Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
File: hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft (raw, json)
Hash identifier: ZiFx01sdG1yN0x4Ee+qXur+Ho7pIMNlPPusQyNml2FE=
Subject key identifier: 74:44:07:DF:63:8C:1F:24:AC:94:AD:B9:CD:B4:58:94:C0:46:F6:4C
Authority key identifier: 84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
Certificate issuer: /CN=84f590ca62c246440583818c31f2573a0f50ffd0
Certificate serial: 01968058A29CD2756DDDECB7EF2EC9738880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
Manifest number: 0928
Signing time: Tue 29 Apr 2025 07:00:14 +0000
Manifest this update: Tue 29 Apr 2025 07:00:14 +0000
Manifest next update: Wed 30 Apr 2025 07:00:14 +0000
Files and hashes: 1: hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl (hash: VEL4jCGgs0VO19ZxHLAIZbkalKwSpz1oBY0QKiuKpHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:a2:9c:d2:75:6d:dd:ec:b7:ef:2e:c9:73:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f590ca62c246440583818c31f2573a0f50ffd0
Validity
Not Before: Apr 29 07:00:14 2025 GMT
Not After : Apr 30 07:00:14 2025 GMT
Subject: CN=744407df638c1f24ac94adb9cdb45894c046f64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:06:c2:bf:07:81:7a:03:ae:56:47:92:56:
2e:1a:ed:85:b9:8f:f7:de:8b:2e:0f:0b:7f:5b:c6:
28:3b:81:c0:6e:53:d2:e8:3e:04:af:e9:f9:c1:09:
c9:4f:01:6a:fe:70:b2:10:3f:dc:62:4f:b4:ba:7d:
c2:cc:7b:6f:3d:dd:bb:f0:2b:aa:bc:4f:43:93:c3:
47:8d:62:70:65:36:60:4f:3a:bc:b5:8f:19:84:d5:
8a:00:fc:a6:7f:2f:41:63:86:88:02:c0:31:52:a3:
82:b1:f4:b0:bd:f4:ec:ed:6a:a0:96:c6:c7:f6:40:
25:8b:d3:6e:9e:f4:45:c2:35:a9:2f:67:e3:5d:4c:
fc:99:b7:26:f0:06:87:6c:04:f5:62:2c:3f:51:22:
59:76:62:7b:7b:ec:84:a7:c3:72:f3:68:8e:8c:24:
f2:50:8b:ac:4f:dc:ab:34:a7:6f:d4:a1:ec:84:ea:
a5:f8:91:a1:71:cd:2a:69:e5:ba:f9:ba:31:c8:0e:
a8:49:a2:d4:0e:0f:ab:bf:13:44:f7:c5:be:4a:63:
7f:e8:fb:74:77:d0:2c:b6:bf:7d:37:79:9a:25:c6:
79:c1:ff:f5:41:b6:15:e3:d2:af:b4:0d:50:94:41:
73:94:b8:e1:dd:24:fe:eb:51:2e:a4:9d:b7:e7:d2:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:44:07:DF:63:8C:1F:24:AC:94:AD:B9:CD:B4:58:94:C0:46:F6:4C
X509v3 Authority Key Identifier:
keyid:84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:22:7a:95:99:56:21:ab:22:10:e3:14:c6:aa:22:cf:6e:9c:
fa:08:d6:0e:9e:c1:bc:c3:30:75:32:cc:11:84:d5:ee:42:e2:
76:7f:95:d7:bd:6b:49:bd:2f:9e:d5:34:8b:92:19:4a:8c:dc:
b1:de:89:69:0f:f6:51:9e:3f:a7:4c:f7:0f:92:6e:37:3b:04:
1b:53:99:b9:91:60:94:aa:72:79:cb:44:26:3a:0c:c2:1e:a2:
6c:c6:5d:08:be:dc:e3:4f:97:df:c7:30:02:8e:de:9a:e0:ed:
21:60:ac:d8:5e:b6:2a:aa:3c:c6:b3:54:70:9d:48:30:b4:74:
49:cd:a8:ed:31:d1:4f:d2:2e:36:ce:13:cd:9d:5d:d4:ad:9e:
3c:a5:1b:93:18:f2:d1:e9:bf:bd:8b:16:78:ff:7f:7b:41:84:
5f:11:a7:8a:8c:d1:3c:5d:27:98:51:f4:f0:24:1d:71:e1:79:
2d:47:07:92:2d:d6:14:ad:03:75:b9:4f:17:49:20:03:e7:f4:
4a:11:9c:43:48:3f:32:d5:63:71:2d:a7:1c:9d:e4:fe:10:5a:
28:43:9b:fa:79:be:78:3f:3d:e5:34:7d:99:c6:ec:e5:89:9f:
9d:1d:07:bc:15:46:8b:49:b1:d2:8c:c2:24:f5:68:ca:88:49:
ec:e0:31:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAWKKc0nVt3ey37y7Jc4iAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjU5MGNhNjJjMjQ2NDQwNTgzODE4YzMxZjI1NzNhMGY1
MGZmZDAwHhcNMjUwNDI5MDcwMDE0WhcNMjUwNDMwMDcwMDE0WjAzMTEwLwYDVQQD
Eyg3NDQ0MDdkZjYzOGMxZjI0YWM5NGFkYjljZGI0NTg5NGMwNDZmNjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4kGwr8HgXoDrlZHklYuGu2FuY/3
3osuDwt/W8YoO4HAblPS6D4Er+n5wQnJTwFq/nCyED/cYk+0un3CzHtvPd278Cuq
vE9Dk8NHjWJwZTZgTzq8tY8ZhNWKAPymfy9BY4aIAsAxUqOCsfSwvfTs7WqglsbH
9kAli9NunvRFwjWpL2fjXUz8mbcm8AaHbAT1Yiw/USJZdmJ7e+yEp8Ny82iOjCTy
UIusT9yrNKdv1KHshOql+JGhcc0qaeW6+boxyA6oSaLUDg+rvxNE98W+SmN/6Pt0
d9Astr99N3maJcZ5wf/1QbYV49KvtA1QlEFzlLjh3ST+61EupJ2359J0wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHREB99jjB8krJStuc20WJTARvZMMB8GA1UdIwQY
MBaAFIT1kMpiwkZEBYOBjDHyVzoPUP/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBXUXltTENSa1FGZzRHTU1mSlhPZzlRXzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81YTk5ZTgtYmI0Ni00ZmNkLWFlYTEt
OGQ1NmE3YjA5OTUzLzEvaFBXUXltTENSa1FGZzRHTU1mSlhPZzlRXzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny81YTk5ZTgtYmI0Ni00ZmNkLWFlYTEtOGQ1NmE3YjA5OTUz
LzEvaFBXUXltTENSa1FGZzRHTU1mSlhPZzlRXzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyJ6lZlW
IasiEOMUxqoiz26c+gjWDp7BvMMwdTLMEYTV7kLidn+V171rSb0vntU0i5IZSozc
sd6JaQ/2UZ4/p0z3D5JuNzsEG1OZuZFglKpyectEJjoMwh6ibMZdCL7c40+X38cw
Ao7emuDtIWCs2F62Kqo8xrNUcJ1IMLR0Sc2o7THRT9IuNs4TzZ1d1K2ePKUbkxjy
0em/vYsWeP9/e0GEXxGniozRPF0nmFH08CQdceF5LUcHki3WFK0DdblPF0kgA+f0
ShGcQ0g/MtVjcS2nHJ3k/hBaKEOb+nm+eD895TR9mcbs5YmfnR0HvBVGi0mx0ozC
JPVoyohJ7OAx+Q==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:12:24 2025 by rpki-client