Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
File: HgKySJ9HE5YtEFESslJ264HxrJA.mft (raw, json)
Hash identifier: zoK1y7lzrBmdpwpWuTKPPw6EcsZhtT0uZ322vbi4ZgI=
Subject key identifier: 4A:0A:3A:1B:67:59:23:44:46:84:D7:70:96:F8:04:47:61:62:B4:EA
Authority key identifier: 1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
Certificate issuer: /CN=1e02b2489f4713962d105112b25276eb81f1ac90
Certificate serial: 01965492B648B387C8CC049D76421003B4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 19:00:22 +0000
Manifest this update: Sun 20 Apr 2025 19:00:22 +0000
Manifest next update: Mon 21 Apr 2025 19:00:22 +0000
Files and hashes: 1: 9V85HLFbpWnoHuwfi3uBdYCY9ZM.roa (hash: sWuFEcVAMiwExmVPdpvYCkHmeYDgX5Tn0zMIqcTEx/4=)
2: HgKySJ9HE5YtEFESslJ264HxrJA.crl (hash: WVcNX3lvnJOSrdBMUy3VQzG92Oz7yeTt0MhaD06Vr40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:b6:48:b3:87:c8:cc:04:9d:76:42:10:03:b4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e02b2489f4713962d105112b25276eb81f1ac90
Validity
Not Before: Apr 20 19:00:22 2025 GMT
Not After : Apr 21 19:00:22 2025 GMT
Subject: CN=4a0a3a1b675923444684d77096f804476162b4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e8:b5:89:82:2d:4f:4f:6b:fd:e5:2c:a1:9a:
3a:83:7e:09:00:14:77:de:eb:3a:07:27:e8:22:4f:
57:f2:4e:fb:77:7e:97:b1:6a:6b:32:d4:30:70:8c:
54:58:80:ef:c1:1d:50:19:20:34:b1:72:35:2e:15:
23:cc:16:be:49:2c:8b:76:35:f6:5c:ea:5e:7f:37:
ab:1f:93:f3:9e:0a:6e:9e:1b:84:5c:bb:45:2c:8b:
0e:aa:9f:f6:47:7a:02:dd:f6:33:94:27:bd:c7:1f:
ae:79:06:dd:18:36:ca:1c:a7:ba:04:52:d6:d0:02:
77:49:ad:96:83:3c:7c:a7:b0:d9:21:18:ea:c4:20:
3e:e3:0c:15:44:2d:af:b1:d2:06:e0:9d:03:08:4e:
ba:00:15:53:21:03:e8:c7:81:fb:56:75:5b:08:a5:
47:67:9d:8f:a2:fe:70:c7:59:4c:0a:08:7a:b1:73:
f8:1f:e3:1b:28:c5:fb:0b:27:58:0f:8b:b0:d2:4d:
11:a5:13:6d:53:d4:de:73:ff:2e:fa:48:3b:aa:2b:
15:60:f0:50:83:8b:22:ca:09:04:75:81:7c:99:d8:
91:e0:54:c6:6c:71:eb:90:77:e4:43:ab:8a:a3:30:
0a:92:f1:8e:16:c2:4b:b0:e8:40:d0:df:26:6a:9a:
9c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0A:3A:1B:67:59:23:44:46:84:D7:70:96:F8:04:47:61:62:B4:EA
X509v3 Authority Key Identifier:
keyid:1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0c:ad:6b:28:f2:2e:ea:ce:5a:e9:bb:08:82:4d:06:74:d9:
c7:4b:4a:0e:2b:98:72:1b:1e:ad:9b:3e:6b:54:c6:58:8f:ac:
e9:8b:0d:f7:d5:20:da:08:bf:fe:29:4c:6f:e6:0b:b3:1b:2a:
bd:80:c0:ab:f6:b3:86:89:50:32:ef:47:e9:f8:85:4d:f9:a9:
24:ed:6d:44:31:ff:8c:9a:16:5c:6d:c8:41:88:8b:d7:65:00:
a1:42:ec:9e:c1:34:84:d1:48:89:db:11:ef:9a:b3:1b:a5:3a:
17:1b:20:a2:84:4c:09:04:8d:f2:8d:2d:68:53:79:8a:4f:d0:
2f:1a:20:06:be:80:8e:3b:f1:f2:93:fe:ee:d5:1a:0a:53:b4:
06:57:df:ea:ac:4d:ab:04:fe:85:52:21:82:1f:4a:6a:48:9a:
91:8d:4e:41:a3:67:30:12:a0:11:aa:ad:9c:63:df:0c:37:12:
8a:03:81:b9:9e:06:1b:dd:6a:97:94:95:a3:4e:f6:14:12:4c:
6d:84:15:d2:7f:c9:fe:50:b2:a5:62:c5:6c:7b:e0:db:c4:0d:
83:55:85:70:0d:f9:32:b9:2a:b5:e4:11:03:cf:4c:3b:0a:00:
f5:99:f4:74:b4:48:ef:41:f2:7f:93:dd:91:42:fa:14:33:52:
d0:fd:93:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkrZIs4fIzASddkIQA7SuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMDJiMjQ4OWY0NzEzOTYyZDEwNTExMmIyNTI3NmViODFm
MWFjOTAwHhcNMjUwNDIwMTkwMDIyWhcNMjUwNDIxMTkwMDIyWjAzMTEwLwYDVQQD
Eyg0YTBhM2ExYjY3NTkyMzQ0NDY4NGQ3NzA5NmY4MDQ0NzYxNjJiNGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOi1iYItT09r/eUsoZo6g34JABR3
3us6ByfoIk9X8k77d36XsWprMtQwcIxUWIDvwR1QGSA0sXI1LhUjzBa+SSyLdjX2
XOpefzerH5PzngpunhuEXLtFLIsOqp/2R3oC3fYzlCe9xx+ueQbdGDbKHKe6BFLW
0AJ3Sa2Wgzx8p7DZIRjqxCA+4wwVRC2vsdIG4J0DCE66ABVTIQPox4H7VnVbCKVH
Z52Pov5wx1lMCgh6sXP4H+MbKMX7CydYD4uw0k0RpRNtU9Tec/8u+kg7qisVYPBQ
g4siygkEdYF8mdiR4FTGbHHrkHfkQ6uKozAKkvGOFsJLsOhA0N8mapqcYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoKOhtnWSNERoTXcJb4BEdhYrTqMB8GA1UdIwQY
MBaAFB4CskifRxOWLRBRErJSduuB8ayQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGdLeVNKOUhFNVl0RUZFU3NsSjI2NEh4ckpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jMGEzMjYtODhlMS00MmI0LTlkNTYt
MDkyMWQxYmJmMzQ5LzEvSGdLeVNKOUhFNVl0RUZFU3NsSjI2NEh4ckpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9jMGEzMjYtODhlMS00MmI0LTlkNTYtMDkyMWQxYmJmMzQ5
LzEvSGdLeVNKOUhFNVl0RUZFU3NsSjI2NEh4ckpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQytayjy
LurOWum7CIJNBnTZx0tKDiuYchserZs+a1TGWI+s6YsN99Ug2gi//ilMb+YLsxsq
vYDAq/azholQMu9H6fiFTfmpJO1tRDH/jJoWXG3IQYiL12UAoULsnsE0hNFIidsR
75qzG6U6FxsgooRMCQSN8o0taFN5ik/QLxogBr6Ajjvx8pP+7tUaClO0Blff6qxN
qwT+hVIhgh9KakiakY1OQaNnMBKgEaqtnGPfDDcSigOBuZ4GG91ql5SVo072FBJM
bYQV0n/J/lCypWLFbHvg28QNg1WFcA35MrkqteQRA89MOwoA9Zn0dLRI70Hyf5Pd
kUL6FDNS0P2T1A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:31:08 2025 by rpki-client