Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
File: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft (raw, json)
Hash identifier: 5VGZ90j52jBpEKTcZRzB2K3iOFUl7edNwK6Gxtc48/4=
Subject key identifier: FA:64:02:8A:8A:7E:7E:96:7F:08:B9:1C:7C:73:B0:91:46:27:FA:D8
Authority key identifier: 1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
Certificate issuer: /CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Certificate serial: 01967F7D722657B0D8B7C885CD29BE505503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
Manifest number: 1478
Signing time: Tue 29 Apr 2025 03:00:49 +0000
Manifest this update: Tue 29 Apr 2025 03:00:49 +0000
Manifest next update: Wed 30 Apr 2025 03:00:49 +0000
Files and hashes: 1: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl (hash: /Sm7n/v7LmxQDFaF2nllCngxECi50MHzTS9foPxM83A=)
2: qcI0xgzGH7hMBr0NX1qxJT5Yq20.roa (hash: NMb9DDG1I4uoDnTSNrOwSazV1iEG7Jn5atQjCvyrEBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:72:26:57:b0:d8:b7:c8:85:cd:29:be:50:55:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Validity
Not Before: Apr 29 03:00:49 2025 GMT
Not After : Apr 30 03:00:49 2025 GMT
Subject: CN=fa64028a8a7e7e967f08b91c7c73b0914627fad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:c6:eb:e7:b9:bc:65:bd:1c:e8:fb:b7:b5:
95:bf:ba:cf:19:cc:54:6d:78:6c:c2:a3:8e:59:9a:
fe:9a:06:62:fe:51:31:02:dd:c4:14:85:47:2b:df:
1e:e4:bc:a2:56:76:6a:b4:94:c6:16:86:22:c5:6a:
ca:93:08:b2:39:44:73:d3:83:d5:8c:d0:55:32:4c:
38:6e:0b:32:ec:4a:de:d3:52:81:8d:67:87:9a:5a:
03:e4:aa:ca:c0:7b:3d:e1:20:6b:60:2b:9c:4c:a8:
34:ba:16:87:ed:33:40:96:6c:80:71:0f:1a:a1:10:
22:4d:03:24:d2:66:35:0d:94:fe:e1:19:5d:9e:32:
20:5c:76:27:e1:57:06:73:91:b0:4d:28:70:2f:54:
95:68:9a:45:10:3f:98:e1:50:b9:7c:73:fc:4a:8b:
97:fa:7e:31:86:ae:0b:0d:94:08:af:89:7d:bb:8e:
85:9e:e9:93:0f:ab:69:e1:0b:97:d8:d2:be:49:61:
8e:36:cc:0c:90:3d:da:06:42:de:ef:b1:eb:7a:f1:
95:68:f1:2f:1d:32:4a:a5:11:83:0f:cd:8e:6a:b9:
7f:d1:9a:33:b5:a0:68:80:e6:60:25:d3:17:4a:02:
77:d0:10:fc:60:51:84:e2:b8:4f:4f:db:38:f1:97:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:64:02:8A:8A:7E:7E:96:7F:08:B9:1C:7C:73:B0:91:46:27:FA:D8
X509v3 Authority Key Identifier:
keyid:1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d7:f6:df:d3:0d:56:49:f5:5c:ca:38:ea:48:0f:59:50:46:
f2:d3:32:da:39:d7:b5:88:19:e3:42:8b:1a:5b:d0:a1:83:b3:
cd:c5:9f:8d:d6:f9:86:c1:5e:62:ba:8d:92:1a:1c:0f:8b:5d:
b4:d9:fa:6f:69:fa:40:8a:68:29:d3:e6:85:67:32:92:af:84:
e0:45:e2:38:bf:71:c5:58:eb:da:a1:93:88:58:0e:b2:8e:af:
c9:84:0f:e3:15:40:a7:55:bc:57:ee:b6:52:b7:e6:60:e1:bd:
fe:ca:b8:6e:6c:c3:8b:47:68:e3:43:e1:fc:18:e0:e4:23:33:
fa:99:8d:bc:1a:43:eb:70:cb:6d:d0:50:46:8e:c4:cf:6e:ef:
83:e7:c9:14:0d:22:5a:db:8a:9c:79:17:c8:df:ef:15:42:1a:
30:0d:08:31:8e:94:e0:1b:75:02:00:5a:ba:29:c9:e6:cd:8f:
bf:6d:dc:fd:40:d1:95:56:3f:40:85:17:b0:55:a1:f3:ae:c0:
df:10:8d:fe:8b:d7:55:1f:52:8f:37:b5:57:03:20:0d:2f:7c:
14:2c:6c:5d:5e:8d:10:7a:12:7c:82:d3:61:46:94:06:67:cb:
62:8c:11:c4:5b:05:52:25:cd:40:2c:ab:56:03:20:a2:42:57:
4b:a6:3b:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/fXImV7DYt8iFzSm+UFUDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYmUzZTUyMTQwN2Y1OTdmMjU1ZjNmYjRlMGI1NjljMzIw
ODM1NTIwHhcNMjUwNDI5MDMwMDQ5WhcNMjUwNDMwMDMwMDQ5WjAzMTEwLwYDVQQD
EyhmYTY0MDI4YThhN2U3ZTk2N2YwOGI5MWM3YzczYjA5MTQ2MjdmYWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRrG6+e5vGW9HOj7t7WVv7rPGcxU
bXhswqOOWZr+mgZi/lExAt3EFIVHK98e5LyiVnZqtJTGFoYixWrKkwiyOURz04PV
jNBVMkw4bgsy7Ere01KBjWeHmloD5KrKwHs94SBrYCucTKg0uhaH7TNAlmyAcQ8a
oRAiTQMk0mY1DZT+4RldnjIgXHYn4VcGc5GwTShwL1SVaJpFED+Y4VC5fHP8SouX
+n4xhq4LDZQIr4l9u46FnumTD6tp4QuX2NK+SWGONswMkD3aBkLe77HrevGVaPEv
HTJKpRGDD82Oarl/0ZoztaBogOZgJdMXSgJ30BD8YFGE4rhPT9s48ZfUDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpkAoqKfn6Wfwi5HHxzsJFGJ/rYMB8GA1UdIwQY
MBaAFB6+PlIUB/WX8lXz+04LVpwyCDVSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHI0LVVoUUg5WmZ5VmZQN1RndFduRElJTlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xMjRhYzgtZmE5My00YzIzLWJkNjIt
NWI0YWZmN2E2Mzk4LzEvSHI0LVVoUUg5WmZ5VmZQN1RndFduRElJTlZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xMjRhYzgtZmE5My00YzIzLWJkNjItNWI0YWZmN2E2Mzk4
LzEvSHI0LVVoUUg5WmZ5VmZQN1RndFduRElJTlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJNf239MN
Vkn1XMo46kgPWVBG8tMy2jnXtYgZ40KLGlvQoYOzzcWfjdb5hsFeYrqNkhocD4td
tNn6b2n6QIpoKdPmhWcykq+E4EXiOL9xxVjr2qGTiFgOso6vyYQP4xVAp1W8V+62
UrfmYOG9/sq4bmzDi0do40Ph/Bjg5CMz+pmNvBpD63DLbdBQRo7Ez27vg+fJFA0i
WtuKnHkXyN/vFUIaMA0IMY6U4Bt1AgBauinJ5s2Pv23c/UDRlVY/QIUXsFWh867A
3xCN/ovXVR9Sjze1VwMgDS98FCxsXV6NEHoSfILTYUaUBmfLYowRxFsFUiXNQCyr
VgMgokJXS6Y7Tg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 05:22:14 2025 by rpki-client