Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
File: Hx3pNv8XhLeClri8S0sDgbKT7RA.mft (raw, json)
Hash identifier: JjR/XbYt2HdZHFeRKUFrxXjBXukmjeHaC9iyEREnc7A=
Subject key identifier: 9E:6A:8D:5A:E5:2E:94:D3:25:8F:26:B2:21:1E:79:69:C7:11:36:C7
Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
Certificate issuer: /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Certificate serial: 0196549334B34873FE5523DC2A16255E2CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
Manifest number: 0D47
Signing time: Sun 20 Apr 2025 19:00:55 +0000
Manifest this update: Sun 20 Apr 2025 19:00:55 +0000
Manifest next update: Mon 21 Apr 2025 19:00:55 +0000
Files and hashes: 1: 1-veQxSzqgnwuwyzarzzUI6GU1Vo.roa (hash: bIWGmao73L88A9Mc0bEmGHNF/q2XxTrM/cwuMLwX1wg=)
2: Hx3pNv8XhLeClri8S0sDgbKT7RA.crl (hash: W6F1ezqFwe5zln2+dQOBr01m6svEDyU3c+9tg3G6/tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:34:b3:48:73:fe:55:23:dc:2a:16:25:5e:2c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Validity
Not Before: Apr 20 19:00:55 2025 GMT
Not After : Apr 21 19:00:55 2025 GMT
Subject: CN=9e6a8d5ae52e94d3258f26b2211e7969c71136c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:db:f7:55:43:ee:de:ea:21:4e:5a:d3:db:
b8:f2:da:21:bc:22:81:b7:3a:76:ff:6c:4c:7e:7c:
df:45:e9:20:60:78:b8:64:98:e3:73:20:39:a0:ea:
6f:31:41:f1:e9:74:9c:12:99:3d:69:a4:41:f2:ee:
34:d5:37:e9:14:70:15:3d:0f:44:2b:aa:6c:8b:a3:
59:f9:d0:01:0e:2b:56:71:c8:70:a1:89:d2:70:c2:
a2:4f:28:9d:22:ef:84:c7:98:c4:c0:4a:12:11:f5:
54:da:0f:fe:93:40:ca:45:e6:0d:2d:9e:52:9d:54:
e3:2c:ef:92:a4:fe:75:4c:47:72:4e:92:48:9c:08:
39:0a:7f:af:1a:ed:8f:0e:f7:95:78:11:b9:8b:d8:
2b:9a:20:39:3b:47:2c:b6:e2:05:2e:06:ca:3e:7a:
9f:e0:a4:44:3d:2f:68:81:fe:8f:90:4d:2b:eb:f3:
86:af:b1:dd:2a:38:fa:0c:b4:94:c3:db:c8:72:6f:
0b:e9:d7:33:f2:ad:64:b8:8e:4b:6d:99:ab:1b:20:
53:2d:37:56:50:00:16:92:b4:4c:d9:8f:ff:be:a8:
6e:88:1f:eb:da:a2:5f:e7:d2:77:a6:bf:1f:c2:bd:
6e:80:ba:52:b8:35:41:e8:1c:df:28:69:e3:ed:6b:
2d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6A:8D:5A:E5:2E:94:D3:25:8F:26:B2:21:1E:79:69:C7:11:36:C7
X509v3 Authority Key Identifier:
keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d7:c9:f5:c9:b5:1b:76:f4:81:5d:a1:df:b5:17:bc:ac:63:
07:3c:aa:46:57:d8:bf:1e:5a:77:8f:86:1c:b6:bd:d8:a5:3c:
20:24:ba:36:b2:61:25:a4:06:ad:8b:ad:27:cc:47:e9:9a:0e:
7c:e5:00:88:27:3d:60:60:f7:b4:ec:af:39:6c:60:9c:4f:f2:
f9:32:18:48:5c:e9:8b:66:47:5c:6c:5c:ae:1c:fe:37:a3:00:
3b:e1:55:8a:06:b7:74:e7:3c:92:50:b4:b7:e8:e6:4f:72:dd:
7b:bf:a1:2b:77:41:0d:18:85:1c:fb:b4:9c:9c:de:f5:54:bb:
d3:87:b2:21:85:61:13:79:23:94:d5:bd:f9:88:b2:d0:1c:a6:
a3:67:4e:a9:5b:ff:1e:24:b3:9a:ce:4c:f6:fb:13:d3:b5:f7:
e4:07:a6:a3:b9:98:dc:a5:38:42:83:44:48:d5:98:83:93:96:
a4:47:8f:b2:be:95:a7:fc:39:47:0f:77:db:2f:7e:ab:c8:c8:
67:ba:fe:55:8e:b7:ee:da:59:b4:16:76:d1:d0:96:e7:f3:87:
2f:9a:a6:90:40:79:92:8a:bb:f4:60:a3:78:19:30:ee:77:bf:
ac:cf:ba:df:51:eb:98:fd:9f:ac:b4:67:d4:9d:58:e2:85:da:
2e:ea:82:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkzSzSHP+VSPcKhYlXiyxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMWRlOTM2ZmYxNzg0Yjc4Mjk2YjhiYzRiNGIwMzgxYjI5
M2VkMTAwHhcNMjUwNDIwMTkwMDU1WhcNMjUwNDIxMTkwMDU1WjAzMTEwLwYDVQQD
Eyg5ZTZhOGQ1YWU1MmU5NGQzMjU4ZjI2YjIyMTFlNzk2OWM3MTEzNmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0bb91VD7t7qIU5a09u48tohvCKB
tzp2/2xMfnzfRekgYHi4ZJjjcyA5oOpvMUHx6XScEpk9aaRB8u401TfpFHAVPQ9E
K6psi6NZ+dABDitWcchwoYnScMKiTyidIu+Ex5jEwEoSEfVU2g/+k0DKReYNLZ5S
nVTjLO+SpP51TEdyTpJInAg5Cn+vGu2PDveVeBG5i9grmiA5O0cstuIFLgbKPnqf
4KREPS9ogf6PkE0r6/OGr7HdKjj6DLSUw9vIcm8L6dcz8q1kuI5LbZmrGyBTLTdW
UAAWkrRM2Y//vqhuiB/r2qJf59J3pr8fwr1ugLpSuDVB6BzfKGnj7WstQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5qjVrlLpTTJY8msiEeeWnHETbHMB8GA1UdIwQY
MBaAFB8d6Tb/F4S3gpa4vEtLA4Gyk+0QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHgzcE52OFhoTGVDbHJpOFMwc0RnYktUN1JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80NDlhZTYtNTk0My00NmQwLWIwMGMt
OTI3Yjg2MzU2ZmE3LzEvSHgzcE52OFhoTGVDbHJpOFMwc0RnYktUN1JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi80NDlhZTYtNTk0My00NmQwLWIwMGMtOTI3Yjg2MzU2ZmE3
LzEvSHgzcE52OFhoTGVDbHJpOFMwc0RnYktUN1JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNfJ9cm1
G3b0gV2h37UXvKxjBzyqRlfYvx5ad4+GHLa92KU8ICS6NrJhJaQGrYutJ8xH6ZoO
fOUAiCc9YGD3tOyvOWxgnE/y+TIYSFzpi2ZHXGxcrhz+N6MAO+FViga3dOc8klC0
t+jmT3Lde7+hK3dBDRiFHPu0nJze9VS704eyIYVhE3kjlNW9+Yiy0Bymo2dOqVv/
HiSzms5M9vsT07X35Aemo7mY3KU4QoNESNWYg5OWpEePsr6Vp/w5Rw932y9+q8jI
Z7r+VY637tpZtBZ20dCW5/OHL5qmkEB5koq79GCjeBkw7ne/rM+631HrmP2frLRn
1J1Y4oXaLuqCfA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:38 2025 by rpki-client