Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json)
Hash identifier: 40P8f9dVz/0IE6P1jQ4wltEZ4UAYgWf33pw886Wetx8=
Subject key identifier: 63:6F:BC:A9:66:03:33:40:0C:0B:14:C5:D5:7E:D8:21:B5:14:BB:5A
Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Certificate serial: 019678685EA30B0448B084D9E8A3E0091D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
Manifest number: 0574
Signing time: Sun 27 Apr 2025 18:00:27 +0000
Manifest this update: Sun 27 Apr 2025 18:00:27 +0000
Manifest next update: Mon 28 Apr 2025 18:00:27 +0000
Files and hashes: 1: Z7UyGu5eAyy6eE2IZXWBPwAGCsY.roa (hash: 69ViYIsd0St7iG615BWi/I8unIJ08lLoNoGfAWMd13A=)
2: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: lAgTC0IdE0mY510OmHCbz86xJht63L6j02ON8P1TaW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:5e:a3:0b:04:48:b0:84:d9:e8:a3:e0:09:1d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Validity
Not Before: Apr 27 18:00:27 2025 GMT
Not After : Apr 28 18:00:27 2025 GMT
Subject: CN=636fbca9660333400c0b14c5d57ed821b514bb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:0f:9c:e5:cd:73:aa:99:b2:0a:ba:4a:7a:
17:7d:3e:8b:43:c0:45:2c:72:56:3c:5d:b4:76:b6:
c4:a2:ad:db:8c:ba:95:ab:00:da:07:a4:17:4a:61:
c7:ee:9c:f8:aa:ba:31:ab:4c:26:d6:fa:66:49:e2:
7c:82:ff:c4:d7:89:95:3b:6b:af:fe:8d:ba:8d:30:
98:fc:5e:4a:f6:87:03:8a:16:68:40:f3:39:2f:83:
77:b4:1e:32:45:45:cf:a5:81:82:42:bb:2d:11:75:
f1:eb:fe:6c:e9:66:87:e8:61:72:48:44:94:6c:cf:
b1:77:51:71:cc:e7:68:c0:47:94:b8:ca:d8:92:5d:
34:3f:8f:31:d9:94:a3:b1:e2:a1:85:d2:22:11:a1:
df:05:3b:28:a4:46:b4:f7:aa:d2:b9:79:b3:89:9f:
15:f3:14:05:85:8f:21:2d:3d:dd:18:a9:d4:1f:0d:
ed:ea:65:bb:16:af:23:90:8e:8f:c1:9b:bc:f1:a2:
bb:1a:e5:e2:e2:ab:77:7a:f2:6a:59:ac:d7:92:d8:
a4:5f:f4:8d:34:8d:ee:2c:e7:fb:0f:bb:73:80:4f:
ff:1e:83:17:a0:5a:f8:41:f0:bf:bd:98:cc:b5:32:
52:1b:1a:d6:a2:5d:c8:64:24:c5:50:82:20:c7:63:
e5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6F:BC:A9:66:03:33:40:0C:0B:14:C5:D5:7E:D8:21:B5:14:BB:5A
X509v3 Authority Key Identifier:
keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f5:63:f8:b9:31:9b:de:0b:4e:f8:d5:e8:7d:af:18:34:95:
7a:b9:48:5a:4e:85:96:ef:35:e3:3c:fd:0c:fc:36:81:f4:01:
92:05:81:00:c3:55:23:1c:ba:9e:b0:66:e3:6f:c3:d2:e8:94:
fd:b9:9f:27:28:64:20:d0:82:0b:42:79:1c:81:f5:2e:98:8d:
db:eb:bf:a8:48:73:98:fa:35:1d:82:8a:3b:3b:8a:2b:76:05:
19:ff:f9:fe:1c:23:78:ee:f3:75:64:40:93:c5:e0:53:ea:ed:
3f:d3:19:01:c1:c6:d9:e9:80:66:10:f7:da:94:59:d9:1d:40:
93:80:ea:97:71:20:9b:98:6a:29:1e:89:fd:f2:cf:4b:c8:99:
14:ec:6d:c9:57:d0:1b:a0:73:87:70:84:64:55:cf:62:1e:62:
a5:c3:bb:08:0f:ad:4a:7a:a8:88:36:a9:1c:dd:5c:34:e8:33:
26:9e:c8:60:4f:b8:0f:1e:d2:5e:7c:3a:ea:65:cb:ed:30:5b:
5e:fd:45:1b:21:6d:57:22:26:87:46:95:af:2a:97:1b:2c:9e:
f9:64:33:6d:f3:8e:8d:6c:b6:1f:f9:e5:2c:f1:18:01:ee:ba:
94:18:a7:24:ef:52:f3:c5:57:5d:b5:52:c7:87:7f:c2:79:b6:
3d:e2:b1:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aF6jCwRIsITZ6KPgCR0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MDdmMDA2M2VlOWFmMzFkODdjZmU2NWI5YmMxOTNlYjQy
Yzg5NjkwHhcNMjUwNDI3MTgwMDI3WhcNMjUwNDI4MTgwMDI3WjAzMTEwLwYDVQQD
Eyg2MzZmYmNhOTY2MDMzMzQwMGMwYjE0YzVkNTdlZDgyMWI1MTRiYjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JYPnOXNc6qZsgq6SnoXfT6LQ8BF
LHJWPF20drbEoq3bjLqVqwDaB6QXSmHH7pz4qroxq0wm1vpmSeJ8gv/E14mVO2uv
/o26jTCY/F5K9ocDihZoQPM5L4N3tB4yRUXPpYGCQrstEXXx6/5s6WaH6GFySESU
bM+xd1FxzOdowEeUuMrYkl00P48x2ZSjseKhhdIiEaHfBTsopEa096rSuXmziZ8V
8xQFhY8hLT3dGKnUHw3t6mW7Fq8jkI6PwZu88aK7GuXi4qt3evJqWazXktikX/SN
NI3uLOf7D7tzgE//HoMXoFr4QfC/vZjMtTJSGxrWol3IZCTFUIIgx2PldQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNvvKlmAzNADAsUxdV+2CG1FLtaMB8GA1UdIwQY
MBaAFIQH8AY+6a8x2Hz+Zbm8GT60LIlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NTdjNTktZTNiOS00MDRmLWFmYWIt
ZTFlZmNmMmVkMGE3LzEvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82NTdjNTktZTNiOS00MDRmLWFmYWItZTFlZmNmMmVkMGE3
LzEvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvVj+Lkx
m94LTvjV6H2vGDSVerlIWk6Flu814zz9DPw2gfQBkgWBAMNVIxy6nrBm42/D0uiU
/bmfJyhkINCCC0J5HIH1LpiN2+u/qEhzmPo1HYKKOzuKK3YFGf/5/hwjeO7zdWRA
k8XgU+rtP9MZAcHG2emAZhD32pRZ2R1Ak4Dql3Egm5hqKR6J/fLPS8iZFOxtyVfQ
G6Bzh3CEZFXPYh5ipcO7CA+tSnqoiDapHN1cNOgzJp7IYE+4Dx7SXnw66mXL7TBb
Xv1FGyFtVyImh0aVryqXGyye+WQzbfOOjWy2H/nlLPEYAe66lBinJO9S88VXXbVS
x4d/wnm2PeKx/g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:01:06 2025 by rpki-client