Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
File: HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json)
Hash identifier: enckUReAy2ETBZIaMx2VUE2fB8gDnJ6SwCInA1RzTqg=
Subject key identifier: D7:69:E2:F1:8A:B2:A6:3C:42:18:8F:69:F0:BB:41:BE:53:50:FD:55
Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Certificate serial: 01964DEC10EE275DE4126AF3799BB801F39F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
Manifest number: 148B
Signing time: Sat 19 Apr 2025 12:00:38 +0000
Manifest this update: Sat 19 Apr 2025 12:00:38 +0000
Manifest next update: Sun 20 Apr 2025 12:00:38 +0000
Files and hashes: 1: AJvWKjlfflZ9cQofDD0ppbseZLQ.roa (hash: VGiicvrQITfBrX3SAtjyhR6B6SA41PSS6lItKnKTNYo=)
2: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: boRW70L1WYc7PKIOhXsp0ZEGeZ1cXpob/Mq4btGZSwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:10:ee:27:5d:e4:12:6a:f3:79:9b:b8:01:f3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Validity
Not Before: Apr 19 12:00:38 2025 GMT
Not After : Apr 20 12:00:38 2025 GMT
Subject: CN=d769e2f18ab2a63c42188f69f0bb41be5350fd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:8a:6e:7f:38:c8:c4:ea:d9:27:c5:52:0c:
d0:d7:4e:7f:08:d9:22:33:22:fb:a3:da:2e:39:2d:
de:26:70:50:0a:e1:a1:85:57:8d:29:57:fd:a0:8d:
88:dc:bc:c8:09:ec:f5:1d:5c:6b:36:a2:77:d9:0d:
fe:9a:85:4e:ed:48:22:80:2e:f0:e3:e9:5b:f5:4b:
8c:fe:22:a9:3f:67:f3:4c:9b:0e:9b:19:77:9a:50:
d7:8a:68:4d:15:34:6a:b9:7a:7c:89:21:71:08:d9:
58:48:1c:5f:31:f3:7e:f1:cd:9b:02:96:86:16:c0:
b8:dd:d1:46:e0:5b:15:52:df:a5:54:ab:50:26:4f:
35:55:5e:51:d0:b7:a0:4a:ee:da:ed:24:2e:e3:61:
e3:47:f0:6d:4f:15:e6:d0:09:55:95:24:12:82:62:
58:a6:79:29:80:f4:0c:23:43:3a:f4:50:ac:d0:93:
ff:72:10:03:f2:58:ad:ef:df:58:99:9a:c2:49:56:
ef:5a:88:e8:22:9a:95:3d:21:8a:75:9a:99:0f:28:
a4:43:39:a4:0b:39:e8:aa:0e:f2:88:d5:63:eb:37:
d1:3f:0d:28:38:47:da:89:aa:af:49:f5:82:e5:65:
85:13:fa:fe:41:d1:35:af:ff:6d:17:31:35:1c:fb:
bb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:69:E2:F1:8A:B2:A6:3C:42:18:8F:69:F0:BB:41:BE:53:50:FD:55
X509v3 Authority Key Identifier:
keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b4:8d:f5:f4:be:ad:43:5b:4b:99:d1:ed:90:c9:b7:6b:05:
ea:f7:b5:fa:85:7f:b6:99:48:75:60:5b:49:36:0e:20:7e:9f:
fe:ea:8e:0f:3d:16:17:9a:dd:f5:d4:98:7d:79:5d:a9:8a:0e:
8c:38:7d:c0:bd:04:2c:7c:1b:4e:cb:76:b7:80:9a:e6:47:07:
0d:49:00:ed:4c:d1:07:64:52:90:2c:85:18:05:77:d4:52:4f:
de:19:af:d9:6c:99:3e:1e:cd:a3:2d:24:89:86:b5:f7:80:3c:
a9:73:48:04:97:0e:c7:40:8e:69:a9:8d:cf:d3:83:c2:c1:fd:
fb:63:e0:25:4e:35:e9:42:ec:09:30:75:77:b5:d9:be:60:79:
88:dc:69:9d:44:83:83:e1:fc:66:18:ea:e7:74:2d:4a:0d:4d:
51:56:2f:d5:56:c3:58:43:df:fc:e9:1e:d2:39:e4:36:ff:23:
97:11:ed:ba:e7:ca:63:51:a9:90:1d:5e:13:58:3b:01:43:ee:
79:2f:41:22:a3:19:c1:a1:56:61:15:e6:7c:8c:4b:3e:f1:23:
6f:cd:e6:7e:3d:0a:27:b3:5f:45:77:b7:d6:82:a2:10:be:a1:
91:05:46:c2:47:b8:fa:60:a0:04:06:92:07:ec:c0:44:1d:27:
d9:95:a9:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZN7BDuJ13kEmrzeZu4AfOfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTU1OWQ4YmY2YWMyZDg2OGQwNjY1YWQ1N2QyYzZhYzE0
NzIxOTMwHhcNMjUwNDE5MTIwMDM4WhcNMjUwNDIwMTIwMDM4WjAzMTEwLwYDVQQD
EyhkNzY5ZTJmMThhYjJhNjNjNDIxODhmNjlmMGJiNDFiZTUzNTBmZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdGKbn84yMTq2SfFUgzQ105/CNki
MyL7o9ouOS3eJnBQCuGhhVeNKVf9oI2I3LzICez1HVxrNqJ32Q3+moVO7UgigC7w
4+lb9UuM/iKpP2fzTJsOmxl3mlDXimhNFTRquXp8iSFxCNlYSBxfMfN+8c2bApaG
FsC43dFG4FsVUt+lVKtQJk81VV5R0LegSu7a7SQu42HjR/BtTxXm0AlVlSQSgmJY
pnkpgPQMI0M69FCs0JP/chAD8lit799YmZrCSVbvWojoIpqVPSGKdZqZDyikQzmk
Cznoqg7yiNVj6zfRPw0oOEfaiaqvSfWC5WWFE/r+QdE1r/9tFzE1HPu7fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdp4vGKsqY8QhiPafC7Qb5TUP1VMB8GA1UdIwQY
MBaAFB6lWdi/asLYaNBmWtV9LGrBRyGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEt
NWZmY2M0NmFlN2I1LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEtNWZmY2M0NmFlN2I1
LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrSN9fS+
rUNbS5nR7ZDJt2sF6ve1+oV/tplIdWBbSTYOIH6f/uqODz0WF5rd9dSYfXldqYoO
jDh9wL0ELHwbTst2t4Ca5kcHDUkA7UzRB2RSkCyFGAV31FJP3hmv2WyZPh7Noy0k
iYa194A8qXNIBJcOx0COaamNz9ODwsH9+2PgJU416ULsCTB1d7XZvmB5iNxpnUSD
g+H8Zhjq53QtSg1NUVYv1VbDWEPf/Oke0jnkNv8jlxHtuufKY1GpkB1eE1g7AUPu
eS9BIqMZwaFWYRXmfIxLPvEjb83mfj0KJ7NfRXe31oKiEL6hkQVGwke4+mCgBAaS
B+zARB0n2ZWpZQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:05:05 2025 by rpki-client