Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: uRK30xgIYxqygFMBI9RF3JAsNOtQyUsShXS/ZMnbnjA=
Subject key identifier: 02:A3:49:10:BF:A5:C6:02:2B:26:B1:4B:D8:6A:72:53:27:44:75:67
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 0196748BC63FF04F0FD33609094F9C2F9238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 11E3
Signing time: Sun 27 Apr 2025 00:00:39 +0000
Manifest this update: Sun 27 Apr 2025 00:00:39 +0000
Manifest next update: Mon 28 Apr 2025 00:00:39 +0000
Files and hashes: 1: GW1Klv22yNsE5MYPV75xnmhGv3A.roa (hash: rIJpTjsiYMjtG6CQDpmbKG45pPqHe8TdfekwwQNTL+I=)
2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: Jz7Re3w2vw/aaCxzQUg1WOQeymH13DURXCuF1Qtpwy4=)
3: HJbfnmVXUIzFAaPysffua9sO6bM.roa (hash: s1zYVIXlcjt0c/VAQX6feReeqo382d47NT573+8ERPc=)
4: HiXwFWaPzRWDb6Zauf5Z5EdAs3E.roa (hash: 74lujDzOZ3dVJtH+CV4yLBEU59EeNeO0W4GkJWf9zl0=)
5: QD50oA6RP_BVOObceO0oiFLiDB8.roa (hash: lJjBmyNLuGzVM9wb6fphLebKPplXRktqR4AzJsfUZ28=)
6: YQQKKCuIreEBOajhrbHaE6kCoEA.roa (hash: hYCPYKTMdFl3VS4V4K2NKIMA0dTOlOoNyGrA84B6OGo=)
7: hqa9h0LfE-ODSm6cL7bVXDnCDuU.roa (hash: WKx5lXERuzuyJlW2GtZvrlS+h+sYN+rRqH+hf6H2l+Q=)
8: xKw0dDtDXHesKiPEnWMkqMwKQqU.roa (hash: In0MXbRHMQVNu/IqxrNBQwkaV8+yvAml6NVYh5A2I70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:c6:3f:f0:4f:0f:d3:36:09:09:4f:9c:2f:92:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Apr 27 00:00:39 2025 GMT
Not After : Apr 28 00:00:39 2025 GMT
Subject: CN=02a34910bfa5c6022b26b14bd86a725327447567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:e9:b5:49:04:ab:f5:6c:f1:30:62:fd:c4:
88:00:a1:f6:d5:6c:33:55:18:e1:a7:ae:02:35:2b:
45:1e:53:1f:15:2e:5f:55:d6:19:54:26:a0:cf:c7:
dc:95:75:b9:48:1a:e7:50:02:0f:a9:8f:5e:93:53:
06:3a:43:a3:a5:7f:42:5b:ca:3b:2e:2e:10:ef:ba:
31:95:69:02:82:2f:b7:c0:43:84:f7:36:ab:74:36:
ad:70:33:36:7f:b7:91:b6:00:18:52:6d:de:52:ee:
8f:5e:e5:d6:de:f2:57:2c:34:15:44:ee:17:32:12:
f8:5d:40:48:1a:eb:eb:2a:ab:f7:c5:b1:e1:2a:fc:
0b:45:f5:38:a4:ab:3e:59:5b:45:12:42:92:b1:bc:
75:13:0f:3f:b1:a5:2e:ad:4d:72:e8:bb:b3:ce:d7:
b9:64:b6:46:33:99:e7:48:58:50:42:43:38:bb:d2:
27:1d:72:6d:b5:65:a9:b5:d3:1e:61:ba:9f:9d:d1:
07:85:91:1e:8f:6a:d2:00:71:c5:08:5a:9b:f7:f6:
f0:c9:32:43:b4:72:68:ca:26:ca:bf:8a:4d:98:ce:
37:dc:25:03:b0:66:ff:09:73:d9:99:d2:d1:4a:ce:
8e:61:52:56:7a:13:a8:ab:98:48:90:d0:52:9e:9b:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A3:49:10:BF:A5:C6:02:2B:26:B1:4B:D8:6A:72:53:27:44:75:67
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:05:01:c3:72:d9:1f:8b:0b:8c:86:ff:30:cd:14:ca:eb:c9:
d3:9d:6b:43:b1:45:b2:ec:bc:92:7c:d6:a1:dc:f2:5c:0b:62:
5f:3c:f7:ce:0d:98:5c:fd:8e:3c:ab:cf:38:06:cd:f9:79:52:
39:d5:2f:71:58:e0:43:f2:da:db:2a:44:1c:52:54:4c:ab:72:
6d:c7:87:7f:bd:d3:d6:b0:38:ab:ce:86:3d:f0:16:30:4d:92:
e5:84:40:43:5c:27:ac:62:ed:0f:bd:25:99:67:7b:29:3f:7f:
b4:a1:bf:da:68:30:e9:88:63:4d:48:98:ae:11:42:b6:95:13:
5a:b3:d1:87:17:32:ba:73:f2:97:9b:75:15:6d:9e:59:df:73:
b8:9f:b3:15:5b:f5:fe:0b:b4:1c:31:93:a4:15:d0:7e:35:8c:
fe:06:5e:99:b6:3b:d6:33:9d:12:fc:74:3e:6d:75:c4:b8:20:
ef:23:c8:9f:38:12:95:0b:cc:78:9c:96:68:c3:20:30:c8:1f:
22:d3:43:77:39:57:52:17:78:00:aa:4b:13:4e:0c:56:53:12:
9d:e7:2c:67:bc:c4:12:0d:d9:87:00:f0:98:55:09:9c:61:c1:
fd:36:c4:7f:46:83:26:3b:e3:ad:04:65:a1:0b:88:6e:a0:d7:
51:76:7d:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0i8Y/8E8P0zYJCU+cL5I4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj
ZDBiMWYwHhcNMjUwNDI3MDAwMDM5WhcNMjUwNDI4MDAwMDM5WjAzMTEwLwYDVQQD
EygwMmEzNDkxMGJmYTVjNjAyMmIyNmIxNGJkODZhNzI1MzI3NDQ3NTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLDptUkEq/Vs8TBi/cSIAKH21Wwz
VRjhp64CNStFHlMfFS5fVdYZVCagz8fclXW5SBrnUAIPqY9ek1MGOkOjpX9CW8o7
Li4Q77oxlWkCgi+3wEOE9zardDatcDM2f7eRtgAYUm3eUu6PXuXW3vJXLDQVRO4X
MhL4XUBIGuvrKqv3xbHhKvwLRfU4pKs+WVtFEkKSsbx1Ew8/saUurU1y6Luzzte5
ZLZGM5nnSFhQQkM4u9InHXJttWWptdMeYbqfndEHhZEej2rSAHHFCFqb9/bwyTJD
tHJoyibKv4pNmM433CUDsGb/CXPZmdLRSs6OYVJWehOoq5hIkNBSnpuJ5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKjSRC/pcYCKyaxS9hqclMnRHVnMB8GA1UdIwQY
MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt
NzI2MDU3YTFmMmE0LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0
LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAUBw3LZ
H4sLjIb/MM0UyuvJ051rQ7FFsuy8knzWodzyXAtiXzz3zg2YXP2OPKvPOAbN+XlS
OdUvcVjgQ/La2ypEHFJUTKtybceHf73T1rA4q86GPfAWME2S5YRAQ1wnrGLtD70l
mWd7KT9/tKG/2mgw6YhjTUiYrhFCtpUTWrPRhxcyunPyl5t1FW2eWd9zuJ+zFVv1
/gu0HDGTpBXQfjWM/gZembY71jOdEvx0Pm11xLgg7yPInzgSlQvMeJyWaMMgMMgf
ItNDdzlXUhd4AKpLE04MVlMSnecsZ7zEEg3ZhwDwmFUJnGHB/TbEf0aDJjvjrQRl
oQuIbqDXUXZ9JA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:09:59 2025 by rpki-client