Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json)
Hash identifier: kG2+iNJWuc6QUFK0lwLpncnWynhuyYHCntbj2mJWugI=
Subject key identifier: FF:08:74:C3:12:FE:79:32:AC:50:1C:A0:B5:72:78:E8:66:A4:22:9E
Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe
Certificate serial: 019674C28E6CC7F8956CA8914CC4122F3CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
Manifest number: 11B4
Signing time: Sun 27 Apr 2025 01:00:29 +0000
Manifest this update: Sun 27 Apr 2025 01:00:29 +0000
Manifest next update: Mon 28 Apr 2025 01:00:29 +0000
Files and hashes: 1: OvE7gVL8MCEWJHKpQXsF4bPe3UM.roa (hash: l4/jaJLOp+Avt+TjQWwkFvtdykblfc3pi7YpMoKQxCI=)
2: gRQ4yCuvseaLE57M9fowKbjZKdc.roa (hash: 2erIoIyPnSV3Zcfsjq1qAurwTSkvBBBTKvIM2MmgiUw=)
3: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: +Go0/aAGNFNYq30febcLmwEsd1SNBNx3mSgvUk7JaTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:8e:6c:c7:f8:95:6c:a8:91:4c:c4:12:2f:3c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe
Validity
Not Before: Apr 27 01:00:29 2025 GMT
Not After : Apr 28 01:00:29 2025 GMT
Subject: CN=ff0874c312fe7932ac501ca0b57278e866a4229e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:43:77:02:a7:96:81:b6:ff:a5:80:ad:86:08:
50:d1:3c:b7:f4:d0:82:3c:47:57:32:03:88:7c:b5:
f5:54:f0:90:6b:e9:0b:37:48:61:2c:e4:82:8e:e8:
83:92:d2:20:73:6c:ff:a0:74:10:0c:cc:df:91:79:
52:60:83:75:41:7f:1f:b7:9d:89:d2:25:d9:6e:6c:
2b:d7:55:d2:24:fb:d7:a7:65:2c:9a:60:0a:54:62:
e8:73:4a:90:6c:7f:8d:3b:7c:60:c1:7e:69:82:b2:
aa:5a:83:7f:d6:57:c8:09:56:7b:1f:c8:c7:05:d9:
6c:b1:36:06:99:0f:3b:ef:fb:2c:e6:30:ab:67:90:
1e:01:43:6f:e9:45:3a:67:51:a4:f4:4a:41:32:01:
ec:dc:4f:75:82:5c:39:14:7a:e0:d2:64:51:a4:42:
27:fa:4b:2d:78:26:7f:13:da:56:9f:3c:5c:88:ab:
0c:ba:f5:1c:ef:36:7f:25:9a:1d:16:34:d7:94:40:
7f:fb:b3:7a:dc:1f:13:fd:43:55:b1:92:59:b5:e4:
2c:8c:ea:fb:d2:e6:09:eb:16:f6:35:c4:28:43:b1:
0b:97:f5:26:21:b7:99:be:5b:bd:ef:2f:79:d7:72:
43:f8:a9:37:4a:b2:5b:77:f6:1f:94:c2:d5:81:b5:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:08:74:C3:12:FE:79:32:AC:50:1C:A0:B5:72:78:E8:66:A4:22:9E
X509v3 Authority Key Identifier:
keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:32:3c:4e:32:d7:0f:ef:62:19:04:9d:df:a5:d0:ac:2b:3e:
0b:ea:58:65:29:c8:19:3b:5e:ec:4e:f3:64:d8:68:25:4e:09:
23:d3:01:93:1f:45:66:2a:1c:a1:38:d7:51:84:d1:ba:79:a4:
cc:82:07:a6:1a:06:85:bf:08:52:16:bc:23:26:54:40:4f:9d:
9e:f7:46:ed:0d:0a:4c:65:75:b7:6d:ec:f6:6c:5a:aa:69:a9:
d2:51:66:d3:0f:ae:72:d7:1b:eb:bd:b8:a3:6f:0e:7a:42:b5:
e2:bd:33:13:06:59:f3:a7:17:80:82:c5:38:b1:3f:c7:cc:04:
42:73:55:5d:f2:7a:cb:70:58:dd:75:11:31:b2:d0:e9:d7:85:
8a:c4:97:cb:82:1b:5a:d1:eb:9e:e9:a3:f6:8f:db:b6:eb:6f:
4f:ec:ff:20:4f:87:3c:f7:cb:05:b0:30:28:7a:b2:3c:2c:75:
17:16:63:30:5a:d9:25:22:13:95:2d:35:1b:44:e0:5f:52:1d:
52:2c:39:fd:b3:9d:13:c8:d8:c9:14:c3:ae:90:dc:2b:8c:3f:
eb:de:73:82:a2:43:e9:fa:d8:e1:c7:73:76:4b:74:36:aa:a7:
ba:3c:ee:5a:e6:da:e7:25:4c:fb:77:48:75:6b:9d:9e:a3:c3:
1d:82:a4:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wo5sx/iVbKiRTMQSLzzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0M2QxYWZjZjEzYmQyMTE3ZDQ3ZGY2ODNlNDBhNjMyODcw
MDRjZmUwHhcNMjUwNDI3MDEwMDI5WhcNMjUwNDI4MDEwMDI5WjAzMTEwLwYDVQQD
EyhmZjA4NzRjMzEyZmU3OTMyYWM1MDFjYTBiNTcyNzhlODY2YTQyMjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUN3AqeWgbb/pYCthghQ0Ty39NCC
PEdXMgOIfLX1VPCQa+kLN0hhLOSCjuiDktIgc2z/oHQQDMzfkXlSYIN1QX8ft52J
0iXZbmwr11XSJPvXp2UsmmAKVGLoc0qQbH+NO3xgwX5pgrKqWoN/1lfICVZ7H8jH
BdlssTYGmQ877/ss5jCrZ5AeAUNv6UU6Z1Gk9EpBMgHs3E91glw5FHrg0mRRpEIn
+ksteCZ/E9pWnzxciKsMuvUc7zZ/JZodFjTXlEB/+7N63B8T/UNVsZJZteQsjOr7
0uYJ6xb2NcQoQ7ELl/UmIbeZvlu97y9513JD+Kk3SrJbd/YflMLVgbXFPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8IdMMS/nkyrFAcoLVyeOhmpCKeMB8GA1UdIwQY
MBaAFIQ9GvzxO9IRfUffaD5ApjKHAEz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEt
YjFmM2JjYzY3YWFlLzEvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEtYjFmM2JjYzY3YWFl
LzEvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzI8TjLX
D+9iGQSd36XQrCs+C+pYZSnIGTte7E7zZNhoJU4JI9MBkx9FZiocoTjXUYTRunmk
zIIHphoGhb8IUha8IyZUQE+dnvdG7Q0KTGV1t23s9mxaqmmp0lFm0w+uctcb6724
o28OekK14r0zEwZZ86cXgILFOLE/x8wEQnNVXfJ6y3BY3XURMbLQ6deFisSXy4Ib
WtHrnumj9o/btutvT+z/IE+HPPfLBbAwKHqyPCx1FxZjMFrZJSITlS01G0TgX1Id
Uiw5/bOdE8jYyRTDrpDcK4w/695zgqJD6frY4cdzdkt0NqqnujzuWuba5yVM+3dI
dWudnqPDHYKkhg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:18:33 2025 by rpki-client