Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
File: HWtralBhpBFdUwQM_9xks7DXGng.mft (raw, json)
Hash identifier: a0H8UEbtwbwViUoKyYA9lfRJU6H5osslf7K5wNCDRJM=
Subject key identifier: 88:D0:72:0C:C6:36:8E:6B:6F:94:AB:74:71:CC:51:4B:A9:D7:37:10
Authority key identifier: 1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78
Certificate issuer: /CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78
Certificate serial: 01964EFE5A8CF43E1ADC50D71A8FD5C7360F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 17:00:14 +0000
Manifest this update: Sat 19 Apr 2025 17:00:14 +0000
Manifest next update: Sun 20 Apr 2025 17:00:14 +0000
Files and hashes: 1: 59rlgV96ANnvbttVckQTSpcL4gg.roa (hash: yMmqOnSAlEZI0n5Ljt8KnwxkwDwpOxx+NBJ3GGUG5bk=)
2: HWtralBhpBFdUwQM_9xks7DXGng.crl (hash: l9EqHz9SHv9ir57HpG+K/i/HZYyqi5HInaPrYtknmlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:5a:8c:f4:3e:1a:dc:50:d7:1a:8f:d5:c7:36:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78
Validity
Not Before: Apr 19 17:00:14 2025 GMT
Not After : Apr 20 17:00:14 2025 GMT
Subject: CN=88d0720cc6368e6b6f94ab7471cc514ba9d73710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:9d:6c:82:f6:89:52:46:a5:37:3b:59:63:
c8:ab:25:86:03:df:cb:e6:e0:cf:57:01:e4:b9:ef:
37:cf:58:ae:31:7b:a3:3e:3c:7d:2e:3d:e3:47:7f:
97:7f:c4:7c:1a:18:c3:60:68:06:07:f1:bd:a4:e5:
9e:90:1b:18:1c:1b:19:e7:37:2e:43:53:df:11:57:
d4:bf:55:ca:30:79:2f:91:29:b3:0b:15:5a:df:17:
76:13:47:4a:9f:01:f7:3e:d2:12:3e:35:e6:c7:41:
5a:1b:04:bf:2c:eb:09:69:16:fa:77:9b:6f:5f:cc:
20:f7:db:60:77:f4:de:e9:cd:b2:6d:bb:34:54:83:
3d:89:8a:0f:82:c0:9d:69:bb:d6:85:e4:d6:4e:1b:
de:85:30:e6:b0:58:90:4c:3b:33:47:2d:9c:53:5b:
a6:ed:79:62:83:aa:98:cf:ad:c2:e4:0f:36:89:5c:
2c:d9:49:27:75:d4:50:77:4f:55:4b:7f:f7:fa:be:
11:ff:0b:c3:16:00:27:cf:59:12:cc:13:d3:4d:d3:
df:1a:71:66:8b:72:83:fc:d5:04:4a:fc:f9:db:eb:
21:bb:de:e9:66:9d:85:9a:ec:51:73:3e:b3:58:55:
a0:57:32:3b:9f:af:9d:33:72:9f:79:c1:14:c9:6e:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D0:72:0C:C6:36:8E:6B:6F:94:AB:74:71:CC:51:4B:A9:D7:37:10
X509v3 Authority Key Identifier:
keyid:1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:70:73:4e:6e:62:61:19:d7:e9:79:26:61:92:26:2f:b7:8f:
07:17:51:e3:6f:71:36:26:f3:00:88:7b:f0:36:79:c5:f3:53:
25:10:93:29:eb:07:b9:36:ca:cf:fa:fd:41:09:1c:0a:39:46:
d6:cd:ef:49:5c:83:6e:73:9e:17:16:1e:fa:13:85:67:c4:d0:
d1:b9:9e:d7:14:3d:dc:d8:0f:40:1e:26:93:d1:9c:21:df:68:
c4:e3:24:be:0e:26:bb:c3:69:e7:f6:20:21:9d:82:59:b6:2e:
bb:7d:1e:49:93:29:c0:b3:20:87:9d:0c:b2:51:57:b9:ff:9d:
a4:7c:f1:eb:49:51:43:a7:2c:d9:54:9c:db:71:4d:7e:fb:34:
80:16:a9:32:45:db:d0:87:08:8c:39:51:65:42:6d:8f:06:bb:
1a:3f:9c:6d:54:93:7c:5d:b3:16:c7:58:d0:42:9b:c2:85:95:
57:7b:94:80:ca:78:5a:d5:3a:56:85:9d:4d:19:a8:04:82:85:
72:e8:2e:e1:4e:5f:49:3d:f0:b3:0b:b0:f6:4c:ae:4a:c4:26:
1b:ec:bb:a8:69:6b:02:e6:39:be:80:56:85:c3:27:6d:09:30:
01:51:52:a9:f0:6e:bd:6f:7d:22:9e:17:79:7a:6b:0f:ba:40:
54:1d:56:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZO/lqM9D4a3FDXGo/VxzYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNmI2YjZhNTA2MWE0MTE1ZDUzMDQwY2ZmZGM2NGIzYjBk
NzFhNzgwHhcNMjUwNDE5MTcwMDE0WhcNMjUwNDIwMTcwMDE0WjAzMTEwLwYDVQQD
Eyg4OGQwNzIwY2M2MzY4ZTZiNmY5NGFiNzQ3MWNjNTE0YmE5ZDczNzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS2dbIL2iVJGpTc7WWPIqyWGA9/L
5uDPVwHkue83z1iuMXujPjx9Lj3jR3+Xf8R8GhjDYGgGB/G9pOWekBsYHBsZ5zcu
Q1PfEVfUv1XKMHkvkSmzCxVa3xd2E0dKnwH3PtISPjXmx0FaGwS/LOsJaRb6d5tv
X8wg99tgd/Te6c2ybbs0VIM9iYoPgsCdabvWheTWThvehTDmsFiQTDszRy2cU1um
7Xlig6qYz63C5A82iVws2UknddRQd09VS3/3+r4R/wvDFgAnz1kSzBPTTdPfGnFm
i3KD/NUESvz52+shu97pZp2FmuxRcz6zWFWgVzI7n6+dM3KfecEUyW5HkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjQcgzGNo5rb5SrdHHMUUup1zcQMB8GA1UdIwQY
MBaAFB1ra2pQYaQRXVMEDP/cZLOw1xp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFd0cmFsQmhwQkZkVXdRTV85eGtzN0RYR25nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85ZTVmNTQtYmEzZi00YjZlLTlkYTkt
YmZhZmQ2MjJlODlmLzEvSFd0cmFsQmhwQkZkVXdRTV85eGtzN0RYR25nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC85ZTVmNTQtYmEzZi00YjZlLTlkYTktYmZhZmQ2MjJlODlm
LzEvSFd0cmFsQmhwQkZkVXdRTV85eGtzN0RYR25nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3BzTm5i
YRnX6XkmYZImL7ePBxdR429xNibzAIh78DZ5xfNTJRCTKesHuTbKz/r9QQkcCjlG
1s3vSVyDbnOeFxYe+hOFZ8TQ0bme1xQ93NgPQB4mk9GcId9oxOMkvg4mu8Np5/Yg
IZ2CWbYuu30eSZMpwLMgh50MslFXuf+dpHzx60lRQ6cs2VSc23FNfvs0gBapMkXb
0IcIjDlRZUJtjwa7Gj+cbVSTfF2zFsdY0EKbwoWVV3uUgMp4WtU6VoWdTRmoBIKF
cugu4U5fST3wswuw9kyuSsQmG+y7qGlrAuY5voBWhcMnbQkwAVFSqfBuvW99Ip4X
eXprD7pAVB1WbA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:06:55 2025 by rpki-client