Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
File: Hqemr7IbsUh0L2FV0aOa_I_H55w.mft (raw, json)
Hash identifier: R0kAPD/jbSaQ3sVULHFkoHL/F6mTODa7t8QlKP35Wo0=
Subject key identifier: 5A:07:6B:8F:0F:89:0D:C2:E4:9C:5E:1E:A0:1A:FC:5A:B9:DC:70:BF
Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
Certificate issuer: /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Certificate serial: 0196575D141A13F19F78CDA2A1A2750E05DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
Manifest number: 0E42
Signing time: Mon 21 Apr 2025 08:00:39 +0000
Manifest this update: Mon 21 Apr 2025 08:00:39 +0000
Manifest next update: Tue 22 Apr 2025 08:00:39 +0000
Files and hashes: 1: Hqemr7IbsUh0L2FV0aOa_I_H55w.crl (hash: G0ZluT6LCjIWHzp+q5llGN51AVh+CAnhTyBU0iitPOo=)
2: SAqPRmB-G6msTnaXyr7m6jyG5Ko.roa (hash: 2YxDfMO4o3RvNMQXIEtYRv7ty5CdsK9saG6EToUsNdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5d:14:1a:13:f1:9f:78:cd:a2:a1:a2:75:0e:05:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Validity
Not Before: Apr 21 08:00:39 2025 GMT
Not After : Apr 22 08:00:39 2025 GMT
Subject: CN=5a076b8f0f890dc2e49c5e1ea01afc5ab9dc70bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b8:1e:34:77:c7:86:a7:67:5e:b6:45:bb:b9:
37:bc:c0:f4:92:08:1e:b7:d7:9e:fb:67:de:1a:8e:
81:d9:48:0a:1a:73:9f:6e:52:cc:e8:27:d7:6c:ef:
c0:d9:51:0d:53:eb:8d:30:5f:6d:8f:a1:50:f4:9f:
67:96:4b:63:db:56:91:20:dd:3e:48:ba:75:a9:4c:
a5:22:4d:eb:ce:5a:3c:79:ab:b7:cd:54:f7:7d:c5:
3e:e8:34:5d:48:3d:c4:b3:59:42:f0:0b:50:4a:b7:
a9:73:14:8b:51:7a:db:aa:41:f5:66:9c:03:3c:50:
01:37:d9:a5:4f:bc:c7:45:c1:bb:f5:d0:21:de:f2:
49:33:18:20:bd:32:84:22:3d:c2:8b:7e:23:6c:86:
5e:4e:67:23:7d:13:c3:88:73:41:56:a2:91:cc:5d:
05:41:12:77:21:e9:f4:89:ce:65:4f:61:c3:43:a4:
ac:47:b1:98:5a:7b:9a:22:5a:0f:5c:08:7d:d6:76:
e5:63:fa:ae:92:b0:98:75:60:d5:93:e3:1b:e4:b9:
b1:5d:2b:26:bc:de:5b:39:d7:ef:f3:21:15:92:14:
df:79:d4:0d:64:49:06:9e:80:61:da:e4:2f:d6:5c:
90:72:b7:0c:a8:03:99:ce:e5:cb:19:6c:0d:6b:20:
f6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:07:6B:8F:0F:89:0D:C2:E4:9C:5E:1E:A0:1A:FC:5A:B9:DC:70:BF
X509v3 Authority Key Identifier:
keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5a:df:6a:49:22:1b:25:1b:52:a1:33:c6:0e:d4:74:00:11:
8b:22:cf:ea:df:70:f1:f5:60:aa:1b:81:1e:a8:5a:21:bc:d8:
a7:5f:62:9d:7b:3d:b9:c8:e0:c7:e5:8f:cd:87:7a:2a:aa:3f:
39:d7:d1:7c:5c:b8:e6:b5:93:83:0c:e4:87:a2:ec:0a:52:11:
da:fd:63:6d:87:da:f6:74:f8:f6:cb:a9:3c:49:bb:94:ab:0a:
98:2c:f0:fd:2b:16:e4:ab:06:82:0d:fc:8c:76:7b:e7:4c:d0:
3c:2b:4e:5d:8f:1e:36:97:73:4e:d3:22:1a:7c:6d:cf:9e:fa:
d3:c2:ba:e1:8e:e0:85:6a:ea:bc:2a:ce:86:5a:2f:d4:0b:91:
e8:06:aa:ed:76:1d:2f:de:e3:7d:a1:96:43:36:2b:a3:e4:72:
c5:ad:e8:a7:f1:a8:63:3c:4d:d8:96:31:4b:df:b6:10:a7:87:
1f:71:5c:12:1c:b4:df:5d:74:f8:af:ed:f5:21:da:69:3d:a6:
8b:55:01:4d:46:6d:48:4e:ae:f5:3c:ee:7e:e4:4c:9a:11:66:
f1:1c:94:b4:7a:90:33:4c:e5:64:0f:3d:3f:56:c2:0a:ef:eb:
da:78:a9:d6:1f:11:cb:9c:55:ee:c8:d6:19:88:a4:99:57:4e:
96:0a:79:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXXRQaE/GfeM2ioaJ1DgXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTdhNmFmYjIxYmIxNDg3NDJmNjE1NWQxYTM5YWZjOGZj
N2U3OWMwHhcNMjUwNDIxMDgwMDM5WhcNMjUwNDIyMDgwMDM5WjAzMTEwLwYDVQQD
Eyg1YTA3NmI4ZjBmODkwZGMyZTQ5YzVlMWVhMDFhZmM1YWI5ZGM3MGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrgeNHfHhqdnXrZFu7k3vMD0kgge
t9ee+2feGo6B2UgKGnOfblLM6CfXbO/A2VENU+uNMF9tj6FQ9J9nlktj21aRIN0+
SLp1qUylIk3rzlo8eau3zVT3fcU+6DRdSD3Es1lC8AtQSrepcxSLUXrbqkH1ZpwD
PFABN9mlT7zHRcG79dAh3vJJMxggvTKEIj3Ci34jbIZeTmcjfRPDiHNBVqKRzF0F
QRJ3Ien0ic5lT2HDQ6SsR7GYWnuaIloPXAh91nblY/qukrCYdWDVk+Mb5LmxXSsm
vN5bOdfv8yEVkhTfedQNZEkGnoBh2uQv1lyQcrcMqAOZzuXLGWwNayD2ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoHa48PiQ3C5JxeHqAa/Fq53HC/MB8GA1UdIwQY
MBaAFB6npq+yG7FIdC9hVdGjmvyPx+ecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84ODYxNjMtNjViMy00NTk5LWJmNGIt
ZjM2Y2Q4NzkwYjBhLzEvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84ODYxNjMtNjViMy00NTk5LWJmNGItZjM2Y2Q4NzkwYjBh
LzEvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1rfakki
GyUbUqEzxg7UdAARiyLP6t9w8fVgqhuBHqhaIbzYp19inXs9ucjgx+WPzYd6Kqo/
OdfRfFy45rWTgwzkh6LsClIR2v1jbYfa9nT49supPEm7lKsKmCzw/SsW5KsGgg38
jHZ750zQPCtOXY8eNpdzTtMiGnxtz57608K64Y7ghWrqvCrOhlov1AuR6Aaq7XYd
L97jfaGWQzYro+Ryxa3op/GoYzxN2JYxS9+2EKeHH3FcEhy03110+K/t9SHaaT2m
i1UBTUZtSE6u9TzufuRMmhFm8RyUtHqQM0zlZA89P1bCCu/r2nip1h8Ry5xV7sjW
GYikmVdOlgp5gw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:19 2025 by rpki-client