Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File: hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier: ENSFIbjdLKQ6+gGnBO3j/6moxB2rTDAQ/dbT3ozXiS8=
Subject key identifier: 9C:96:AE:2A:49:5E:CD:77:85:EC:5D:15:57:59:B7:6C:7A:6A:68:BA
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer: /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial: 01967B69B831B030B7E1A5479C776968AF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number: 14A3
Signing time: Mon 28 Apr 2025 08:00:48 +0000
Manifest this update: Mon 28 Apr 2025 08:00:48 +0000
Manifest next update: Tue 29 Apr 2025 08:00:48 +0000
Files and hashes: 1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: ZrIGv1IAzOL8ZP7iVYQP7UijQyosTRD3hF2A9U6x3oA=)
2: jg1_qGOypFs-Omg84eci-XkXn6M.roa (hash: Hutcm4lZFs78dltAQDGy1uUI7H+2kpc6tWhDJ8JMDfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:b8:31:b0:30:b7:e1:a5:47:9c:77:69:68:af:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Validity
Not Before: Apr 28 08:00:48 2025 GMT
Not After : Apr 29 08:00:48 2025 GMT
Subject: CN=9c96ae2a495ecd7785ec5d155759b76c7a6a68ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:0b:40:9e:9f:9d:1a:3c:55:a1:34:0f:01:
b3:91:34:6f:f5:ed:99:63:30:c1:4a:d0:c0:13:aa:
9b:47:0f:99:b5:dd:07:b1:8a:0c:8b:52:9b:4e:c3:
43:34:9e:be:a2:5e:2e:b2:7d:0c:63:97:54:cb:ba:
75:f9:d1:9d:92:d4:f6:8e:d5:1f:6c:23:fa:03:8b:
bb:02:4b:6b:ad:48:c0:a9:8e:a3:94:2b:15:1a:73:
df:c9:49:f7:4f:c1:06:94:cc:82:f3:97:ac:87:05:
ef:4d:e1:90:41:46:95:ea:75:84:33:eb:be:34:96:
66:39:e6:d1:ae:b4:c6:d9:9a:da:19:3c:15:0e:06:
fe:4b:73:78:a5:db:07:3d:d5:5d:58:24:e6:27:5f:
77:65:88:63:e4:74:ac:dc:d1:3e:0e:37:2e:67:c5:
0d:9f:43:a7:8e:0c:25:ae:9f:88:c4:82:e0:4e:1c:
1a:4d:10:df:6e:b6:a4:2e:bf:7e:a8:0c:d8:7f:f1:
cc:8b:62:cc:2f:52:87:f8:1d:97:9c:dc:34:5f:34:
a7:64:73:b8:af:70:52:e5:11:fa:7a:b5:a8:65:31:
38:5d:d4:f5:06:78:e5:b4:28:62:42:af:ba:c2:4e:
e4:f1:f2:e1:cf:46:eb:45:6c:07:44:85:d4:89:97:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:96:AE:2A:49:5E:CD:77:85:EC:5D:15:57:59:B7:6C:7A:6A:68:BA
X509v3 Authority Key Identifier:
keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b1:14:fa:5d:01:02:50:45:f6:fe:57:5f:ba:3a:b2:df:b4:
16:99:b3:9a:b7:d6:cc:1a:00:c2:a1:2e:14:2d:c9:66:81:c6:
df:21:0d:f0:2f:25:cc:d9:0c:b2:01:41:16:94:1e:b5:3b:27:
45:f4:4b:81:77:f3:18:c0:26:2e:0d:a8:3e:c4:bb:36:c4:f9:
96:6b:47:a2:05:a2:d3:54:ae:f8:cc:53:76:71:e7:0f:0a:06:
0e:07:6e:49:6e:07:98:ed:ec:34:e5:4f:87:88:39:55:d6:e6:
e0:6c:84:a5:25:5e:8a:8c:77:9b:de:9a:a3:90:35:7d:44:d5:
b8:04:c9:87:21:d3:13:d0:34:48:3a:05:ab:86:6c:67:1a:95:
00:3e:5b:8b:80:a7:30:93:33:9f:87:83:88:f6:3b:10:17:a2:
bd:b1:66:e5:b4:67:85:8e:ab:da:f8:4d:86:8d:39:44:b0:ec:
8e:cb:eb:42:00:52:32:4d:c6:f2:21:71:a6:d7:1d:9e:c1:ce:
8e:e1:03:f5:43:84:27:19:e8:94:8b:e7:49:53:9a:6c:d1:11:
31:b5:17:b2:5d:2e:57:90:31:4b:7c:5b:8a:d8:8e:ed:8f:45:
6c:5f:2a:5f:fc:57:7e:a6:9e:bc:e5:0a:69:8d:5b:5d:07:3f:
a1:fd:be:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7abgxsDC34aVHnHdpaK92MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NDZhZjE4ZjcwNzhhYWMwMGMyZmNkMmNhNjdmOTMyODAy
MTdlMTUwHhcNMjUwNDI4MDgwMDQ4WhcNMjUwNDI5MDgwMDQ4WjAzMTEwLwYDVQQD
Eyg5Yzk2YWUyYTQ5NWVjZDc3ODVlYzVkMTU1NzU5Yjc2YzdhNmE2OGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bYLQJ6fnRo8VaE0DwGzkTRv9e2Z
YzDBStDAE6qbRw+Ztd0HsYoMi1KbTsNDNJ6+ol4usn0MY5dUy7p1+dGdktT2jtUf
bCP6A4u7AktrrUjAqY6jlCsVGnPfyUn3T8EGlMyC85eshwXvTeGQQUaV6nWEM+u+
NJZmOebRrrTG2ZraGTwVDgb+S3N4pdsHPdVdWCTmJ193ZYhj5HSs3NE+DjcuZ8UN
n0Onjgwlrp+IxILgThwaTRDfbrakLr9+qAzYf/HMi2LML1KH+B2XnNw0XzSnZHO4
r3BS5RH6erWoZTE4XdT1BnjltChiQq+6wk7k8fLhz0brRWwHRIXUiZdCRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyWripJXs13hexdFVdZt2x6ami6MB8GA1UdIwQY
MBaAFIVGrxj3B4qsAML80spn+TKAIX4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYTY4ODgtYjlhZC00YjgxLWI5MzUt
NmJlYWVlNWI1OGEzLzEvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYTY4ODgtYjlhZC00YjgxLWI5MzUtNmJlYWVlNWI1OGEz
LzEvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELEU+l0B
AlBF9v5XX7o6st+0FpmzmrfWzBoAwqEuFC3JZoHG3yEN8C8lzNkMsgFBFpQetTsn
RfRLgXfzGMAmLg2oPsS7NsT5lmtHogWi01Su+MxTdnHnDwoGDgduSW4HmO3sNOVP
h4g5Vdbm4GyEpSVeiox3m96ao5A1fUTVuATJhyHTE9A0SDoFq4ZsZxqVAD5bi4Cn
MJMzn4eDiPY7EBeivbFm5bRnhY6r2vhNho05RLDsjsvrQgBSMk3G8iFxptcdnsHO
juED9UOEJxnolIvnSVOabNERMbUXsl0uV5AxS3xbitiO7Y9FbF8qX/xXfqaevOUK
aY1bXQc/of2+cA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:17:23 2025 by rpki-client