Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: t82pK6fff9rYfuLMe2ULL/THCivRB6Uesl19iiUk/jY=
Subject key identifier: BA:29:91:43:12:DE:B6:9F:EC:4F:A9:53:6C:1A:38:BF:86:12:9E:DD
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 0196741E73C652602798EE0D26F15273DA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0A30
Signing time: Sat 26 Apr 2025 22:01:14 +0000
Manifest this update: Sat 26 Apr 2025 22:01:14 +0000
Manifest next update: Sun 27 Apr 2025 22:01:14 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: 9GA00UTSwJbvIqdFzWMaRBosDB/1iEFkCXBdXeub1B8=)
2: 7p9fYepg7S5sPZLFet1T6ZdUO0A.roa (hash: 2r3FGqEA9Im8wCkJsvxrPrJGP9I8oT0rHkJZAkKFfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:73:c6:52:60:27:98:ee:0d:26:f1:52:73:da:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Apr 26 22:01:14 2025 GMT
Not After : Apr 27 22:01:14 2025 GMT
Subject: CN=ba29914312deb69fec4fa9536c1a38bf86129edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:76:4d:19:16:fb:69:4f:c0:39:c0:96:c6:
44:ad:5b:69:3d:fe:f3:70:7a:4b:6d:6c:5c:4a:c2:
a1:1b:dc:c4:60:de:1c:97:ff:56:05:68:68:09:02:
74:8c:e1:b5:da:71:e9:16:25:f3:f8:86:c7:cd:33:
58:1f:9f:56:05:af:a5:91:cb:e8:7f:1a:d8:9e:07:
9f:f4:92:69:b3:4a:66:35:5f:a3:8d:af:c7:88:81:
ec:01:69:5d:08:61:68:3c:7a:a8:cd:b6:31:6f:e3:
06:53:91:e2:2c:e4:ef:56:18:70:d0:97:f2:4c:b7:
9c:f9:74:e9:94:75:c2:3d:e7:76:4e:45:03:18:12:
83:32:0a:e3:98:8a:5e:d7:b8:b9:f0:af:05:bf:17:
68:be:3a:b9:44:1c:97:c0:f0:01:4f:03:8a:2a:e7:
f2:31:72:43:c7:3a:6c:7b:ad:c7:a0:34:af:b2:49:
6f:d2:ff:98:33:c9:11:00:75:78:95:30:15:c5:31:
d8:43:d2:d5:07:9b:43:a2:bc:79:b8:79:32:76:ef:
ca:69:7b:fd:a2:70:9e:55:09:73:2b:5a:01:6d:9a:
c2:6a:f7:6b:99:a7:bc:39:07:99:3d:54:39:ed:6c:
63:0e:c3:99:fd:af:95:0f:24:c7:73:ac:32:be:7a:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:29:91:43:12:DE:B6:9F:EC:4F:A9:53:6C:1A:38:BF:86:12:9E:DD
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:01:1d:14:6c:02:39:5a:14:b8:22:a9:b6:1e:c3:9a:f6:e9:
d2:7e:a5:bb:58:ee:cf:78:c4:05:09:75:d4:70:44:54:87:b4:
80:67:3a:bf:63:b9:83:6d:02:63:1d:6a:b4:66:7b:35:bb:e8:
3d:97:82:a7:08:dd:a9:eb:36:51:79:cf:71:be:06:0b:b5:85:
8f:34:b9:57:9b:23:5e:43:f6:83:ce:76:72:ba:26:1e:f0:e5:
47:17:57:0a:61:70:b8:11:c9:79:e1:40:61:42:da:d8:d1:f4:
fb:20:56:6c:65:f3:c5:41:69:25:47:62:6f:ce:e2:7f:e4:2d:
66:5f:75:c0:2e:07:1f:33:df:d2:c6:b0:b9:84:6a:b2:2e:31:
85:80:ae:60:79:57:0c:ba:f2:86:01:1f:31:ad:b9:9a:84:83:
4b:c4:07:01:3c:57:41:de:ee:4d:5c:4f:a8:6d:dc:63:f6:68:
b5:4b:69:e5:0a:49:82:66:b5:bb:0d:f7:77:69:dd:1a:d6:ad:
42:b9:df:7a:cc:a0:53:fd:09:3e:10:3e:6f:0d:bf:9d:5d:63:
a4:4f:af:6a:ae:9b:73:dc:b4:1e:9e:fa:8f:4d:b6:7b:c2:50:
35:12:56:36:36:1d:dc:53:00:62:30:6a:aa:2f:02:42:da:1c:
66:6c:0e:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HnPGUmAnmO4NJvFSc9qIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTY4Mjg3N2I2YzhhZjc1ZTI3NjBjZjg1NDBlNzg0NTJk
NGJlYzAwHhcNMjUwNDI2MjIwMTE0WhcNMjUwNDI3MjIwMTE0WjAzMTEwLwYDVQQD
EyhiYTI5OTE0MzEyZGViNjlmZWM0ZmE5NTM2YzFhMzhiZjg2MTI5ZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoB2TRkW+2lPwDnAlsZErVtpPf7z
cHpLbWxcSsKhG9zEYN4cl/9WBWhoCQJ0jOG12nHpFiXz+IbHzTNYH59WBa+lkcvo
fxrYngef9JJps0pmNV+jja/HiIHsAWldCGFoPHqozbYxb+MGU5HiLOTvVhhw0Jfy
TLec+XTplHXCPed2TkUDGBKDMgrjmIpe17i58K8Fvxdovjq5RByXwPABTwOKKufy
MXJDxzpse63HoDSvsklv0v+YM8kRAHV4lTAVxTHYQ9LVB5tDorx5uHkydu/KaXv9
onCeVQlzK1oBbZrCavdrmae8OQeZPVQ57WxjDsOZ/a+VDyTHc6wyvnpdhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLopkUMS3raf7E+pU2waOL+GEp7dMB8GA1UdIwQY
MBaAFNIWgod7bIr3Xidgz4VA54RS1L7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85Y2M1ZTAtNzhkZi00ZGE2LWFiMGEt
ZGU5NzEyYzZlN2M3LzEvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy85Y2M1ZTAtNzhkZi00ZGE2LWFiMGEtZGU5NzEyYzZlN2M3
LzEvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQEdFGwC
OVoUuCKpth7Dmvbp0n6lu1juz3jEBQl11HBEVIe0gGc6v2O5g20CYx1qtGZ7Nbvo
PZeCpwjdqes2UXnPcb4GC7WFjzS5V5sjXkP2g852cromHvDlRxdXCmFwuBHJeeFA
YULa2NH0+yBWbGXzxUFpJUdib87if+QtZl91wC4HHzPf0sawuYRqsi4xhYCuYHlX
DLryhgEfMa25moSDS8QHATxXQd7uTVxPqG3cY/ZotUtp5QpJgma1uw33d2ndGtat
QrnfesygU/0JPhA+bw2/nV1jpE+vaq6bc9y0Hp76j022e8JQNRJWNjYd3FMAYjBq
qi8CQtocZmwOsQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:32:25 2025 by rpki-client