Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File: hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier: 5hKqL8EMqKbjt20c2BYa1osIlfPptClf5XbbCeebz24=
Subject key identifier: B4:11:89:B6:8B:B3:FF:CD:7B:49:BE:BF:0A:45:DB:2B:62:8C:1E:C4
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer: /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial: 019657CAF1708954677B99BA25C61E76EF58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number: 0A46
Signing time: Mon 21 Apr 2025 10:00:39 +0000
Manifest this update: Mon 21 Apr 2025 10:00:39 +0000
Manifest next update: Tue 22 Apr 2025 10:00:39 +0000
Files and hashes: 1: 35pT895rFPfGGgGdlQZKQuPJrR0.roa (hash: AdJ58aGQtDEjdleM+tpt6uAtjgF+DuwozoTDkormu+M=)
2: h616S8CObPCxdJef21IBTy1P_kM.roa (hash: ww3qKCX3iE26kJSJ/CLfQ0sPTYdm4Yl6Tj8BVSnidG4=)
3: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: X1kKJdcly0wAW/hMAw9YbOf5EugTZPAsphGvI+MJQU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:ca:f1:70:89:54:67:7b:99:ba:25:c6:1e:76:ef:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Validity
Not Before: Apr 21 10:00:39 2025 GMT
Not After : Apr 22 10:00:39 2025 GMT
Subject: CN=b41189b68bb3ffcd7b49bebf0a45db2b628c1ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:77:da:57:a0:a6:09:2b:b4:5c:23:bd:0c:c4:
f2:91:57:70:b3:d4:ed:c3:c8:1d:54:bd:8e:0a:b8:
a1:7c:1c:26:1c:81:bb:02:66:e4:a7:d7:3c:de:65:
d9:d4:9d:bf:a3:fd:b5:27:eb:80:fb:87:d6:4a:10:
5a:81:91:c6:bd:64:96:11:31:40:70:fc:7f:91:91:
ff:02:4b:04:0e:d7:16:73:65:93:2f:f4:0f:ee:7c:
1e:c7:48:6d:ed:7a:da:73:50:86:f7:f7:4a:0b:74:
08:33:a7:c0:46:65:81:1a:18:1e:7e:c5:de:aa:8d:
dd:34:3a:ab:51:17:04:e2:e8:00:08:ae:b6:a7:9b:
72:98:d3:f3:e3:5a:d5:7e:6b:a9:bd:6e:3a:50:ce:
58:28:e9:43:2f:0e:8a:1d:88:50:e7:ff:a1:a0:22:
9f:93:2c:e4:dd:12:62:4e:d1:59:7c:27:0d:5d:36:
8a:87:b2:32:24:59:5b:ea:6a:90:6b:74:b6:78:fd:
ad:b4:9c:18:5a:7b:c3:d0:d6:6b:9b:0d:9e:27:9b:
97:22:63:0c:ef:31:ee:d7:07:3d:6f:d6:e6:98:56:
3c:26:c0:f6:b6:57:05:1c:39:b0:49:f5:6c:45:cc:
96:17:99:5a:f2:73:00:f9:e5:ec:8a:3d:5e:3b:6a:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:11:89:B6:8B:B3:FF:CD:7B:49:BE:BF:0A:45:DB:2B:62:8C:1E:C4
X509v3 Authority Key Identifier:
keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ee:79:8e:63:c9:be:00:81:87:b9:e5:0b:fa:83:11:a8:ff:
94:f9:1a:37:9e:69:87:d4:7e:47:55:59:4a:1d:7a:54:2f:26:
c5:75:cd:b5:71:d6:d4:90:d2:c6:a2:e5:62:7f:24:a9:41:6a:
36:98:57:51:ad:3a:45:de:df:eb:5a:03:0e:76:28:d1:06:63:
d8:65:e9:6f:38:48:bd:73:46:15:18:8c:7e:c3:df:e4:63:5b:
1a:44:54:61:1f:20:07:64:fe:1c:47:25:00:52:65:03:63:58:
11:38:d2:c3:a8:74:85:5e:d7:e8:e6:57:2e:66:40:07:98:ab:
c1:d4:46:98:2d:38:b6:75:b4:1f:63:a3:db:79:44:e9:21:7f:
bc:ed:ef:09:57:b3:e1:c0:5b:7a:7f:88:f6:f0:5b:a0:8a:87:
91:0f:38:1c:ee:7b:5c:5c:10:e1:bb:ed:b8:31:85:01:dd:fe:
db:54:ac:60:b3:5a:fa:5e:97:40:08:a3:88:96:3d:a1:35:9b:
36:4b:b0:54:bc:17:22:60:08:2c:5e:54:43:0a:38:50:97:de:
64:56:f5:a0:c6:ec:32:b0:da:cb:de:62:e1:68:0d:bb:5c:86:
34:4b:63:e9:de:61:7b:d1:22:ae:93:5a:67:d3:ff:e5:67:38:
66:41:da:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXyvFwiVRne5m6JcYedu9YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZmE1NjRjZjk3NTc3YzA3NjMzYmE0ZTY0MGVhNzhjNzZm
YzE3ZGQwHhcNMjUwNDIxMTAwMDM5WhcNMjUwNDIyMTAwMDM5WjAzMTEwLwYDVQQD
EyhiNDExODliNjhiYjNmZmNkN2I0OWJlYmYwYTQ1ZGIyYjYyOGMxZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnfaV6CmCSu0XCO9DMTykVdws9Tt
w8gdVL2OCrihfBwmHIG7Ambkp9c83mXZ1J2/o/21J+uA+4fWShBagZHGvWSWETFA
cPx/kZH/AksEDtcWc2WTL/QP7nwex0ht7Xrac1CG9/dKC3QIM6fARmWBGhgefsXe
qo3dNDqrURcE4ugACK62p5tymNPz41rVfmupvW46UM5YKOlDLw6KHYhQ5/+hoCKf
kyzk3RJiTtFZfCcNXTaKh7IyJFlb6mqQa3S2eP2ttJwYWnvD0NZrmw2eJ5uXImMM
7zHu1wc9b9bmmFY8JsD2tlcFHDmwSfVsRcyWF5la8nMA+eXsij1eO2rBhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQRibaLs//Ne0m+vwpF2ytijB7EMB8GA1UdIwQY
MBaAFIb6Vkz5dXfAdjO6TmQOp4x2/BfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zOWNiNGYtY2E4OC00ODBlLTk3ZDkt
MDczZDBkMTRkZGRlLzEvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zOWNiNGYtY2E4OC00ODBlLTk3ZDktMDczZDBkMTRkZGRl
LzEvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+55jmPJ
vgCBh7nlC/qDEaj/lPkaN55ph9R+R1VZSh16VC8mxXXNtXHW1JDSxqLlYn8kqUFq
NphXUa06Rd7f61oDDnYo0QZj2GXpbzhIvXNGFRiMfsPf5GNbGkRUYR8gB2T+HEcl
AFJlA2NYETjSw6h0hV7X6OZXLmZAB5irwdRGmC04tnW0H2Oj23lE6SF/vO3vCVez
4cBben+I9vBboIqHkQ84HO57XFwQ4bvtuDGFAd3+21SsYLNa+l6XQAijiJY9oTWb
NkuwVLwXImAILF5UQwo4UJfeZFb1oMbsMrDay95i4WgNu1yGNEtj6d5he9EirpNa
Z9P/5Wc4ZkHamg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:39:46 2025 by rpki-client