Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
File: hnWNin7SGnQXLM7sM4xk02sDeNQ.mft (raw, json)
Hash identifier: qHKsFMsOGURWW15G0znUA3+G7E+S9Wu7+/DyHY1q6Gg=
Subject key identifier: AB:50:B6:0E:60:41:61:5C:27:90:D9:F8:DC:68:22:E7:DA:5E:A5:11
Authority key identifier: 86:75:8D:8A:7E:D2:1A:74:17:2C:CE:EC:33:8C:64:D3:6B:03:78:D4
Certificate issuer: /CN=86758d8a7ed21a74172cceec338c64d36b0378d4
Certificate serial: 019678318A2DB0A54DDADF3E5B4450256EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
Manifest number: 0378
Signing time: Sun 27 Apr 2025 17:00:34 +0000
Manifest this update: Sun 27 Apr 2025 17:00:34 +0000
Manifest next update: Mon 28 Apr 2025 17:00:34 +0000
Files and hashes: 1: Tmqal5XUVoUE8c77AFlzaqU97c0.roa (hash: r3d2ZcS64ApbYh564RwP4TPidKg35TEhpwQ3BNXhcQw=)
2: hnWNin7SGnQXLM7sM4xk02sDeNQ.crl (hash: xVXZYw8XZMtBfkThBavODXbRtiq947Ku7r7KrmhGcG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:8a:2d:b0:a5:4d:da:df:3e:5b:44:50:25:6e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86758d8a7ed21a74172cceec338c64d36b0378d4
Validity
Not Before: Apr 27 17:00:34 2025 GMT
Not After : Apr 28 17:00:34 2025 GMT
Subject: CN=ab50b60e6041615c2790d9f8dc6822e7da5ea511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2a:de:78:cb:61:b2:d6:38:f4:a3:05:34:d9:
50:0f:e2:3c:3a:7f:fa:30:53:61:f4:6b:06:0e:22:
ef:60:82:4f:b1:81:8f:90:41:9f:98:85:b3:69:70:
df:50:2b:e9:bb:07:b7:44:7d:dc:24:ea:07:06:05:
12:13:d4:db:57:0c:40:b3:f9:88:74:48:6a:3c:5f:
71:46:15:87:ba:26:9b:a5:7f:eb:55:41:d8:3f:bc:
06:ad:87:ec:ec:1a:c9:62:5f:17:2d:56:34:00:6d:
a3:50:b2:ad:ff:32:2f:ab:5a:a1:8d:da:84:84:b1:
61:71:98:b7:c1:eb:24:c1:ef:f3:87:5e:5e:06:d0:
19:37:45:40:1b:c0:1b:5c:1f:67:4c:70:8c:e3:a2:
ee:eb:de:51:e6:f1:1d:03:37:c9:3a:b0:73:5e:94:
f9:c4:d1:9f:74:35:fa:cb:19:8f:a6:7a:a2:8c:89:
25:4c:49:aa:d3:c0:2c:20:3f:d5:6b:93:36:5e:53:
89:69:21:5a:56:ba:aa:54:3e:d6:19:d1:8c:df:ec:
ba:c6:0c:38:30:03:e2:37:04:a2:d3:fd:e5:fe:6a:
a3:c7:db:38:2c:75:96:35:34:d6:b8:24:a5:28:a7:
4f:ba:bb:ee:47:e0:16:13:95:e8:ed:99:0a:79:c5:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:50:B6:0E:60:41:61:5C:27:90:D9:F8:DC:68:22:E7:DA:5E:A5:11
X509v3 Authority Key Identifier:
keyid:86:75:8D:8A:7E:D2:1A:74:17:2C:CE:EC:33:8C:64:D3:6B:03:78:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:96:69:d7:84:c2:f1:89:e5:70:d4:4f:7c:aa:3b:52:a2:ce:
8c:b4:0e:30:83:b8:51:6f:d7:80:2c:69:c3:2f:88:9d:93:37:
18:ba:92:df:3d:7d:60:4b:9e:43:c2:17:72:61:23:a1:c2:de:
ce:d7:b1:70:ec:2c:73:b0:f6:2e:0d:43:fc:22:8a:b3:7b:f9:
d7:51:42:22:c2:8a:d7:df:be:77:6d:ad:c2:08:37:06:de:55:
e3:79:f9:3a:bc:6b:52:fa:58:f6:85:46:54:5a:ac:9c:82:12:
e6:78:5d:ed:7c:41:a7:16:e1:5b:24:08:27:d4:98:a1:5e:a3:
63:48:c0:36:e3:71:0b:62:87:29:18:4f:66:0c:7e:1b:39:03:
fc:38:0b:b8:04:f5:12:46:4b:25:30:b7:08:d2:e0:56:2e:9d:
f4:58:24:65:ae:ac:4c:a3:38:19:a2:17:4e:43:9c:fd:24:4f:
df:b4:b1:90:d0:19:bb:ce:fb:74:19:49:e8:63:38:ce:7c:09:
1f:d2:5e:67:bc:0b:f2:57:6a:fc:45:72:a2:71:7b:2c:58:ba:
c3:9d:ec:67:b0:a9:74:09:b1:5b:09:a3:3b:52:d4:84:9f:b2:
31:e0:83:1c:46:ff:25:3b:12:2b:26:14:a1:cb:55:a3:0b:73:
34:5a:71:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4MYotsKVN2t8+W0RQJW6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NzU4ZDhhN2VkMjFhNzQxNzJjY2VlYzMzOGM2NGQzNmIw
Mzc4ZDQwHhcNMjUwNDI3MTcwMDM0WhcNMjUwNDI4MTcwMDM0WjAzMTEwLwYDVQQD
EyhhYjUwYjYwZTYwNDE2MTVjMjc5MGQ5ZjhkYzY4MjJlN2RhNWVhNTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhireeMthstY49KMFNNlQD+I8On/6
MFNh9GsGDiLvYIJPsYGPkEGfmIWzaXDfUCvpuwe3RH3cJOoHBgUSE9TbVwxAs/mI
dEhqPF9xRhWHuiabpX/rVUHYP7wGrYfs7BrJYl8XLVY0AG2jULKt/zIvq1qhjdqE
hLFhcZi3weskwe/zh15eBtAZN0VAG8AbXB9nTHCM46Lu695R5vEdAzfJOrBzXpT5
xNGfdDX6yxmPpnqijIklTEmq08AsID/Va5M2XlOJaSFaVrqqVD7WGdGM3+y6xgw4
MAPiNwSi0/3l/mqjx9s4LHWWNTTWuCSlKKdPurvuR+AWE5Xo7ZkKecVXSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtQtg5gQWFcJ5DZ+NxoIufaXqURMB8GA1UdIwQY
MBaAFIZ1jYp+0hp0FyzO7DOMZNNrA3jUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG5XTmluN1NHblFYTE03c000eGswMnNEZU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lNTVhOWItMmZhMC00YWY0LTkwZGQt
Y2RhY2I4NDY3MTg3LzEvaG5XTmluN1NHblFYTE03c000eGswMnNEZU5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lNTVhOWItMmZhMC00YWY0LTkwZGQtY2RhY2I4NDY3MTg3
LzEvaG5XTmluN1NHblFYTE03c000eGswMnNEZU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJZp14TC
8YnlcNRPfKo7UqLOjLQOMIO4UW/XgCxpwy+InZM3GLqS3z19YEueQ8IXcmEjocLe
ztexcOwsc7D2Lg1D/CKKs3v511FCIsKK19++d22twgg3Bt5V43n5OrxrUvpY9oVG
VFqsnIIS5nhd7XxBpxbhWyQIJ9SYoV6jY0jANuNxC2KHKRhPZgx+GzkD/DgLuAT1
EkZLJTC3CNLgVi6d9FgkZa6sTKM4GaIXTkOc/SRP37SxkNAZu877dBlJ6GM4znwJ
H9JeZ7wL8ldq/EVyonF7LFi6w53sZ7CpdAmxWwmjO1LUhJ+yMeCDHEb/JTsSKyYU
octVowtzNFpxQA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:33:47 2025 by rpki-client