Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
File: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft (raw, json)
Hash identifier: MnWm1nSbMvgOel9iAkTT60dIK7g32IzU3PBC4knW+4s=
Subject key identifier: 6C:53:17:13:41:C0:0F:60:43:BF:5A:35:6D:F9:0C:BE:E3:43:4C:C4
Authority key identifier: 1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
Certificate issuer: /CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Certificate serial: 01967D21484E7B9F4FA8B59B82AB7AA1D2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
Manifest number: 14A5
Signing time: Mon 28 Apr 2025 16:00:55 +0000
Manifest this update: Mon 28 Apr 2025 16:00:55 +0000
Manifest next update: Tue 29 Apr 2025 16:00:55 +0000
Files and hashes: 1: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl (hash: sAquYLotcRj62HCkGvJKijzTwH9wT1PiLEwmJLVBCDg=)
2: hIagYPgcgLqF5hqMfUhJY2-sJAs.roa (hash: ZaaWq0BbjJoluHI5ROX+aFarBCsxRa8oHhsXlvsyUeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:21:48:4e:7b:9f:4f:a8:b5:9b:82:ab:7a:a1:d2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Validity
Not Before: Apr 28 16:00:55 2025 GMT
Not After : Apr 29 16:00:55 2025 GMT
Subject: CN=6c53171341c00f6043bf5a356df90cbee3434cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:8f:f8:44:78:6b:f4:24:c3:8f:0d:28:b4:
78:25:ca:ea:52:a8:8b:38:fc:01:86:29:53:29:bc:
2f:68:77:04:06:8b:34:97:12:7d:cf:62:fa:ad:a8:
ba:5c:a3:87:56:57:a3:ad:8f:ac:33:70:17:df:5c:
e5:de:12:8e:66:50:63:60:e8:58:73:9f:11:8e:34:
79:31:d9:b7:fe:ae:78:2f:0b:84:7d:2b:59:a9:56:
83:00:a7:89:ea:f8:e2:c4:b0:a0:5f:5c:ec:bf:51:
f3:0e:ff:9b:8c:99:8c:46:62:e8:a3:36:5b:03:6b:
d9:80:66:97:fd:b3:6f:47:47:a7:ab:a9:00:3e:51:
ec:12:b5:85:54:43:ce:0a:3c:07:b1:5e:83:33:6e:
be:de:95:68:bf:f3:92:f4:7f:32:dd:c8:74:33:dc:
48:2b:2e:28:35:8c:fc:6b:21:e9:e2:02:4d:cb:32:
71:07:c2:87:ae:0d:86:fb:c5:0e:c5:38:94:a5:27:
2e:1b:96:d8:b4:df:7a:c7:3b:bd:3c:c2:b6:1d:f7:
8b:0a:d4:2f:9e:61:17:0b:0f:64:1b:17:75:62:d3:
55:78:59:f7:05:33:09:95:df:1b:53:8b:d8:d0:08:
20:8c:57:1c:c9:09:8c:51:04:cf:9d:17:b6:7f:36:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:53:17:13:41:C0:0F:60:43:BF:5A:35:6D:F9:0C:BE:E3:43:4C:C4
X509v3 Authority Key Identifier:
keyid:1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:00:a8:df:2f:f7:82:cd:5e:52:a7:f2:de:83:9e:97:04:d0:
1e:c7:50:99:04:38:fc:06:02:75:e7:d9:46:83:ea:25:90:03:
07:e9:9f:d3:08:0c:c1:fe:be:93:5a:83:a1:20:cd:c7:c8:df:
1b:46:f2:9a:41:a1:96:3b:de:c3:be:cf:17:da:ca:1b:a4:95:
a7:88:47:7e:67:94:c4:c4:9e:7f:2e:2a:15:f2:48:4b:90:9c:
28:1c:f3:a6:5a:17:4a:e8:1f:2b:53:45:03:9c:77:0e:de:3b:
ee:9d:2e:7d:a5:1e:6c:e9:1d:5c:ba:65:47:49:58:98:c9:64:
69:d3:c2:72:75:0c:a9:90:74:5e:cf:7b:94:8c:bd:70:ab:a5:
f3:79:ff:a4:35:4a:85:d7:3b:d5:c9:ce:d0:0b:12:eb:62:97:
c6:5c:e4:88:c6:51:16:40:e5:85:0b:16:df:5e:25:6b:5e:fe:
63:7f:0d:6d:1f:eb:af:50:16:bb:35:b8:44:16:87:13:08:68:
48:e2:07:ac:19:47:34:47:14:b9:27:52:51:44:32:b6:e3:36:
90:1e:e5:49:83:cc:67:b6:9b:2b:9a:4c:cb:3a:0b:90:20:40:
c9:f1:f0:f9:6e:46:ee:fe:df:6f:36:75:c6:cf:94:83:4a:cc:
16:09:27:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9IUhOe59PqLWbgqt6odLJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOTAzNDRkY2FmZmJkMzNlNjhkODQ4OTVkODdkOGFiZjUz
Yzc0YTMwHhcNMjUwNDI4MTYwMDU1WhcNMjUwNDI5MTYwMDU1WjAzMTEwLwYDVQQD
Eyg2YzUzMTcxMzQxYzAwZjYwNDNiZjVhMzU2ZGY5MGNiZWUzNDM0Y2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFCP+ER4a/Qkw48NKLR4JcrqUqiL
OPwBhilTKbwvaHcEBos0lxJ9z2L6rai6XKOHVlejrY+sM3AX31zl3hKOZlBjYOhY
c58RjjR5Mdm3/q54LwuEfStZqVaDAKeJ6vjixLCgX1zsv1HzDv+bjJmMRmLoozZb
A2vZgGaX/bNvR0enq6kAPlHsErWFVEPOCjwHsV6DM26+3pVov/OS9H8y3ch0M9xI
Ky4oNYz8ayHp4gJNyzJxB8KHrg2G+8UOxTiUpScuG5bYtN96xzu9PMK2HfeLCtQv
nmEXCw9kGxd1YtNVeFn3BTMJld8bU4vY0AggjFccyQmMUQTPnRe2fzYQmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxTFxNBwA9gQ79aNW35DL7jQ0zEMB8GA1UdIwQY
MBaAFB2QNE3K/70z5o2EiV2H2Kv1PHSjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFpBMFRjcl92VFBtallTSlhZZllxX1U4ZEtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85YzNkMjgtMDVkNi00N2IwLTkxZWYt
ZTUwNjRkYjIxYjIwLzEvSFpBMFRjcl92VFBtallTSlhZZllxX1U4ZEtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi85YzNkMjgtMDVkNi00N2IwLTkxZWYtZTUwNjRkYjIxYjIw
LzEvSFpBMFRjcl92VFBtallTSlhZZllxX1U4ZEtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQCo3y/3
gs1eUqfy3oOelwTQHsdQmQQ4/AYCdefZRoPqJZADB+mf0wgMwf6+k1qDoSDNx8jf
G0bymkGhljvew77PF9rKG6SVp4hHfmeUxMSefy4qFfJIS5CcKBzzploXSugfK1NF
A5x3Dt477p0ufaUebOkdXLplR0lYmMlkadPCcnUMqZB0Xs97lIy9cKul83n/pDVK
hdc71cnO0AsS62KXxlzkiMZRFkDlhQsW314la17+Y38NbR/rr1AWuzW4RBaHEwho
SOIHrBlHNEcUuSdSUUQytuM2kB7lSYPMZ7abK5pMyzoLkCBAyfHw+W5G7v7fbzZ1
xs+Ug0rMFgknwA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:55:58 2025 by rpki-client