Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
File: hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft (raw, json)
Hash identifier: vdKEfxuMCmK7PyM0A9jqVYx10aLMY1Kmzru7bTch2KM=
Subject key identifier: C5:BC:07:B5:42:1D:66:03:04:F9:51:06:0A:C7:6D:4A:FF:06:EB:6C
Authority key identifier: 86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
Certificate issuer: /CN=869ab33046862ab58405e5e927ddf41272dfc714
Certificate serial: 0196760CCB4512A39FF0EE3D024A36065E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
Manifest number: 0300
Signing time: Sun 27 Apr 2025 07:01:12 +0000
Manifest this update: Sun 27 Apr 2025 07:01:12 +0000
Manifest next update: Mon 28 Apr 2025 07:01:12 +0000
Files and hashes: 1: hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl (hash: avEUplsphbKyNpAjlcmj7LIxKB13cO8H3LnLpsiJ8ZU=)
2: p8T_kCS-MYJ8fc4C7hUc5E1T1qg.roa (hash: CHS1S8lMOJ2pkxab6trVxWbo2qQA5JXICjYrqXb1IdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:cb:45:12:a3:9f:f0:ee:3d:02:4a:36:06:5e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869ab33046862ab58405e5e927ddf41272dfc714
Validity
Not Before: Apr 27 07:01:12 2025 GMT
Not After : Apr 28 07:01:12 2025 GMT
Subject: CN=c5bc07b5421d660304f951060ac76d4aff06eb6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:2b:30:56:d2:d1:e8:b2:bf:b1:ab:40:86:
ef:95:32:58:af:a4:94:18:8a:e6:fb:47:02:08:31:
aa:e4:d4:41:56:c9:0e:14:ca:e7:dd:25:ce:26:ee:
99:56:e4:ae:1b:8c:2a:ad:c3:c8:d0:eb:e3:cc:92:
cf:08:24:1e:b1:52:b4:2e:96:a5:bc:f5:fe:6a:82:
84:02:af:a1:a9:2b:50:dc:0b:1c:8c:c0:7e:ea:94:
47:17:af:87:d6:b8:f5:c1:4f:75:0a:ee:6c:50:9b:
a1:27:19:b0:9f:c1:6e:57:bf:e5:fb:f5:d8:20:7b:
6f:91:4e:aa:24:95:b1:4c:29:88:e4:3e:c2:94:16:
0b:6b:f0:f7:df:de:cd:3c:98:65:c8:e5:04:4a:de:
20:dd:ae:78:2b:ef:72:5a:90:fb:0e:0e:19:26:10:
39:68:e3:de:b6:01:b4:c8:d5:e1:1d:b5:40:55:bc:
4a:15:90:31:9f:a3:cf:98:c1:4e:c3:76:88:0a:a3:
e9:6a:f1:6d:ca:e0:27:40:32:21:2d:9e:d6:c7:cc:
ce:c7:0d:c6:69:a4:5d:59:d7:46:81:97:fd:04:93:
63:f9:a4:d1:36:fe:ad:51:a0:2d:2e:1a:69:c0:4b:
2f:1b:b8:85:aa:e0:0d:aa:ff:48:41:6a:fa:b3:3b:
e4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BC:07:B5:42:1D:66:03:04:F9:51:06:0A:C7:6D:4A:FF:06:EB:6C
X509v3 Authority Key Identifier:
keyid:86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:25:80:8b:0f:38:fa:cb:c9:0c:2d:21:91:04:94:4e:86:7d:
21:72:ae:e4:67:07:15:ee:88:d1:98:54:8a:25:ff:b2:f0:cf:
8c:4e:d6:ea:26:81:f6:79:ef:cc:cd:dc:f7:94:20:17:eb:f3:
30:49:50:bb:fd:55:0d:2f:23:56:a2:fe:af:23:7a:cf:b6:4d:
a2:6a:15:69:1d:36:84:b4:9f:9c:a9:53:34:43:59:a1:35:4c:
35:1a:f3:66:a5:b2:a8:4f:25:9e:d5:59:30:be:0c:60:8c:ed:
7b:78:b5:9e:59:93:4a:dc:c8:e0:f2:f5:8a:d9:be:43:f8:c8:
28:96:3b:76:d4:68:41:65:d2:8e:2c:17:5f:1a:69:75:f4:1f:
58:e1:d9:92:42:7e:cc:cd:60:37:e7:bc:96:9d:f8:b3:c2:3e:
19:8c:77:bc:4e:0c:8e:09:fb:17:98:96:1e:ff:d7:6e:5f:a6:
9a:64:66:57:ba:cc:dd:54:f3:72:b8:31:20:c8:ea:c6:c3:3c:
00:82:84:c8:e2:f6:b5:c2:25:be:30:c3:ac:ec:97:c4:fc:62:
21:30:84:d6:eb:57:14:04:77:42:9c:84:60:d5:a0:1e:70:bb:
1f:98:08:9b:77:47:0e:29:b8:eb:02:b9:ff:60:38:71:00:a9:
95:de:9e:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DMtFEqOf8O49Ako2Bl4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OWFiMzMwNDY4NjJhYjU4NDA1ZTVlOTI3ZGRmNDEyNzJk
ZmM3MTQwHhcNMjUwNDI3MDcwMTEyWhcNMjUwNDI4MDcwMTEyWjAzMTEwLwYDVQQD
EyhjNWJjMDdiNTQyMWQ2NjAzMDRmOTUxMDYwYWM3NmQ0YWZmMDZlYjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6orMFbS0eiyv7GrQIbvlTJYr6SU
GIrm+0cCCDGq5NRBVskOFMrn3SXOJu6ZVuSuG4wqrcPI0OvjzJLPCCQesVK0Lpal
vPX+aoKEAq+hqStQ3AscjMB+6pRHF6+H1rj1wU91Cu5sUJuhJxmwn8FuV7/l+/XY
IHtvkU6qJJWxTCmI5D7ClBYLa/D3397NPJhlyOUESt4g3a54K+9yWpD7Dg4ZJhA5
aOPetgG0yNXhHbVAVbxKFZAxn6PPmMFOw3aICqPpavFtyuAnQDIhLZ7Wx8zOxw3G
aaRdWddGgZf9BJNj+aTRNv6tUaAtLhppwEsvG7iFquANqv9IQWr6szvkvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMW8B7VCHWYDBPlRBgrHbUr/ButsMB8GA1UdIwQY
MBaAFIaaszBGhiq1hAXl6Sfd9BJy38cUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBxek1FYUdLcldFQmVYcEo5MzBFbkxmeHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mOGU4ZTUtNjkyYi00MGE5LWIzMmYt
Mzk0YzQ3ZmY0NWFlLzEvaHBxek1FYUdLcldFQmVYcEo5MzBFbkxmeHhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mOGU4ZTUtNjkyYi00MGE5LWIzMmYtMzk0YzQ3ZmY0NWFl
LzEvaHBxek1FYUdLcldFQmVYcEo5MzBFbkxmeHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyWAiw84
+svJDC0hkQSUToZ9IXKu5GcHFe6I0ZhUiiX/svDPjE7W6iaB9nnvzM3c95QgF+vz
MElQu/1VDS8jVqL+ryN6z7ZNomoVaR02hLSfnKlTNENZoTVMNRrzZqWyqE8lntVZ
ML4MYIzte3i1nlmTStzI4PL1itm+Q/jIKJY7dtRoQWXSjiwXXxppdfQfWOHZkkJ+
zM1gN+e8lp34s8I+GYx3vE4Mjgn7F5iWHv/Xbl+mmmRmV7rM3VTzcrgxIMjqxsM8
AIKEyOL2tcIlvjDDrOyXxPxiITCE1utXFAR3QpyEYNWgHnC7H5gIm3dHDim46wK5
/2A4cQCpld6emw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:32 2025 by rpki-client