Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
File: hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json)
Hash identifier: 1CVJ+Ull8mtjgSGcYxmRAANgiJvOF9lbWHU3OuXBMpE=
Subject key identifier: B8:74:83:6D:11:A4:63:C2:50:83:63:B7:BE:CD:F9:17:03:04:AA:4C
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 019656B870A18820EA38F887766868F6A5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
Manifest number: 0712
Signing time: Mon 21 Apr 2025 05:00:50 +0000
Manifest this update: Mon 21 Apr 2025 05:00:50 +0000
Manifest next update: Tue 22 Apr 2025 05:00:50 +0000
Files and hashes: 1: GrVfgYYa0s5gLsRQp5P5vAQeHlE.roa (hash: Twu1XyErZ1bzBOtE8/HK3XbggJvMpOYaRXT376BODWE=)
2: XUIGCJfhGsoP5FdVAQmT9lUNYuc.roa (hash: hjmwDLHRKf4c787nov0R6bRVLxtqmM1uwueYf+NK6fU=)
3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: JQwj2F5nVKrBU+WWcCQ1Gf7+l1vR0cAzvFjura+1asg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:70:a1:88:20:ea:38:f8:87:76:68:68:f6:a5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: Apr 21 05:00:50 2025 GMT
Not After : Apr 22 05:00:50 2025 GMT
Subject: CN=b874836d11a463c2508363b7becdf9170304aa4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:a7:e4:4c:6d:63:49:22:37:df:c4:a0:13:
48:0a:71:7b:e7:06:b7:46:30:d6:dd:33:56:c2:14:
85:8f:c4:a2:6f:95:27:b1:ba:98:cc:a4:2a:d4:3f:
b6:23:24:99:e7:b3:a8:a2:fd:9e:80:20:75:ee:fc:
28:47:b5:99:6d:e7:45:96:b0:e0:b4:eb:22:d7:ce:
9f:9b:6b:0e:83:3d:d5:aa:39:02:4b:5c:a9:f0:7b:
e4:a0:c5:67:6f:a6:f8:40:44:29:1a:a3:40:50:95:
ab:ad:a2:4f:70:1a:95:43:1a:60:4f:8c:bf:2e:26:
eb:de:ed:c3:45:8f:17:50:28:3c:c1:a7:a6:a5:36:
6d:26:6c:68:c3:38:98:12:33:ff:30:22:1d:72:ce:
21:2d:c8:fb:44:77:01:54:de:da:04:94:02:cb:90:
d6:52:3d:15:e8:9b:5f:5c:9c:48:e5:1c:6e:f7:1e:
fe:93:02:a7:02:1b:6f:ea:6a:b6:3a:43:30:fd:40:
a0:07:60:3a:fe:0c:38:97:fe:78:19:19:69:ad:d4:
23:e1:2d:1b:c6:fa:69:80:5c:36:4c:4a:64:4a:45:
c4:a1:ad:22:38:0f:e1:dc:56:71:8a:bc:53:1a:ec:
9a:bf:9e:09:f4:9e:49:80:fe:d6:18:4c:21:18:2f:
df:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:74:83:6D:11:A4:63:C2:50:83:63:B7:BE:CD:F9:17:03:04:AA:4C
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6b:76:00:f6:2d:68:ee:62:17:51:58:e2:a8:72:a5:05:f4:
68:5d:c0:75:88:d2:70:53:91:b2:1b:7d:33:34:5a:29:0d:0f:
f6:d5:1c:61:57:83:a4:95:77:92:8d:1e:38:ed:d1:95:62:00:
a9:e6:72:c2:06:e8:7d:0f:5f:c1:47:ec:f7:21:c7:d9:f4:bb:
4f:87:62:e3:82:17:25:80:6a:84:d4:69:cc:d2:3c:98:8b:e1:
0b:cd:f3:92:e4:32:63:08:73:e6:96:98:37:05:a9:fb:1d:53:
74:5d:af:04:21:f8:ab:0a:14:60:6f:ec:b6:d7:cc:02:7d:11:
5a:3b:ea:4b:d3:77:e1:13:08:87:7a:23:e6:f5:6a:70:b1:10:
65:f0:d8:25:87:c9:7c:df:f3:c3:b4:ce:f4:d7:5f:a3:e4:e9:
e1:fb:41:db:06:4f:12:96:82:cd:15:56:1f:67:7d:f5:79:41:
fd:69:4c:03:e5:09:8f:33:c8:cd:9e:b5:7e:34:9d:32:42:b0:
1d:6b:09:2a:3b:f7:ac:c6:b4:68:b6:64:c8:89:b8:7f:bc:94:
7d:cd:5c:1e:25:6d:e1:88:c8:2a:e8:1e:7d:25:fb:b0:a9:23:
b3:2d:4b:a1:43:60:2b:ac:30:b4:6b:d9:0a:f8:22:fa:c6:90:
d5:68:e5:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWuHChiCDqOPiHdmho9qWhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MjBiNzdkMDM1YjkxMmZmYTQwNmRmZGRmMjllM2EyOTYz
ZTY5MDQwHhcNMjUwNDIxMDUwMDUwWhcNMjUwNDIyMDUwMDUwWjAzMTEwLwYDVQQD
EyhiODc0ODM2ZDExYTQ2M2MyNTA4MzYzYjdiZWNkZjkxNzAzMDRhYTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv6n5ExtY0kiN9/EoBNICnF75wa3
RjDW3TNWwhSFj8Sib5UnsbqYzKQq1D+2IySZ57Ooov2egCB17vwoR7WZbedFlrDg
tOsi186fm2sOgz3VqjkCS1yp8HvkoMVnb6b4QEQpGqNAUJWrraJPcBqVQxpgT4y/
Libr3u3DRY8XUCg8waempTZtJmxowziYEjP/MCIdcs4hLcj7RHcBVN7aBJQCy5DW
Uj0V6JtfXJxI5Rxu9x7+kwKnAhtv6mq2OkMw/UCgB2A6/gw4l/54GRlprdQj4S0b
xvppgFw2TEpkSkXEoa0iOA/h3FZxirxTGuyav54J9J5JgP7WGEwhGC/f9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLh0g20RpGPCUINjt77N+RcDBKpMMB8GA1UdIwQY
MBaAFIUgt30DW5Ev+kBt/d8p46KWPmkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mMDQ2ODYtMzU5Yi00NzQ0LWI5MzAt
MWFmMjc5NjI1ZmQwLzEvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mMDQ2ODYtMzU5Yi00NzQ0LWI5MzAtMWFmMjc5NjI1ZmQw
LzEvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGt2APYt
aO5iF1FY4qhypQX0aF3AdYjScFORsht9MzRaKQ0P9tUcYVeDpJV3ko0eOO3RlWIA
qeZywgbofQ9fwUfs9yHH2fS7T4di44IXJYBqhNRpzNI8mIvhC83zkuQyYwhz5paY
NwWp+x1TdF2vBCH4qwoUYG/sttfMAn0RWjvqS9N34RMIh3oj5vVqcLEQZfDYJYfJ
fN/zw7TO9Ndfo+Tp4ftB2wZPEpaCzRVWH2d99XlB/WlMA+UJjzPIzZ61fjSdMkKw
HWsJKjv3rMa0aLZkyIm4f7yUfc1cHiVt4YjIKugefSX7sKkjsy1LoUNgK6wwtGvZ
Cvgi+saQ1WjlwA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:26:19 2025 by rpki-client