Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
File: hyELNM4ALjCgpU-r-ivKxG36cig.mft (raw, json)
Hash identifier: j4Jqy0FMI0m6VN5VZ5jDfJm3SG0LBO3lk4GoIoCRa4Q=
Subject key identifier: 77:3C:67:86:C6:6D:01:50:70:78:DB:B8:5C:60:75:64:63:A8:E1:19
Authority key identifier: 87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
Certificate issuer: /CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Certificate serial: 01963F8B9EB5DAAE36E28E3C58171206B743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
Manifest number: 0311
Signing time: Wed 16 Apr 2025 17:00:36 +0000
Manifest this update: Wed 16 Apr 2025 17:00:36 +0000
Manifest next update: Thu 17 Apr 2025 17:00:36 +0000
Files and hashes: 1: Oi0Mexif2IU5YWgRrWRDGcE4Aw4.roa (hash: hcI8ATUfRYduE8yCuLSr8RsjKUn++KtzCI3lWbIhr1A=)
2: RNEIzNGbtOLDhiuIlbx5LtZxiHA.roa (hash: YH3jUp9Z5jmgiTgvLayfiplIuhfqDKTG69/LcYMXnX0=)
3: hyELNM4ALjCgpU-r-ivKxG36cig.crl (hash: 1rert7aEiiXE68wKgR4HM5u28T93tFU+etTgff6vZsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:9e:b5:da:ae:36:e2:8e:3c:58:17:12:06:b7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Validity
Not Before: Apr 16 17:00:36 2025 GMT
Not After : Apr 17 17:00:36 2025 GMT
Subject: CN=773c6786c66d01507078dbb85c60756463a8e119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:1f:a3:fb:34:08:85:3e:4c:4d:65:4f:76:
07:b9:c2:63:08:3d:a2:4a:ca:bf:f6:fe:09:9a:c8:
64:91:a6:b7:f7:7c:d8:af:2f:4a:dc:ae:be:2b:c5:
b1:b6:a7:b8:dc:2c:ce:88:7f:1c:e4:5a:9b:34:8a:
90:65:3e:0d:17:0a:74:d9:18:3c:f3:f7:fc:69:62:
df:f4:ba:1d:00:3c:24:ea:80:58:12:ff:5a:b2:ab:
9b:0d:97:08:6e:8f:df:45:1b:4a:f0:0d:0c:e4:ac:
9a:60:19:11:18:08:27:83:ba:e9:68:cc:af:ba:f5:
7d:f4:13:04:3b:e3:4e:12:b5:f4:72:4c:64:60:cc:
37:1a:27:91:18:49:d6:3f:fd:c9:1c:b4:ac:f8:ed:
ea:d5:cb:b6:b3:1e:1f:8c:e2:9d:8f:67:50:9e:e9:
ae:ca:b6:fc:72:ff:ca:d8:03:54:92:f1:42:ed:d8:
24:42:66:8a:54:d4:13:bd:a5:df:18:40:8e:de:5e:
47:2b:fb:ce:bf:4f:32:e6:82:2f:69:d2:1e:1e:a6:
3f:13:b9:50:fe:d4:32:77:5c:a6:60:86:55:77:e2:
0f:4a:f8:2f:bb:fd:90:f5:07:04:3d:c7:84:47:41:
8e:24:d1:44:7b:a8:9d:39:d4:32:bd:16:33:af:c4:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3C:67:86:C6:6D:01:50:70:78:DB:B8:5C:60:75:64:63:A8:E1:19
X509v3 Authority Key Identifier:
keyid:87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:bf:aa:a9:69:1d:69:20:ab:b9:8a:3b:a3:24:79:0b:41:e8:
03:ef:45:c5:7f:1a:12:5a:80:a7:f4:84:ad:e8:70:31:a0:ba:
31:3a:1f:c5:c6:ed:84:15:0a:c6:6c:b2:95:52:2e:b2:34:d9:
27:29:cf:40:50:2b:37:0f:0a:66:82:b3:41:8a:34:b1:a0:fa:
4b:15:8f:54:fb:ed:2b:bb:db:bb:e8:95:f9:1b:86:93:d8:d6:
9b:b5:c9:ca:50:62:fd:59:65:f6:1e:4c:25:7c:54:e1:26:46:
01:67:4f:b3:52:86:df:bd:44:83:d9:90:59:5a:85:94:5c:66:
86:47:9a:b4:0c:ac:f8:35:68:56:c6:10:dc:82:3b:2a:c9:ad:
99:89:2e:f4:37:9b:b2:8c:76:d7:b5:f1:fc:1c:72:c6:a2:69:
26:95:d1:24:39:88:fa:95:83:00:97:13:23:e5:25:94:0a:f9:
10:c9:b6:16:50:d3:59:57:79:e9:91:e6:e6:6d:25:9a:6d:20:
d3:d3:af:e0:38:64:f9:5e:44:fa:b5:61:e4:1b:f8:3c:d1:f2:
91:b3:66:36:81:41:68:01:6e:72:4e:c6:e3:e8:e8:65:19:d4:
33:9d:d7:88:ec:1b:af:db:20:f6:d5:7a:aa:fd:3d:e9:64:77:
7a:c8:d3:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/i5612q424o48WBcSBrdDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MjEwYjM0Y2UwMDJlMzBhMGE1NGZhYmZhMmJjYWM0NmRm
YTcyMjgwHhcNMjUwNDE2MTcwMDM2WhcNMjUwNDE3MTcwMDM2WjAzMTEwLwYDVQQD
Eyg3NzNjNjc4NmM2NmQwMTUwNzA3OGRiYjg1YzYwNzU2NDYzYThlMTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobgfo/s0CIU+TE1lT3YHucJjCD2i
Ssq/9v4Jmshkkaa393zYry9K3K6+K8Wxtqe43CzOiH8c5FqbNIqQZT4NFwp02Rg8
8/f8aWLf9LodADwk6oBYEv9asqubDZcIbo/fRRtK8A0M5KyaYBkRGAgng7rpaMyv
uvV99BMEO+NOErX0ckxkYMw3GieRGEnWP/3JHLSs+O3q1cu2sx4fjOKdj2dQnumu
yrb8cv/K2ANUkvFC7dgkQmaKVNQTvaXfGECO3l5HK/vOv08y5oIvadIeHqY/E7lQ
/tQyd1ymYIZVd+IPSvgvu/2Q9QcEPceER0GOJNFEe6idOdQyvRYzr8S5KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHc8Z4bGbQFQcHjbuFxgdWRjqOEZMB8GA1UdIwQY
MBaAFIchCzTOAC4woKVPq/orysRt+nIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yOWEwZGMtMjBhZi00MzdlLTk4NzAt
MzY2OWQxYjU2OWQ2LzEvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8yOWEwZGMtMjBhZi00MzdlLTk4NzAtMzY2OWQxYjU2OWQ2
LzEvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlL+qqWkd
aSCruYo7oyR5C0HoA+9FxX8aElqAp/SErehwMaC6MTofxcbthBUKxmyylVIusjTZ
JynPQFArNw8KZoKzQYo0saD6SxWPVPvtK7vbu+iV+RuGk9jWm7XJylBi/Vll9h5M
JXxU4SZGAWdPs1KG371Eg9mQWVqFlFxmhkeatAys+DVoVsYQ3II7KsmtmYku9Deb
sox217Xx/BxyxqJpJpXRJDmI+pWDAJcTI+UllAr5EMm2FlDTWVd56ZHm5m0lmm0g
09Ov4Dhk+V5E+rVh5Bv4PNHykbNmNoFBaAFuck7G4+joZRnUM53XiOwbr9sg9tV6
qv096WR3esjTlw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:05:47 2025 by rpki-client