Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
File: 2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft (raw, json)
Hash identifier: WLs67Pr5XaVJ1Ce7sJwVl3Jq6dN/JMQSm6wxIM+gOMM=
Subject key identifier: 65:9C:B0:EA:8E:54:9E:17:14:17:40:75:61:D0:74:B4:38:47:2F:42
Authority key identifier: D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
Certificate issuer: /CN=d87663c5e14f13746c80f60ba363493d9a4934cc
Certificate serial: 01964CA2AA888B1101619FFAE7E7928EEAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
Manifest number: 0593
Signing time: Sat 19 Apr 2025 06:00:50 +0000
Manifest this update: Sat 19 Apr 2025 06:00:50 +0000
Manifest next update: Sun 20 Apr 2025 06:00:50 +0000
Files and hashes: 1: 2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl (hash: FObauxvbHiZVvekj4r5fA7/lvk1gRqauy3Nky8WFVaI=)
2: eNatCM_ng_ZzT0XjnAhnE8JwsaM.roa (hash: NiVcVjOLTxJgHF9YkgZvM/M3+zTG2kPIupDct4SjNb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:aa:88:8b:11:01:61:9f:fa:e7:e7:92:8e:ea:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87663c5e14f13746c80f60ba363493d9a4934cc
Validity
Not Before: Apr 19 06:00:50 2025 GMT
Not After : Apr 20 06:00:50 2025 GMT
Subject: CN=659cb0ea8e549e171417407561d074b438472f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:fc:84:81:d1:e1:52:15:46:1b:4d:b5:39:
55:d1:d7:9e:82:28:57:c3:1a:49:85:c6:c8:da:57:
05:59:60:b1:51:70:7d:73:0a:06:f5:0e:aa:00:0d:
56:98:c4:87:a1:42:d4:29:9a:26:5d:ec:c5:20:46:
6b:18:86:62:c8:6e:b8:67:69:b5:47:9d:77:34:08:
23:01:fa:da:70:c6:6a:02:70:b1:10:86:f3:a3:4a:
8d:ef:95:c8:f1:3a:b3:3b:32:88:a4:9f:34:4c:1e:
0f:58:f5:f3:8f:50:b9:5b:af:44:37:a4:c6:d0:79:
73:5f:14:6e:1e:4b:4e:40:68:78:4a:31:68:63:f1:
e5:03:5e:83:5c:b2:1c:c9:9f:75:ce:68:d3:a1:c8:
5d:cf:b2:f5:ad:a8:8f:9f:2a:97:ab:dc:60:6e:30:
8a:fb:d0:44:a5:99:fd:dd:36:af:73:d5:c0:1c:45:
14:ea:d3:3d:20:18:98:1e:26:0f:2e:0e:e1:6c:6d:
c5:58:b2:b9:e2:61:3e:13:1f:4e:40:b8:de:7d:a9:
e8:dd:ed:0b:33:24:f3:6f:d9:fa:24:65:68:e8:65:
0a:cd:19:8e:46:a4:2b:9e:9d:2a:3f:2e:42:e4:a5:
03:a2:b7:fe:61:a9:43:ad:f6:14:84:03:23:3c:3e:
35:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9C:B0:EA:8E:54:9E:17:14:17:40:75:61:D0:74:B4:38:47:2F:42
X509v3 Authority Key Identifier:
keyid:D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4a:1e:42:ed:df:bf:c2:d3:14:23:9f:51:d4:5d:ae:d5:85:
70:93:3d:89:53:5f:17:21:2f:47:bb:32:7f:e2:e8:eb:2b:32:
77:8e:48:7c:a1:53:52:84:27:db:d1:ab:5e:74:f7:b4:92:0a:
4a:9f:45:af:45:35:78:22:d4:e6:ed:a5:03:6e:1a:d8:88:a8:
0b:dc:3c:f0:3d:19:33:8d:70:66:32:94:08:19:99:1b:f2:2c:
8f:28:9a:00:44:c6:99:85:98:4e:bd:d1:c6:90:5a:36:69:d0:
ef:2e:8b:22:a4:84:ed:0d:8c:fb:b4:64:24:ea:75:00:9b:b0:
a8:25:ce:df:ce:4c:8a:ef:4c:ec:eb:df:b1:b1:14:f6:eb:83:
3b:09:32:88:e5:e6:62:69:89:56:26:32:33:35:cf:2d:6b:c5:
5c:c9:d5:5a:fb:4c:9d:62:86:94:06:0a:f6:4b:6d:65:d3:8b:
f3:54:03:4d:1c:e4:1d:3d:5b:74:21:18:91:e6:a5:93:9b:d2:
cd:9d:5b:8e:62:e1:cc:ea:02:c7:a4:66:ea:3f:6c:5b:cd:a3:
c6:bf:bb:b4:36:2a:6e:42:cc:3c:54:ab:1b:04:d7:ab:2c:5d:
0f:ef:6d:d3:16:1a:64:50:71:4d:f6:80:b0:a8:fe:de:49:9d:
8c:28:dd:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMoqqIixEBYZ/65+eSjurvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NzY2M2M1ZTE0ZjEzNzQ2YzgwZjYwYmEzNjM0OTNkOWE0
OTM0Y2MwHhcNMjUwNDE5MDYwMDUwWhcNMjUwNDIwMDYwMDUwWjAzMTEwLwYDVQQD
Eyg2NTljYjBlYThlNTQ5ZTE3MTQxNzQwNzU2MWQwNzRiNDM4NDcyZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEn8hIHR4VIVRhtNtTlV0deegihX
wxpJhcbI2lcFWWCxUXB9cwoG9Q6qAA1WmMSHoULUKZomXezFIEZrGIZiyG64Z2m1
R513NAgjAfracMZqAnCxEIbzo0qN75XI8TqzOzKIpJ80TB4PWPXzj1C5W69EN6TG
0HlzXxRuHktOQGh4SjFoY/HlA16DXLIcyZ91zmjTochdz7L1raiPnyqXq9xgbjCK
+9BEpZn93Tavc9XAHEUU6tM9IBiYHiYPLg7hbG3FWLK54mE+Ex9OQLjefano3e0L
MyTzb9n6JGVo6GUKzRmORqQrnp0qPy5C5KUDorf+YalDrfYUhAMjPD410wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWcsOqOVJ4XFBdAdWHQdLQ4Ry9CMB8GA1UdIwQY
MBaAFNh2Y8XhTxN0bID2C6NjST2aSTTMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkhaanhlRlBFM1JzZ1BZTG8yTkpQWnBKTk13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xMGVmMTctZTEwNy00OWRhLTgxOTAt
ZDk5ZGE5NzBmZmEyLzEvMkhaanhlRlBFM1JzZ1BZTG8yTkpQWnBKTk13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xMGVmMTctZTEwNy00OWRhLTgxOTAtZDk5ZGE5NzBmZmEy
LzEvMkhaanhlRlBFM1JzZ1BZTG8yTkpQWnBKTk13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEoeQu3f
v8LTFCOfUdRdrtWFcJM9iVNfFyEvR7syf+Lo6ysyd45IfKFTUoQn29GrXnT3tJIK
Sp9Fr0U1eCLU5u2lA24a2IioC9w88D0ZM41wZjKUCBmZG/IsjyiaAETGmYWYTr3R
xpBaNmnQ7y6LIqSE7Q2M+7RkJOp1AJuwqCXO385Miu9M7OvfsbEU9uuDOwkyiOXm
YmmJViYyMzXPLWvFXMnVWvtMnWKGlAYK9kttZdOL81QDTRzkHT1bdCEYkealk5vS
zZ1bjmLhzOoCx6Rm6j9sW82jxr+7tDYqbkLMPFSrGwTXqyxdD+9t0xYaZFBxTfaA
sKj+3kmdjCjdcw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:07 2025 by rpki-client