Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
File: HDRPEVl1lIgoU6eVgd0r94nusx8.mft (raw, json)
Hash identifier: 40GYLm7NOZiNtdyRLYiMRqW0ea+8IbTJABXLqxmVeOI=
Subject key identifier: BA:2C:F5:34:B6:59:70:7E:D0:7E:8A:57:66:76:52:FC:F9:0F:E4:47
Authority key identifier: 1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
Certificate issuer: /CN=1c344f11597594882853a79581dd2bf789eeb31f
Certificate serial: 019648FC8AD3226D59CD478F67947C6BBC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
Manifest number: 12CB
Signing time: Fri 18 Apr 2025 13:00:32 +0000
Manifest this update: Fri 18 Apr 2025 13:00:32 +0000
Manifest next update: Sat 19 Apr 2025 13:00:32 +0000
Files and hashes: 1: HDRPEVl1lIgoU6eVgd0r94nusx8.crl (hash: UIboKrEQ8sg+TQyrfnuJbaxGdFN/aFreT5VrAHTcfLo=)
2: OLwYzj-fOtPupeVPjMakvIdCk14.roa (hash: w82sMMgD2hDeR96YGrYPpR7eSx7BTygOkVtPfhR7sSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:fc:8a:d3:22:6d:59:cd:47:8f:67:94:7c:6b:bc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c344f11597594882853a79581dd2bf789eeb31f
Validity
Not Before: Apr 18 13:00:32 2025 GMT
Not After : Apr 19 13:00:32 2025 GMT
Subject: CN=ba2cf534b659707ed07e8a57667652fcf90fe447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d6:83:40:fd:55:07:e5:e1:0e:df:d3:64:c3:
fb:bf:d2:51:1b:57:d6:83:18:33:68:b1:45:22:4d:
84:1b:6c:05:ce:9a:87:2b:20:d5:cd:9f:03:5b:d8:
6c:2e:e0:a2:26:4b:f6:0f:6e:8d:74:c8:11:d8:ee:
98:88:86:63:7b:c4:8b:09:e0:18:0a:a1:d7:f6:bd:
c0:01:3b:bc:09:f3:78:85:ca:c3:30:8b:08:2a:6f:
3e:d4:94:00:a5:98:70:1b:d6:39:a1:79:bf:5e:23:
6d:8f:3f:f2:d4:62:45:87:83:b8:22:3a:f5:11:0a:
99:43:d6:ee:76:a8:96:73:3b:f2:a5:92:51:36:ea:
c3:b0:ed:28:ac:c8:67:75:b0:fa:1a:ca:b8:8c:08:
0c:e8:d8:30:56:2e:b2:60:93:56:99:8c:8c:b3:da:
e1:df:58:89:dc:05:f1:bb:70:5a:a8:26:d7:6f:c9:
fe:d0:fe:fe:18:8e:b2:36:b3:8d:01:75:c4:b8:62:
31:43:ef:e7:3e:4c:d8:c1:8c:85:9d:a0:c0:c1:87:
b8:62:29:32:8f:ca:bc:de:bc:f0:9d:0a:c6:20:12:
34:9b:7f:4b:0a:82:61:87:ca:10:e4:1d:d7:d5:df:
c3:09:21:d6:78:5c:eb:b0:eb:4e:82:0b:bf:e3:96:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2C:F5:34:B6:59:70:7E:D0:7E:8A:57:66:76:52:FC:F9:0F:E4:47
X509v3 Authority Key Identifier:
keyid:1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:73:6d:8b:6c:14:79:fd:29:e8:f1:bb:be:44:4d:3d:33:d9:
0b:fe:7d:81:48:6f:83:7c:27:37:b4:56:70:bc:7e:fd:00:05:
88:d5:2d:40:03:d1:cb:57:c6:86:ab:91:6c:6c:ac:5d:f1:44:
e7:35:76:a6:b7:bf:55:a8:79:fe:68:12:e9:73:7f:e3:c7:9b:
53:1b:1a:21:e6:55:3f:c3:25:32:64:cc:4c:16:62:27:2d:6b:
7e:c8:40:68:a5:62:04:72:8d:75:74:45:3b:04:58:7e:8f:cc:
b1:bd:9f:07:41:84:63:47:48:3d:9f:b2:c2:ec:2c:a5:cd:b5:
73:9b:7e:08:d0:50:bb:b1:07:54:c7:87:32:bd:4a:02:29:26:
b2:b7:87:12:38:68:0a:ba:4e:b3:66:94:b8:a5:34:2b:71:6e:
09:e1:ef:48:be:dd:fe:88:c4:09:e2:8b:33:2b:08:e0:d0:26:
7e:27:77:81:65:49:61:3c:0c:54:92:2d:77:72:a8:f4:2a:fd:
b4:54:c9:f2:3d:00:5b:aa:c6:29:6e:16:47:ff:95:54:a0:94:
d0:f4:df:9e:fd:e1:4f:6b:0d:8f:c6:af:4d:c4:b9:7d:43:b0:
c3:6c:0b:b2:5a:82:d4:84:45:70:68:96:34:8c:c6:6f:78:ba:
c9:c4:7a:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZI/IrTIm1ZzUePZ5R8a7xkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMzQ0ZjExNTk3NTk0ODgyODUzYTc5NTgxZGQyYmY3ODll
ZWIzMWYwHhcNMjUwNDE4MTMwMDMyWhcNMjUwNDE5MTMwMDMyWjAzMTEwLwYDVQQD
EyhiYTJjZjUzNGI2NTk3MDdlZDA3ZThhNTc2Njc2NTJmY2Y5MGZlNDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1daDQP1VB+XhDt/TZMP7v9JRG1fW
gxgzaLFFIk2EG2wFzpqHKyDVzZ8DW9hsLuCiJkv2D26NdMgR2O6YiIZje8SLCeAY
CqHX9r3AATu8CfN4hcrDMIsIKm8+1JQApZhwG9Y5oXm/XiNtjz/y1GJFh4O4Ijr1
EQqZQ9budqiWczvypZJRNurDsO0orMhndbD6Gsq4jAgM6NgwVi6yYJNWmYyMs9rh
31iJ3AXxu3BaqCbXb8n+0P7+GI6yNrONAXXEuGIxQ+/nPkzYwYyFnaDAwYe4Yiky
j8q83rzwnQrGIBI0m39LCoJhh8oQ5B3X1d/DCSHWeFzrsOtOggu/45b+hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLos9TS2WXB+0H6KV2Z2Uvz5D+RHMB8GA1UdIwQY
MBaAFBw0TxFZdZSIKFOnlYHdK/eJ7rMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSERSUEVWbDFsSWdvVTZlVmdkMHI5NG51c3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mMDYxOTEtYjBhOC00OTUwLWIwMjct
ZGVlYzZmY2YyZDk1LzEvSERSUEVWbDFsSWdvVTZlVmdkMHI5NG51c3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9mMDYxOTEtYjBhOC00OTUwLWIwMjctZGVlYzZmY2YyZDk1
LzEvSERSUEVWbDFsSWdvVTZlVmdkMHI5NG51c3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3Nti2wU
ef0p6PG7vkRNPTPZC/59gUhvg3wnN7RWcLx+/QAFiNUtQAPRy1fGhquRbGysXfFE
5zV2pre/Vah5/mgS6XN/48ebUxsaIeZVP8MlMmTMTBZiJy1rfshAaKViBHKNdXRF
OwRYfo/Msb2fB0GEY0dIPZ+ywuwspc21c5t+CNBQu7EHVMeHMr1KAikmsreHEjho
CrpOs2aUuKU0K3FuCeHvSL7d/ojECeKLMysI4NAmfid3gWVJYTwMVJItd3Ko9Cr9
tFTJ8j0AW6rGKW4WR/+VVKCU0PTfnv3hT2sNj8avTcS5fUOww2wLslqC1IRFcGiW
NIzGb3i6ycR67w==
-----END CERTIFICATE-----
Generated at Fri Apr 18 18:05:31 2025 by rpki-client