Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: tyv7aNHSb/p0UJAP7egtseW/RyFZcl2PBOwl1hRTP2g=
Subject key identifier: 36:B0:9F:C1:45:C6:25:C7:61:88:80:FD:68:C4:35:D6:F3:40:17:2E
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 01962A4E361C79E722C0F1FFB3C542F7A61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 11B1
Signing time: Sat 12 Apr 2025 14:01:30 +0000
Manifest this update: Sat 12 Apr 2025 14:01:30 +0000
Manifest next update: Sun 13 Apr 2025 14:01:30 +0000
Files and hashes: 1: gTuMJj4zNk4inmWeuwHt2oopg5M.roa (hash: zopPOsMBU8dt9Dr0i+LUD1TPbnQUzJ4uDKxUzfrnRiY=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: TL9KhvpOG2ez1u8/EuF4HK91Y8DqrVTzdFjU0Kc5eSk=)
3: rnwY-7oYw6V-trqxlfGxfeIKZIY.roa (hash: Yep0/R2aV0HSvC5J3JSqbOslIcQ/KKdPdI5bChqi8Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:4e:36:1c:79:e7:22:c0:f1:ff:b3:c5:42:f7:a6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Apr 12 14:01:30 2025 GMT
Not After : Apr 13 14:01:30 2025 GMT
Subject: CN=36b09fc145c625c7618880fd68c435d6f340172e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:3f:6b:74:1c:f7:21:b2:86:54:ed:05:8c:
51:03:92:5d:16:5b:1f:92:df:9d:86:db:50:ce:e8:
2a:7c:a4:94:63:22:c1:c4:b1:6b:c7:5b:79:38:ae:
cb:00:f4:2a:ea:b1:2b:7c:33:76:9a:f5:d7:77:e4:
d6:d6:d0:31:fa:ae:bf:c7:8b:ab:87:94:04:37:da:
a7:6f:1b:dd:4e:47:be:96:7a:dd:c8:30:6b:4e:ca:
05:cf:14:72:b7:2a:6a:28:88:ee:31:cb:a8:07:a9:
b7:da:c6:fe:e1:3f:42:dc:1e:aa:49:e1:38:5b:d9:
e8:cf:06:61:91:fc:75:bb:2a:f3:2e:fa:e8:33:f7:
02:15:42:20:78:fc:b8:e0:c5:e7:23:0c:0d:2a:69:
a0:d8:02:eb:6b:2c:48:5a:4f:6b:cd:a0:96:6a:3a:
c6:3e:8f:7b:cb:b2:e9:5e:ba:47:f3:8d:ee:c8:f8:
93:1a:96:2f:5c:19:4b:17:b6:86:94:79:19:38:9c:
b4:26:fa:63:de:9c:44:7c:0e:1a:86:60:bd:3d:8b:
64:b7:74:86:64:6e:cc:7b:00:cc:b7:46:ab:b8:ef:
ac:18:43:74:cc:71:3d:24:3b:8e:59:cf:b5:64:94:
c1:b9:ff:23:32:dc:24:97:d1:fe:ad:71:bb:e1:f3:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B0:9F:C1:45:C6:25:C7:61:88:80:FD:68:C4:35:D6:F3:40:17:2E
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7d:61:8b:4c:b2:90:1b:4e:0f:25:d5:82:1e:81:e6:79:b7:
7c:cf:74:a3:23:48:61:59:51:3a:ce:f7:58:1b:1f:23:d6:0c:
0e:20:b2:bb:41:68:2b:f6:87:18:7b:2c:1f:57:45:f9:a5:9f:
ec:86:38:0c:21:49:ea:cf:58:90:2f:4f:58:4d:ea:44:8c:9c:
10:f3:5f:0d:92:ec:ad:46:e2:bb:6d:08:a5:d8:2e:35:02:e5:
54:e5:09:17:93:d2:c3:9a:8c:d5:7f:59:90:2f:58:7d:4e:ce:
aa:36:2a:59:e5:60:37:0d:ba:d6:8a:7e:90:80:0b:62:e3:52:
0b:cd:9e:0a:de:05:f4:47:51:8b:19:9a:53:f4:30:51:48:d2:
72:3e:ae:57:fa:f7:62:b9:6b:70:80:b2:5f:10:79:2a:80:84:
5a:c3:31:ee:a9:5b:fc:b7:f0:5b:28:ba:c9:46:58:8f:83:8b:
ef:f9:da:2a:84:58:94:1f:2d:2b:1b:66:a4:d9:91:aa:16:60:
52:9c:20:02:f7:46:15:79:c7:23:50:5c:84:d5:1e:08:80:53:
5b:bb:de:ba:87:fe:65:68:7e:15:69:da:10:35:05:64:a4:64:
c6:41:e0:a0:4a:1b:fe:fb:9b:d7:88:f0:24:10:79:14:f2:71:
9c:fa:0b:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYqTjYceeciwPH/s8VC96YfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YTY5ZmM1Njg4OTRjYjM5ODVlZGVmMjIyMTZiZDk5OTc0
ZGUyNTEwHhcNMjUwNDEyMTQwMTMwWhcNMjUwNDEzMTQwMTMwWjAzMTEwLwYDVQQD
EygzNmIwOWZjMTQ1YzYyNWM3NjE4ODgwZmQ2OGM0MzVkNmYzNDAxNzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOM/a3Qc9yGyhlTtBYxRA5JdFlsf
kt+dhttQzugqfKSUYyLBxLFrx1t5OK7LAPQq6rErfDN2mvXXd+TW1tAx+q6/x4ur
h5QEN9qnbxvdTke+lnrdyDBrTsoFzxRytypqKIjuMcuoB6m32sb+4T9C3B6qSeE4
W9nozwZhkfx1uyrzLvroM/cCFUIgePy44MXnIwwNKmmg2ALrayxIWk9rzaCWajrG
Po97y7LpXrpH843uyPiTGpYvXBlLF7aGlHkZOJy0Jvpj3pxEfA4ahmC9PYtkt3SG
ZG7MewDMt0aruO+sGEN0zHE9JDuOWc+1ZJTBuf8jMtwkl9H+rXG74fPJtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDawn8FFxiXHYYiA/WjENdbzQBcuMB8GA1UdIwQY
MBaAFISmn8VoiUyzmF7e8iIWvZmXTeJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jNjBhMWUtOTA4MC00YjA4LTk1ZGEt
NDM3ZmU1MGJiNGY3LzEvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jNjBhMWUtOTA4MC00YjA4LTk1ZGEtNDM3ZmU1MGJiNGY3
LzEvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoH1hi0yy
kBtODyXVgh6B5nm3fM90oyNIYVlROs73WBsfI9YMDiCyu0FoK/aHGHssH1dF+aWf
7IY4DCFJ6s9YkC9PWE3qRIycEPNfDZLsrUbiu20IpdguNQLlVOUJF5PSw5qM1X9Z
kC9YfU7OqjYqWeVgNw261op+kIALYuNSC82eCt4F9EdRixmaU/QwUUjScj6uV/r3
YrlrcICyXxB5KoCEWsMx7qlb/LfwWyi6yUZYj4OL7/naKoRYlB8tKxtmpNmRqhZg
UpwgAvdGFXnHI1BchNUeCIBTW7veuof+ZWh+FWnaEDUFZKRkxkHgoEob/vub14jw
JBB5FPJxnPoL0A==
-----END CERTIFICATE-----
Generated at Sat Apr 12 18:09:56 2025 by rpki-client