Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft
File: HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft (raw, json)
Hash identifier: kERj6nSS5VeNKGXUj702SNPzw3wyHVOyHLty8VEa/Mc=
Subject key identifier: 47:49:2E:6E:6F:DE:7C:EB:B4:51:CB:18:52:3B:92:E2:99:D8:2B:C1
Authority key identifier: 1C:0A:99:50:1E:76:81:FA:3C:67:E1:FD:3D:73:51:28:A2:2C:63:17
Certificate issuer: /CN=1c0a99501e7681fa3c67e1fd3d735128a22c6317
Certificate serial: 019693E00688AC5413824B13F193D4A3B5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAqZUB52gfo8Z-H9PXNRKKIsYxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft
Manifest number: 055E
Signing time: Sat 03 May 2025 02:00:54 +0000
Manifest this update: Sat 03 May 2025 02:00:54 +0000
Manifest next update: Sun 04 May 2025 02:00:54 +0000
Files and hashes: 1: HAqZUB52gfo8Z-H9PXNRKKIsYxc.crl (hash: BvBwgzUo4khgGzf5j7Nk0hJ1b3yK51bWp73RYMwIUz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAqZUB52gfo8Z-H9PXNRKKIsYxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:e0:06:88:ac:54:13:82:4b:13:f1:93:d4:a3:b5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0a99501e7681fa3c67e1fd3d735128a22c6317
Validity
Not Before: May 3 02:00:54 2025 GMT
Not After : May 4 02:00:54 2025 GMT
Subject: CN=47492e6e6fde7cebb451cb18523b92e299d82bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:f6:f8:da:62:31:eb:c6:22:32:21:54:bb:
bc:ba:da:6e:dc:fc:57:69:87:14:67:24:08:0e:54:
c0:ee:34:9d:b0:38:24:22:41:ac:2d:97:f9:a9:ba:
7c:f9:32:99:09:fb:33:91:91:82:44:e0:d3:ce:73:
ff:14:a6:b7:14:df:5c:af:53:5c:fd:50:bd:38:f5:
72:cf:9a:58:7c:53:58:be:25:6e:f3:6d:33:fd:1a:
64:59:ec:ae:89:fa:56:a1:8e:9f:e9:96:f9:24:8e:
26:05:bf:a3:62:0d:de:fe:d5:78:3e:e3:fd:5e:24:
19:af:56:30:a3:a9:8e:4d:f3:9b:28:17:d7:05:01:
5c:2c:db:7e:81:c9:08:e0:8d:3f:f7:f9:8a:c9:1a:
b8:77:05:2f:df:0b:04:18:9a:3d:84:e3:5c:94:49:
bc:87:03:e6:cf:09:3b:36:d9:c2:0a:bc:fc:5a:7f:
91:97:20:2b:dd:1e:f6:92:57:29:f6:08:2a:f3:73:
3f:07:bd:ae:36:c0:e1:f3:93:75:e7:67:34:4d:24:
ae:2d:b9:54:60:85:ab:c7:a7:1f:38:49:14:80:e2:
be:73:d4:e9:20:a9:d9:a0:6d:a5:14:32:b2:cc:5a:
e4:5f:24:57:85:11:e6:f6:5a:05:96:cb:9c:58:37:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:49:2E:6E:6F:DE:7C:EB:B4:51:CB:18:52:3B:92:E2:99:D8:2B:C1
X509v3 Authority Key Identifier:
keyid:1C:0A:99:50:1E:76:81:FA:3C:67:E1:FD:3D:73:51:28:A2:2C:63:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAqZUB52gfo8Z-H9PXNRKKIsYxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:af:f0:90:b0:b2:f8:69:98:27:51:a3:c9:f5:4f:af:f0:8d:
0a:fd:bc:ad:6f:a9:3c:ba:f7:f7:e5:ea:47:5a:ff:01:b3:58:
02:46:6f:b7:b6:34:83:9b:19:cc:27:14:0d:38:63:d8:8c:dc:
b2:e7:e2:e3:3b:fc:f7:44:2e:3c:76:b1:5c:92:ae:44:75:9b:
4d:e2:df:16:c4:80:6d:7d:c3:f7:65:ae:d8:7b:09:01:ee:e5:
7e:cc:99:84:15:41:9c:02:d5:ba:73:14:fb:3d:12:97:f2:70:
20:34:af:6c:15:55:68:fa:02:ed:fd:7e:30:26:8b:78:fd:ba:
c1:2f:7a:51:5c:75:38:25:a1:c6:90:c1:f0:52:03:64:0b:58:
a6:4c:e0:11:ad:87:5d:74:07:a8:40:9c:14:2c:cc:95:0e:63:
35:b5:53:bc:ab:e7:be:58:22:9c:d5:b2:75:fb:82:92:fe:8b:
17:02:dc:b1:d9:06:7f:51:df:9f:42:69:f5:df:39:12:2d:e3:
b9:32:ca:ab:c3:79:82:c6:0e:da:4a:db:46:9b:68:ef:8a:2d:
e4:ba:02:fc:2e:c1:2c:2e:14:2e:04:19:0f:0f:08:c6:97:c4:
07:eb:e9:2d:77:29:9b:18:c5:d3:83:ad:31:f1:b9:7e:84:97:
7d:03:68:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaT4AaIrFQTgksT8ZPUo7XmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMGE5OTUwMWU3NjgxZmEzYzY3ZTFmZDNkNzM1MTI4YTIy
YzYzMTcwHhcNMjUwNTAzMDIwMDU0WhcNMjUwNTA0MDIwMDU0WjAzMTEwLwYDVQQD
Eyg0NzQ5MmU2ZTZmZGU3Y2ViYjQ1MWNiMTg1MjNiOTJlMjk5ZDgyYmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphn2+NpiMevGIjIhVLu8utpu3PxX
aYcUZyQIDlTA7jSdsDgkIkGsLZf5qbp8+TKZCfszkZGCRODTznP/FKa3FN9cr1Nc
/VC9OPVyz5pYfFNYviVu820z/RpkWeyuifpWoY6f6Zb5JI4mBb+jYg3e/tV4PuP9
XiQZr1Ywo6mOTfObKBfXBQFcLNt+gckI4I0/9/mKyRq4dwUv3wsEGJo9hONclEm8
hwPmzwk7NtnCCrz8Wn+RlyAr3R72klcp9ggq83M/B72uNsDh85N152c0TSSuLblU
YIWrx6cfOEkUgOK+c9TpIKnZoG2lFDKyzFrkXyRXhRHm9loFlsucWDe97QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdJLm5v3nzrtFHLGFI7kuKZ2CvBMB8GA1UdIwQY
MBaAFBwKmVAedoH6PGfh/T1zUSiiLGMXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFxWlVCNTJnZm84Wi1IOVBYTlJLS0lzWXhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9lOWMwYjEtMTY2YS00YmVhLWJiNTMt
MTNjZjkxOGY2Y2JjLzEvSEFxWlVCNTJnZm84Wi1IOVBYTlJLS0lzWXhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9lOWMwYjEtMTY2YS00YmVhLWJiNTMtMTNjZjkxOGY2Y2Jj
LzEvSEFxWlVCNTJnZm84Wi1IOVBYTlJLS0lzWXhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaa/wkLCy
+GmYJ1GjyfVPr/CNCv28rW+pPLr39+XqR1r/AbNYAkZvt7Y0g5sZzCcUDThj2Izc
sufi4zv890QuPHaxXJKuRHWbTeLfFsSAbX3D92Wu2HsJAe7lfsyZhBVBnALVunMU
+z0Sl/JwIDSvbBVVaPoC7f1+MCaLeP26wS96UVx1OCWhxpDB8FIDZAtYpkzgEa2H
XXQHqECcFCzMlQ5jNbVTvKvnvlginNWydfuCkv6LFwLcsdkGf1Hfn0Jp9d85Ei3j
uTLKq8N5gsYO2krbRpto74ot5LoC/C7BLC4ULgQZDw8IxpfEB+vpLXcpmxjF04Ot
MfG5foSXfQNo3g==
-----END CERTIFICATE-----
Generated at Sat May 3 12:36:52 2025 by rpki-client