Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
File: HoYS4w6WzLqJ514Et7uhwreXxcM.mft (raw, json)
Hash identifier: 7jfgyxj7AeAJTSs3pubQI5JdUl7e0KjETR1kZmgms4k=
Subject key identifier: DE:17:52:AF:AD:5C:6C:97:5F:CE:1F:23:5C:B3:96:03:D0:A2:AF:2F
Authority key identifier: 1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
Certificate issuer: /CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Certificate serial: 01967530848E3E569D3C61764B0A64927615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
Manifest number: 5B
Signing time: Sun 27 Apr 2025 03:00:36 +0000
Manifest this update: Sun 27 Apr 2025 03:00:36 +0000
Manifest next update: Mon 28 Apr 2025 03:00:36 +0000
Files and hashes: 1: HoYS4w6WzLqJ514Et7uhwreXxcM.crl (hash: hbrVQAJxPzmQ0+82oyISSGWwGoEjR+w+e81tQu9gxvw=)
2: JUZrH7esHXuIUR8S80TNsOfBgq4.roa (hash: U7uEaoA1okVxydwdN7xgsZxq5XRAaznjumXB+lt8BF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:84:8e:3e:56:9d:3c:61:76:4b:0a:64:92:76:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Validity
Not Before: Apr 27 03:00:36 2025 GMT
Not After : Apr 28 03:00:36 2025 GMT
Subject: CN=de1752afad5c6c975fce1f235cb39603d0a2af2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:ba:90:da:46:ae:eb:2a:87:58:0b:51:9d:
7f:3e:2a:4f:3d:e8:6d:d2:84:10:50:12:9a:cf:5b:
bc:96:36:98:79:56:67:0b:14:7b:89:67:09:f4:ea:
e6:a5:6f:c2:1b:f6:b7:5a:fb:49:a2:cd:fc:70:87:
94:e7:b7:9c:c1:7f:c5:78:96:91:9a:3f:c6:b3:3c:
f5:ac:7e:cd:ed:0a:4d:a1:d7:24:ab:18:d8:1b:d3:
e4:60:a4:bb:5c:44:c2:a9:16:23:a9:9e:25:2a:f1:
a3:4f:28:1f:f2:2d:8d:ea:50:f2:8a:32:53:a2:88:
a6:5e:aa:10:6a:db:23:df:5e:aa:89:00:fd:6d:ff:
26:85:3d:a1:95:81:7a:70:8b:30:d9:28:3a:18:2f:
48:4b:82:78:11:0e:e1:2f:2e:27:75:95:d8:f6:e9:
ea:37:8b:7e:12:44:28:13:41:7e:86:be:77:a9:31:
c3:74:20:c6:f6:a5:b1:08:fd:08:82:75:31:7e:da:
93:26:e8:ac:6c:cd:e2:e1:99:cf:82:61:3a:1a:ed:
40:7e:67:02:2c:65:39:b4:f8:5f:ba:c9:78:c6:17:
2e:04:c0:24:bd:fe:10:ff:e3:4e:62:e2:20:f0:af:
26:9c:fb:b4:42:a0:3d:7a:ea:cf:11:1c:7c:10:0c:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:17:52:AF:AD:5C:6C:97:5F:CE:1F:23:5C:B3:96:03:D0:A2:AF:2F
X509v3 Authority Key Identifier:
keyid:1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:73:6e:1a:be:68:f6:cb:ae:dd:92:4a:2d:4b:1f:03:b5:ca:
44:e6:7d:bf:d3:05:eb:99:5f:c8:42:69:f1:ec:9e:85:b1:ab:
79:84:7c:be:53:0e:46:ca:85:6d:d4:34:d8:e7:fb:29:53:57:
83:5a:e4:b9:c0:c0:af:4a:b3:7c:84:a6:cd:4c:2e:6c:de:d9:
0c:e3:48:4d:d8:62:24:3d:56:df:07:56:eb:c3:6a:30:9b:92:
33:9b:bb:50:27:f2:a4:6e:e2:96:83:6d:a7:60:1e:dd:96:e0:
48:7a:e4:16:15:7c:f7:3b:da:eb:bc:86:0b:4a:4c:d4:d3:11:
30:af:bf:4e:cd:e6:a4:f5:67:4c:4c:6f:7c:bc:2e:de:41:56:
b8:fb:eb:4e:62:92:60:28:62:6d:f6:82:a9:6c:6f:84:a6:db:
4b:30:41:2f:0a:4f:e9:c0:e5:ca:c5:3e:3a:14:f7:66:68:3e:
45:a7:c4:e6:cd:df:a2:68:e0:5b:15:fb:df:09:3e:0f:6d:82:
40:82:7d:3b:1e:b6:a9:da:92:14:cc:02:9b:5e:cf:59:5c:6b:
2b:31:54:4d:a8:3f:1d:4c:49:a9:3e:6d:13:52:1c:8e:41:bd:
74:7f:3a:08:06:e5:bb:6a:dc:ec:b6:c7:c9:fb:2f:96:24:a0:
a0:ba:49:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MISOPladPGF2SwpkknYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlODYxMmUzMGU5NmNjYmE4OWU3NWUwNGI3YmJhMWMyYjc5
N2M1YzMwHhcNMjUwNDI3MDMwMDM2WhcNMjUwNDI4MDMwMDM2WjAzMTEwLwYDVQQD
EyhkZTE3NTJhZmFkNWM2Yzk3NWZjZTFmMjM1Y2IzOTYwM2QwYTJhZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRG6kNpGrusqh1gLUZ1/PipPPeht
0oQQUBKaz1u8ljaYeVZnCxR7iWcJ9OrmpW/CG/a3WvtJos38cIeU57ecwX/FeJaR
mj/Gszz1rH7N7QpNodckqxjYG9PkYKS7XETCqRYjqZ4lKvGjTygf8i2N6lDyijJT
ooimXqoQatsj316qiQD9bf8mhT2hlYF6cIsw2Sg6GC9IS4J4EQ7hLy4ndZXY9unq
N4t+EkQoE0F+hr53qTHDdCDG9qWxCP0IgnUxftqTJuisbM3i4ZnPgmE6Gu1AfmcC
LGU5tPhfusl4xhcuBMAkvf4Q/+NOYuIg8K8mnPu0QqA9eurPERx8EAzByQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4XUq+tXGyXX84fI1yzlgPQoq8vMB8GA1UdIwQY
MBaAFB6GEuMOlsy6iedeBLe7ocK3l8XDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83MzBiZDQtZGIzMy00NTUyLWJhZDUt
YjZkYzJiN2JmMzBhLzEvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC83MzBiZDQtZGIzMy00NTUyLWJhZDUtYjZkYzJiN2JmMzBh
LzEvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3NuGr5o
9suu3ZJKLUsfA7XKROZ9v9MF65lfyEJp8eyehbGreYR8vlMORsqFbdQ02Of7KVNX
g1rkucDAr0qzfISmzUwubN7ZDONITdhiJD1W3wdW68NqMJuSM5u7UCfypG7iloNt
p2Ae3ZbgSHrkFhV89zva67yGC0pM1NMRMK+/Ts3mpPVnTExvfLwu3kFWuPvrTmKS
YChibfaCqWxvhKbbSzBBLwpP6cDlysU+OhT3Zmg+RafE5s3fomjgWxX73wk+D22C
QIJ9Ox62qdqSFMwCm17PWVxrKzFUTag/HUxJqT5tE1IcjkG9dH86CAblu2rc7LbH
yfsvliSgoLpJhQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:09:55 2025 by rpki-client