Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: 8D7P8F60GpNiX65R5B6rWzAk4SNG14c2NSKcUMB9RSg=
Subject key identifier: 22:26:77:8E:70:9A:66:5F:91:89:39:0C:C8:48:43:3F:D8:26:D2:A9
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 019654C9D3F98168D172A606A624F19C3530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 0BBD
Signing time: Sun 20 Apr 2025 20:00:35 +0000
Manifest this update: Sun 20 Apr 2025 20:00:35 +0000
Manifest next update: Mon 21 Apr 2025 20:00:35 +0000
Files and hashes: 1: 44WcjUyhdWbouJas9-vY_4pr1wA.roa (hash: Qx8y85cpYAiQ8a63DXW295iCOgGuHySiBFYnU925DiI=)
2: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: AfFSrSNGCB94uzHoLEmLsrpDDaQ2/1vugpZ3o1vzbhQ=)
3: fRE2vmwaleUiCvDWsnGTFljoLXg.roa (hash: cXGlfKUnhuEwN1qNGkHimtKeqEP4GZPiithL8Ca7L8g=)
4: ozy_SqJO31cdT9G4hyw50Q2EOCc.roa (hash: R3WNXYhsYfa7jL2TY7tebzPrDv7v+6108twGkeh1bj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:d3:f9:81:68:d1:72:a6:06:a6:24:f1:9c:35:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Apr 20 20:00:35 2025 GMT
Not After : Apr 21 20:00:35 2025 GMT
Subject: CN=2226778e709a665f9189390cc848433fd826d2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:8f:ca:f4:dc:fe:c7:66:89:68:3d:7f:f7:
65:4a:77:68:a6:15:29:17:83:8f:28:b5:7f:ed:96:
49:5d:47:38:49:32:14:60:fb:0b:0e:3b:28:14:04:
fe:97:ab:71:74:96:8f:c6:cb:5a:13:22:be:80:39:
df:fd:2c:b4:c2:8b:3b:92:dc:b7:ee:90:6b:02:05:
01:32:42:d9:57:bf:12:b1:8a:4a:5d:61:89:68:66:
c3:bf:ce:93:2c:fe:56:5b:6f:38:98:38:d3:3e:c5:
c6:45:bd:fd:e9:7a:72:22:39:05:ef:69:ef:c4:2d:
4a:67:e0:00:3b:5d:7e:68:a2:bf:ee:c7:5e:6f:38:
de:76:00:6c:dd:dc:06:7a:d4:fc:67:af:19:51:56:
55:3d:d4:52:e3:76:6f:c9:6e:7c:22:a1:18:15:ee:
12:78:49:df:b9:3b:6d:ca:ec:1e:bd:04:c8:df:de:
59:af:45:e6:dc:2d:09:8c:58:4c:44:bc:eb:0b:ea:
7f:93:8d:97:5e:5b:85:57:30:e9:6a:01:c1:e3:b8:
4c:12:96:10:ed:af:f6:50:28:c9:57:5e:ef:5c:bb:
78:b6:a3:32:ec:f9:e5:63:3d:e3:6e:3e:e7:10:ab:
42:a0:b3:1a:eb:ef:97:70:d3:a0:9f:d5:ec:7c:0e:
91:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:26:77:8E:70:9A:66:5F:91:89:39:0C:C8:48:43:3F:D8:26:D2:A9
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3e:8e:b8:2f:32:d2:4e:2a:57:79:91:07:71:7c:d1:63:d2:
12:3c:fb:e6:6c:9d:11:0a:96:e5:25:a7:64:fd:d8:8e:48:c1:
1b:a0:7d:eb:0b:ea:8d:05:d5:22:e2:f1:26:6a:48:82:19:f4:
87:0c:b0:e5:e8:14:c0:d3:6f:1c:b9:1a:77:c7:2a:dd:69:84:
4c:2e:50:f8:7f:a4:1a:67:bf:20:63:d0:13:fd:40:d0:9f:4b:
53:0c:c2:9a:2c:65:60:29:5e:0f:45:de:bd:b3:8d:c0:4b:21:
91:c2:a0:e9:1e:4c:ee:16:35:e3:88:a7:89:b6:9d:06:31:9c:
a1:50:e2:34:d8:c9:30:13:82:76:7e:a2:40:1e:2c:e0:02:3f:
42:47:2a:be:89:ef:13:c4:6c:36:01:ac:75:03:30:2d:6a:3b:
ae:9f:ab:cf:cf:43:ca:30:42:5a:d7:06:db:06:18:9f:17:fd:
01:3c:1d:03:08:d5:41:2f:cb:79:37:51:f8:85:de:c7:98:77:
f9:09:d7:d8:51:e0:40:e5:76:40:4a:7c:fe:cd:51:98:b4:ca:
38:3b:a8:90:ed:ee:e8:f4:bf:a7:1a:62:d9:0f:3a:76:81:25:
72:54:30:8e:5e:dc:64:41:d6:09:6d:c5:e1:10:c0:00:16:bf:
ae:d3:5f:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUydP5gWjRcqYGpiTxnDUwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTBhOWViNDdkODI0YjUxZjE1NDQ0MjQ4MWEyNTcxNjgz
OTQ1NTEwHhcNMjUwNDIwMjAwMDM1WhcNMjUwNDIxMjAwMDM1WjAzMTEwLwYDVQQD
EygyMjI2Nzc4ZTcwOWE2NjVmOTE4OTM5MGNjODQ4NDMzZmQ4MjZkMmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpWPyvTc/sdmiWg9f/dlSndophUp
F4OPKLV/7ZZJXUc4STIUYPsLDjsoFAT+l6txdJaPxstaEyK+gDnf/Sy0wos7kty3
7pBrAgUBMkLZV78SsYpKXWGJaGbDv86TLP5WW284mDjTPsXGRb396XpyIjkF72nv
xC1KZ+AAO11+aKK/7sdebzjedgBs3dwGetT8Z68ZUVZVPdRS43ZvyW58IqEYFe4S
eEnfuTttyuwevQTI395Zr0Xm3C0JjFhMRLzrC+p/k42XXluFVzDpagHB47hMEpYQ
7a/2UCjJV17vXLt4tqMy7PnlYz3jbj7nEKtCoLMa6++XcNOgn9XsfA6RKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCImd45wmmZfkYk5DMhIQz/YJtKpMB8GA1UdIwQY
MBaAFB6gqetH2CS1HxVEQkgaJXFoOUVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zMDMzYzYtY2NlOC00NTBkLWEwYzkt
ODQxOGE5NmY2Nzk1LzEvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8zMDMzYzYtY2NlOC00NTBkLWEwYzktODQxOGE5NmY2Nzk1
LzEvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKT6OuC8y
0k4qV3mRB3F80WPSEjz75mydEQqW5SWnZP3YjkjBG6B96wvqjQXVIuLxJmpIghn0
hwyw5egUwNNvHLkad8cq3WmETC5Q+H+kGme/IGPQE/1A0J9LUwzCmixlYCleD0Xe
vbONwEshkcKg6R5M7hY144inibadBjGcoVDiNNjJMBOCdn6iQB4s4AI/Qkcqvonv
E8RsNgGsdQMwLWo7rp+rz89DyjBCWtcG2wYYnxf9ATwdAwjVQS/LeTdR+IXex5h3
+QnX2FHgQOV2QEp8/s1RmLTKODuokO3u6PS/pxpi2Q86doElclQwjl7cZEHWCW3F
4RDAABa/rtNfKg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:01 2025 by rpki-client