Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
File: hEWs0xvMvTRflkrZB8p3g9UEAm0.mft (raw, json)
Hash identifier: 5RfITlAWJhRANd5BPkovJD5k/5nGI4auJeJs7UYOoIk=
Subject key identifier: C7:1B:9F:E3:37:EC:39:0D:42:87:E8:76:74:96:20:7E:CF:81:F5:08
Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d
Certificate serial: 019683FF139AE40DD622A6DFF2F64359AE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
Manifest number: 0245
Signing time: Wed 30 Apr 2025 00:00:53 +0000
Manifest this update: Wed 30 Apr 2025 00:00:53 +0000
Manifest next update: Thu 01 May 2025 00:00:53 +0000
Files and hashes: 1: MIsHJfMxCSM1WvbxV6mjQ2268Dg.roa (hash: 7IHu7bEPJwg7z9jyxbfl0xePWRPgEqdEgg/sFRD/jOU=)
2: hEWs0xvMvTRflkrZB8p3g9UEAm0.crl (hash: zpXfvdYA+TQX87wNcvCHFx5xWHikHkFH9enNHnZEr+k=)
3: tXUyhf07-eQaf37r4yK9NmJ5yPE.roa (hash: GWIxTVoGfPA2NfNvC8esjl5GZCoj69LgeTwNbdVaqCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:13:9a:e4:0d:d6:22:a6:df:f2:f6:43:59:ae:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d
Validity
Not Before: Apr 30 00:00:53 2025 GMT
Not After : May 1 00:00:53 2025 GMT
Subject: CN=c71b9fe337ec390d4287e8767496207ecf81f508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:a4:8b:74:1c:ed:e0:ea:dc:05:a9:24:5a:
97:54:d6:24:0c:84:e3:f0:37:0a:e5:40:68:76:3d:
94:c6:72:ba:8e:0d:6d:a5:ab:43:c7:dd:e7:3d:ec:
ee:32:41:30:22:5b:5a:84:d7:e3:c9:cc:bb:6e:da:
e8:63:64:62:c4:66:11:21:c6:3f:3e:72:b2:3e:eb:
11:90:53:fc:32:d2:22:a2:b3:4d:83:4d:68:c3:30:
6f:a5:7f:0d:97:6d:d9:f6:0b:9b:8b:99:78:ad:f0:
92:af:eb:8a:8e:c2:00:61:25:f2:4c:9c:59:d0:51:
d4:64:04:b8:fc:1b:fa:bc:c8:2c:4e:8d:17:c0:b7:
a6:dc:3e:5b:ef:44:15:ea:bb:4a:2b:88:dd:8b:f2:
48:18:e3:4b:b1:91:81:aa:7a:63:f1:2c:f5:87:8d:
e7:38:7f:7b:84:6c:3c:08:14:7d:c4:d8:18:bc:48:
05:05:7c:a6:d3:84:00:2b:be:12:4c:dd:91:0a:4f:
25:07:7e:fc:19:c7:6c:1e:4d:75:0c:e1:12:9b:39:
8c:ad:ec:d6:1e:c8:ea:08:d0:03:83:a6:aa:16:4e:
ce:a2:e7:c5:45:ea:f2:d1:72:e7:62:a4:cf:d7:a9:
17:64:6e:26:6b:71:20:ce:fb:b9:3f:ea:cd:fa:85:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1B:9F:E3:37:EC:39:0D:42:87:E8:76:74:96:20:7E:CF:81:F5:08
X509v3 Authority Key Identifier:
keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fb:ed:03:04:c1:dc:e3:16:ab:0c:0c:0e:03:22:74:a9:57:
6a:e9:a3:1e:e4:0c:85:a7:31:97:15:57:0b:d8:85:fd:65:ad:
fd:76:41:9d:52:7c:25:58:a5:15:b0:49:7d:da:20:7a:ff:8e:
c4:6d:66:5a:1a:47:ff:ec:5b:59:e8:46:4b:02:7d:84:d8:8b:
64:d5:ed:a5:9f:e9:2d:64:79:26:b1:97:46:b8:77:ec:0e:c2:
7f:97:2e:d6:43:dd:db:9d:c2:69:5f:1b:02:8f:86:fe:45:df:
d5:14:47:3e:16:58:c7:db:50:2d:f2:ad:e2:e8:b7:a5:66:34:
ec:d6:de:d9:3d:6a:29:c7:da:01:d4:9f:8a:e1:72:23:81:44:
38:f0:4f:a2:89:17:55:7e:12:a1:c0:9e:f7:5d:64:72:8d:1c:
4b:70:01:cd:6e:28:40:e4:3b:76:94:2b:49:ca:62:66:69:43:
b8:18:b4:b6:05:1a:c9:97:58:93:5a:8d:57:41:ef:9b:59:13:
1b:72:2c:3d:71:8b:8d:dd:85:07:7e:7a:fe:9c:49:cb:a6:cb:
6d:95:91:ba:16:69:75:10:c1:17:f2:fb:40:7e:6f:c6:8c:2f:
28:06:11:c2:46:2e:e0:48:2a:5e:f1:83:59:e5:37:df:ff:49:
a1:d5:f3:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaD/xOa5A3WIqbf8vZDWa5ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDVhY2QzMWJjY2JkMzQ1Zjk2NGFkOTA3Y2E3NzgzZDUw
NDAyNmQwHhcNMjUwNDMwMDAwMDUzWhcNMjUwNTAxMDAwMDUzWjAzMTEwLwYDVQQD
EyhjNzFiOWZlMzM3ZWMzOTBkNDI4N2U4NzY3NDk2MjA3ZWNmODFmNTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+iki3Qc7eDq3AWpJFqXVNYkDITj
8DcK5UBodj2UxnK6jg1tpatDx93nPezuMkEwIltahNfjycy7btroY2RixGYRIcY/
PnKyPusRkFP8MtIiorNNg01owzBvpX8Nl23Z9gubi5l4rfCSr+uKjsIAYSXyTJxZ
0FHUZAS4/Bv6vMgsTo0XwLem3D5b70QV6rtKK4jdi/JIGONLsZGBqnpj8Sz1h43n
OH97hGw8CBR9xNgYvEgFBXym04QAK74STN2RCk8lB378GcdsHk11DOESmzmMrezW
HsjqCNADg6aqFk7OoufFRery0XLnYqTP16kXZG4ma3Egzvu5P+rN+oU2IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcbn+M37DkNQofodnSWIH7PgfUIMB8GA1UdIwQY
MBaAFIRFrNMbzL00X5ZK2QfKd4PVBAJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVXczB4dk12VFJmbGtyWkI4cDNnOVVFQW0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mY2I3YWYtNTZkMC00YzU1LWE3Nzgt
MDczZTNiN2FkODUwLzEvaEVXczB4dk12VFJmbGtyWkI4cDNnOVVFQW0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mY2I3YWYtNTZkMC00YzU1LWE3NzgtMDczZTNiN2FkODUw
LzEvaEVXczB4dk12VFJmbGtyWkI4cDNnOVVFQW0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvvtAwTB
3OMWqwwMDgMidKlXaumjHuQMhacxlxVXC9iF/WWt/XZBnVJ8JVilFbBJfdogev+O
xG1mWhpH/+xbWehGSwJ9hNiLZNXtpZ/pLWR5JrGXRrh37A7Cf5cu1kPd253CaV8b
Ao+G/kXf1RRHPhZYx9tQLfKt4ui3pWY07Nbe2T1qKcfaAdSfiuFyI4FEOPBPookX
VX4SocCe911kco0cS3ABzW4oQOQ7dpQrScpiZmlDuBi0tgUayZdYk1qNV0Hvm1kT
G3IsPXGLjd2FB356/pxJy6bLbZWRuhZpdRDBF/L7QH5vxowvKAYRwkYu4EgqXvGD
WeU33/9JodXzcA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 09:34:23 2025 by rpki-client