Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
File: HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft (raw, json)
Hash identifier: c4/sqnEUQscur5Xrv1bSWD28d/LUXIJ1Yc0tv2J+c6g=
Subject key identifier: FC:CA:00:18:E4:63:B2:8B:86:DB:6E:AD:92:FB:79:AA:D2:6D:94:CE
Authority key identifier: 1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
Certificate issuer: /CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Certificate serial: 01967BD7E1DABE602F754E74331ACF6BE337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
Manifest number: 030E
Signing time: Mon 28 Apr 2025 10:01:07 +0000
Manifest this update: Mon 28 Apr 2025 10:01:07 +0000
Manifest next update: Tue 29 Apr 2025 10:01:07 +0000
Files and hashes: 1: HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl (hash: qwJ2gOqt6v/KhZleIBJW83mcFUwx+0bHu83Umqur7hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:e1:da:be:60:2f:75:4e:74:33:1a:cf:6b:e3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Validity
Not Before: Apr 28 10:01:07 2025 GMT
Not After : Apr 29 10:01:07 2025 GMT
Subject: CN=fcca0018e463b28b86db6ead92fb79aad26d94ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d0:07:86:bf:55:bd:c4:c7:6a:fe:e4:d2:f5:
f7:8e:e1:32:73:ac:b3:a5:26:b4:55:9a:4b:51:53:
9b:4f:01:5f:0c:53:21:f4:e9:31:fb:fa:af:55:da:
f4:49:c0:0f:38:87:ce:55:11:b7:03:84:38:ff:b7:
54:83:d3:c2:72:65:44:75:96:d4:9d:63:2c:69:84:
e8:8d:f7:6c:3b:17:3e:93:89:5b:21:e7:fe:33:d3:
17:7a:1b:b0:cd:90:cb:ed:f2:d7:bc:2f:a9:23:e0:
fe:30:df:35:ba:cd:4a:0f:3a:d9:56:82:00:70:ee:
ac:31:f3:78:48:92:30:ad:d4:ad:04:bb:b9:a5:5b:
b1:d8:f2:af:79:40:18:0f:3c:8b:d6:23:85:18:4f:
25:d2:8e:e1:25:95:b5:eb:bb:50:89:df:e2:6b:20:
6d:6a:24:98:89:27:ac:bd:fd:fb:f8:25:e2:e5:e3:
6e:aa:79:1e:d1:9d:7e:43:e8:50:6e:48:d7:07:55:
2b:ad:1f:10:f0:e2:2f:f4:ef:f1:1d:85:4a:59:96:
19:5e:75:6f:bf:cf:2a:29:1f:a0:b3:4d:46:c5:83:
d2:28:f5:21:0b:8e:5a:8b:7f:dd:e8:b4:f5:d5:71:
d6:85:b7:2c:d6:ce:31:79:62:e0:a6:39:85:8a:41:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CA:00:18:E4:63:B2:8B:86:DB:6E:AD:92:FB:79:AA:D2:6D:94:CE
X509v3 Authority Key Identifier:
keyid:1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f2:fc:73:30:9c:c4:c6:e3:73:62:76:23:16:61:87:05:65:
0e:50:d2:ec:cc:74:81:15:44:55:60:89:29:5c:cd:d3:43:d0:
16:40:3d:95:a0:1d:eb:29:c0:2f:5d:fc:d3:71:44:cd:93:35:
e9:8e:63:f7:49:78:26:ce:b5:a9:52:7a:d7:2f:cb:4b:6a:b1:
76:1c:12:5b:a6:3c:a9:63:9a:9d:0b:1e:cc:59:66:a1:a8:f0:
30:c4:92:a9:97:6e:9f:e6:37:8a:3e:84:28:4b:fc:25:eb:9f:
9b:ba:41:34:6f:20:e7:27:bc:cc:79:ff:58:a8:2a:d5:c8:fe:
40:9c:9a:61:83:4b:c6:4c:7f:d8:99:d7:87:7f:f3:af:f2:ee:
da:ee:4f:6f:15:23:9e:c9:37:6d:a5:14:67:44:c4:05:bb:ef:
51:b3:0c:5b:e5:87:67:67:62:db:58:a9:26:9b:5c:c2:21:c9:
15:38:bc:43:ac:3a:30:fa:40:d1:cf:ba:03:8d:40:8c:90:2c:
8a:6b:98:72:3e:5e:0d:46:88:e6:a9:1f:f6:cb:b5:b0:6b:dc:
4b:a7:dc:8c:f4:43:71:59:88:8d:87:54:21:2b:3b:6a:f7:99:
76:81:3d:23:9a:fc:9f:35:ce:ce:dd:d3:d5:df:83:33:c8:6a:
9b:f0:ef:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ71+HavmAvdU50MxrPa+M3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMWI0MWM5MjczZDVlNzYwNWRhMDAyY2Q2YzQwYmQ3MmU1
YWY0MWEwHhcNMjUwNDI4MTAwMTA3WhcNMjUwNDI5MTAwMTA3WjAzMTEwLwYDVQQD
EyhmY2NhMDAxOGU0NjNiMjhiODZkYjZlYWQ5MmZiNzlhYWQyNmQ5NGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NAHhr9VvcTHav7k0vX3juEyc6yz
pSa0VZpLUVObTwFfDFMh9Okx+/qvVdr0ScAPOIfOVRG3A4Q4/7dUg9PCcmVEdZbU
nWMsaYTojfdsOxc+k4lbIef+M9MXehuwzZDL7fLXvC+pI+D+MN81us1KDzrZVoIA
cO6sMfN4SJIwrdStBLu5pVux2PKveUAYDzyL1iOFGE8l0o7hJZW167tQid/iayBt
aiSYiSesvf37+CXi5eNuqnke0Z1+Q+hQbkjXB1UrrR8Q8OIv9O/xHYVKWZYZXnVv
v88qKR+gs01GxYPSKPUhC45ai3/d6LT11XHWhbcs1s4xeWLgpjmFikHVAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzKABjkY7KLhtturZL7earSbZTOMB8GA1UdIwQY
MBaAFB8bQcknPV52BdoALNbEC9cuWvQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHh0QnlTYzlYbllGMmdBczFzUUwxeTVhOUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iYzI3MjktM2EzMC00Yjk4LThjNDgt
NTgxYTdmOTAyMzVhLzEvSHh0QnlTYzlYbllGMmdBczFzUUwxeTVhOUJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iYzI3MjktM2EzMC00Yjk4LThjNDgtNTgxYTdmOTAyMzVh
LzEvSHh0QnlTYzlYbllGMmdBczFzUUwxeTVhOUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvL8czCc
xMbjc2J2IxZhhwVlDlDS7Mx0gRVEVWCJKVzN00PQFkA9laAd6ynAL13803FEzZM1
6Y5j90l4Js61qVJ61y/LS2qxdhwSW6Y8qWOanQsezFlmoajwMMSSqZdun+Y3ij6E
KEv8Jeufm7pBNG8g5ye8zHn/WKgq1cj+QJyaYYNLxkx/2JnXh3/zr/Lu2u5PbxUj
nsk3baUUZ0TEBbvvUbMMW+WHZ2di21ipJptcwiHJFTi8Q6w6MPpA0c+6A41AjJAs
imuYcj5eDUaI5qkf9su1sGvcS6fcjPRDcVmIjYdUISs7aveZdoE9I5r8nzXOzt3T
1d+DM8hqm/DvpA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:35:43 2025 by rpki-client