Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: SSo6ibK9oEhP4LDBuXp/ekd0eE5YqXvF+hy5+v4ZTmQ=
Subject key identifier: 2F:7F:EF:F0:5F:A9:CF:AC:5B:31:83:25:D5:91:BF:0B:76:E2:DF:44
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 01965236A7309F6B793DF49B41C35796AFC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 1416
Signing time: Sun 20 Apr 2025 08:00:35 +0000
Manifest this update: Sun 20 Apr 2025 08:00:35 +0000
Manifest next update: Mon 21 Apr 2025 08:00:35 +0000
Files and hashes: 1: 7oQLFindjFNNwT1EI5HtopJVATk.roa (hash: QW4atGbHZ6zg8XYnhlFNaNdtw1KZFCjwMGSD43vyWYs=)
2: 7p3bshSBfl7JZFvo3V1B0hB4k14.roa (hash: cbZ+dbslEUIQt31Sa26Aju1jHZ6F6X9W/yVOC5Hx/IY=)
3: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: nNx9Bh5TLEYwZGkkoKHlyRlEIcMoTvf6OEgn/14kjyA=)
4: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (hash: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:a7:30:9f:6b:79:3d:f4:9b:41:c3:57:96:af:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Apr 20 08:00:35 2025 GMT
Not After : Apr 21 08:00:35 2025 GMT
Subject: CN=2f7feff05fa9cfac5b318325d591bf0b76e2df44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b4:01:81:15:4e:4d:a3:78:df:ff:6f:8e:df:
ae:c4:28:4b:bc:22:7e:01:69:b3:7f:d0:64:71:e2:
b9:be:17:04:a3:37:24:dd:a5:f3:42:29:45:09:c6:
f7:4e:e4:88:de:91:6b:f4:70:7c:da:7a:31:50:5f:
0c:f3:67:a3:41:38:12:b0:f2:00:ef:11:d2:ee:20:
98:68:36:c6:20:22:b4:c0:fc:66:97:b5:3c:b5:01:
e3:f4:3f:0e:03:cc:41:9f:d6:0b:ca:f8:91:8c:46:
1b:b0:3f:11:63:ca:b4:f2:9b:0b:b5:0e:24:d2:1e:
46:81:cd:4c:81:72:c9:ea:46:58:a5:c9:2c:22:ad:
69:3e:4f:ac:73:1d:4f:a0:b5:82:53:f8:66:a1:cd:
12:28:58:59:1f:ad:5c:4c:e8:4c:52:bb:fb:24:06:
e4:bf:60:94:bb:d6:bd:16:6f:4e:a3:4d:db:94:d0:
7c:94:99:2e:0c:3e:6f:38:13:42:87:04:94:01:05:
66:ca:32:6e:9a:6a:ab:95:45:60:3c:87:6b:49:1b:
a2:b7:d9:8c:0d:a2:24:ab:86:cf:e4:04:8f:b9:7b:
6f:92:7a:44:bb:47:82:b9:30:18:14:19:0f:bf:a4:
97:d7:22:df:cd:a4:b9:94:e3:5d:bf:42:24:80:12:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7F:EF:F0:5F:A9:CF:AC:5B:31:83:25:D5:91:BF:0B:76:E2:DF:44
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e8:9a:5d:9d:37:41:96:da:a2:ad:dc:81:ac:cb:bd:6a:d1:
a7:86:32:52:18:71:79:92:03:1c:22:64:7a:69:83:db:c0:ba:
93:ae:8d:b4:6d:41:66:7d:85:48:06:cd:71:1d:0a:af:58:f0:
43:b6:23:0f:1f:3b:54:b8:87:4b:06:44:27:bb:63:60:c1:f5:
70:1a:b2:c7:53:0a:b5:6a:42:3c:16:e1:a4:1e:8b:80:ce:3c:
11:e4:8f:be:e8:50:d3:a3:b6:c8:02:39:46:79:78:da:98:0f:
8f:dc:62:26:27:1f:13:e5:d9:6e:66:73:07:a6:49:ab:99:c8:
d5:d6:a9:99:c5:c0:94:a6:6c:41:01:4a:b5:37:12:08:43:f8:
11:a9:c2:cc:13:98:94:db:92:86:00:4e:57:28:43:54:f2:75:
bd:f5:80:14:1f:06:4a:72:b8:74:3e:84:f9:69:29:a3:06:9a:
bd:36:41:a2:6a:1e:cf:ff:d4:e9:6c:6d:6c:71:07:6a:6e:c4:
30:56:4a:85:3d:2e:c3:4e:89:03:af:8e:56:3e:45:96:4d:98:
16:40:82:0d:1b:db:08:75:2a:f1:bb:0b:1c:0b:7a:1e:d7:da:
43:2f:da:3d:f2:89:9c:a9:4c:d8:ae:7b:06:eb:df:25:e3:cf:
df:50:7a:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSNqcwn2t5PfSbQcNXlq/HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNjVlZGUzYjZhYWU3NDc1YzM1NGIxZTliODRkNmE3ODMy
YjA3N2IwHhcNMjUwNDIwMDgwMDM1WhcNMjUwNDIxMDgwMDM1WjAzMTEwLwYDVQQD
EygyZjdmZWZmMDVmYTljZmFjNWIzMTgzMjVkNTkxYmYwYjc2ZTJkZjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bQBgRVOTaN43/9vjt+uxChLvCJ+
AWmzf9BkceK5vhcEozck3aXzQilFCcb3TuSI3pFr9HB82noxUF8M82ejQTgSsPIA
7xHS7iCYaDbGICK0wPxml7U8tQHj9D8OA8xBn9YLyviRjEYbsD8RY8q08psLtQ4k
0h5Ggc1MgXLJ6kZYpcksIq1pPk+scx1PoLWCU/hmoc0SKFhZH61cTOhMUrv7JAbk
v2CUu9a9Fm9Oo03blNB8lJkuDD5vOBNChwSUAQVmyjJummqrlUVgPIdrSRuit9mM
DaIkq4bP5ASPuXtvknpEu0eCuTAYFBkPv6SX1yLfzaS5lONdv0IkgBLvuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9/7/Bfqc+sWzGDJdWRvwt24t9EMB8GA1UdIwQY
MBaAFB5l7eO2qudHXDVLHpuE1qeDKwd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYt
NWNlNGQ4ZGJkMTU5LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYtNWNlNGQ4ZGJkMTU5
LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuiaXZ03
QZbaoq3cgazLvWrRp4YyUhhxeZIDHCJkemmD28C6k66NtG1BZn2FSAbNcR0Kr1jw
Q7YjDx87VLiHSwZEJ7tjYMH1cBqyx1MKtWpCPBbhpB6LgM48EeSPvuhQ06O2yAI5
Rnl42pgPj9xiJicfE+XZbmZzB6ZJq5nI1dapmcXAlKZsQQFKtTcSCEP4EanCzBOY
lNuShgBOVyhDVPJ1vfWAFB8GSnK4dD6E+WkpowaavTZBomoez//U6WxtbHEHam7E
MFZKhT0uw06JA6+OVj5Flk2YFkCCDRvbCHUq8bsLHAt6HtfaQy/aPfKJnKlM2K57
BuvfJePP31B6hw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:41 2025 by rpki-client