Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: U6AR1LdlPbvbxICuHHr77HNMSkgpl7w9IwgfFrDP24U=
Subject key identifier: D4:EB:03:26:BA:D1:6A:DE:95:15:20:DD:75:32:8B:C9:1B:69:A9:50
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 0196955FFBE75BE3EC79EE66ED882E8E4264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 04DF
Signing time: Sat 03 May 2025 09:00:17 +0000
Manifest this update: Sat 03 May 2025 09:00:17 +0000
Manifest next update: Sun 04 May 2025 09:00:17 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: 8tRXJPo8XJXJhRbjYnz4oQIrtTK6yYJ1V0tIKnfNUrY=)
2: hQR0mmyfCcP0k0VyVReQd9TwA2Y.roa (hash: /yk+WBXgj9/PFpjinmPki6KFsYrLmbEwlVJawiNfh5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:5f:fb:e7:5b:e3:ec:79:ee:66:ed:88:2e:8e:42:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: May 3 09:00:17 2025 GMT
Not After : May 4 09:00:17 2025 GMT
Subject: CN=d4eb0326bad16ade951520dd75328bc91b69a950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b8:14:91:0c:cb:34:80:38:2c:f5:3b:de:36:
dc:35:eb:fd:c5:c4:ee:86:73:55:88:7b:dc:a0:b5:
4c:21:89:f4:99:37:9e:e3:9d:ee:89:8f:3c:93:13:
3a:e8:33:ca:d8:28:48:1a:ff:53:db:a5:ab:69:48:
b9:be:34:59:7e:25:4d:f1:42:99:22:40:7a:1e:a1:
29:30:18:df:14:43:0e:0b:a0:de:a0:08:c2:42:51:
3f:57:c1:1d:85:60:e7:91:2a:dc:b3:2f:43:7b:67:
ad:bb:a9:62:10:62:88:5f:ee:43:22:52:74:12:0d:
9a:2c:89:d4:fd:e0:b8:71:f7:d1:70:66:cb:44:63:
38:3c:bd:47:f5:97:96:88:9d:b8:7e:62:30:c3:4c:
f9:76:2e:59:f8:ee:3b:40:4f:9f:b1:f3:25:3d:6a:
16:64:15:5b:36:d3:c3:7f:d0:6c:2e:f8:5d:d7:d1:
21:29:57:b7:36:27:2f:cb:e6:94:2c:fc:0f:83:0b:
d8:29:7e:12:12:de:1d:8d:f2:06:12:57:7f:ff:5d:
90:6f:9a:f5:32:9a:dc:f4:fc:3c:b4:f4:bd:da:2d:
8a:9d:5f:18:87:86:f6:41:91:c5:10:0a:37:16:9f:
ce:a7:45:a3:9f:27:6e:0d:fa:76:e3:b5:01:4b:1d:
89:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EB:03:26:BA:D1:6A:DE:95:15:20:DD:75:32:8B:C9:1B:69:A9:50
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:79:1e:6f:2e:2e:0b:4b:14:6f:f5:9d:ed:f1:4f:b8:d9:d1:
0d:fa:fc:f6:9f:db:ef:92:04:ac:be:a9:1a:3d:b6:63:ff:a9:
d2:84:79:3e:b3:4d:39:2a:d8:06:a9:19:4e:9c:3f:c1:88:2c:
fa:0b:56:c8:16:08:d4:dc:b7:be:13:67:a9:d5:24:77:36:76:
ee:5e:a2:ce:03:c2:8b:6b:91:36:ed:c2:1c:36:a6:fc:05:f5:
fc:62:d0:52:5e:f7:51:70:87:6d:bf:6d:be:38:40:2d:76:4d:
73:db:02:8f:64:46:2c:48:9c:e5:00:13:3e:11:68:af:c9:b0:
01:06:e1:fe:aa:97:c0:98:d0:da:4b:ab:34:fa:33:89:65:26:
a4:88:f6:bd:3e:16:27:c7:c6:02:ef:17:70:68:60:48:e8:92:
97:5c:1b:d9:36:28:d9:d8:2c:b3:d4:cc:1b:fc:01:07:b4:c0:
6a:71:dd:91:5a:96:83:5d:17:2f:51:bc:ee:8a:b0:71:af:ce:
7c:2d:30:33:8a:5a:ee:7a:4f:f9:bf:54:fd:09:54:d3:5e:e4:
69:79:fc:23:d5:43:2a:11:16:61:00:88:73:26:73:cb:ea:9a:
8e:76:3e:a2:75:86:fd:03:77:4d:d3:c2:c8:95:83:1f:b6:09:
61:4f:2c:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaVX/vnW+Psee5m7YgujkJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzI1NjZhZDYyODkzNWM2ZWM3NWQwZWRkZDMxN2M3YjBh
NzY2OTMwHhcNMjUwNTAzMDkwMDE3WhcNMjUwNTA0MDkwMDE3WjAzMTEwLwYDVQQD
EyhkNGViMDMyNmJhZDE2YWRlOTUxNTIwZGQ3NTMyOGJjOTFiNjlhOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LgUkQzLNIA4LPU73jbcNev9xcTu
hnNViHvcoLVMIYn0mTee453uiY88kxM66DPK2ChIGv9T26WraUi5vjRZfiVN8UKZ
IkB6HqEpMBjfFEMOC6DeoAjCQlE/V8EdhWDnkSrcsy9De2etu6liEGKIX+5DIlJ0
Eg2aLInU/eC4cffRcGbLRGM4PL1H9ZeWiJ24fmIww0z5di5Z+O47QE+fsfMlPWoW
ZBVbNtPDf9BsLvhd19EhKVe3Nicvy+aULPwPgwvYKX4SEt4djfIGEld//12Qb5r1
Mprc9Pw8tPS92i2KnV8Yh4b2QZHFEAo3Fp/Op0WjnyduDfp247UBSx2JdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTrAya60WrelRUg3XUyi8kbaalQMB8GA1UdIwQY
MBaAFBxyVmrWKJNcbsddDt3TF8ewp2aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMt
ZmM3NTIxYTI1YmJhLzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMtZmM3NTIxYTI1YmJh
LzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7Xkeby4u
C0sUb/Wd7fFPuNnRDfr89p/b75IErL6pGj22Y/+p0oR5PrNNOSrYBqkZTpw/wYgs
+gtWyBYI1Ny3vhNnqdUkdzZ27l6izgPCi2uRNu3CHDam/AX1/GLQUl73UXCHbb9t
vjhALXZNc9sCj2RGLEic5QATPhFor8mwAQbh/qqXwJjQ2kurNPoziWUmpIj2vT4W
J8fGAu8XcGhgSOiSl1wb2TYo2dgss9TMG/wBB7TAanHdkVqWg10XL1G87oqwca/O
fC0wM4pa7npP+b9U/QlU017kaXn8I9VDKhEWYQCIcyZzy+qajnY+onWG/QN3TdPC
yJWDH7YJYU8scw==
-----END CERTIFICATE-----
Generated at Sat May 3 12:37:52 2025 by rpki-client