Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
File: HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json)
Hash identifier: DsdM67WcFg5pFFwgM+wOUSuRVNejpoSbX0yFvE6SW2I=
Subject key identifier: F3:DD:C7:3A:7D:59:B7:DA:A0:39:94:BE:87:60:B7:B5:97:7B:19:1C
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Certificate issuer: /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial: 019652A49C10BE38CC1A960550D826AA55EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
Manifest number: B1
Signing time: Sun 20 Apr 2025 10:00:41 +0000
Manifest this update: Sun 20 Apr 2025 10:00:41 +0000
Manifest next update: Mon 21 Apr 2025 10:00:41 +0000
Files and hashes: 1: EbkibLILSHjAv1JvYeoD8fCFGEE.roa (hash: /Ofe9Y13cX6ULVD3fa4GKAU4rwOizM42Q9uH3zy41Wc=)
2: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: r/HrrqRSa6YJEIVTxVD8Ky8o/MlA5bd5uzNcsmfOBUM=)
3: Qte0y98Y9LrHrXTOy7e_WZVED5A.roa (hash: FqjEi0MQwCtulDy3FoGliTQJvoHi+j/oxOseKBz9nDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:9c:10:be:38:cc:1a:96:05:50:d8:26:aa:55:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Validity
Not Before: Apr 20 10:00:41 2025 GMT
Not After : Apr 21 10:00:41 2025 GMT
Subject: CN=f3ddc73a7d59b7daa03994be8760b7b5977b191c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:1b:1d:8d:c7:f5:c5:28:fe:0f:b8:81:71:
e7:3c:4f:fa:76:41:c9:be:95:37:fa:14:ed:d0:11:
80:b5:d2:88:b0:12:ac:03:65:50:90:be:88:77:09:
63:b9:55:9a:11:61:95:68:0f:0b:ab:b0:91:51:21:
71:d1:6f:20:d6:08:fc:32:9a:38:1d:74:c3:75:7e:
f0:51:54:38:1b:3e:a8:fd:6c:a5:b5:4a:94:26:5b:
c6:09:3e:d2:e9:62:d5:68:b5:1a:a1:40:5b:dc:87:
ea:08:56:00:91:87:7d:d0:64:75:bc:80:c1:8d:a4:
79:bf:e6:41:7e:88:7f:84:44:41:1d:9d:18:c2:c9:
6b:0b:14:c1:1b:b3:76:a5:4a:85:75:ee:3d:66:67:
6f:9f:43:9d:0a:35:b5:7c:ca:de:f1:95:cf:1b:db:
59:17:2b:b3:4d:2c:30:5d:e7:6e:db:58:d6:47:de:
c5:0d:5e:0f:e7:ab:24:3d:c3:d4:2d:32:89:32:70:
7f:5b:f8:63:ad:e3:30:a7:74:77:9f:b8:64:a1:fd:
78:ae:0f:17:6e:cf:a5:17:3f:7a:34:f7:c2:76:6a:
71:cf:21:ba:b0:70:8d:b3:6f:4a:d4:8a:d7:fd:86:
ca:b9:a5:f3:70:5e:e7:c7:29:66:d2:47:fb:c0:4f:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DD:C7:3A:7D:59:B7:DA:A0:39:94:BE:87:60:B7:B5:97:7B:19:1C
X509v3 Authority Key Identifier:
keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b2:03:04:3b:33:87:13:07:20:1b:db:5c:92:9e:ff:04:5f:
86:96:67:e4:fa:8c:62:03:1f:99:fb:79:55:68:30:43:8c:19:
a6:46:e8:07:38:d4:ad:67:67:e2:54:e1:4a:1d:05:9b:67:48:
15:f0:9b:68:10:5d:48:04:43:14:36:1f:20:7d:c9:3f:63:a9:
ec:d7:8f:da:b7:6a:1d:38:d0:b8:42:04:5e:80:e7:97:86:57:
a6:45:c0:27:2a:12:e1:59:cb:ca:9f:d5:8e:9d:6c:23:3d:0a:
cb:2b:18:fe:f0:31:35:9b:1e:a9:c5:ea:13:95:e2:3c:ce:c2:
2b:4f:1d:4d:15:2f:4e:5e:76:4c:29:7e:55:0e:3f:3f:58:13:
a8:a1:89:8d:b3:4e:00:cf:76:ef:ce:7f:c6:a8:7a:bf:94:5a:
78:5c:47:66:da:cb:34:b8:7d:5f:80:7f:3f:e4:42:b7:37:72:
57:21:ca:f1:77:97:de:d0:07:01:4c:63:96:57:9f:b9:92:42:
af:f2:83:6f:55:bb:51:02:ba:9b:ce:96:44:85:20:a3:ba:fb:
16:35:f9:e2:92:56:7c:e9:8d:c4:5d:2f:5a:ee:06:0e:db:93:
f2:54:ba:94:44:59:ef:f6:29:2b:9c:a0:d8:eb:8f:2a:29:ef:
c4:c8:02:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSpJwQvjjMGpYFUNgmqlXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOGI5MzIzY2Q0YzkyYzc1ZDgzZDM0NmYwZDI2OWU1YzJk
NWE4MDgwHhcNMjUwNDIwMTAwMDQxWhcNMjUwNDIxMTAwMDQxWjAzMTEwLwYDVQQD
EyhmM2RkYzczYTdkNTliN2RhYTAzOTk0YmU4NzYwYjdiNTk3N2IxOTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozQbHY3H9cUo/g+4gXHnPE/6dkHJ
vpU3+hTt0BGAtdKIsBKsA2VQkL6IdwljuVWaEWGVaA8Lq7CRUSFx0W8g1gj8Mpo4
HXTDdX7wUVQ4Gz6o/WyltUqUJlvGCT7S6WLVaLUaoUBb3IfqCFYAkYd90GR1vIDB
jaR5v+ZBfoh/hERBHZ0YwslrCxTBG7N2pUqFde49Zmdvn0OdCjW1fMre8ZXPG9tZ
FyuzTSwwXedu21jWR97FDV4P56skPcPULTKJMnB/W/hjreMwp3R3n7hkof14rg8X
bs+lFz96NPfCdmpxzyG6sHCNs29K1IrX/YbKuaXzcF7nxylm0kf7wE/7pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPdxzp9WbfaoDmUvodgt7WXexkcMB8GA1UdIwQY
MBaAFB2LkyPNTJLHXYPTRvDSaeXC1agIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFl1VEk4MU1rc2RkZzlORzhOSnA1Y0xWcUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84YzdhMzQtNTM4ZC00MzE0LWFhZjQt
MDRkZDgwZDViNzJkLzEvSFl1VEk4MU1rc2RkZzlORzhOSnA1Y0xWcUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84YzdhMzQtNTM4ZC00MzE0LWFhZjQtMDRkZDgwZDViNzJk
LzEvSFl1VEk4MU1rc2RkZzlORzhOSnA1Y0xWcUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLIDBDsz
hxMHIBvbXJKe/wRfhpZn5PqMYgMfmft5VWgwQ4wZpkboBzjUrWdn4lThSh0Fm2dI
FfCbaBBdSARDFDYfIH3JP2Op7NeP2rdqHTjQuEIEXoDnl4ZXpkXAJyoS4VnLyp/V
jp1sIz0KyysY/vAxNZseqcXqE5XiPM7CK08dTRUvTl52TCl+VQ4/P1gTqKGJjbNO
AM92785/xqh6v5RaeFxHZtrLNLh9X4B/P+RCtzdyVyHK8XeX3tAHAUxjllefuZJC
r/KDb1W7UQK6m86WRIUgo7r7FjX54pJWfOmNxF0vWu4GDtuT8lS6lERZ7/YpK5yg
2OuPKinvxMgCTA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:03 2025 by rpki-client