Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: Aj/B/LxvFc2BES14ChMORKySBB/ESMSakJWP1G46KxM=
Subject key identifier: EC:19:DD:1C:07:64:F6:14:58:F6:D5:E3:B8:BA:11:E5:86:CA:16:5E
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 01967A8E010A58A648B7485904AD658BA671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 04:00:48 +0000
Manifest this update: Mon 28 Apr 2025 04:00:48 +0000
Manifest next update: Tue 29 Apr 2025 04:00:48 +0000
Files and hashes: 1: NwkZh_DNuB_iBInY9wDbpyHdLgE.roa (hash: 5w+s5Rk1602R4y1zX8F10ZF0iAVWkGEzyROrjF/5dqE=)
2: SeFxeccbo68KLvP3eAvdIgxyzVI.roa (hash: KKPafx1oDtZuIFD9Wnd6TukbFDgA1SpzCeh9Ci09gpw=)
3: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: QoFbqMw5rFCod2iB0jolRyUKq835kc7uhvsb90QhKpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8e:01:0a:58:a6:48:b7:48:59:04:ad:65:8b:a6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Apr 28 04:00:48 2025 GMT
Not After : Apr 29 04:00:48 2025 GMT
Subject: CN=ec19dd1c0764f61458f6d5e3b8ba11e586ca165e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:21:38:9c:90:28:09:48:1b:ab:1e:fc:96:
98:e5:f1:10:a7:09:e0:03:de:6f:8e:70:59:a8:98:
ef:a1:d5:77:81:43:ea:7a:0f:13:0b:91:41:29:82:
6f:a7:1c:40:56:50:70:d0:3b:45:99:d4:b0:41:ad:
81:c2:32:11:f9:e9:b2:04:b4:42:c9:72:2c:ae:06:
e4:36:bf:5d:ae:38:03:62:80:9b:8d:91:8a:6e:da:
28:b5:2c:46:80:a6:42:22:4c:70:44:e2:5a:cc:3c:
ce:e0:49:77:b4:59:16:dc:9c:84:b1:d1:ba:a9:ed:
e3:79:07:72:32:ca:49:0d:07:f4:e2:60:76:cf:2b:
01:39:a2:25:08:b0:1b:15:04:f9:8d:29:12:9c:7a:
d5:16:29:b4:31:41:50:1d:9f:5a:fe:7c:50:fb:38:
2f:b4:47:07:1f:5a:b1:4d:4c:af:12:34:b4:18:f6:
dc:89:c9:c9:f0:e9:da:79:0d:aa:64:ec:cf:9e:a5:
52:f0:e9:e3:15:ea:04:03:98:6c:20:36:d7:bb:57:
96:f3:f7:db:28:8a:94:4d:b4:68:5f:6c:55:2e:db:
71:a8:86:af:bb:51:fe:f6:a3:ed:38:36:f3:18:7f:
02:70:a8:b1:87:5d:fb:63:bd:43:70:6f:a4:1c:2b:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:19:DD:1C:07:64:F6:14:58:F6:D5:E3:B8:BA:11:E5:86:CA:16:5E
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d1:98:07:f2:c8:33:3d:37:d1:2a:84:b4:8d:e2:6b:af:f8:
8b:f3:0b:2b:1f:53:e2:09:8a:ce:c2:6e:3c:02:24:27:1c:02:
27:27:c9:16:ba:54:3e:38:74:9b:29:4b:e4:78:71:96:f7:51:
73:fd:9d:d9:4c:fb:8c:e4:fd:db:e3:29:9f:a9:2e:09:d5:ef:
70:07:d0:46:fd:6f:3e:49:88:0e:fd:15:ca:5d:76:04:5d:23:
6a:de:27:cb:14:be:a1:57:fa:92:f5:cb:5c:aa:f1:06:16:ea:
15:6d:b8:2f:d0:16:69:8e:58:bb:92:45:53:9b:0d:c5:b6:1b:
2b:a5:bf:94:00:c3:3c:fa:61:f3:d1:f5:27:83:14:6b:63:79:
4d:86:54:6c:0c:af:93:17:cc:d7:68:04:8c:69:bb:99:ef:72:
d2:bf:3b:c0:b5:18:98:98:ed:dd:3b:14:b1:1e:89:9b:06:08:
be:4d:a2:15:96:d7:9b:c8:f0:76:74:3e:0b:1b:88:ba:f5:7c:
6a:a9:93:a9:8c:ea:94:3f:e2:82:8d:fe:1a:4c:1c:3f:d3:4b:
15:41:38:4d:f2:4d:7e:b8:e9:94:37:35:ae:d0:7d:46:79:4c:
80:58:24:af:cc:62:06:83:8f:7e:bc:8d:cf:e2:23:bb:9b:8c:
50:24:63:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6jgEKWKZIt0hZBK1li6ZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3N2MyMDczNzExNmJjNmQ1ZTViMjI0OTMxY2YxM2RkN2Y3
OWY5NWIwHhcNMjUwNDI4MDQwMDQ4WhcNMjUwNDI5MDQwMDQ4WjAzMTEwLwYDVQQD
EyhlYzE5ZGQxYzA3NjRmNjE0NThmNmQ1ZTNiOGJhMTFlNTg2Y2ExNjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumYhOJyQKAlIG6se/JaY5fEQpwng
A95vjnBZqJjvodV3gUPqeg8TC5FBKYJvpxxAVlBw0DtFmdSwQa2BwjIR+emyBLRC
yXIsrgbkNr9drjgDYoCbjZGKbtootSxGgKZCIkxwROJazDzO4El3tFkW3JyEsdG6
qe3jeQdyMspJDQf04mB2zysBOaIlCLAbFQT5jSkSnHrVFim0MUFQHZ9a/nxQ+zgv
tEcHH1qxTUyvEjS0GPbcicnJ8OnaeQ2qZOzPnqVS8OnjFeoEA5hsIDbXu1eW8/fb
KIqUTbRoX2xVLttxqIavu1H+9qPtODbzGH8CcKixh137Y71DcG+kHCuPjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwZ3RwHZPYUWPbV47i6EeWGyhZeMB8GA1UdIwQY
MBaAFId8IHNxFrxtXlsiSTHPE91/eflbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgt
ZTcyMzJmODQ0OGIwLzEvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgtZTcyMzJmODQ0OGIw
LzEvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqdGYB/LI
Mz030SqEtI3ia6/4i/MLKx9T4gmKzsJuPAIkJxwCJyfJFrpUPjh0mylL5HhxlvdR
c/2d2Uz7jOT92+Mpn6kuCdXvcAfQRv1vPkmIDv0Vyl12BF0jat4nyxS+oVf6kvXL
XKrxBhbqFW24L9AWaY5Yu5JFU5sNxbYbK6W/lADDPPph89H1J4MUa2N5TYZUbAyv
kxfM12gEjGm7me9y0r87wLUYmJjt3TsUsR6JmwYIvk2iFZbXm8jwdnQ+CxuIuvV8
aqmTqYzqlD/igo3+GkwcP9NLFUE4TfJNfrjplDc1rtB9RnlMgFgkr8xiBoOPfryN
z+Iju5uMUCRjRQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:51:37 2025 by rpki-client