Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
File: hPLOccb_zodWDVZe5czaMeAbnBU.mft (raw, json)
Hash identifier: WJDujHT6TT+j/rgoOy61Xr0FEBA9dh0KFeJQe8Wg+KI=
Subject key identifier: D8:EC:67:C4:B1:B2:C8:5D:08:5C:57:B0:CA:80:90:BD:49:5C:4B:70
Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Certificate serial: 019656133DBC698A0771FF3B599768E6A9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
Manifest number: 102A
Signing time: Mon 21 Apr 2025 02:00:23 +0000
Manifest this update: Mon 21 Apr 2025 02:00:23 +0000
Manifest next update: Tue 22 Apr 2025 02:00:23 +0000
Files and hashes: 1: IDSoal-WPRQg2kggJnZlgyY7mtI.roa (hash: juWvqJns3UfT6SO2SE3jBpIvpwCfu+sMyWgDyL3Cs3I=)
2: hPLOccb_zodWDVZe5czaMeAbnBU.crl (hash: 9PwKGVEnkSWfD0TYkBZ9vDLbWKtmfOWVoYimzEba94A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:3d:bc:69:8a:07:71:ff:3b:59:97:68:e6:a9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Validity
Not Before: Apr 21 02:00:23 2025 GMT
Not After : Apr 22 02:00:23 2025 GMT
Subject: CN=d8ec67c4b1b2c85d085c57b0ca8090bd495c4b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:ea:05:f4:c4:d3:81:57:63:07:a9:03:60:
29:f0:b2:d3:76:f7:11:57:5e:13:76:b4:75:64:f7:
ce:a1:e1:dd:0a:6a:25:61:87:b7:ad:ac:cb:84:6a:
f9:54:87:f9:20:5f:15:4b:c1:34:c7:39:5c:00:38:
0c:cd:21:41:f6:fa:33:97:be:97:d5:44:da:b2:49:
47:87:3c:84:26:19:0a:2a:6d:96:24:d2:7a:3f:71:
e3:25:1e:be:9e:cf:0f:e2:cc:c6:03:ba:66:03:c2:
9f:e6:1f:03:bf:8c:9e:c3:06:11:33:e8:0f:f3:19:
30:5e:c2:21:44:30:4a:b3:05:1d:be:c6:3a:33:08:
b4:af:41:fd:a2:30:77:b3:ed:5f:8d:2d:f7:e5:3b:
2a:ec:1b:d6:70:4d:28:69:ef:5c:0e:b1:da:94:57:
33:ca:09:5f:b2:87:7e:9e:c7:d2:73:28:be:f7:9e:
c5:67:37:6a:1e:54:51:b6:1c:6d:72:56:67:e2:fc:
b6:90:13:a2:8c:1e:e4:c3:0a:1a:5d:8f:a9:d3:f1:
e6:37:42:8e:ca:77:f1:86:36:9d:bb:98:18:f2:47:
4d:6f:6f:2c:91:02:34:e5:e3:74:e3:3f:5b:21:2f:
1b:b5:8d:85:0a:a6:fe:1c:da:a6:70:ab:cb:bf:bf:
d0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EC:67:C4:B1:B2:C8:5D:08:5C:57:B0:CA:80:90:BD:49:5C:4B:70
X509v3 Authority Key Identifier:
keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:23:a4:7a:17:d3:20:18:e7:d2:34:ed:12:0e:63:cc:55:73:
74:07:1e:3c:11:7c:d4:20:e7:f1:dc:f2:25:0d:4a:ee:d9:50:
0f:40:f3:30:5b:af:ac:34:d3:4d:e1:66:f8:13:d6:5f:68:59:
9e:f8:4b:bf:19:04:d9:86:2b:e3:b8:15:93:64:51:fd:c8:75:
30:ea:46:12:a1:b2:71:d5:61:38:10:d9:9b:84:94:cf:59:6d:
78:71:f7:26:df:9b:b0:f7:88:30:3c:40:64:2c:f5:65:ca:ac:
e1:ed:f6:99:78:9f:21:6e:b7:6f:2c:e7:99:97:d4:48:19:b5:
b3:00:a5:4d:53:86:9c:9f:86:95:e4:98:9c:9c:0f:3e:f9:b0:
31:ad:0d:14:3a:fb:7e:75:52:25:24:77:8f:87:0a:a8:df:82:
89:4d:65:95:38:5b:ae:95:7a:2c:b8:30:43:cd:e6:3e:38:b3:
48:bc:11:b6:cf:06:13:20:bb:47:26:ec:8e:fa:59:2e:7a:a9:
fe:f3:e2:4f:a7:92:4c:bd:ae:85:46:52:f1:eb:1a:77:86:fe:
de:80:da:ba:29:9a:93:5d:87:cc:52:ef:79:ce:d6:b1:59:15:
cc:6d:e5:33:e2:9a:eb:62:6d:c1:91:66:69:92:5c:24:61:83:
4f:5b:1f:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWEz28aYoHcf87WZdo5qn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjJjZTcxYzZmZmNlODc1NjBkNTY1ZWU1Y2NkYTMxZTAx
YjljMTUwHhcNMjUwNDIxMDIwMDIzWhcNMjUwNDIyMDIwMDIzWjAzMTEwLwYDVQQD
EyhkOGVjNjdjNGIxYjJjODVkMDg1YzU3YjBjYTgwOTBiZDQ5NWM0YjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs3qBfTE04FXYwepA2Ap8LLTdvcR
V14TdrR1ZPfOoeHdCmolYYe3razLhGr5VIf5IF8VS8E0xzlcADgMzSFB9vozl76X
1UTasklHhzyEJhkKKm2WJNJ6P3HjJR6+ns8P4szGA7pmA8Kf5h8Dv4yewwYRM+gP
8xkwXsIhRDBKswUdvsY6Mwi0r0H9ojB3s+1fjS335Tsq7BvWcE0oae9cDrHalFcz
yglfsod+nsfScyi+957FZzdqHlRRthxtclZn4vy2kBOijB7kwwoaXY+p0/HmN0KO
ynfxhjadu5gY8kdNb28skQI05eN04z9bIS8btY2FCqb+HNqmcKvLv7/Q7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjsZ8SxsshdCFxXsMqAkL1JXEtwMB8GA1UdIwQY
MBaAFITyznHG/86HVg1WXuXM2jHgG5wVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yYWM5ODAtMjI1OS00NmZkLWE0Mjgt
N2I5OGM3NDYyYTdlLzEvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yYWM5ODAtMjI1OS00NmZkLWE0MjgtN2I5OGM3NDYyYTdl
LzEvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCOkehfT
IBjn0jTtEg5jzFVzdAcePBF81CDn8dzyJQ1K7tlQD0DzMFuvrDTTTeFm+BPWX2hZ
nvhLvxkE2YYr47gVk2RR/ch1MOpGEqGycdVhOBDZm4SUz1lteHH3Jt+bsPeIMDxA
ZCz1Zcqs4e32mXifIW63byznmZfUSBm1swClTVOGnJ+GleSYnJwPPvmwMa0NFDr7
fnVSJSR3j4cKqN+CiU1llThbrpV6LLgwQ83mPjizSLwRts8GEyC7RybsjvpZLnqp
/vPiT6eSTL2uhUZS8esad4b+3oDauimak12HzFLvec7WsVkVzG3lM+Ka62JtwZFm
aZJcJGGDT1sfIA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:28 2025 by rpki-client