Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
File: Hw94pVpb5cAduAP0OMphG38VAwc.mft (raw, json)
Hash identifier: T9UmgAu/2+Yuzw9oh2maot24fvfmAA9I6WiLN/99MYQ=
Subject key identifier: F4:8C:C8:67:64:B2:DC:C5:35:99:63:52:6F:E8:04:AF:9A:7D:DF:40
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Certificate issuer: /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial: 01958C60F9C36DA34033D8E0CF1C4FE107CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
Manifest number: 0B71
Signing time: Wed 12 Mar 2025 22:02:00 +0000
Manifest this update: Wed 12 Mar 2025 22:02:00 +0000
Manifest next update: Thu 13 Mar 2025 22:02:00 +0000
Files and hashes: 1: Hw94pVpb5cAduAP0OMphG38VAwc.crl (hash: 2XgtF4Nr9//OIIAUTynqn067Mf5q5xNtKYHL99J22S8=)
2: eCBuvHT7IMaBXPivvQ3l-YdKsf4.roa (hash: o8SV6r5/m90uv9RNHtmHfhH9wPKwfjIhitnoqSV/JH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:f9:c3:6d:a3:40:33:d8:e0:cf:1c:4f:e1:07:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Validity
Not Before: Mar 12 22:02:00 2025 GMT
Not After : Mar 13 22:02:00 2025 GMT
Subject: CN=f48cc86764b2dcc5359963526fe804af9a7ddf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d0:a2:f4:f5:48:6c:a3:1e:0d:ab:6a:56:7e:
80:c1:a6:fb:99:40:0b:59:f3:ee:f2:d1:ab:75:e1:
ae:2e:00:84:bf:e5:63:6a:39:71:b1:0e:0f:96:e0:
e2:88:71:53:01:22:bb:4b:1d:88:2c:03:5e:db:29:
79:2d:92:81:5d:8c:67:ee:6a:38:96:77:de:42:3a:
c5:b0:1d:f9:a6:80:81:7b:1f:9f:94:18:9c:1a:52:
5e:11:9c:82:1b:29:73:0d:91:de:1e:57:92:e4:c5:
5a:4b:85:6b:a7:f4:46:f9:95:32:09:42:40:d7:b6:
89:ac:8f:d0:e3:3f:a7:10:f7:b0:76:64:f6:2c:c6:
c3:b2:33:84:d2:c8:2d:38:6e:b1:ed:6f:2b:e6:5c:
9b:1f:a3:5f:18:13:47:73:aa:e8:da:cd:45:f4:b5:
6a:f0:bb:3e:65:e6:91:01:c5:a0:8b:6a:6a:b6:14:
83:e3:43:49:5f:4c:c7:23:ad:87:19:60:bd:0d:a3:
8e:f3:1f:5b:80:c6:ad:65:ef:40:39:c2:e8:6c:dc:
aa:cd:ed:02:24:ae:06:fa:de:23:21:ac:1a:de:43:
72:6b:f7:1f:c0:a9:57:b3:0b:d1:63:3b:49:3b:e7:
c2:69:d2:c5:e7:79:97:ea:ea:6f:25:eb:a3:50:48:
5d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8C:C8:67:64:B2:DC:C5:35:99:63:52:6F:E8:04:AF:9A:7D:DF:40
X509v3 Authority Key Identifier:
keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:de:d2:8f:3c:11:25:38:cd:3d:c6:78:18:a6:5c:37:8a:b6:
65:dc:14:5a:4f:80:0b:4d:27:b0:4e:ac:2f:c8:c1:cf:b5:a8:
3a:4e:62:b9:60:9b:bf:e9:4c:f6:6c:cc:fa:e7:42:f6:8d:77:
cb:72:96:4b:b9:ef:14:09:50:80:21:01:da:66:25:e2:85:e5:
3e:a6:9a:c4:b8:bd:77:cd:d9:e8:46:3c:80:3c:fb:e5:bc:29:
3a:8c:b5:a4:10:9c:c2:95:db:56:2f:e2:c1:45:4a:b8:bd:5a:
49:29:b3:cc:82:c7:95:f2:ef:dc:47:b7:89:32:df:b8:69:28:
2a:99:34:88:74:69:3d:05:23:08:0e:ba:46:bc:6d:52:44:60:
19:a2:cf:96:33:31:91:31:c1:9c:65:ae:0a:05:fa:05:25:e9:
e9:34:04:c9:c8:e4:b5:87:25:20:30:e8:31:2d:de:3e:63:50:
d9:5a:47:9e:af:44:ae:75:80:33:94:b5:5e:d6:74:75:cb:a0:
a7:96:58:96:f0:bb:b9:fd:4b:98:16:f8:ac:3f:92:9f:07:ca:
f8:06:3f:81:53:5f:2b:9d:1c:d5:6f:e5:0c:92:02:d5:a4:92:
ea:1f:d5:b1:b2:6f:c4:ed:b1:f5:8f:e7:e9:7a:c7:6b:7f:0e:
4d:74:5e:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYPnDbaNAM9jgzxxP4QfOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMGY3OGE1NWE1YmU1YzAxZGI4MDNmNDM4Y2E2MTFiN2Yx
NTAzMDcwHhcNMjUwMzEyMjIwMjAwWhcNMjUwMzEzMjIwMjAwWjAzMTEwLwYDVQQD
EyhmNDhjYzg2NzY0YjJkY2M1MzU5OTYzNTI2ZmU4MDRhZjlhN2RkZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNCi9PVIbKMeDatqVn6Awab7mUAL
WfPu8tGrdeGuLgCEv+VjajlxsQ4PluDiiHFTASK7Sx2ILANe2yl5LZKBXYxn7mo4
lnfeQjrFsB35poCBex+flBicGlJeEZyCGylzDZHeHleS5MVaS4Vrp/RG+ZUyCUJA
17aJrI/Q4z+nEPewdmT2LMbDsjOE0sgtOG6x7W8r5lybH6NfGBNHc6ro2s1F9LVq
8Ls+ZeaRAcWgi2pqthSD40NJX0zHI62HGWC9DaOO8x9bgMatZe9AOcLobNyqze0C
JK4G+t4jIawa3kNya/cfwKlXswvRYztJO+fCadLF53mX6upvJeujUEhdYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSMyGdkstzFNZljUm/oBK+afd9AMB8GA1UdIwQY
MBaAFB8PeKVaW+XAHbgD9DjKYRt/FQMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hNTBjN2MtODc4YS00N2ZkLTgxMDct
NzlmMTA1YWVmOGQ2LzEvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hNTBjN2MtODc4YS00N2ZkLTgxMDctNzlmMTA1YWVmOGQ2
LzEvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAt7SjzwR
JTjNPcZ4GKZcN4q2ZdwUWk+AC00nsE6sL8jBz7WoOk5iuWCbv+lM9mzM+udC9o13
y3KWS7nvFAlQgCEB2mYl4oXlPqaaxLi9d83Z6EY8gDz75bwpOoy1pBCcwpXbVi/i
wUVKuL1aSSmzzILHlfLv3Ee3iTLfuGkoKpk0iHRpPQUjCA66RrxtUkRgGaLPljMx
kTHBnGWuCgX6BSXp6TQEycjktYclIDDoMS3ePmNQ2VpHnq9ErnWAM5S1XtZ0dcug
p5ZYlvC7uf1LmBb4rD+SnwfK+AY/gVNfK50c1W/lDJIC1aSS6h/VsbJvxO2x9Y/n
6XrHa38OTXReqQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:54 2025 by rpki-client