Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
File: h6WU4wS2ghg6ojWeQOHc75P-BXA.mft (raw, json)
Hash identifier: ByvR3IaZO4Sr3SrT9Xp6iHK3P4B5g3G9xZK8cZSywh8=
Subject key identifier: 23:46:B9:33:0B:A0:DF:0A:FA:9E:D8:78:31:45:4E:14:64:62:45:CF
Authority key identifier: 87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
Certificate issuer: /CN=87a594e304b682183aa2359e40e1dcef93fe0570
Certificate serial: 01964AEB0ACD3C3AFFF5274A9C87CDE439EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
Manifest number: 040D
Signing time: Fri 18 Apr 2025 22:00:39 +0000
Manifest this update: Fri 18 Apr 2025 22:00:39 +0000
Manifest next update: Sat 19 Apr 2025 22:00:39 +0000
Files and hashes: 1: Vzz9bAfXoV_CbBlQ5On5u4sMVy4.roa (hash: 9L5UOAnznGuqnwBvCvaXb3wcpMtqdknz4TA8q7GIbmw=)
2: h6WU4wS2ghg6ojWeQOHc75P-BXA.crl (hash: VorVNm4PyTs7b5iz++l6p+iSWsebhdkho14FY/QO3M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:eb:0a:cd:3c:3a:ff:f5:27:4a:9c:87:cd:e4:39:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a594e304b682183aa2359e40e1dcef93fe0570
Validity
Not Before: Apr 18 22:00:39 2025 GMT
Not After : Apr 19 22:00:39 2025 GMT
Subject: CN=2346b9330ba0df0afa9ed87831454e14646245cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:e2:1d:60:fd:45:a6:c0:39:bb:26:86:b2:
b1:92:95:c1:0e:6c:ed:4a:4f:2c:64:e4:bf:ab:db:
5b:52:f7:52:ff:2a:9b:90:fe:67:b9:a5:aa:7e:21:
73:64:47:e7:19:5d:63:f7:1b:b7:6f:c7:a1:52:1a:
e1:fd:c1:d8:b9:da:b7:42:16:d6:99:12:51:ca:ab:
e2:6b:5b:65:21:2f:21:fa:b1:1e:db:30:63:f7:3e:
80:45:15:3d:dc:98:d1:b9:a8:1b:41:84:db:85:37:
52:fa:55:d5:88:b8:5f:6b:2c:79:31:52:6d:b9:92:
ea:11:84:bf:a3:24:46:60:97:25:4e:c0:98:dc:2e:
75:4e:3f:59:c7:8e:c0:db:c5:74:20:d9:00:3c:e1:
9c:d0:4b:b5:20:28:77:e8:b4:78:9e:10:8c:39:b4:
fc:bd:db:ae:58:d0:1c:f5:03:6b:97:93:5b:ae:07:
53:2e:0e:a8:ce:59:b7:ca:48:19:52:31:83:15:19:
24:e9:a9:78:52:89:4e:72:7b:55:fc:96:37:7d:72:
5e:9d:3d:ba:17:b0:88:2f:65:a3:19:19:25:cf:e6:
62:48:0b:29:29:9a:b7:a0:e7:4e:17:0d:6a:82:55:
db:46:e5:a5:54:77:7c:87:fd:16:a5:28:49:e1:c6:
aa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:46:B9:33:0B:A0:DF:0A:FA:9E:D8:78:31:45:4E:14:64:62:45:CF
X509v3 Authority Key Identifier:
keyid:87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:40:8a:ad:c7:2f:6a:98:12:a4:b5:c7:33:1b:80:82:00:6b:
63:9e:7f:71:4f:b3:a7:0a:03:06:53:d6:ed:3f:68:36:9a:36:
95:ed:84:de:c7:40:ee:e0:f5:71:4f:28:b4:e1:40:63:35:3c:
61:9b:03:66:05:d0:70:b3:13:8b:aa:3c:4b:9d:2f:d5:25:4a:
01:16:20:c0:9f:5e:b5:1c:77:98:06:c0:5e:d1:62:d2:a4:ba:
12:ef:99:14:13:16:a0:26:30:47:21:2b:22:18:98:24:f8:4e:
6f:c2:02:c1:d4:10:b6:94:f1:a5:aa:bf:31:77:1f:22:32:2d:
0c:a9:cd:8b:bb:1e:3d:01:76:88:e0:30:f1:94:61:b8:3f:c8:
fe:85:b9:ff:5c:f0:75:58:35:4a:9b:a0:39:01:15:ad:f6:33:
bc:cf:5d:d7:7f:7d:42:c9:fe:ce:94:84:81:9a:ce:9c:4d:07:
ab:93:75:b7:75:75:f2:e2:3c:40:f4:fd:62:d2:8c:44:4c:df:
be:99:85:6c:b2:29:fe:3f:16:fd:1b:a0:49:24:00:81:54:52:
f5:4e:57:de:26:bc:82:04:04:45:a5:66:5c:a0:bd:6c:90:4b:
29:da:2a:a0:a2:15:a0:2e:5b:59:8d:0d:ef:cb:6b:f4:45:9b:
8b:0f:d5:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZK6wrNPDr/9SdKnIfN5DnuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YTU5NGUzMDRiNjgyMTgzYWEyMzU5ZTQwZTFkY2VmOTNm
ZTA1NzAwHhcNMjUwNDE4MjIwMDM5WhcNMjUwNDE5MjIwMDM5WjAzMTEwLwYDVQQD
EygyMzQ2YjkzMzBiYTBkZjBhZmE5ZWQ4NzgzMTQ1NGUxNDY0NjI0NWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RPiHWD9RabAObsmhrKxkpXBDmzt
Sk8sZOS/q9tbUvdS/yqbkP5nuaWqfiFzZEfnGV1j9xu3b8ehUhrh/cHYudq3QhbW
mRJRyqvia1tlIS8h+rEe2zBj9z6ARRU93JjRuagbQYTbhTdS+lXViLhfayx5MVJt
uZLqEYS/oyRGYJclTsCY3C51Tj9Zx47A28V0INkAPOGc0Eu1ICh36LR4nhCMObT8
vduuWNAc9QNrl5NbrgdTLg6ozlm3ykgZUjGDFRkk6al4UolOcntV/JY3fXJenT26
F7CIL2WjGRklz+ZiSAspKZq3oOdOFw1qglXbRuWlVHd8h/0WpShJ4caquQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNGuTMLoN8K+p7YeDFFThRkYkXPMB8GA1UdIwQY
MBaAFIellOMEtoIYOqI1nkDh3O+T/gVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Zjg2OTktN2I1Mi00MDZlLTgyYzAt
YjllMzRhMzhmM2E5LzEvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80Zjg2OTktN2I1Mi00MDZlLTgyYzAtYjllMzRhMzhmM2E5
LzEvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkCKrccv
apgSpLXHMxuAggBrY55/cU+zpwoDBlPW7T9oNpo2le2E3sdA7uD1cU8otOFAYzU8
YZsDZgXQcLMTi6o8S50v1SVKARYgwJ9etRx3mAbAXtFi0qS6Eu+ZFBMWoCYwRyEr
IhiYJPhOb8ICwdQQtpTxpaq/MXcfIjItDKnNi7sePQF2iOAw8ZRhuD/I/oW5/1zw
dVg1SpugOQEVrfYzvM9d1399Qsn+zpSEgZrOnE0Hq5N1t3V18uI8QPT9YtKMREzf
vpmFbLIp/j8W/RugSSQAgVRS9U5X3ia8ggQERaVmXKC9bJBLKdoqoKIVoC5bWY0N
78tr9EWbiw/Vsg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:56:27 2025 by rpki-client