Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
File: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft (raw, json)
Hash identifier: fxVMEbjAgpkU+6BialnHtK1+eiVtXsTrWQdpUgyB68w=
Subject key identifier: BB:70:41:69:40:21:AF:5C:40:8D:A1:C6:A4:EF:B1:F3:A6:CA:2D:75
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 0196501168358256B8AF8E83F1AF68522869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
Manifest number: 1517
Signing time: Sat 19 Apr 2025 22:00:40 +0000
Manifest this update: Sat 19 Apr 2025 22:00:40 +0000
Manifest next update: Sun 20 Apr 2025 22:00:40 +0000
Files and hashes: 1: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl (hash: BGKIaPYCjpV1VY2gtK/HSfmtd/n4xmDfpD1nO4XFhQE=)
2: PDE_xx1gzmPAVxOZXpeIJmNjp-w.roa (hash: rsisC5jLLAQc/j1oflIAdcSgTWRxBAcfuySQlAiOJsc=)
3: Zg0aTO_s-s5vOZoxmmqg_5sQSgQ.roa (hash: QOvTkDAZBFbf1/F4gCK1ncg1KiM7Id/ni6wFdDr4R+8=)
4: tUG2gp-hSdDfUJYQlaFq0NzbX94.roa (hash: IvkQwvvwCRW0GZATlVei8Jb/Mr/PuuQNS0wQyy4KpD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:68:35:82:56:b8:af:8e:83:f1:af:68:52:28:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Apr 19 22:00:40 2025 GMT
Not After : Apr 20 22:00:40 2025 GMT
Subject: CN=bb7041694021af5c408da1c6a4efb1f3a6ca2d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f5:3d:d4:cf:f8:39:e1:d3:6b:00:1b:1a:a4:
10:0c:e6:c2:36:62:9f:16:0d:19:39:dc:61:57:a5:
e8:2d:65:64:8b:a8:fe:3f:18:83:4c:be:a5:41:b3:
87:ee:bb:6d:5c:2e:4a:fd:65:64:3e:e0:f4:5f:01:
7e:0c:84:7d:dd:65:b1:c5:4e:ac:4d:87:a2:63:12:
95:91:b8:5e:73:26:f6:f7:c9:1c:d4:e9:06:fb:c1:
0a:0f:b0:99:7b:98:c0:5c:c9:bb:77:d6:06:c3:b7:
c6:11:85:50:31:8d:6d:ce:c4:b0:c9:b1:22:4c:c5:
eb:9c:b9:09:8b:14:70:d9:e8:ac:ec:ca:ea:6d:4e:
c3:12:26:f7:a9:55:91:06:95:3c:21:0b:74:04:8f:
a9:90:21:d4:fd:65:87:b0:f5:e4:fd:94:62:65:dd:
8c:d0:00:76:3c:82:a3:89:84:5c:82:9c:3b:e2:59:
58:5e:de:15:6b:41:26:78:fd:dc:7d:4b:29:b1:36:
86:c3:51:e3:98:5f:8c:2e:a9:d1:16:36:b9:12:66:
52:7c:c9:a2:90:5d:f4:f7:18:43:dd:ca:ef:5a:3a:
b6:cb:01:77:0d:40:d5:41:e3:30:6d:a8:2f:32:df:
a0:1f:3d:12:9b:88:89:e8:aa:71:c8:66:6e:b8:81:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:70:41:69:40:21:AF:5C:40:8D:A1:C6:A4:EF:B1:F3:A6:CA:2D:75
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:20:f7:27:4e:63:fc:77:14:54:cb:bc:e9:01:a6:5a:91:f3:
81:df:87:c7:57:e4:cb:26:6c:2f:b4:02:c3:42:12:b5:4c:d7:
a9:23:92:65:0a:2b:e0:5b:24:f2:52:7b:24:cc:df:e6:b3:b6:
8f:99:27:2f:9d:94:66:6e:6e:b9:8c:b5:26:c7:ce:5e:80:46:
74:f2:85:08:64:eb:1b:28:00:8c:a3:a3:7e:cc:bc:57:e5:33:
e7:61:50:af:a7:b4:cd:2e:94:b1:b6:fd:ac:9c:cd:5a:4a:af:
39:8e:17:f9:42:f3:d8:a2:01:26:c6:14:0a:8b:1a:01:a1:ba:
f5:b4:b2:d2:38:34:cd:77:0c:06:40:00:ec:80:72:6a:3b:4f:
d5:66:ca:09:4f:e4:a6:22:ff:4a:06:3d:d0:f8:cf:7b:bb:24:
74:00:07:80:f4:b1:42:96:db:a5:75:f1:25:d0:d6:3a:6c:c8:
8e:9b:28:af:b7:6e:79:b5:94:a2:a7:bf:05:13:7c:74:b9:7c:
32:89:aa:e1:2b:35:d6:a7:d6:bb:30:f9:3e:e4:70:3b:b8:06:
4d:1c:c3:c1:01:1a:7f:a4:4d:c4:3b:99:e7:13:69:4f:27:97:
72:9b:75:de:ab:62:4f:7e:4d:8e:a1:62:ee:5e:5e:0f:51:6d:
57:0e:8e:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQEWg1gla4r46D8a9oUihpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NzgyMWE3Yzg3NjFlMDgxMjFlNzBjOWZmNDJmZjliNmFk
MzRlNTEwHhcNMjUwNDE5MjIwMDQwWhcNMjUwNDIwMjIwMDQwWjAzMTEwLwYDVQQD
EyhiYjcwNDE2OTQwMjFhZjVjNDA4ZGExYzZhNGVmYjFmM2E2Y2EyZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/U91M/4OeHTawAbGqQQDObCNmKf
Fg0ZOdxhV6XoLWVki6j+PxiDTL6lQbOH7rttXC5K/WVkPuD0XwF+DIR93WWxxU6s
TYeiYxKVkbhecyb298kc1OkG+8EKD7CZe5jAXMm7d9YGw7fGEYVQMY1tzsSwybEi
TMXrnLkJixRw2eis7MrqbU7DEib3qVWRBpU8IQt0BI+pkCHU/WWHsPXk/ZRiZd2M
0AB2PIKjiYRcgpw74llYXt4Va0EmeP3cfUspsTaGw1HjmF+MLqnRFja5EmZSfMmi
kF309xhD3crvWjq2ywF3DUDVQeMwbagvMt+gHz0Sm4iJ6KpxyGZuuIEJFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtwQWlAIa9cQI2hxqTvsfOmyi11MB8GA1UdIwQY
MBaAFNh4IafIdh4IEh5wyf9C/5tq005RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lNTcyNWItMzEyOC00NGIzLTlmODMt
NWFhNjIwYTgxMTQ5LzEvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9lNTcyNWItMzEyOC00NGIzLTlmODMtNWFhNjIwYTgxMTQ5
LzEvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiD3J05j
/HcUVMu86QGmWpHzgd+Hx1fkyyZsL7QCw0IStUzXqSOSZQor4Fsk8lJ7JMzf5rO2
j5knL52UZm5uuYy1JsfOXoBGdPKFCGTrGygAjKOjfsy8V+Uz52FQr6e0zS6Usbb9
rJzNWkqvOY4X+ULz2KIBJsYUCosaAaG69bSy0jg0zXcMBkAA7IByajtP1WbKCU/k
piL/SgY90PjPe7skdAAHgPSxQpbbpXXxJdDWOmzIjpsor7duebWUoqe/BRN8dLl8
Momq4Ss11qfWuzD5PuRwO7gGTRzDwQEaf6RNxDuZ5xNpTyeXcpt13qtiT35NjqFi
7l5eD1FtVw6OtA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:09:25 2025 by rpki-client