Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
File: hto1bCqGENEdNM24pH0rkFGfvTU.mft (raw, json)
Hash identifier: /QqiDGP3iPiBP5Rx8YppDLkfe2LVd5YZQYn2Rzmtmq4=
Subject key identifier: AF:41:3C:4E:1E:23:84:E7:0A:B4:37:79:24:B3:AA:51:FB:A9:42:91
Authority key identifier: 86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
Certificate issuer: /CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Certificate serial: 019655A55B9565515FD7E14252FFCA0370E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
Manifest number: 1205
Signing time: Mon 21 Apr 2025 00:00:22 +0000
Manifest this update: Mon 21 Apr 2025 00:00:22 +0000
Manifest next update: Tue 22 Apr 2025 00:00:22 +0000
Files and hashes: 1: e2SQSmJ5Uij4VeGzNgyMcf8tHqM.roa (hash: /jn7jwBSYHJhjR+sZRgi9zex0zsrMd1Ejp9Gj9O6Ons=)
2: hto1bCqGENEdNM24pH0rkFGfvTU.crl (hash: m3LKP5H5GPn88wn/XkJmLrdPGWUslUZmq+hsNtG1Vvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:5b:95:65:51:5f:d7:e1:42:52:ff:ca:03:70:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Validity
Not Before: Apr 21 00:00:22 2025 GMT
Not After : Apr 22 00:00:22 2025 GMT
Subject: CN=af413c4e1e2384e70ab4377924b3aa51fba94291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:b4:75:91:bc:38:a2:40:4a:24:0c:ec:63:
de:03:92:e7:36:4d:c5:5e:a9:8f:30:1e:fd:0f:ce:
99:d5:eb:84:e8:4e:b2:25:ca:30:7b:17:a0:de:c2:
ef:ef:c7:41:ae:63:97:a4:94:a0:5b:46:99:fb:85:
06:90:04:3d:4e:8d:5c:10:4e:12:f0:8e:9b:b8:2a:
5c:16:e0:ab:60:ee:6e:90:13:63:94:71:61:62:2f:
38:bc:eb:70:8b:6f:42:ed:5a:19:3b:04:2b:36:64:
c5:28:75:a9:16:34:10:3c:b6:78:dc:b4:91:a7:d1:
f7:68:40:9b:11:53:45:08:00:84:ef:85:ca:5c:73:
0f:36:e1:c4:ce:be:45:25:6c:cc:d2:7c:22:5f:97:
f9:f7:b1:eb:4a:8e:e9:b3:1e:73:6f:8c:ae:9a:2f:
95:be:0d:c9:bc:11:e6:bc:d2:70:a2:ec:19:55:3f:
31:9a:7e:4a:84:b9:9b:75:25:4c:fa:e4:af:6d:18:
f5:55:e7:49:cd:33:b1:85:50:56:24:4c:8a:f5:49:
a5:bf:d6:4d:01:b9:18:df:83:93:ae:ee:8a:41:31:
d7:2c:25:6e:21:39:8a:49:2a:7d:8c:1f:32:f5:5e:
b7:9a:03:e8:68:5e:21:52:8e:35:83:0e:f6:1c:38:
5c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:41:3C:4E:1E:23:84:E7:0A:B4:37:79:24:B3:AA:51:FB:A9:42:91
X509v3 Authority Key Identifier:
keyid:86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e8:99:8b:ee:01:27:8d:eb:93:dd:d0:7d:26:bf:a9:2a:a3:
fb:84:1e:50:47:fb:a6:85:35:6c:c5:32:0e:d7:eb:81:9d:49:
6e:ce:97:85:8a:96:e0:9e:bc:d6:f1:45:ff:e4:d0:d6:16:ec:
81:31:dd:41:93:05:4e:42:eb:74:c1:24:43:b3:db:9a:7c:21:
f2:70:97:c8:35:60:de:6c:90:2a:96:38:c3:46:38:32:11:2b:
c0:00:e1:1e:a2:ee:40:4f:11:41:61:2d:70:c5:d6:b0:08:74:
ff:2d:7a:f3:d1:a7:9f:58:12:e5:66:64:e5:af:c0:48:d6:d6:
bc:0d:34:32:61:47:3e:16:df:b4:79:8c:03:7c:22:88:0f:65:
34:ff:81:1b:16:8f:3e:67:88:a1:bf:9e:15:69:a2:38:57:4a:
42:2f:d2:11:a9:bc:fa:4b:9d:6f:94:80:c9:5b:98:70:f4:64:
10:ac:54:53:44:d3:f2:69:04:cc:24:7a:5c:2a:1c:a4:f6:98:
a4:60:f9:77:e2:a0:f6:b8:20:25:44:f4:59:b5:fd:58:51:2f:
3c:22:0b:dd:82:47:4d:78:c2:55:e5:01:1e:a0:75:93:fa:ba:
ca:ef:d4:41:f8:43:6b:a6:01:c6:00:9c:12:b4:97:4b:6a:3d:
ba:39:09:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpVuVZVFf1+FCUv/KA3DiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZGEzNTZjMmE4NjEwZDExZDM0Y2RiOGE0N2QyYjkwNTE5
ZmJkMzUwHhcNMjUwNDIxMDAwMDIyWhcNMjUwNDIyMDAwMDIyWjAzMTEwLwYDVQQD
EyhhZjQxM2M0ZTFlMjM4NGU3MGFiNDM3NzkyNGIzYWE1MWZiYTk0MjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok60dZG8OKJASiQM7GPeA5LnNk3F
XqmPMB79D86Z1euE6E6yJcowexeg3sLv78dBrmOXpJSgW0aZ+4UGkAQ9To1cEE4S
8I6buCpcFuCrYO5ukBNjlHFhYi84vOtwi29C7VoZOwQrNmTFKHWpFjQQPLZ43LSR
p9H3aECbEVNFCACE74XKXHMPNuHEzr5FJWzM0nwiX5f597HrSo7psx5zb4yumi+V
vg3JvBHmvNJwouwZVT8xmn5KhLmbdSVM+uSvbRj1VedJzTOxhVBWJEyK9Umlv9ZN
AbkY34OTru6KQTHXLCVuITmKSSp9jB8y9V63mgPoaF4hUo41gw72HDhcfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9BPE4eI4TnCrQ3eSSzqlH7qUKRMB8GA1UdIwQY
MBaAFIbaNWwqhhDRHTTNuKR9K5BRn701MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRvMWJDcUdFTkVkTk0yNHBIMHJrRkdmdlRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jZmZkYjItZGU4Yy00Yzc4LTgxMzIt
OGE5NjYwNGM4MjZkLzEvaHRvMWJDcUdFTkVkTk0yNHBIMHJrRkdmdlRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9jZmZkYjItZGU4Yy00Yzc4LTgxMzItOGE5NjYwNGM4MjZk
LzEvaHRvMWJDcUdFTkVkTk0yNHBIMHJrRkdmdlRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuiZi+4B
J43rk93QfSa/qSqj+4QeUEf7poU1bMUyDtfrgZ1Jbs6XhYqW4J681vFF/+TQ1hbs
gTHdQZMFTkLrdMEkQ7Pbmnwh8nCXyDVg3myQKpY4w0Y4MhErwADhHqLuQE8RQWEt
cMXWsAh0/y1689Gnn1gS5WZk5a/ASNbWvA00MmFHPhbftHmMA3wiiA9lNP+BGxaP
PmeIob+eFWmiOFdKQi/SEam8+kudb5SAyVuYcPRkEKxUU0TT8mkEzCR6XCocpPaY
pGD5d+Kg9rggJUT0WbX9WFEvPCIL3YJHTXjCVeUBHqB1k/q6yu/UQfhDa6YBxgCc
ErSXS2o9ujkJvg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:01 2025 by rpki-client