Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json)
Hash identifier: EkjdkdJE2VLu61QHprfR/lELB3ZEJjDqyiJKjVm+i4M=
Subject key identifier: 7B:B0:8E:6A:41:B6:A8:7E:B8:36:C0:12:B7:62:A4:DA:1B:BB:94:34
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial: 01964F6D21D4F33CB9F67E6E0A9CD5F3437A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
Manifest number: 037F
Signing time: Sat 19 Apr 2025 19:01:14 +0000
Manifest this update: Sat 19 Apr 2025 19:01:14 +0000
Manifest next update: Sun 20 Apr 2025 19:01:14 +0000
Files and hashes: 1: SalDxwYnKzervGIcZp186xtzhug.roa (hash: EtmDhhah0eA3Tfn8nv8gHra13dzs3VvNRMhkqeNatXs=)
2: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: V3XFGQJRdBObhdb8yD0UiRqVix+aB64z6kxPozxl3YY=)
3: vJ1U4ASLgA44UNL7Z4BBXNsC6QU.roa (hash: UmSdOz5rZ6J32yPtrp522X1fQ0TXmlUWN5/Uf0zeDr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:21:d4:f3:3c:b9:f6:7e:6e:0a:9c:d5:f3:43:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Validity
Not Before: Apr 19 19:01:14 2025 GMT
Not After : Apr 20 19:01:14 2025 GMT
Subject: CN=7bb08e6a41b6a87eb836c012b762a4da1bbb9434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:7d:c2:57:71:09:32:4d:1a:25:dd:57:da:
24:b0:ac:08:24:59:dc:c4:88:f5:fa:29:e8:8a:13:
df:6b:1f:c5:3f:2f:7c:99:fa:0a:ed:fc:ad:9d:d0:
d1:1f:13:93:59:42:1c:4a:ba:d5:d3:d2:17:29:24:
c2:bf:c7:a1:f4:2f:09:b3:75:c7:51:14:77:d7:84:
bb:f2:5e:af:3b:b7:5a:4c:e3:69:66:8a:c0:c2:56:
88:60:56:37:99:dd:8c:5f:36:80:43:89:b9:a9:27:
b6:90:af:32:a3:63:43:30:e6:ce:19:dd:a3:3b:63:
f0:70:19:71:38:4c:ec:c0:b1:68:81:f9:fb:a7:b2:
85:a2:cb:a5:66:57:12:cc:25:7f:a8:c2:ec:69:a7:
ee:c3:a6:d7:84:5b:b4:30:65:6c:f2:2c:4b:68:15:
b6:17:c9:c5:a5:63:be:92:66:6d:73:f3:c6:49:f4:
96:a8:86:94:52:97:c0:ed:25:e9:0d:ca:6d:d9:49:
11:dd:45:0d:ba:f5:1a:41:ea:16:09:e1:41:7b:9e:
c2:ad:88:96:86:56:bf:d1:97:a7:f4:72:86:09:4f:
7c:cd:0f:75:60:e6:9a:24:04:76:b9:af:66:a5:d1:
4a:eb:88:33:74:8a:c8:45:49:26:3f:c2:e1:ad:3c:
98:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B0:8E:6A:41:B6:A8:7E:B8:36:C0:12:B7:62:A4:DA:1B:BB:94:34
X509v3 Authority Key Identifier:
keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:32:98:58:ff:61:8c:6c:ef:c1:90:79:b3:35:b4:b0:d5:10:
f3:b8:19:f3:b5:ee:82:b3:5d:a1:60:5e:2e:ec:ba:fc:d4:0e:
c1:f8:ef:f2:0b:df:32:8b:66:93:ab:0b:67:ba:d7:e3:58:d5:
1c:aa:b1:07:d8:af:33:b9:a7:84:eb:6f:93:3d:7d:87:bc:9c:
f2:35:f4:22:c2:1c:02:fd:0b:0e:1f:bf:39:8a:55:8d:28:2a:
c1:00:1d:19:b6:ce:2f:60:ef:a9:94:9a:ec:32:d2:0d:4d:13:
33:aa:99:f2:6b:31:87:63:78:1a:51:81:7e:3a:40:bb:30:14:
90:4b:c2:2f:1c:5d:7d:15:8b:28:36:74:f5:f1:e5:9e:22:4f:
76:ef:1d:18:c1:e8:8f:a8:d3:10:ee:77:cc:92:64:29:6e:f6:
fd:db:c8:b7:99:a9:97:c6:3c:41:79:92:4d:df:24:03:5f:fc:
40:12:71:6c:b7:03:dc:41:14:91:7b:81:d4:ec:8b:5c:7f:4f:
46:d2:c5:b4:de:aa:5c:be:f2:80:9f:55:43:aa:c9:64:91:3a:
2d:0a:a1:07:86:f4:64:0d:e8:d9:56:89:fb:31:7e:6a:dd:c2:
39:d2:08:7d:74:6f:51:80:59:a5:00:dc:24:00:57:95:44:1b:
96:a7:34:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbSHU8zy59n5uCpzV80N6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OTQzOTVhYzgyMmRmZTAxMTY1MjE2Yzc3ODFmZmQ2MWRi
MjhkNWIwHhcNMjUwNDE5MTkwMTE0WhcNMjUwNDIwMTkwMTE0WjAzMTEwLwYDVQQD
Eyg3YmIwOGU2YTQxYjZhODdlYjgzNmMwMTJiNzYyYTRkYTFiYmI5NDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsd9wldxCTJNGiXdV9oksKwIJFnc
xIj1+inoihPfax/FPy98mfoK7fytndDRHxOTWUIcSrrV09IXKSTCv8eh9C8Js3XH
URR314S78l6vO7daTONpZorAwlaIYFY3md2MXzaAQ4m5qSe2kK8yo2NDMObOGd2j
O2PwcBlxOEzswLFogfn7p7KFosulZlcSzCV/qMLsaafuw6bXhFu0MGVs8ixLaBW2
F8nFpWO+kmZtc/PGSfSWqIaUUpfA7SXpDcpt2UkR3UUNuvUaQeoWCeFBe57CrYiW
hla/0Zen9HKGCU98zQ91YOaaJAR2ua9mpdFK64gzdIrIRUkmP8LhrTyYwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuwjmpBtqh+uDbAErdipNobu5Q0MB8GA1UdIwQY
MBaAFIeUOVrIIt/gEWUhbHeB/9Ydso1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDVRNVdzZ2kzLUFSWlNGc2Q0SF8xaDJ5alZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hMmEzYTQtYWI3NS00OWQ0LWE5NDEt
MzUzZjk4MTJiMWRiLzEvaDVRNVdzZ2kzLUFSWlNGc2Q0SF8xaDJ5alZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hMmEzYTQtYWI3NS00OWQ0LWE5NDEtMzUzZjk4MTJiMWRi
LzEvaDVRNVdzZ2kzLUFSWlNGc2Q0SF8xaDJ5alZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTKYWP9h
jGzvwZB5szW0sNUQ87gZ87XugrNdoWBeLuy6/NQOwfjv8gvfMotmk6sLZ7rX41jV
HKqxB9ivM7mnhOtvkz19h7yc8jX0IsIcAv0LDh+/OYpVjSgqwQAdGbbOL2DvqZSa
7DLSDU0TM6qZ8msxh2N4GlGBfjpAuzAUkEvCLxxdfRWLKDZ09fHlniJPdu8dGMHo
j6jTEO53zJJkKW72/dvIt5mpl8Y8QXmSTd8kA1/8QBJxbLcD3EEUkXuB1OyLXH9P
RtLFtN6qXL7ygJ9VQ6rJZJE6LQqhB4b0ZA3o2VaJ+zF+at3COdIIfXRvUYBZpQDc
JABXlUQblqc0Pg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:16:33 2025 by rpki-client