Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
File: hAKSSGHLwIjGVahyU1qQMQige_E.mft (raw, json)
Hash identifier: VyC44JJtcYZxTm4zGQ1ufuPXHXcgzQvuS6jFP42zh+8=
Subject key identifier: 29:65:F8:DA:4F:55:B8:57:75:93:3C:02:F8:DC:4E:4C:9C:4B:62:D1
Authority key identifier: 84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
Certificate issuer: /CN=8402924861cbc088c655a872535a903108a07bf1
Certificate serial: 01964A0F8C576A508C6987C7C95E6B5CD61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
Manifest number: 1131
Signing time: Fri 18 Apr 2025 18:00:54 +0000
Manifest this update: Fri 18 Apr 2025 18:00:54 +0000
Manifest next update: Sat 19 Apr 2025 18:00:54 +0000
Files and hashes: 1: V4HzyqT3UdFuM-GyIseILy4xTfQ.roa (hash: 1TwXBA5f5XgP5uZG5yeFX6kZqTX4W9t72jbcfsBpAgw=)
2: hAKSSGHLwIjGVahyU1qQMQige_E.crl (hash: b6nTUkTZuGu9tO/Fzh7A10KbWG4+0fzMQs+1dxX+7Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:8c:57:6a:50:8c:69:87:c7:c9:5e:6b:5c:d6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8402924861cbc088c655a872535a903108a07bf1
Validity
Not Before: Apr 18 18:00:54 2025 GMT
Not After : Apr 19 18:00:54 2025 GMT
Subject: CN=2965f8da4f55b85775933c02f8dc4e4c9c4b62d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:d7:8d:e2:4c:5d:e5:a2:d2:9e:57:a9:00:
6a:63:6e:ec:6c:1e:c5:22:c0:fd:5a:f9:7b:e8:c1:
60:85:98:7a:71:23:33:10:1f:c4:ee:8b:da:97:ea:
a6:e3:57:c1:1c:19:4b:d5:21:35:ff:3f:d6:f6:af:
47:a5:83:c6:44:14:42:ee:c1:34:77:7b:c4:37:17:
ef:ce:1b:f4:8c:7a:77:76:6e:ab:f7:0b:f9:aa:9a:
47:f9:6d:05:f6:ee:d1:ed:ea:54:15:ed:94:85:66:
22:a4:ef:da:42:ca:04:08:c9:f5:eb:91:96:f3:16:
1e:b7:07:e1:71:a8:cb:3d:c5:9d:16:b1:e2:76:43:
4b:2f:c7:d6:8c:21:73:0c:a3:ee:46:43:d5:23:57:
87:b5:f0:e6:a5:0b:d7:fd:73:fc:c8:4b:1f:03:03:
de:9b:f4:59:a9:6d:64:50:af:40:74:89:e6:94:3e:
d2:e2:7a:15:dd:dd:ea:90:5f:90:0c:1b:c7:91:d6:
ef:a8:cd:c1:c0:0c:6b:ab:75:7b:7e:ee:79:f3:8b:
77:5f:21:2e:07:ed:53:ac:bb:35:45:84:fe:7b:26:
8f:11:66:f3:ad:b6:c5:65:86:35:b2:bf:35:1c:42:
28:cc:d1:a7:ef:a7:71:73:1d:8a:8b:c4:51:98:fc:
b7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:65:F8:DA:4F:55:B8:57:75:93:3C:02:F8:DC:4E:4C:9C:4B:62:D1
X509v3 Authority Key Identifier:
keyid:84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a4:8e:65:56:95:ca:6d:fa:42:0e:9d:57:b4:c3:41:c5:b7:
e0:a2:98:b8:c3:2b:b3:d6:43:a7:a8:44:c4:6d:ad:fc:87:fb:
9c:dd:af:4e:60:7a:22:09:9d:a8:8b:51:ff:ac:67:ea:1e:c5:
12:66:28:8f:12:80:50:4b:e0:92:92:6d:d1:dd:f9:ea:93:88:
cb:97:76:63:cd:89:28:2c:fb:7c:5e:eb:c8:bf:8f:d9:b4:48:
81:03:51:7d:c8:5c:e0:c2:fc:e8:76:d5:ad:7d:37:f9:00:80:
92:27:63:e0:1c:fa:2d:1d:6b:76:46:66:98:bb:42:40:cd:cc:
6e:db:30:23:aa:c6:5c:02:7c:e2:9e:53:60:05:69:43:f2:52:
ad:5a:68:aa:19:cd:7b:45:1d:e1:16:4b:c2:67:b8:5f:de:0c:
7d:01:18:50:4b:90:df:1c:c6:cb:ea:ff:e8:26:b4:b3:9c:10:
41:25:1c:6c:56:d7:cd:6a:29:a4:c0:36:f4:0f:6f:6b:68:f8:
02:e8:71:f6:7d:50:c5:1d:35:1f:34:46:ef:4c:39:fa:3f:25:
5b:e5:e0:82:d3:9a:d3:55:b3:93:4c:0b:a9:d9:e3:2e:c0:be:
75:de:4c:15:de:42:9c:bd:0c:36:fa:d7:e8:ab:93:99:89:0d:
18:dd:de:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKD4xXalCMaYfHyV5rXNYfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MDI5MjQ4NjFjYmMwODhjNjU1YTg3MjUzNWE5MDMxMDhh
MDdiZjEwHhcNMjUwNDE4MTgwMDU0WhcNMjUwNDE5MTgwMDU0WjAzMTEwLwYDVQQD
EygyOTY1ZjhkYTRmNTViODU3NzU5MzNjMDJmOGRjNGU0YzljNGI2MmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRbXjeJMXeWi0p5XqQBqY27sbB7F
IsD9Wvl76MFghZh6cSMzEB/E7oval+qm41fBHBlL1SE1/z/W9q9HpYPGRBRC7sE0
d3vENxfvzhv0jHp3dm6r9wv5qppH+W0F9u7R7epUFe2UhWYipO/aQsoECMn165GW
8xYetwfhcajLPcWdFrHidkNLL8fWjCFzDKPuRkPVI1eHtfDmpQvX/XP8yEsfAwPe
m/RZqW1kUK9AdInmlD7S4noV3d3qkF+QDBvHkdbvqM3BwAxrq3V7fu5584t3XyEu
B+1TrLs1RYT+eyaPEWbzrbbFZYY1sr81HEIozNGn76dxcx2Ki8RRmPy32wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCll+NpPVbhXdZM8AvjcTkycS2LRMB8GA1UdIwQY
MBaAFIQCkkhhy8CIxlWoclNakDEIoHvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEFLU1NHSEx3SWpHVmFoeVUxcVFNUWlnZV9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wOTI0ZmEtNTRmYi00MjU0LWI2NGUt
MGFjOWIzYmFlNmY1LzEvaEFLU1NHSEx3SWpHVmFoeVUxcVFNUWlnZV9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wOTI0ZmEtNTRmYi00MjU0LWI2NGUtMGFjOWIzYmFlNmY1
LzEvaEFLU1NHSEx3SWpHVmFoeVUxcVFNUWlnZV9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaSOZVaV
ym36Qg6dV7TDQcW34KKYuMMrs9ZDp6hExG2t/If7nN2vTmB6IgmdqItR/6xn6h7F
EmYojxKAUEvgkpJt0d356pOIy5d2Y82JKCz7fF7ryL+P2bRIgQNRfchc4ML86HbV
rX03+QCAkidj4Bz6LR1rdkZmmLtCQM3MbtswI6rGXAJ84p5TYAVpQ/JSrVpoqhnN
e0Ud4RZLwme4X94MfQEYUEuQ3xzGy+r/6Ca0s5wQQSUcbFbXzWoppMA29A9va2j4
Auhx9n1QxR01HzRG70w5+j8lW+XggtOa01Wzk0wLqdnjLsC+dd5MFd5CnL0MNvrX
6KuTmYkNGN3ewQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:11:17 2025 by rpki-client