Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
File: hWklE5rMSv4L6e8JhOPnvVtE6eY.mft (raw, json)
Hash identifier: XSzxt6LbtFXsND62zbscMzP9kcLR2ghjsoLJOUkIXbI=
Subject key identifier: 74:6F:12:EE:C9:AF:7A:6D:D3:3F:7E:58:28:D5:68:E7:FC:8B:E4:57
Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Certificate serial: 01964D107C160FA2BB1EEA46921D57E94414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
Manifest number: 128A
Signing time: Sat 19 Apr 2025 08:00:47 +0000
Manifest this update: Sat 19 Apr 2025 08:00:47 +0000
Manifest next update: Sun 20 Apr 2025 08:00:47 +0000
Files and hashes: 1: hWklE5rMSv4L6e8JhOPnvVtE6eY.crl (hash: 97XPoQflODFBqHDLKafdya+NUQa7mMTDxMGGPg8rfvs=)
2: siSVK589afKFmNB4xui803eAFA8.roa (hash: pIfAtolx6StiwhL02gSeSu2zm+FTXp7cgi/yqREz08c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:7c:16:0f:a2:bb:1e:ea:46:92:1d:57:e9:44:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Validity
Not Before: Apr 19 08:00:47 2025 GMT
Not After : Apr 20 08:00:47 2025 GMT
Subject: CN=746f12eec9af7a6dd33f7e5828d568e7fc8be457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:d7:d4:66:4f:16:56:8c:ff:48:f9:50:a9:
24:8e:b5:17:53:87:6f:02:7b:f6:7b:ba:cd:67:28:
d9:b5:1f:fb:ed:07:cc:65:ec:50:31:b5:67:35:19:
d6:4e:0b:27:9f:f3:ae:a8:73:33:41:4a:c0:73:d8:
99:5d:d1:27:4d:c1:5e:8b:0e:5c:74:ca:05:a6:1f:
7e:a4:e4:56:68:f7:e6:6b:65:c9:b0:0c:47:f1:f8:
a3:31:69:68:3e:31:19:a4:15:cc:c7:60:d3:ee:b6:
79:46:f1:05:b8:c9:8c:40:9c:70:41:91:f2:9c:5a:
f3:92:eb:fe:7f:f2:c2:ef:f3:29:7f:bd:f0:58:fe:
73:0d:82:7b:8a:52:76:e6:9b:85:df:4c:77:63:d1:
bd:26:df:ec:be:1e:29:65:c5:32:e9:62:f6:ff:9d:
f7:0a:f0:1f:e9:a2:ba:48:cc:14:34:0b:44:19:0f:
00:c7:40:85:03:70:7e:b8:45:84:23:08:2f:c1:93:
99:9d:b9:b2:22:87:97:78:53:8d:f1:35:85:3a:b3:
8e:c1:58:52:9e:b3:7f:22:7d:f0:17:17:60:57:96:
ef:73:73:da:0a:78:01:64:98:36:34:70:ab:b0:b0:
b1:8d:39:47:28:b8:fe:d4:63:69:e9:36:4c:1f:03:
dc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6F:12:EE:C9:AF:7A:6D:D3:3F:7E:58:28:D5:68:E7:FC:8B:E4:57
X509v3 Authority Key Identifier:
keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:57:dd:43:ae:27:9d:46:af:e7:cd:86:fe:49:fd:3b:ef:2f:
b2:37:49:8e:98:ed:f7:8e:18:da:aa:78:b2:88:b9:e3:0d:96:
5b:99:3a:2f:28:67:c1:d7:5b:76:38:ca:75:aa:d9:9c:b2:20:
30:c0:b6:38:93:27:8a:1e:a7:d6:2f:63:07:be:ce:e9:09:df:
bc:d6:f1:b3:39:28:22:df:5d:42:80:c3:e4:58:c5:d5:52:f3:
2d:71:91:9d:ca:ef:7b:8f:ad:fa:60:89:8e:d7:54:be:ff:2f:
aa:4c:de:c1:8b:34:12:eb:c9:a1:8a:87:f7:66:4f:92:21:ba:
8c:9d:68:70:fd:79:c6:4d:8d:e3:15:ac:74:be:d1:fc:20:4e:
88:37:5f:27:9d:34:43:2b:1f:30:a0:43:1a:56:1b:17:81:4d:
9f:af:87:4d:ae:5a:8d:1f:58:83:a5:c5:1a:58:87:c8:3e:4b:
74:05:7a:89:36:14:3f:93:3b:d7:7b:1a:48:37:63:08:dc:41:
42:2f:f4:c3:bd:aa:ff:80:db:76:b0:0a:41:d8:0a:9d:ea:d7:
d9:03:7c:11:40:19:34:43:d0:f7:ed:84:f5:a3:98:fb:9a:45:
32:e0:21:32:0f:69:d6:83:7e:d9:8d:8e:73:65:3f:8a:7d:24:
84:af:c2:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNEHwWD6K7HupGkh1X6UQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjkyNTEzOWFjYzRhZmUwYmU5ZWYwOTg0ZTNlN2JkNWI0
NGU5ZTYwHhcNMjUwNDE5MDgwMDQ3WhcNMjUwNDIwMDgwMDQ3WjAzMTEwLwYDVQQD
Eyg3NDZmMTJlZWM5YWY3YTZkZDMzZjdlNTgyOGQ1NjhlN2ZjOGJlNDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+3X1GZPFlaM/0j5UKkkjrUXU4dv
Anv2e7rNZyjZtR/77QfMZexQMbVnNRnWTgsnn/OuqHMzQUrAc9iZXdEnTcFeiw5c
dMoFph9+pORWaPfma2XJsAxH8fijMWloPjEZpBXMx2DT7rZ5RvEFuMmMQJxwQZHy
nFrzkuv+f/LC7/Mpf73wWP5zDYJ7ilJ25puF30x3Y9G9Jt/svh4pZcUy6WL2/533
CvAf6aK6SMwUNAtEGQ8Ax0CFA3B+uEWEIwgvwZOZnbmyIoeXeFON8TWFOrOOwVhS
nrN/In3wFxdgV5bvc3PaCngBZJg2NHCrsLCxjTlHKLj+1GNp6TZMHwPc3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRvEu7Jr3pt0z9+WCjVaOf8i+RXMB8GA1UdIwQY
MBaAFIVpJROazEr+C+nvCYTj571bROnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdrbEU1ck1TdjRMNmU4SmhPUG52VnRFNmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83YzQ1ZWMtM2Y2Yi00NjM1LTlkMzUt
OGQyMDNiYTRhY2M0LzEvaFdrbEU1ck1TdjRMNmU4SmhPUG52VnRFNmVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy83YzQ1ZWMtM2Y2Yi00NjM1LTlkMzUtOGQyMDNiYTRhY2M0
LzEvaFdrbEU1ck1TdjRMNmU4SmhPUG52VnRFNmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1fdQ64n
nUav582G/kn9O+8vsjdJjpjt944Y2qp4soi54w2WW5k6LyhnwddbdjjKdarZnLIg
MMC2OJMnih6n1i9jB77O6QnfvNbxszkoIt9dQoDD5FjF1VLzLXGRncrve4+t+mCJ
jtdUvv8vqkzewYs0EuvJoYqH92ZPkiG6jJ1ocP15xk2N4xWsdL7R/CBOiDdfJ500
QysfMKBDGlYbF4FNn6+HTa5ajR9Yg6XFGliHyD5LdAV6iTYUP5M713saSDdjCNxB
Qi/0w72q/4DbdrAKQdgKnerX2QN8EUAZNEPQ9+2E9aOY+5pFMuAhMg9p1oN+2Y2O
c2U/in0khK/CLA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:40:30 2025 by rpki-client