Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
File: hGr1TmVYz8hiUpRuRpKrknd8DhA.mft (raw, json)
Hash identifier: /ga/FdRAS2+JgPlfvk+7+FTsglbZpKzEIQy2UEJdygs=
Subject key identifier: F5:1C:E4:25:09:FF:CB:CF:C4:0A:EC:CA:B2:EB:33:39:BE:1B:E3:67
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial: 0196089DC5C9752D84F595502679A85747E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
Manifest number: 10FA
Signing time: Sun 06 Apr 2025 01:01:19 +0000
Manifest this update: Sun 06 Apr 2025 01:01:19 +0000
Manifest next update: Mon 07 Apr 2025 01:01:19 +0000
Files and hashes: 1: EAjdVmmPDgRsaYdJzqxZsWJ1dtQ.roa (hash: MpPa88zI8gAyzjuIqd3qZ9dmTTo9CAG0jQ+czPWKrY0=)
2: ZpIa8d84ZFXt_ZFQqAeQWbEn8cE.roa (hash: yg+iHdLIlyvv1zJT3FKVPdTj2ezKdgH8bzRxXJFfD+M=)
3: fw-9UYbBKED3FPK1cxwcKkMCFm0.roa (hash: jRUQB1Fr5hDxlkTn2IWZrgIhUE7mB/LkFsYZT2IUhmk=)
4: hGr1TmVYz8hiUpRuRpKrknd8DhA.crl (hash: iYwB23JJ+geDYOcjZ9K33lrEwmrqefIj2OVUA/YTj2s=)
5: pT_R2pT5fkigCUc46LgmyNvu26w.roa (hash: f5EDq84NioAgiZfb2l0opuOPnSnHoDIa4FyPu++58Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:08:9d:c5:c9:75:2d:84:f5:95:50:26:79:a8:57:47:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
Validity
Not Before: Apr 6 01:01:19 2025 GMT
Not After : Apr 7 01:01:19 2025 GMT
Subject: CN=f51ce42509ffcbcfc40aeccab2eb3339be1be367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:d2:71:3d:31:d7:b0:bd:14:95:27:55:93:
57:d4:c3:e2:8d:a0:f8:9b:e7:ab:fa:83:e4:57:4a:
6e:12:9f:85:3e:68:de:11:a7:40:8e:ca:09:5b:b8:
80:1a:6f:dd:6a:5d:c1:53:64:a7:e4:45:99:f5:43:
cb:ad:36:8b:f3:98:6b:30:5b:a4:0a:66:48:02:82:
65:b7:82:f0:1d:aa:7f:4e:2f:84:04:39:e4:b1:64:
98:e3:97:d8:d0:ee:06:d4:5b:43:65:a1:be:fb:90:
34:67:1b:df:50:8d:fd:26:cc:18:ee:f2:f4:b6:b5:
0f:71:bc:b5:a9:cc:92:e1:e3:04:cd:dd:a0:0f:04:
ab:26:66:de:c0:d5:a8:8c:eb:b0:6d:13:f4:8e:bb:
35:bd:4d:bb:f1:24:28:8f:a0:4f:1f:45:04:00:ba:
d9:91:14:37:9d:12:7e:ca:95:6b:f9:34:cd:3f:4d:
26:f8:a2:6f:1e:7f:2c:b5:ad:11:3e:8e:9a:d1:80:
e4:ce:f2:11:7f:22:50:69:f7:00:a6:84:81:20:7f:
dd:a3:ce:d9:5d:5d:1b:bc:81:0e:e4:fe:8e:5c:9e:
eb:54:4d:f9:bc:62:3a:19:ae:13:2a:c5:38:6d:c1:
56:a7:e9:15:93:81:3d:b4:78:0c:46:c2:1e:ab:89:
66:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1C:E4:25:09:FF:CB:CF:C4:0A:EC:CA:B2:EB:33:39:BE:1B:E3:67
X509v3 Authority Key Identifier:
keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3f:91:8c:0f:d5:aa:56:54:13:e9:94:e8:0b:3c:6d:ba:0d:
00:6d:9b:b9:78:ee:40:d5:3a:3a:48:08:28:3d:6b:41:79:5a:
a6:a5:11:3c:a0:04:1e:f8:62:5f:36:1f:3d:9f:e5:f5:8a:c6:
3a:0b:22:59:ff:92:b5:9d:ad:28:96:b9:17:60:22:6f:42:95:
3d:b6:78:7f:cc:0b:a9:c9:fe:a9:e0:38:3a:cd:ab:56:b5:c4:
d7:e0:ec:42:b0:11:4b:6d:99:8b:9c:25:bc:39:80:41:6f:ad:
93:8e:d3:fb:12:6e:e2:8c:11:20:d8:cb:bb:fb:1b:b0:c6:90:
ec:e8:2c:0b:b7:01:e3:0e:6d:4d:5c:af:eb:87:e4:68:54:b5:
80:04:17:2e:d9:31:f5:23:03:6d:c6:32:19:cd:af:44:d3:3c:
a3:64:65:53:4a:9c:cc:33:87:eb:d5:81:2a:2e:d2:66:e3:e4:
0e:dc:cd:03:4d:06:16:f9:d7:c4:d4:0b:f5:ef:50:6b:38:bb:
a5:95:ee:7e:6d:cc:ce:2c:a4:fe:1d:08:eb:fa:5c:fc:d0:13:
d1:28:47:6e:80:d2:97:2d:74:a8:26:27:f2:bd:79:4f:a3:22:
e6:7f:c1:7e:6f:6d:b6:5d:df:46:7a:a3:6b:04:b7:7b:51:9f:
fd:8c:ec:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYIncXJdS2E9ZVQJnmoV0fgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NmFmNTRlNjU1OGNmYzg2MjUyOTQ2ZTQ2OTJhYjkyNzc3
YzBlMTAwHhcNMjUwNDA2MDEwMTE5WhcNMjUwNDA3MDEwMTE5WjAzMTEwLwYDVQQD
EyhmNTFjZTQyNTA5ZmZjYmNmYzQwYWVjY2FiMmViMzMzOWJlMWJlMzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc/ScT0x17C9FJUnVZNX1MPijaD4
m+er+oPkV0puEp+FPmjeEadAjsoJW7iAGm/dal3BU2Sn5EWZ9UPLrTaL85hrMFuk
CmZIAoJlt4LwHap/Ti+EBDnksWSY45fY0O4G1FtDZaG++5A0ZxvfUI39JswY7vL0
trUPcby1qcyS4eMEzd2gDwSrJmbewNWojOuwbRP0jrs1vU278SQoj6BPH0UEALrZ
kRQ3nRJ+ypVr+TTNP00m+KJvHn8sta0RPo6a0YDkzvIRfyJQafcApoSBIH/do87Z
XV0bvIEO5P6OXJ7rVE35vGI6Ga4TKsU4bcFWp+kVk4E9tHgMRsIeq4lmrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUc5CUJ/8vPxArsyrLrMzm+G+NnMB8GA1UdIwQY
MBaAFIRq9U5lWM/IYlKUbkaSq5J3fA4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQt
MDdlMzZlZmM1ZTQyLzEvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQtMDdlMzZlZmM1ZTQy
LzEvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALD+RjA/V
qlZUE+mU6As8bboNAG2buXjuQNU6OkgIKD1rQXlapqURPKAEHvhiXzYfPZ/l9YrG
OgsiWf+StZ2tKJa5F2Aib0KVPbZ4f8wLqcn+qeA4Os2rVrXE1+DsQrARS22Zi5wl
vDmAQW+tk47T+xJu4owRINjLu/sbsMaQ7OgsC7cB4w5tTVyv64fkaFS1gAQXLtkx
9SMDbcYyGc2vRNM8o2RlU0qczDOH69WBKi7SZuPkDtzNA00GFvnXxNQL9e9Qazi7
pZXufm3Mziyk/h0I6/pc/NAT0ShHboDSly10qCYn8r15T6Mi5n/Bfm9ttl3fRnqj
awS3e1Gf/YzsqQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:21:44 2025 by rpki-client