Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
File: h6WU4wS2ghg6ojWeQOHc75P-BXA.mft (raw, json)
Hash identifier: 2PG82YhY/PIcWjfxGTC7Qe18/i5nqb+5QgAx1MztESQ=
Subject key identifier: CF:04:77:2F:AA:9F:0A:D2:AC:22:E0:8D:53:EA:21:17:DA:2C:1F:43
Authority key identifier: 87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
Certificate issuer: /CN=87a594e304b682183aa2359e40e1dcef93fe0570
Certificate serial: 0196963C3D80EF2C402AB4913617EFED3B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
Manifest number: 0434
Signing time: Sat 03 May 2025 13:00:52 +0000
Manifest this update: Sat 03 May 2025 13:00:52 +0000
Manifest next update: Sun 04 May 2025 13:00:52 +0000
Files and hashes: 1: Vzz9bAfXoV_CbBlQ5On5u4sMVy4.roa (hash: 9L5UOAnznGuqnwBvCvaXb3wcpMtqdknz4TA8q7GIbmw=)
2: h6WU4wS2ghg6ojWeQOHc75P-BXA.crl (hash: x0sw+cOAC7GfeMOivIR5yGiKQds/9/hiIwNiiX913wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:96:3c:3d:80:ef:2c:40:2a:b4:91:36:17:ef:ed:3b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a594e304b682183aa2359e40e1dcef93fe0570
Validity
Not Before: May 3 13:00:52 2025 GMT
Not After : May 4 13:00:52 2025 GMT
Subject: CN=cf04772faa9f0ad2ac22e08d53ea2117da2c1f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:60:50:53:e9:47:17:9b:05:61:25:68:9f:
7c:31:c1:c3:92:be:f3:17:8b:c0:e7:a5:b0:f2:e0:
c3:64:6b:b5:78:f3:5f:80:9e:19:95:0b:df:aa:8c:
3c:87:27:af:00:bc:96:b6:ca:22:cb:83:ee:7b:52:
24:9f:c1:cd:5e:87:31:04:17:a5:3c:96:61:eb:97:
99:a7:e8:d2:b6:87:a6:bd:62:9a:fb:26:e6:66:4c:
68:97:ba:fc:62:dd:92:4c:db:77:db:07:9b:68:74:
8e:23:71:4b:d7:da:b7:a1:64:a4:42:66:7d:6b:6d:
07:62:ae:7d:66:f1:61:42:77:06:8c:6f:e6:16:6d:
a0:7b:40:a1:4f:ed:fa:c5:c6:79:29:9b:69:39:01:
dc:60:64:af:ef:ed:39:5b:60:c5:4a:2c:ef:20:78:
e8:be:12:94:84:9f:ed:e4:92:fa:4d:e8:32:66:6c:
65:59:10:c0:2b:63:4e:a9:23:cf:5f:4a:54:4c:90:
4c:bd:71:67:49:37:cb:39:24:41:df:80:61:15:6d:
87:9f:53:ac:b2:e6:28:1f:f5:17:26:aa:1c:a5:71:
bb:a6:21:a9:aa:45:83:33:6a:fe:e4:e1:4a:81:0f:
8e:60:84:b0:eb:ab:01:81:a4:b3:29:6c:f3:13:8d:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:04:77:2F:AA:9F:0A:D2:AC:22:E0:8D:53:EA:21:17:DA:2C:1F:43
X509v3 Authority Key Identifier:
keyid:87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e4:9f:74:84:cc:af:fd:81:12:9e:31:78:08:ad:b7:19:31:
18:7c:7f:e0:e6:ab:a4:20:09:2d:71:18:10:c8:ef:f9:7f:ac:
32:86:f7:a9:4d:f9:08:33:3d:ad:74:e3:76:6d:84:46:9e:f6:
6e:cb:21:d7:2e:f5:5e:a1:f8:e0:b0:14:b0:cd:3a:24:51:6e:
d0:04:6d:11:26:47:9b:fa:ff:cd:90:10:dd:70:36:2a:d1:b5:
d6:34:13:10:13:b0:e2:8d:dc:3f:e2:da:2d:c7:ec:a5:9d:d1:
cc:3d:a8:45:95:2a:3a:99:2f:7d:16:bb:e5:a1:34:1b:5e:e5:
16:eb:03:d9:3d:41:75:09:d8:99:ae:38:d7:3a:ac:f9:60:f0:
22:39:32:0b:ee:36:97:a1:5f:2a:ba:7d:39:56:29:f3:c3:91:
36:de:a9:09:74:7e:a4:b0:c3:d3:c3:a4:eb:19:4e:f5:66:bd:
3c:f6:d2:40:e3:f5:33:a9:73:95:92:3d:4d:01:9a:98:0f:17:
0a:e1:b0:c9:5d:d3:b2:39:53:3b:f4:1d:e8:77:93:49:6f:2a:
b1:b1:25:36:b1:11:1a:ff:16:23:4e:97:c6:01:96:6a:03:31:
e3:d4:d9:74:5e:63:4c:32:ea:85:74:4a:ef:d4:40:42:79:60:
ee:bd:45:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaWPD2A7yxAKrSRNhfv7TuBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YTU5NGUzMDRiNjgyMTgzYWEyMzU5ZTQwZTFkY2VmOTNm
ZTA1NzAwHhcNMjUwNTAzMTMwMDUyWhcNMjUwNTA0MTMwMDUyWjAzMTEwLwYDVQQD
EyhjZjA0NzcyZmFhOWYwYWQyYWMyMmUwOGQ1M2VhMjExN2RhMmMxZjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyhgUFPpRxebBWElaJ98McHDkr7z
F4vA56Ww8uDDZGu1ePNfgJ4ZlQvfqow8hyevALyWtsoiy4Pue1Ikn8HNXocxBBel
PJZh65eZp+jStoemvWKa+ybmZkxol7r8Yt2STNt32webaHSOI3FL19q3oWSkQmZ9
a20HYq59ZvFhQncGjG/mFm2ge0ChT+36xcZ5KZtpOQHcYGSv7+05W2DFSizvIHjo
vhKUhJ/t5JL6TegyZmxlWRDAK2NOqSPPX0pUTJBMvXFnSTfLOSRB34BhFW2Hn1Os
suYoH/UXJqocpXG7piGpqkWDM2r+5OFKgQ+OYISw66sBgaSzKWzzE41KuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8Edy+qnwrSrCLgjVPqIRfaLB9DMB8GA1UdIwQY
MBaAFIellOMEtoIYOqI1nkDh3O+T/gVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Zjg2OTktN2I1Mi00MDZlLTgyYzAt
YjllMzRhMzhmM2E5LzEvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80Zjg2OTktN2I1Mi00MDZlLTgyYzAtYjllMzRhMzhmM2E5
LzEvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOSfdITM
r/2BEp4xeAittxkxGHx/4OarpCAJLXEYEMjv+X+sMob3qU35CDM9rXTjdm2ERp72
bssh1y71XqH44LAUsM06JFFu0ARtESZHm/r/zZAQ3XA2KtG11jQTEBOw4o3cP+La
LcfspZ3RzD2oRZUqOpkvfRa75aE0G17lFusD2T1BdQnYma441zqs+WDwIjkyC+42
l6FfKrp9OVYp88ORNt6pCXR+pLDD08Ok6xlO9Wa9PPbSQOP1M6lzlZI9TQGamA8X
CuGwyV3TsjlTO/Qd6HeTSW8qsbElNrERGv8WI06XxgGWagMx49TZdF5jTDLqhXRK
79RAQnlg7r1Fgg==
-----END CERTIFICATE-----
Generated at Sat May 3 23:31:20 2025 by rpki-client