Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
File: hfR7ZaUlMyab0hmBOlIDr92eXb4.mft (raw, json)
Hash identifier: yCCdbbdJwTIz2JRzZMPqXQ0RAveNA+gwgV0Z3qBnExs=
Subject key identifier: 81:F8:B8:9C:71:23:B5:25:91:DB:C1:FE:80:75:F3:19:3B:77:91:C6
Authority key identifier: 85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE
Certificate issuer: /CN=85f47b65a52533269bd219813a5203afdd9e5dbe
Certificate serial: 01967E343A07915A7DAC1080B4BDD48F666F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
Manifest number: 1105
Signing time: Mon 28 Apr 2025 21:01:14 +0000
Manifest this update: Mon 28 Apr 2025 21:01:14 +0000
Manifest next update: Tue 29 Apr 2025 21:01:14 +0000
Files and hashes: 1: hfR7ZaUlMyab0hmBOlIDr92eXb4.crl (hash: R3mGx9LxY2ubo8sF4us6j10rFGQXvabgAdiISG+EUxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:3a:07:91:5a:7d:ac:10:80:b4:bd:d4:8f:66:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f47b65a52533269bd219813a5203afdd9e5dbe
Validity
Not Before: Apr 28 21:01:14 2025 GMT
Not After : Apr 29 21:01:14 2025 GMT
Subject: CN=81f8b89c7123b52591dbc1fe8075f3193b7791c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:e6:fb:80:1a:09:e5:21:44:4a:35:88:2f:
d5:93:11:11:59:4e:cd:41:c2:6a:93:4c:cf:e4:61:
d7:ca:1c:4a:a8:33:b4:e6:a8:a0:e8:58:c0:d4:82:
93:5c:13:ec:dc:45:f5:d9:02:f4:c3:5c:d0:f2:64:
68:b5:1a:dc:98:80:d4:a6:8a:dd:c7:52:86:13:9d:
40:7c:3a:5b:bb:2c:4e:85:0c:d2:ad:67:ea:e6:d6:
00:67:d9:89:68:6e:cc:9b:43:74:a4:b3:de:88:85:
2b:c6:c7:15:b1:6c:f7:20:e3:5a:3c:d5:ad:92:f6:
69:84:58:1e:af:ad:4f:b1:4d:54:d0:c5:8e:69:fb:
64:ca:1d:79:19:fd:4e:a5:63:2b:20:03:64:df:f6:
87:cc:bc:6d:b2:b0:79:49:b9:ed:08:d9:09:89:47:
3e:10:bf:7e:c8:8d:1a:89:63:4c:14:a3:cd:09:54:
0f:90:35:ae:d9:84:98:02:e5:03:01:07:8d:55:06:
31:67:7d:e9:67:7e:ca:10:b6:58:e2:57:b9:3d:ed:
57:74:5b:6c:c2:9d:2d:b6:f6:75:f8:5f:0a:93:21:
ff:28:d7:50:2f:fb:44:0b:ca:f0:16:51:48:93:e6:
14:0f:e8:57:39:24:2d:a9:8a:44:c3:7a:78:bd:23:
b7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F8:B8:9C:71:23:B5:25:91:DB:C1:FE:80:75:F3:19:3B:77:91:C6
X509v3 Authority Key Identifier:
keyid:85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f9:29:a4:d8:bd:52:f7:29:0d:37:00:c1:e0:8a:95:31:13:
eb:04:aa:06:a9:52:7e:df:2c:41:68:02:e2:66:20:35:27:1e:
e1:32:f8:1b:a8:68:81:2b:4e:56:52:df:f2:4f:13:b9:1f:4b:
8b:91:b2:cc:3b:5f:ad:0c:0f:58:e7:47:c0:7d:ab:05:a1:28:
42:00:78:12:aa:70:5f:44:32:8b:ae:e4:64:6d:f5:c7:ec:a6:
2d:87:c2:75:e4:7d:a4:32:c3:1b:da:6b:5b:e6:08:7e:91:3e:
9c:c6:fc:6f:c5:ed:86:81:e0:6d:ac:f1:1a:ad:cd:d6:27:8b:
b5:7f:a7:12:52:cd:b7:66:1a:70:87:dd:3a:b5:df:cb:3f:da:
b4:35:cc:a8:a6:de:29:50:03:59:83:86:2d:1e:2b:15:80:24:
34:73:87:ec:9c:c8:6b:09:a6:c7:ae:aa:94:4e:b6:8e:0e:fc:
30:22:4f:de:03:bb:31:34:b5:e1:86:84:d2:8b:a3:fe:56:4d:
86:b9:34:0c:32:a0:a6:94:fe:b1:8a:74:97:30:91:bc:9c:05:
ba:4c:7f:f2:a1:26:90:00:12:91:4c:99:cf:38:fe:eb:85:bb:
50:e5:3a:17:c0:e1:27:f5:8b:04:bc:6a:70:c8:bd:7b:f5:cf:
bb:f2:c4:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+NDoHkVp9rBCAtL3Uj2ZvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZjQ3YjY1YTUyNTMzMjY5YmQyMTk4MTNhNTIwM2FmZGQ5
ZTVkYmUwHhcNMjUwNDI4MjEwMTE0WhcNMjUwNDI5MjEwMTE0WjAzMTEwLwYDVQQD
Eyg4MWY4Yjg5YzcxMjNiNTI1OTFkYmMxZmU4MDc1ZjMxOTNiNzc5MWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9Dm+4AaCeUhREo1iC/VkxERWU7N
QcJqk0zP5GHXyhxKqDO05qig6FjA1IKTXBPs3EX12QL0w1zQ8mRotRrcmIDUpord
x1KGE51AfDpbuyxOhQzSrWfq5tYAZ9mJaG7Mm0N0pLPeiIUrxscVsWz3IONaPNWt
kvZphFger61PsU1U0MWOaftkyh15Gf1OpWMrIANk3/aHzLxtsrB5SbntCNkJiUc+
EL9+yI0aiWNMFKPNCVQPkDWu2YSYAuUDAQeNVQYxZ33pZ37KELZY4le5Pe1XdFts
wp0ttvZ1+F8KkyH/KNdQL/tEC8rwFlFIk+YUD+hXOSQtqYpEw3p4vSO32QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIH4uJxxI7UlkdvB/oB18xk7d5HGMB8GA1UdIwQY
MBaAFIX0e2WlJTMmm9IZgTpSA6/dnl2+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGZSN1phVWxNeWFiMGhtQk9sSURyOTJlWGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy82MzNmZjQtNDZlOC00MjA0LWI2MzYt
MjQxMzc4MmM3MTY2LzEvaGZSN1phVWxNeWFiMGhtQk9sSURyOTJlWGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy82MzNmZjQtNDZlOC00MjA0LWI2MzYtMjQxMzc4MmM3MTY2
LzEvaGZSN1phVWxNeWFiMGhtQk9sSURyOTJlWGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfkppNi9
UvcpDTcAweCKlTET6wSqBqlSft8sQWgC4mYgNSce4TL4G6hogStOVlLf8k8TuR9L
i5GyzDtfrQwPWOdHwH2rBaEoQgB4EqpwX0Qyi67kZG31x+ymLYfCdeR9pDLDG9pr
W+YIfpE+nMb8b8XthoHgbazxGq3N1ieLtX+nElLNt2YacIfdOrXfyz/atDXMqKbe
KVADWYOGLR4rFYAkNHOH7JzIawmmx66qlE62jg78MCJP3gO7MTS14YaE0ouj/lZN
hrk0DDKgppT+sYp0lzCRvJwFukx/8qEmkAASkUyZzzj+64W7UOU6F8DhJ/WLBLxq
cMi9e/XPu/LE0A==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:51:48 2025 by rpki-client