Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: pZkz+hSyO3G+jlI0/nXXh408PFA2RHDMbcbCft2kpYE=
Subject key identifier: 6D:DD:DC:E6:8C:11:BC:DA:54:77:3E:79:60:E1:A6:68:29:4E:02:BA
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 019681A2DA213FEA1439520CF2E4C2007D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 0E20
Signing time: Tue 29 Apr 2025 13:00:55 +0000
Manifest this update: Tue 29 Apr 2025 13:00:55 +0000
Manifest next update: Wed 30 Apr 2025 13:00:55 +0000
Files and hashes: 1: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: uhp1St2W+s6A8kzyw6aw0eiZ2RIRQgq1m1w2g4odvn0=)
2: nWIGQEEDzaoVvT_y5hPxRiP1qn8.roa (hash: uGDWeypcq1B/eKXj8B8fn9FgOmQqtHY/Hs+n7XduT00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:da:21:3f:ea:14:39:52:0c:f2:e4:c2:00:7d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Apr 29 13:00:55 2025 GMT
Not After : Apr 30 13:00:55 2025 GMT
Subject: CN=6ddddce68c11bcda54773e7960e1a668294e02ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8b:e9:4c:7b:55:3a:66:22:95:8c:e1:0a:83:
0d:38:02:4e:e9:79:14:0b:28:38:22:51:53:dd:4f:
be:a4:af:2a:03:09:de:f0:b5:36:a4:01:0c:5d:fb:
f3:86:e1:03:4f:c6:c4:66:35:29:0b:3c:ad:4d:7b:
bd:8b:c9:16:f4:ea:1e:c6:4c:4f:6e:7b:0f:62:fe:
bf:54:aa:a1:28:78:0f:da:34:8b:2d:a1:f5:a9:96:
0f:79:07:62:99:f6:a0:9c:5f:ec:a4:81:9d:55:86:
eb:c7:08:0e:24:8a:53:14:07:39:05:be:aa:c6:63:
41:75:3d:78:e2:aa:5a:b7:f9:97:5b:2e:61:6f:f8:
bb:bd:da:77:af:15:14:0c:c0:ad:e3:66:6a:12:99:
b7:d3:c7:8e:5e:63:95:38:00:8d:e9:8c:74:4f:a2:
46:2c:bc:ba:4b:e0:52:8d:aa:42:ee:d8:1e:b0:c1:
94:d9:53:6f:9b:8e:b8:03:f6:0c:24:50:ea:a5:cd:
62:eb:51:86:9c:56:95:34:01:52:b8:74:eb:c8:68:
57:6c:2c:5f:d2:a4:25:f1:dd:ed:0b:a6:cc:a0:50:
be:79:f1:23:2d:12:b2:c0:c9:30:c8:29:0d:55:78:
23:7d:b1:01:b7:57:78:9d:96:1e:7b:ca:e4:56:8a:
02:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DD:DC:E6:8C:11:BC:DA:54:77:3E:79:60:E1:A6:68:29:4E:02:BA
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b6:6a:af:8f:68:84:39:a1:5f:27:58:69:e3:0e:b4:71:05:
10:e5:53:4e:43:90:0c:c7:de:31:8e:25:13:d2:07:67:a6:e0:
1f:7f:04:d2:23:a9:18:b1:0d:9f:60:dd:af:8d:fc:29:c7:ca:
c9:82:89:ed:a7:d7:20:12:15:10:e1:1e:60:d7:48:1e:fd:ee:
ac:a3:10:32:ca:61:8f:37:1b:30:46:68:85:2b:bd:19:98:9d:
52:7c:19:06:50:cb:99:35:eb:b5:09:c2:88:18:1e:34:06:0b:
08:83:b1:a2:1f:a8:a2:18:58:ab:5e:6a:2d:b3:2d:bf:2f:11:
83:6b:24:13:5c:a2:d6:a3:e3:91:bb:43:43:9c:b2:c0:1e:9c:
22:c6:f0:0e:9b:d5:5b:d0:2b:a8:3a:f6:eb:62:25:9c:77:c9:
51:c1:de:8d:6d:34:bf:51:df:62:03:f7:51:ef:42:ee:55:5c:
be:b6:3a:5a:36:c9:5e:ca:6d:4a:40:91:bb:de:af:89:c8:cb:
2e:3b:d0:be:2a:4d:76:f3:4d:05:68:2c:b4:68:9d:c7:39:5a:
33:8f:36:94:f9:e1:67:a2:f7:5a:2e:e3:4d:95:80:1d:6c:87:
e3:99:ca:b2:25:74:30:e3:4c:9a:ad:1d:eb:c5:5e:4b:a1:c6:
cf:19:cc:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBotohP+oUOVIM8uTCAH0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNzUxMDY3NzFjNDI5NWUzZDNlY2ZhMDRjYjk3ZjYzMTYy
M2U1YmYwHhcNMjUwNDI5MTMwMDU1WhcNMjUwNDMwMTMwMDU1WjAzMTEwLwYDVQQD
Eyg2ZGRkZGNlNjhjMTFiY2RhNTQ3NzNlNzk2MGUxYTY2ODI5NGUwMmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YvpTHtVOmYilYzhCoMNOAJO6XkU
Cyg4IlFT3U++pK8qAwne8LU2pAEMXfvzhuEDT8bEZjUpCzytTXu9i8kW9OoexkxP
bnsPYv6/VKqhKHgP2jSLLaH1qZYPeQdimfagnF/spIGdVYbrxwgOJIpTFAc5Bb6q
xmNBdT144qpat/mXWy5hb/i7vdp3rxUUDMCt42ZqEpm308eOXmOVOACN6Yx0T6JG
LLy6S+BSjapC7tgesMGU2VNvm464A/YMJFDqpc1i61GGnFaVNAFSuHTryGhXbCxf
0qQl8d3tC6bMoFC+efEjLRKywMkwyCkNVXgjfbEBt1d4nZYee8rkVooC2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3d3OaMEbzaVHc+eWDhpmgpTgK6MB8GA1UdIwQY
MBaAFB51EGdxxClePT7PoEy5f2MWI+W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGEwZjItYzgwNi00YjU1LWJiZTct
YTJmZGI5MzhjYTJkLzEvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85NGEwZjItYzgwNi00YjU1LWJiZTctYTJmZGI5MzhjYTJk
LzEvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLZqr49o
hDmhXydYaeMOtHEFEOVTTkOQDMfeMY4lE9IHZ6bgH38E0iOpGLENn2Ddr438KcfK
yYKJ7afXIBIVEOEeYNdIHv3urKMQMsphjzcbMEZohSu9GZidUnwZBlDLmTXrtQnC
iBgeNAYLCIOxoh+oohhYq15qLbMtvy8Rg2skE1yi1qPjkbtDQ5yywB6cIsbwDpvV
W9ArqDr262IlnHfJUcHejW00v1HfYgP3Ue9C7lVcvrY6WjbJXsptSkCRu96vicjL
LjvQvipNdvNNBWgstGidxzlaM482lPnhZ6L3Wi7jTZWAHWyH45nKsiV0MONMmq0d
68VeS6HGzxnMYg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:23:34 2025 by rpki-client