Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
File: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft (raw, json)
Hash identifier: ISkQHray9O8bieHKOpiowps5TIK5NZlS+R3ql5KN1sw=
Subject key identifier: E0:63:9A:64:1E:0C:58:43:DD:64:9E:07:46:A7:D8:F5:FF:66:5C:38
Authority key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
Certificate issuer: /CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Certificate serial: 01968322D5B99B3E09B3029BB9FBF82BD625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 20:00:20 +0000
Manifest this update: Tue 29 Apr 2025 20:00:20 +0000
Manifest next update: Wed 30 Apr 2025 20:00:20 +0000
Files and hashes: 1: C_dV-a8NL19EWcN2B58oBMal8wA.roa (hash: cfrqdXpjr4fkDxvy5PbVD58Is9FxlX0Bf3Low+2bVCc=)
2: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl (hash: 6ggsMQKDeZHnqZFnFmV7LXzGrkHHEFclyQu4zinQE0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:d5:b9:9b:3e:09:b3:02:9b:b9:fb:f8:2b:d6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Validity
Not Before: Apr 29 20:00:20 2025 GMT
Not After : Apr 30 20:00:20 2025 GMT
Subject: CN=e0639a641e0c5843dd649e0746a7d8f5ff665c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:a6:ae:ec:8b:b0:3d:51:05:ef:83:56:45:
c4:ea:81:77:12:c9:23:3b:1a:a7:19:a1:57:5d:e1:
90:32:96:4b:02:b3:8f:b8:03:97:33:3f:fb:5d:48:
63:9e:d3:ae:9c:69:54:52:89:a3:5b:bb:26:f3:f0:
50:1e:4a:0f:53:34:df:19:48:6c:b4:c5:c1:c5:f9:
97:86:2a:31:80:72:f2:ea:2c:fa:1a:36:37:25:81:
cb:9b:fb:bd:4d:2e:99:d5:61:9f:90:f3:07:94:ba:
11:11:8d:d4:42:a1:9f:fb:f0:9b:f2:b0:93:98:15:
7b:2c:2b:49:59:6a:7f:8d:9e:40:63:42:cd:fc:3a:
99:15:f9:dd:2e:ba:be:f9:db:d9:7e:eb:83:87:a9:
ee:a1:31:ba:93:83:37:02:a6:4c:cb:ae:89:01:16:
a9:10:0f:d9:df:4e:2a:66:f8:cc:ae:92:e2:5e:2f:
1f:e5:7f:41:51:c4:b1:c8:ac:90:a8:d2:40:65:6c:
2e:6b:da:71:fc:ca:d9:34:72:98:89:f3:b8:06:67:
4d:8b:41:43:b5:1a:a7:68:bf:17:f2:fe:54:2b:ef:
28:ef:04:0b:fe:42:aa:7e:36:b4:0f:c2:34:ab:f7:
ad:da:ee:7b:37:10:2a:ff:14:3b:91:be:f1:fc:8e:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:63:9A:64:1E:0C:58:43:DD:64:9E:07:46:A7:D8:F5:FF:66:5C:38
X509v3 Authority Key Identifier:
keyid:87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7a:6b:3e:13:36:c9:dd:78:ec:8c:ee:a5:c5:12:2e:ea:ef:
ff:d1:1c:ee:99:14:fa:90:0b:fd:e3:eb:0d:8b:68:16:7c:85:
b6:cf:94:84:42:98:70:ad:7f:d2:5b:90:6b:a5:0f:b1:41:6d:
d1:b1:7b:da:34:24:be:c3:a4:ec:af:b5:04:b3:6b:fb:37:d2:
46:9b:3d:f6:49:16:ce:34:06:dd:fe:df:02:dc:6c:98:6b:6e:
50:38:c8:e6:7a:ca:44:b7:73:af:f7:60:6e:4b:e1:ca:91:9d:
9b:8d:86:b1:a1:4e:2a:b1:57:46:8b:a9:9d:2c:62:50:a7:39:
f1:f6:eb:dd:6b:bf:03:4c:53:1b:51:d6:81:98:3f:4f:c8:19:
90:4b:c8:2b:a5:b0:89:e2:4a:fb:5b:09:15:de:2f:56:c0:69:
1e:bf:75:f8:cb:69:d0:9f:9c:0f:b2:df:73:ca:8a:0f:65:0b:
80:1b:f9:bc:5a:ea:5b:44:3f:2e:04:91:01:4f:02:26:09:22:
b0:f9:4b:83:01:b8:64:a9:ad:42:8f:61:88:f7:46:6f:db:ac:
99:c7:0f:82:b7:ba:32:bc:98:a2:9c:31:67:24:a8:c3:18:a4:
5c:d3:82:a6:2f:cf:3e:78:32:f2:a0:b1:57:9e:c3:7a:93:4b:
fb:de:e8:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDItW5mz4JswKbufv4K9YlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MjRiNDAxZmZlYWMzZDVkYjQyZjgyOGNhYjRmMTYzYzA2
NGQ2ZDUwHhcNMjUwNDI5MjAwMDIwWhcNMjUwNDMwMjAwMDIwWjAzMTEwLwYDVQQD
EyhlMDYzOWE2NDFlMGM1ODQzZGQ2NDllMDc0NmE3ZDhmNWZmNjY1YzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DymruyLsD1RBe+DVkXE6oF3Eskj
OxqnGaFXXeGQMpZLArOPuAOXMz/7XUhjntOunGlUUomjW7sm8/BQHkoPUzTfGUhs
tMXBxfmXhioxgHLy6iz6GjY3JYHLm/u9TS6Z1WGfkPMHlLoREY3UQqGf+/Cb8rCT
mBV7LCtJWWp/jZ5AY0LN/DqZFfndLrq++dvZfuuDh6nuoTG6k4M3AqZMy66JARap
EA/Z304qZvjMrpLiXi8f5X9BUcSxyKyQqNJAZWwua9px/MrZNHKYifO4BmdNi0FD
tRqnaL8X8v5UK+8o7wQL/kKqfja0D8I0q/et2u57NxAq/xQ7kb7x/I60iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBjmmQeDFhD3WSeB0an2PX/Zlw4MB8GA1UdIwQY
MBaAFIcktAH/6sPV20L4KMq08WPAZNbVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlTMEFmX3F3OVhiUXZnb3lyVHhZOEJrMXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zZTUwYzktOTVkMC00YWI3LWE3ZTEt
MDExMTAzODkzNGQzLzEvaHlTMEFmX3F3OVhiUXZnb3lyVHhZOEJrMXRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8zZTUwYzktOTVkMC00YWI3LWE3ZTEtMDExMTAzODkzNGQz
LzEvaHlTMEFmX3F3OVhiUXZnb3lyVHhZOEJrMXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3prPhM2
yd147IzupcUSLurv/9Ec7pkU+pAL/ePrDYtoFnyFts+UhEKYcK1/0luQa6UPsUFt
0bF72jQkvsOk7K+1BLNr+zfSRps99kkWzjQG3f7fAtxsmGtuUDjI5nrKRLdzr/dg
bkvhypGdm42GsaFOKrFXRoupnSxiUKc58fbr3Wu/A0xTG1HWgZg/T8gZkEvIK6Ww
ieJK+1sJFd4vVsBpHr91+Mtp0J+cD7Lfc8qKD2ULgBv5vFrqW0Q/LgSRAU8CJgki
sPlLgwG4ZKmtQo9hiPdGb9usmccPgre6MryYopwxZySowxikXNOCpi/PPngy8qCx
V57DepNL+97olw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 06:08:08 2025 by rpki-client