Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
File: hGy8NY5qqP7tbgMmoECJt-XyqYk.mft (raw, json)
Hash identifier: jfNOQaI2v8FiMuRjakzPf4ilQWjY2IypQxlT4gRGfBQ=
Subject key identifier: D5:51:50:28:41:D7:36:F2:43:35:A2:21:EE:9F:B0:3B:46:3F:C4:9F
Authority key identifier: 84:6C:BC:35:8E:6A:A8:FE:ED:6E:03:26:A0:40:89:B7:E5:F2:A9:89
Certificate issuer: /CN=846cbc358e6aa8feed6e0326a04089b7e5f2a989
Certificate serial: 0196760CC557E102E4CAC731EB064DDC2679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
Manifest number: 0970
Signing time: Sun 27 Apr 2025 07:01:10 +0000
Manifest this update: Sun 27 Apr 2025 07:01:10 +0000
Manifest next update: Mon 28 Apr 2025 07:01:10 +0000
Files and hashes: 1: hGy8NY5qqP7tbgMmoECJt-XyqYk.crl (hash: J4ErnMTDdqD+LoAld0nlpUIP45o3MfCZ7xACYbEFans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:c5:57:e1:02:e4:ca:c7:31:eb:06:4d:dc:26:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cbc358e6aa8feed6e0326a04089b7e5f2a989
Validity
Not Before: Apr 27 07:01:10 2025 GMT
Not After : Apr 28 07:01:10 2025 GMT
Subject: CN=d551502841d736f24335a221ee9fb03b463fc49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:89:d4:1b:42:17:32:a9:17:39:4e:66:73:
ed:a3:2f:ef:94:12:81:7a:28:e3:4d:a5:a8:ee:df:
10:55:e9:8b:81:64:e0:57:1d:e5:7b:34:74:c7:b0:
6b:7b:ad:2f:ce:f6:22:e3:c2:57:e0:99:5c:7c:29:
d8:58:96:d4:4f:81:ba:57:49:91:2e:c8:db:26:bc:
26:3e:90:a8:7b:a5:16:b3:c3:a2:13:07:10:9b:dd:
d0:83:ac:26:6d:b6:c9:20:de:a2:e1:b5:96:0f:1c:
c2:b3:9a:b1:5b:2a:ea:24:46:e6:2a:92:54:21:fc:
b5:57:bd:48:32:50:56:b5:4e:ff:1f:36:b8:ee:0e:
1e:cb:ba:0e:ec:de:59:76:f1:fa:9c:9c:7d:d9:05:
7d:f0:9b:b1:99:5a:ac:80:8e:c0:d2:39:ce:39:c4:
39:65:5e:b7:42:d4:b7:d3:e5:f3:03:b5:6d:f3:cc:
8a:6c:c6:12:94:b2:ba:2f:c7:b5:14:33:22:f2:13:
d3:5b:55:1a:2f:14:e2:e4:2f:76:20:ed:f2:d7:94:
8e:23:c2:22:73:ca:98:f7:d6:e3:28:65:82:4b:9b:
6e:85:0f:d6:f4:6b:17:19:44:2a:d4:48:ab:33:a7:
ea:93:88:bc:c7:f5:95:57:f2:36:70:b9:f0:4c:04:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:51:50:28:41:D7:36:F2:43:35:A2:21:EE:9F:B0:3B:46:3F:C4:9F
X509v3 Authority Key Identifier:
keyid:84:6C:BC:35:8E:6A:A8:FE:ED:6E:03:26:A0:40:89:B7:E5:F2:A9:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:74:d0:ad:40:60:86:a7:02:d7:b4:97:31:8f:86:cc:58:26:
3a:ba:80:19:7e:49:e5:cc:dc:23:23:8f:63:85:6f:28:b6:90:
47:18:ac:84:da:68:ec:da:70:32:f9:bc:0c:69:7e:54:47:cd:
b6:85:b7:46:50:8c:f0:1d:72:7a:8c:c5:4b:ee:99:61:ee:e6:
c1:db:e0:8a:d7:96:01:c1:2d:6a:bf:89:7c:df:1c:f9:7a:18:
33:03:3f:8e:1b:3d:ef:d9:cf:84:27:5b:94:ab:f1:1d:a0:7a:
6d:0a:c0:fc:8a:cc:af:92:25:f6:d9:ac:d5:95:9c:93:1a:81:
e8:f4:54:f2:32:79:df:b3:57:c0:83:f9:4b:cd:67:53:41:19:
56:6c:1e:19:c3:09:e8:f6:77:73:c5:10:0b:e9:79:04:ff:03:
eb:85:51:55:20:8e:da:72:d0:e1:db:d2:ef:eb:b1:1c:9f:7a:
17:6d:86:e1:a4:11:7a:48:02:5a:91:bb:0b:90:bb:c9:93:d4:
1e:ea:df:ea:d1:02:4b:1a:a6:22:85:8b:08:f3:59:04:b8:29:
44:35:27:0e:c1:8d:73:5f:37:79:c6:f3:1b:29:c1:e9:37:fc:
22:7c:dc:2a:ff:43:d0:ab:fe:73:a0:b0:64:5a:9d:d1:e0:ae:
39:be:d5:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DMVX4QLkyscx6wZN3CZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NmNiYzM1OGU2YWE4ZmVlZDZlMDMyNmEwNDA4OWI3ZTVm
MmE5ODkwHhcNMjUwNDI3MDcwMTEwWhcNMjUwNDI4MDcwMTEwWjAzMTEwLwYDVQQD
EyhkNTUxNTAyODQxZDczNmYyNDMzNWEyMjFlZTlmYjAzYjQ2M2ZjNDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2aJ1BtCFzKpFzlOZnPtoy/vlBKB
eijjTaWo7t8QVemLgWTgVx3lezR0x7Bre60vzvYi48JX4JlcfCnYWJbUT4G6V0mR
LsjbJrwmPpCoe6UWs8OiEwcQm93Qg6wmbbbJIN6i4bWWDxzCs5qxWyrqJEbmKpJU
Ify1V71IMlBWtU7/Hza47g4ey7oO7N5ZdvH6nJx92QV98JuxmVqsgI7A0jnOOcQ5
ZV63QtS30+XzA7Vt88yKbMYSlLK6L8e1FDMi8hPTW1UaLxTi5C92IO3y15SOI8Ii
c8qY99bjKGWCS5tuhQ/W9GsXGUQq1EirM6fqk4i8x/WVV/I2cLnwTATKnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVRUChB1zbyQzWiIe6fsDtGP8SfMB8GA1UdIwQY
MBaAFIRsvDWOaqj+7W4DJqBAibfl8qmJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEd5OE5ZNXFxUDd0YmdNbW9FQ0p0LVh5cVlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS81ZjNkNDUtMDBkMC00NTVhLWFjYzgt
M2Y3ZDgxYmFmN2I3LzEvaEd5OE5ZNXFxUDd0YmdNbW9FQ0p0LVh5cVlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS81ZjNkNDUtMDBkMC00NTVhLWFjYzgtM2Y3ZDgxYmFmN2I3
LzEvaEd5OE5ZNXFxUDd0YmdNbW9FQ0p0LVh5cVlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnTQrUBg
hqcC17SXMY+GzFgmOrqAGX5J5czcIyOPY4VvKLaQRxishNpo7NpwMvm8DGl+VEfN
toW3RlCM8B1yeozFS+6ZYe7mwdvgiteWAcEtar+JfN8c+XoYMwM/jhs979nPhCdb
lKvxHaB6bQrA/IrMr5Il9tms1ZWckxqB6PRU8jJ537NXwIP5S81nU0EZVmweGcMJ
6PZ3c8UQC+l5BP8D64VRVSCO2nLQ4dvS7+uxHJ96F22G4aQRekgCWpG7C5C7yZPU
Hurf6tECSxqmIoWLCPNZBLgpRDUnDsGNc183ecbzGynB6Tf8InzcKv9D0Kv+c6Cw
ZFqd0eCuOb7VzQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:45 2025 by rpki-client