:47:a3:10:31:ba:e9:4a:86:
c6:36:9c:d7:cf:48:7e:7e:7f:90:46:0f:ce:b0:d0:49:c7:ea:
cb:65:cc:3e:78:d9:8d:5b:2d:54:ec:e2:50:eb:cc:b3:f7:d8:
76:6e:5c:ea:6c:56:ad:a7:6e:03:ad:75:97:ff:32:0b:7c:85:
3f:68:ec:6a:a6:f7:ca:95:97:54:12:8f:de:62:38:0f:97:fb:
58:16:24:6b:a2:85:05:55:b2:25:5b:44:ce:78:06:d7:f7:c9:
a6:a0:57:24:f4:f9:46:bb:c3:af:1a:48:ac:89:6f:3e:c5:d9:
50:a3:d0:11:6d:2f:df:9c:fc:5c:e6:1c:b6:07:42:87:94:a2:
0f:00:19:30:2b:29:c5:fd:62:33:e7:9d:29:46:9f:97:87:47:
48:04:78:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaMlEHHEMWHp3bw/Kr0+KA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNzY3MDY5OGNmYWVmMjY0N2ZiYzlhMDZmNzM4MDg1NmUy
YjMwMjcwHhcNMjUwNTAxMTYwMDQ4WhcNMjUwNTAyMTYwMDQ4WjAzMTEwLwYDVQQD
EygyYWJiYmZmMzk0ZDJlYTY2MDZmOGZiZDQ0NDdhN2FiMzkzYTQ2ZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBya/T1c3ndQxhqjosrZg5LjkgKI
P/Y1+6lCqu8T4A7s08SiYU6tCM3ngcJD0iPsWFUK9jv76l7gGSs/xKi8rMqplFQY
C672EwqE5kMHHMxzB8sdepMC27asv/gJKEgfk+9+HYqWSiN9sYBvWtFpB9oQpyFt
FDiEGQpHyDtDo2H5KmOsDlYxy3Lp33uTz8eQyWoFfCnQZotLw76FjXSp1817Uiit
+W8xMUR2ninlh0aPgX+TKj0i13XUY+PklFTTqDqj9fVEujb1iueQhsUJM9XCAjii
RxiqwTea22LCiTwXVm0557xHnk1xZBhNgLw9P9aqvgu5OimHut8vBej1oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCq7v/OU0upmBvj71ER6erOTpG0GMB8GA1UdIwQY
MBaAFKx2cGmM+u8mR/vJoG9zgIVuKzAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYt
OWUwNDQwOTJiODI2LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYtOWUwNDQwOTJiODI2
LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrscGCoX
+7jP1f8RqDTc7k8SZIuWRIoni1s7E+8UfHPy+0E4IDpIOhk8xPXGN28MwhRasl04
RJ5QiQa+iTZYPNBHjDbyS129PzGK+ZOdUOnTPq43FS+K6YEkJUyVxnKzwzlR3Eej
EDG66UqGxjac189Ifn5/kEYPzrDQScfqy2XMPnjZjVstVOziUOvMs/fYdm5c6mxW
raduA611l/8yC3yFP2jsaqb3ypWXVBKP3mI4D5f7WBYka6KFBVWyJVtEzngG1/fJ
pqBXJPT5RrvDrxpIrIlvPsXZUKPQEW0v35z8XOYctgdCh5SiDwAZMCspxf1iM+ed
KUafl4dHSAR4Aw==
-----END CERTIFICATE-----
Generated at Fri May 2 02:19:29 2025 by rpki-client