Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
File: HvyrTe3tZqvvfNftcmV7wDqCKdY.mft (raw, json)
Hash identifier: 7HkScvQHrjSA2gC/xBKMR+wmpc6muNeGIFCyrmNOnKs=
Subject key identifier: 1A:53:CA:41:E4:A1:8E:E6:A6:4B:30:1C:32:AB:1E:22:AC:C8:F4:35
Authority key identifier: 1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
Certificate issuer: /CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Certificate serial: 01963E423C5167147D263B93B3CFB903BBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
Manifest number: 055A
Signing time: Wed 16 Apr 2025 11:00:50 +0000
Manifest this update: Wed 16 Apr 2025 11:00:50 +0000
Manifest next update: Thu 17 Apr 2025 11:00:50 +0000
Files and hashes: 1: HvyrTe3tZqvvfNftcmV7wDqCKdY.crl (hash: PWDAMvvQXi3Z8yWvPn+RaZlh0LU7ld0vyDOIEgy5nQE=)
2: pjAqX2bP9pU3f40InIlu9D-wPb0.roa (hash: KDEL4lm2CO6MjB78JN8LmOeXK44ZRV1/lJ1Gn3B2Wt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:42:3c:51:67:14:7d:26:3b:93:b3:cf:b9:03:bb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Validity
Not Before: Apr 16 11:00:50 2025 GMT
Not After : Apr 17 11:00:50 2025 GMT
Subject: CN=1a53ca41e4a18ee6a64b301c32ab1e22acc8f435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:c8:e8:ae:a3:bf:1d:8c:ee:5f:cc:2e:5b:
1a:db:67:96:cc:df:70:2c:5e:19:25:f4:a2:76:34:
f5:72:dd:82:17:e9:03:8b:05:fd:85:ce:02:89:8e:
ce:d2:1f:14:06:35:bf:6c:f1:30:7e:c4:7b:5c:52:
bc:fc:57:db:1f:e6:01:11:01:0b:55:6a:a2:95:6b:
d4:45:71:19:fb:4a:4e:df:a3:5d:9c:98:21:2b:74:
ea:83:22:8c:96:a4:2d:d4:fb:46:58:d6:33:e2:97:
f5:51:8d:0c:db:c5:8f:e7:ac:4e:31:4d:5c:7f:f8:
eb:27:32:c4:bb:aa:52:ca:b0:05:11:2e:a3:57:f5:
e8:44:43:02:3d:66:f8:1f:4d:e0:5e:2b:43:d9:05:
c7:dc:1b:4e:fb:ce:35:e2:ad:f6:5b:50:ca:b7:ab:
6e:6e:70:13:15:1a:94:9d:92:b9:a1:71:b3:b2:83:
14:72:99:17:a0:f2:5b:2c:52:a4:10:e9:3e:0b:d7:
3f:c1:5d:53:76:fb:54:57:3f:56:dc:22:f5:45:0a:
a6:9e:44:e3:4b:54:e3:fd:ab:02:39:70:01:7a:c6:
7e:45:b9:df:00:2e:5f:e8:5b:c0:fc:09:1a:65:bd:
a3:76:03:66:7a:72:b3:ec:a3:63:a9:a0:89:1f:f6:
b0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:53:CA:41:E4:A1:8E:E6:A6:4B:30:1C:32:AB:1E:22:AC:C8:F4:35
X509v3 Authority Key Identifier:
keyid:1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4b:10:01:41:2f:9b:67:0e:f0:e6:12:19:8b:13:30:c7:64:
e9:02:92:92:ee:80:d9:69:40:53:6d:c6:37:5c:37:e9:12:ee:
d7:88:05:da:4c:e9:1b:f1:0e:81:1f:79:76:75:36:4c:d7:67:
f1:31:18:2c:5e:a4:87:ea:4d:65:cb:11:96:13:8b:da:cd:6b:
1e:13:14:8b:3f:30:c2:68:fa:5a:1f:e0:32:94:6d:74:bf:44:
ad:f2:48:98:44:65:02:99:9f:28:1b:a4:9e:f0:d7:1e:17:c1:
97:0c:2f:2c:e5:a6:43:d8:cd:e1:6e:64:a3:43:9d:6f:90:5b:
7a:84:b5:55:48:03:b3:64:8a:e5:0a:e9:0e:30:1e:8e:38:3e:
f3:3b:6f:e0:9a:64:84:f6:b0:69:1c:79:51:63:8f:21:46:b3:
76:7c:58:f7:f1:76:17:26:a2:81:00:a5:83:e2:61:4b:7b:52:
76:33:b7:6b:17:55:94:91:69:23:8f:60:4b:15:ea:09:e7:4f:
c3:3d:69:c2:45:42:4f:70:7a:da:8f:f3:d7:8c:cd:0b:9d:ee:
70:0b:e2:7a:19:ae:1f:cf:ee:6d:df:57:9c:8f:3d:06:87:4b:
75:34:37:64:11:07:13:63:12:cc:87:4c:b9:24:74:00:80:2a:
9a:95:d6:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+QjxRZxR9JjuTs8+5A7vxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZmNhYjRkZWRlZDY2YWJlZjdjZDdlZDcyNjU3YmMwM2E4
MjI5ZDYwHhcNMjUwNDE2MTEwMDUwWhcNMjUwNDE3MTEwMDUwWjAzMTEwLwYDVQQD
EygxYTUzY2E0MWU0YTE4ZWU2YTY0YjMwMWMzMmFiMWUyMmFjYzhmNDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg/I6K6jvx2M7l/MLlsa22eWzN9w
LF4ZJfSidjT1ct2CF+kDiwX9hc4CiY7O0h8UBjW/bPEwfsR7XFK8/FfbH+YBEQEL
VWqilWvURXEZ+0pO36NdnJghK3TqgyKMlqQt1PtGWNYz4pf1UY0M28WP56xOMU1c
f/jrJzLEu6pSyrAFES6jV/XoREMCPWb4H03gXitD2QXH3BtO+8414q32W1DKt6tu
bnATFRqUnZK5oXGzsoMUcpkXoPJbLFKkEOk+C9c/wV1TdvtUVz9W3CL1RQqmnkTj
S1Tj/asCOXABesZ+RbnfAC5f6FvA/AkaZb2jdgNmenKz7KNjqaCJH/awvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpTykHkoY7mpkswHDKrHiKsyPQ1MB8GA1UdIwQY
MBaAFB78q03t7War73zX7XJle8A6ginWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZ5clRlM3RacXZ2Zk5mdGNtVjd3RHFDS2RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jN2M4M2YtZmFjMi00NTUxLThmNzgt
OTFhNzdlYTA1ZGYxLzEvSHZ5clRlM3RacXZ2Zk5mdGNtVjd3RHFDS2RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jN2M4M2YtZmFjMi00NTUxLThmNzgtOTFhNzdlYTA1ZGYx
LzEvSHZ5clRlM3RacXZ2Zk5mdGNtVjd3RHFDS2RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUsQAUEv
m2cO8OYSGYsTMMdk6QKSku6A2WlAU23GN1w36RLu14gF2kzpG/EOgR95dnU2TNdn
8TEYLF6kh+pNZcsRlhOL2s1rHhMUiz8wwmj6Wh/gMpRtdL9ErfJImERlApmfKBuk
nvDXHhfBlwwvLOWmQ9jN4W5ko0Odb5BbeoS1VUgDs2SK5QrpDjAejjg+8ztv4Jpk
hPawaRx5UWOPIUazdnxY9/F2FyaigQClg+JhS3tSdjO3axdVlJFpI49gSxXqCedP
wz1pwkVCT3B62o/z14zNC53ucAviehmuH8/ubd9XnI89BodLdTQ3ZBEHE2MSzIdM
uSR0AIAqmpXWdQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:58:10 2025 by rpki-client