Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier: HF6EjT17tBYPGTpp6CBcOQ1/j4AWCBeetJipTEBLZR8=
Subject key identifier: AE:C9:0B:DA:F2:52:6C:19:4B:DF:C9:06:9B:2E:EE:21:9C:A5:5F:1E
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 0196760D122B3526A71ADABBD6EAD24C3FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number: 0E57
Signing time: Sun 27 Apr 2025 07:01:30 +0000
Manifest this update: Sun 27 Apr 2025 07:01:30 +0000
Manifest next update: Mon 28 Apr 2025 07:01:30 +0000
Files and hashes: 1: Zj9lVIh8knr06HL6M68exsdyR78.roa (hash: DpNM17SY3ZBbdFnRbmny2u5MR4zgFSyDbmfcX50gqPI=)
2: bY5mkAJO0t1esNNj9cEpQ4nzKkc.roa (hash: z13XZYVRnwVPeNhKWRhYmONg5auw0wvV41lj3Dj2Gf8=)
3: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: rQiLFDFFgS6PdANPrDqvAoyQ4GHlNy5O6ueNSl03DU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:12:2b:35:26:a7:1a:da:bb:d6:ea:d2:4c:3f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Apr 27 07:01:30 2025 GMT
Not After : Apr 28 07:01:30 2025 GMT
Subject: CN=aec90bdaf2526c194bdfc9069b2eee219ca55f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fc:1e:c5:1d:f4:08:d6:26:4d:9f:3f:86:7b:
8c:18:bf:4f:89:a3:1e:e8:5a:b2:f0:4b:3b:f7:9f:
5a:a2:0c:d6:67:f3:57:ab:6a:01:42:0b:03:24:a9:
b5:49:1e:66:c4:e8:0b:05:8c:e2:f7:21:0b:73:34:
5e:58:72:ea:d1:ec:e4:1b:d5:41:28:45:1b:c4:3c:
be:bd:64:58:c1:60:db:97:b0:1b:07:b4:2a:ad:d6:
e3:fc:80:88:71:6c:c4:62:30:fb:ce:38:7f:d6:21:
5e:22:22:59:34:d3:28:cb:db:6a:91:b0:64:83:3d:
66:44:43:14:ff:9b:1a:e0:9b:bb:34:38:4c:87:16:
c0:d4:c5:6d:2a:99:9c:86:0e:53:c1:d0:e5:d2:47:
6e:dd:c5:81:9e:1e:e2:70:92:ef:22:dc:80:62:c3:
21:3c:27:a5:fa:d8:e2:70:98:06:92:bc:c4:f3:ed:
99:a9:08:5a:b7:b3:ba:51:e3:c1:cc:c8:8b:e9:66:
c6:00:6c:97:78:67:54:c4:1b:e2:18:62:aa:6b:97:
ba:66:03:7d:3d:a1:cf:7d:bd:42:d3:d3:70:c6:13:
60:57:17:ca:31:66:18:99:f6:42:5d:11:fa:15:69:
d6:4b:b5:1d:bb:e6:c9:7d:8a:15:a5:79:36:82:91:
dc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C9:0B:DA:F2:52:6C:19:4B:DF:C9:06:9B:2E:EE:21:9C:A5:5F:1E
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cd:4c:17:0f:40:0b:c7:c4:d2:08:ee:c1:29:74:98:19:54:
2e:eb:4a:8a:90:ab:7b:85:63:fb:00:7d:e5:75:7d:80:e0:70:
25:f8:1d:4e:c8:07:ed:a4:41:56:c2:b1:99:3e:ae:e1:e1:81:
be:2e:93:76:f4:ca:78:da:63:0f:fe:b3:c3:cd:11:11:e0:71:
de:3c:db:12:4e:e5:30:27:c6:27:63:c3:38:26:57:9c:23:9a:
b1:ce:3a:b5:54:e1:fa:9a:b3:6c:f0:bd:3e:f1:16:c2:07:04:
52:e0:b1:fb:54:20:79:3b:db:40:da:ac:b0:36:7b:2b:ea:c0:
2d:f2:5a:87:ab:e5:b9:58:77:f1:05:49:c2:8a:7f:97:8d:70:
a6:78:a6:36:3b:1d:db:8d:93:d3:db:56:a6:91:d8:1e:32:88:
e2:b2:0f:89:c3:99:1a:af:91:06:27:74:54:f4:f0:ec:71:05:
a8:37:5a:8d:a5:bc:d1:15:02:04:16:79:11:a1:64:02:12:6d:
2e:a4:28:51:40:23:22:62:48:fe:f1:a3:77:13:eb:be:52:a6:
2a:6b:ed:e6:02:49:70:9a:db:d9:5b:fc:44:6b:01:f8:50:a0:
2b:e6:84:76:a8:66:c6:69:9f:fd:7d:58:2c:34:b0:0f:b9:98:
3f:df:af:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DRIrNSanGtq71urSTD/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MzYxNDYxMTliMDQ0NTM5MDgyZTMyNmNjYTkwMzIwMGI4
ZDRiMWEwHhcNMjUwNDI3MDcwMTMwWhcNMjUwNDI4MDcwMTMwWjAzMTEwLwYDVQQD
EyhhZWM5MGJkYWYyNTI2YzE5NGJkZmM5MDY5YjJlZWUyMTljYTU1ZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/wexR30CNYmTZ8/hnuMGL9PiaMe
6Fqy8Es7959aogzWZ/NXq2oBQgsDJKm1SR5mxOgLBYzi9yELczReWHLq0ezkG9VB
KEUbxDy+vWRYwWDbl7AbB7Qqrdbj/ICIcWzEYjD7zjh/1iFeIiJZNNMoy9tqkbBk
gz1mREMU/5sa4Ju7NDhMhxbA1MVtKpmchg5TwdDl0kdu3cWBnh7icJLvItyAYsMh
PCel+tjicJgGkrzE8+2ZqQhat7O6UePBzMiL6WbGAGyXeGdUxBviGGKqa5e6ZgN9
PaHPfb1C09NwxhNgVxfKMWYYmfZCXRH6FWnWS7Udu+bJfYoVpXk2gpHczQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7JC9ryUmwZS9/JBpsu7iGcpV8eMB8GA1UdIwQY
MBaAFIU2FGEZsERTkILjJsypAyALjUsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDVmOTMtYWM1YS00MWUzLTgwYzMt
MGM2NzIxN2NjOTZiLzEvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81ZDVmOTMtYWM1YS00MWUzLTgwYzMtMGM2NzIxN2NjOTZi
LzEvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAs1MFw9A
C8fE0gjuwSl0mBlULutKipCre4Vj+wB95XV9gOBwJfgdTsgH7aRBVsKxmT6u4eGB
vi6TdvTKeNpjD/6zw80REeBx3jzbEk7lMCfGJ2PDOCZXnCOasc46tVTh+pqzbPC9
PvEWwgcEUuCx+1QgeTvbQNqssDZ7K+rALfJah6vluVh38QVJwop/l41wpnimNjsd
242T09tWppHYHjKI4rIPicOZGq+RBid0VPTw7HEFqDdajaW80RUCBBZ5EaFkAhJt
LqQoUUAjImJI/vGjdxPrvlKmKmvt5gJJcJrb2Vv8RGsB+FCgK+aEdqhmxmmf/X1Y
LDSwD7mYP9+vvA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:21:37 2025 by rpki-client