Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json)
Hash identifier: ewRTAtfGqUiq7KoP6AH6+r7xyE6WOzgiF5qGolZzBkk=
Subject key identifier: 70:10:5D:2A:0C:C9:69:C9:AC:F2:31:DF:18:37:10:C9:5D:DA:EB:25
Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Certificate serial: 01960D8CEE73C9EEEE64F3359C74F841434C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
Manifest number: 0E4D
Signing time: Mon 07 Apr 2025 00:01:01 +0000
Manifest this update: Mon 07 Apr 2025 00:01:01 +0000
Manifest next update: Tue 08 Apr 2025 00:01:01 +0000
Files and hashes: 1: TwlfNDSczGUl34rteJgSuHXTO94.roa (hash: gBwK3ZQY+snmvfWIA0VgAvr4/MBSK9FpiTLSXZrUgpg=)
2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: 1SmEOiICfUXXdfpJ0/hvN4CGJIyntivMlIXBYCVRoTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:8c:ee:73:c9:ee:ee:64:f3:35:9c:74:f8:41:43:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Validity
Not Before: Apr 7 00:01:01 2025 GMT
Not After : Apr 8 00:01:01 2025 GMT
Subject: CN=70105d2a0cc969c9acf231df183710c95ddaeb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:2c:2e:35:22:28:b1:d4:56:aa:e1:cc:92:
a6:8e:f9:a5:76:16:45:26:ac:ca:f7:81:c1:d3:a2:
bf:d8:60:1a:49:43:9a:53:36:ca:3b:9f:c1:ae:d0:
bc:e1:2c:3b:4d:01:f7:5c:39:e2:ff:0a:ec:c4:69:
c9:97:8c:51:c1:eb:60:7b:cc:7a:00:3f:88:8d:ac:
81:55:1c:23:6a:76:96:02:f6:3e:3c:20:b6:19:b1:
d7:54:8b:9d:c7:69:2d:f8:07:eb:7c:3c:e0:dc:93:
77:a0:c5:7e:d7:df:b9:00:4f:7f:20:a6:ef:9a:ac:
b2:6b:89:76:df:97:fe:a0:7b:fa:3a:22:00:67:2f:
c7:3d:ce:c5:a4:18:56:f5:94:c2:a9:cd:d6:5f:20:
8c:75:9a:e1:70:06:c2:d5:50:6f:50:fb:74:5d:23:
95:86:60:c6:b8:32:4b:94:63:21:e6:b7:29:4b:96:
f4:ce:fe:41:10:89:5d:26:f2:db:ac:5d:0d:07:b8:
51:51:57:a9:fc:94:ae:20:84:93:cb:a7:6c:73:fa:
2f:fc:55:4c:6d:41:09:42:5d:1a:b0:00:9c:6e:eb:
98:5a:66:ea:ce:a2:0e:4b:6e:ca:14:8a:a1:4b:a8:
2a:ea:96:13:ac:51:b2:e8:f8:d9:77:f4:95:89:e5:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:10:5D:2A:0C:C9:69:C9:AC:F2:31:DF:18:37:10:C9:5D:DA:EB:25
X509v3 Authority Key Identifier:
keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:cc:9a:ed:a8:d8:5f:c9:c1:33:6a:ee:7d:7d:b7:a5:5f:e4:
83:7a:25:2e:ce:e4:6b:11:c8:7f:f8:0d:82:c7:6f:33:9b:e6:
7b:31:7b:af:5f:72:db:5c:5a:11:d9:a3:f7:14:2a:34:23:6f:
f2:23:52:e0:58:09:e7:84:74:6e:ec:4a:49:a7:86:cb:4a:7f:
35:fc:9e:da:a0:1a:95:80:f4:7e:05:3f:a1:20:b9:1a:31:5f:
fc:f1:c7:57:36:03:af:d1:19:d6:6a:04:81:b5:ba:21:4a:29:
8a:f1:6f:b8:e3:b1:ec:b8:e7:71:be:36:9a:8d:18:6c:74:4a:
47:a6:7c:3f:d6:fe:72:aa:cc:85:c2:bf:b1:3f:64:b2:6e:1c:
d7:0b:09:53:bd:f5:2e:2b:c5:11:c4:f9:d3:35:8c:2c:5b:2f:
54:f3:77:6a:f8:0b:87:dc:30:e6:7e:01:b7:4f:a6:eb:d0:94:
ee:78:78:c1:36:d1:48:e0:b1:78:30:59:c7:31:b2:d8:72:76:
f4:db:4f:0f:44:38:d7:43:a3:28:fd:9c:dd:08:7d:7c:3d:03:
ca:dd:44:78:27:14:76:ba:97:b5:fe:a5:6b:49:4e:64:b3:1e:
80:f1:02:e3:5f:d6:7b:d3:7d:92:6a:b6:7b:1a:31:8b:b0:ad:
5a:c9:89:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYNjO5zye7uZPM1nHT4QUNMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGFhMTZmZDJhMmM5MzZjMGFhNGZiNTYyNGY2MmJjNTZh
NTRkZjgwHhcNMjUwNDA3MDAwMTAxWhcNMjUwNDA4MDAwMTAxWjAzMTEwLwYDVQQD
Eyg3MDEwNWQyYTBjYzk2OWM5YWNmMjMxZGYxODM3MTBjOTVkZGFlYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCosLjUiKLHUVqrhzJKmjvmldhZF
JqzK94HB06K/2GAaSUOaUzbKO5/BrtC84Sw7TQH3XDni/wrsxGnJl4xRwetge8x6
AD+IjayBVRwjanaWAvY+PCC2GbHXVIudx2kt+AfrfDzg3JN3oMV+19+5AE9/IKbv
mqyya4l235f+oHv6OiIAZy/HPc7FpBhW9ZTCqc3WXyCMdZrhcAbC1VBvUPt0XSOV
hmDGuDJLlGMh5rcpS5b0zv5BEIldJvLbrF0NB7hRUVep/JSuIISTy6dsc/ov/FVM
bUEJQl0asACcbuuYWmbqzqIOS27KFIqhS6gq6pYTrFGy6PjZd/SVieW31QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAQXSoMyWnJrPIx3xg3EMld2uslMB8GA1UdIwQY
MBaAFIdKoW/Sosk2wKpPtWJPYrxWpU34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTct
ZmRiYzdjNGNmNDllLzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTctZmRiYzdjNGNmNDll
LzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8ya7ajY
X8nBM2rufX23pV/kg3olLs7kaxHIf/gNgsdvM5vmezF7r19y21xaEdmj9xQqNCNv
8iNS4FgJ54R0buxKSaeGy0p/Nfye2qAalYD0fgU/oSC5GjFf/PHHVzYDr9EZ1moE
gbW6IUopivFvuOOx7Ljncb42mo0YbHRKR6Z8P9b+cqrMhcK/sT9ksm4c1wsJU731
LivFEcT50zWMLFsvVPN3avgLh9ww5n4Bt0+m69CU7nh4wTbRSOCxeDBZxzGy2HJ2
9NtPD0Q410OjKP2c3Qh9fD0Dyt1EeCcUdrqXtf6la0lOZLMegPEC41/We9N9kmq2
exoxi7CtWsmJjw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:29 2025 by rpki-client