Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
File: hXLVrMJRZ2mcf886G4BOoyWsTl0.mft (raw, json)
Hash identifier: kxYX4Vxj4LwpesA7RLlhj6CDThLR19yDJwjqwepLsuA=
Subject key identifier: 2D:C5:25:E5:73:4A:DA:01:3B:70:91:21:ED:FF:92:98:D0:62:0B:56
Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
Certificate issuer: /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Certificate serial: 019658DD34A1ECF08319C5A0BC7C32107749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
Manifest number: 142F
Signing time: Mon 21 Apr 2025 15:00:13 +0000
Manifest this update: Mon 21 Apr 2025 15:00:13 +0000
Manifest next update: Tue 22 Apr 2025 15:00:13 +0000
Files and hashes: 1: E_g8JEJGx2RzSEjGgXwsnLzhYuY.roa (hash: 1/I3aoM+yKdAzYPZU70IJvPWqKBQF4IK2mBQQ0GVymw=)
2: hXLVrMJRZ2mcf886G4BOoyWsTl0.crl (hash: +mTrIZ3iDSWPhivQjtMZnCJ6d2lxRLu1tLXjrDHQPl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:34:a1:ec:f0:83:19:c5:a0:bc:7c:32:10:77:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Validity
Not Before: Apr 21 15:00:13 2025 GMT
Not After : Apr 22 15:00:13 2025 GMT
Subject: CN=2dc525e5734ada013b709121edff9298d0620b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:60:b0:c2:56:95:cb:ee:45:53:79:be:91:
a7:f4:be:dc:fc:ab:f5:cb:33:45:58:a3:dc:ac:2e:
06:f4:01:dd:db:58:fe:f4:c9:22:f3:87:b7:eb:29:
e6:04:53:83:9a:42:48:93:9c:88:43:89:74:a6:1a:
2e:b4:a8:5e:e4:01:cb:34:da:42:76:e3:ae:06:99:
6a:5d:85:e9:2f:75:3f:8c:5d:1e:34:c1:9a:43:83:
86:58:4b:de:99:16:e5:d2:8e:dc:b2:20:2b:70:db:
20:be:e9:76:b9:32:58:0a:22:5f:31:3b:52:e8:b5:
85:c5:08:92:fb:e8:2b:16:f4:0f:b5:b9:8a:ea:0c:
93:b6:db:bc:e0:72:36:8b:64:5b:4c:a7:7f:4a:63:
84:c8:c4:71:58:9b:36:48:dd:e4:f1:7d:66:66:9f:
52:39:04:15:81:2c:64:70:b8:20:fb:61:48:d7:b6:
c9:a3:6f:fb:68:d8:82:70:fe:da:3e:ac:a9:8f:6a:
0c:62:b1:76:40:aa:5d:29:b5:e2:2a:8f:33:90:be:
fe:6b:30:ce:a8:e7:23:19:72:b2:6e:d6:42:ce:09:
1b:cb:b6:e3:b9:36:06:37:c1:b5:dc:ae:28:ee:83:
c4:a5:78:ea:07:b0:63:96:13:28:5b:5d:cf:4d:7b:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C5:25:E5:73:4A:DA:01:3B:70:91:21:ED:FF:92:98:D0:62:0B:56
X509v3 Authority Key Identifier:
keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c0:61:f3:7a:f7:7c:c3:75:e7:44:a8:7a:4b:7d:0a:f2:1b:
16:4b:fb:bd:46:2d:f8:41:5c:6c:9d:6b:0b:b7:ad:1e:4f:f5:
eb:08:a1:f7:11:7a:93:bd:43:56:36:c8:d7:15:6e:42:8c:e1:
fc:f2:5d:45:42:58:1e:3a:83:13:f5:af:60:b5:0c:69:0b:2c:
6c:ef:ae:44:74:00:7a:e7:bb:9f:6f:a8:17:dd:c0:49:ed:1b:
6c:74:90:90:23:59:32:49:6c:f6:c5:38:ef:8f:c2:b1:8f:4c:
a3:64:4a:5a:df:d5:4a:bb:ef:f3:aa:15:28:65:fe:fa:50:b8:
6e:0e:9e:be:f4:f4:15:64:90:fc:42:9f:7d:67:76:e3:6f:94:
01:74:f5:65:01:6f:1e:3a:a8:c1:01:a6:b9:26:d3:25:db:71:
c3:f0:ca:21:fb:0a:dd:57:37:61:5e:43:be:5b:17:5d:d6:b5:
d1:00:b7:8d:bd:b0:22:97:e6:15:ee:f8:52:59:60:59:99:ff:
47:93:5b:0a:99:e8:d3:85:46:bb:68:85:03:58:54:f8:d9:a9:
a1:51:90:07:77:f3:5e:bb:37:92:25:b7:bf:3f:56:ac:60:40:
58:6b:1d:99:8d:25:b8:2c:c2:80:3e:82:b4:34:c4:62:fd:74:
2d:01:91:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZY3TSh7PCDGcWgvHwyEHdJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NzJkNWFjYzI1MTY3Njk5YzdmY2YzYTFiODA0ZWEzMjVh
YzRlNWQwHhcNMjUwNDIxMTUwMDEzWhcNMjUwNDIyMTUwMDEzWjAzMTEwLwYDVQQD
EygyZGM1MjVlNTczNGFkYTAxM2I3MDkxMjFlZGZmOTI5OGQwNjIwYjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7lgsMJWlcvuRVN5vpGn9L7c/Kv1
yzNFWKPcrC4G9AHd21j+9Mki84e36ynmBFODmkJIk5yIQ4l0phoutKhe5AHLNNpC
duOuBplqXYXpL3U/jF0eNMGaQ4OGWEvemRbl0o7csiArcNsgvul2uTJYCiJfMTtS
6LWFxQiS++grFvQPtbmK6gyTttu84HI2i2RbTKd/SmOEyMRxWJs2SN3k8X1mZp9S
OQQVgSxkcLgg+2FI17bJo2/7aNiCcP7aPqypj2oMYrF2QKpdKbXiKo8zkL7+azDO
qOcjGXKybtZCzgkby7bjuTYGN8G13K4o7oPEpXjqB7BjlhMoW13PTXsXrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3FJeVzStoBO3CRIe3/kpjQYgtWMB8GA1UdIwQY
MBaAFIVy1azCUWdpnH/POhuATqMlrE5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFhMVnJNSlJaMm1jZjg4Nkc0Qk9veVdzVGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMTEyMzQtY2ZiNy00Mjc1LTlmNzkt
NDBkYzQ0NWM2NjlhLzEvaFhMVnJNSlJaMm1jZjg4Nkc0Qk9veVdzVGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wMTEyMzQtY2ZiNy00Mjc1LTlmNzktNDBkYzQ0NWM2Njlh
LzEvaFhMVnJNSlJaMm1jZjg4Nkc0Qk9veVdzVGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcBh83r3
fMN150Soekt9CvIbFkv7vUYt+EFcbJ1rC7etHk/16wih9xF6k71DVjbI1xVuQozh
/PJdRUJYHjqDE/WvYLUMaQssbO+uRHQAeue7n2+oF93ASe0bbHSQkCNZMkls9sU4
74/CsY9Mo2RKWt/VSrvv86oVKGX++lC4bg6evvT0FWSQ/EKffWd242+UAXT1ZQFv
HjqowQGmuSbTJdtxw/DKIfsK3Vc3YV5DvlsXXda10QC3jb2wIpfmFe74UllgWZn/
R5NbCpno04VGu2iFA1hU+NmpoVGQB3fzXrs3kiW3vz9WrGBAWGsdmY0luCzCgD6C
tDTEYv10LQGR7g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:05:06 2025 by rpki-client