Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
File: hWSCS22vvTPxCjaW4ArLlIwRKjg.mft (raw, json)
Hash identifier: zqw8AlffsM9M/XnB0hOunog3d4New7piWoeUdazzA8k=
Subject key identifier: 30:26:A2:F7:F9:BA:1C:64:E9:38:BE:DA:0E:F7:99:A4:A9:BF:42:69
Authority key identifier: 85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
Certificate issuer: /CN=8564824b6dafbd33f10a3696e00acb948c112a38
Certificate serial: 01965236E9BDB6FDD6D5B840C72070CBAC2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
Manifest number: 0330
Signing time: Sun 20 Apr 2025 08:00:52 +0000
Manifest this update: Sun 20 Apr 2025 08:00:52 +0000
Manifest next update: Mon 21 Apr 2025 08:00:52 +0000
Files and hashes: 1: hWSCS22vvTPxCjaW4ArLlIwRKjg.crl (hash: NDO99Mu/hNmKE2Bd9hxid18beB0SAKXK9h1SLyPpRtI=)
2: j3mlArIrCrvoTStpcqF9EPTMJII.roa (hash: zagzdTS3IOA1uItKGwOJz9trfPNv/LGCzKt9YV1P5Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:e9:bd:b6:fd:d6:d5:b8:40:c7:20:70:cb:ac:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8564824b6dafbd33f10a3696e00acb948c112a38
Validity
Not Before: Apr 20 08:00:52 2025 GMT
Not After : Apr 21 08:00:52 2025 GMT
Subject: CN=3026a2f7f9ba1c64e938beda0ef799a4a9bf4269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:4e:2e:44:2b:24:e6:06:a7:26:ec:75:f3:
15:c5:51:9c:b5:29:d5:ba:5e:91:81:c2:e9:b2:cb:
e6:37:8f:64:3a:e4:1d:c2:57:82:0e:07:60:08:a5:
83:6f:bf:c9:11:bb:ee:6f:14:0f:c8:ca:4d:81:12:
59:5f:51:76:5b:ef:43:13:80:5d:7d:56:0c:1d:0c:
b5:21:b0:51:46:7f:db:5a:36:3c:d8:cc:ea:55:c6:
07:62:82:82:b3:28:e1:dd:87:f6:b0:f5:de:63:f4:
87:76:6f:39:2b:7e:16:34:d4:e1:cb:e5:af:6c:13:
99:24:0e:c6:87:bb:16:5a:57:e0:86:ea:68:1d:57:
b0:90:ac:5f:44:d2:d2:50:87:41:67:16:4b:fa:1e:
d3:f2:8c:0f:a8:96:fe:46:66:74:3c:01:fb:54:b3:
c8:03:71:52:e7:bc:f6:5a:d3:b2:0a:14:4e:b5:48:
9b:24:4e:02:1b:c4:6a:a7:83:e9:95:cb:25:f1:f4:
ef:51:fd:35:bf:ed:a6:26:d4:a9:b9:16:7a:12:88:
d4:16:32:11:02:e6:07:c3:86:13:c6:bd:a9:8a:5a:
95:b9:ef:f8:02:4e:47:43:86:ea:38:10:64:a8:b7:
f8:fd:fe:77:44:98:2c:31:cd:ca:1f:13:11:12:3b:
d4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:26:A2:F7:F9:BA:1C:64:E9:38:BE:DA:0E:F7:99:A4:A9:BF:42:69
X509v3 Authority Key Identifier:
keyid:85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e4:86:36:0b:a0:df:0b:23:41:77:87:05:45:cc:fb:97:37:
bd:48:d5:bf:70:ac:34:52:30:c7:f4:5d:ac:db:4a:c3:50:d9:
02:e3:f7:9d:17:4c:79:05:05:fb:52:0c:85:3c:5a:d2:2f:d5:
e8:93:61:54:92:2f:2a:64:42:38:2f:ab:b7:2a:7f:a5:15:ff:
a4:ff:cb:ed:17:ef:6c:72:ba:e9:04:d9:5f:18:2c:54:b3:41:
8b:1f:9a:15:d9:09:9b:56:1c:06:94:ed:2e:14:2d:af:56:10:
1e:f3:2f:bb:3b:dd:56:3e:fb:c3:0e:b0:d1:77:76:68:4c:3f:
5a:21:c3:fb:ea:75:77:c2:62:0d:cf:a6:e0:d8:27:bb:e5:d2:
8e:7f:26:ac:09:27:16:62:cd:a2:42:fb:1a:43:93:d0:ff:90:
25:ab:51:a2:05:22:19:1b:e4:b7:f5:b8:27:50:e4:55:05:5b:
61:e3:ab:23:c2:d6:ed:3e:b9:fe:c3:2e:9f:ed:66:d0:1d:73:
f3:8c:13:9a:b6:28:a9:ca:b3:f0:fe:3a:c4:06:99:3c:8e:48:
f7:ea:a4:91:29:b0:10:73:7c:6a:ea:01:d5:24:a5:88:39:ee:
60:1a:60:95:c2:f6:31:bd:a4:8c:70:d2:85:23:6e:67:04:64:
7d:39:72:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSNum9tv3W1bhAxyBwy6wqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjQ4MjRiNmRhZmJkMzNmMTBhMzY5NmUwMGFjYjk0OGMx
MTJhMzgwHhcNMjUwNDIwMDgwMDUyWhcNMjUwNDIxMDgwMDUyWjAzMTEwLwYDVQQD
EygzMDI2YTJmN2Y5YmExYzY0ZTkzOGJlZGEwZWY3OTlhNGE5YmY0MjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMNOLkQrJOYGpybsdfMVxVGctSnV
ul6RgcLpssvmN49kOuQdwleCDgdgCKWDb7/JEbvubxQPyMpNgRJZX1F2W+9DE4Bd
fVYMHQy1IbBRRn/bWjY82MzqVcYHYoKCsyjh3Yf2sPXeY/SHdm85K34WNNThy+Wv
bBOZJA7Gh7sWWlfghupoHVewkKxfRNLSUIdBZxZL+h7T8owPqJb+RmZ0PAH7VLPI
A3FS57z2WtOyChROtUibJE4CG8Rqp4Pplcsl8fTvUf01v+2mJtSpuRZ6EojUFjIR
AuYHw4YTxr2pilqVue/4Ak5HQ4bqOBBkqLf4/f53RJgsMc3KHxMREjvUxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAmovf5uhxk6Ti+2g73maSpv0JpMB8GA1UdIwQY
MBaAFIVkgkttr70z8Qo2luAKy5SMESo4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdTQ1MyMnZ2VFB4Q2phVzRBckxsSXdSS2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80YzE3YjktMmQ1Yy00NDA1LWFjNWIt
YzYwNTQ0Y2Y0NWI1LzEvaFdTQ1MyMnZ2VFB4Q2phVzRBckxsSXdSS2pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80YzE3YjktMmQ1Yy00NDA1LWFjNWItYzYwNTQ0Y2Y0NWI1
LzEvaFdTQ1MyMnZ2VFB4Q2phVzRBckxsSXdSS2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOSGNgug
3wsjQXeHBUXM+5c3vUjVv3CsNFIwx/RdrNtKw1DZAuP3nRdMeQUF+1IMhTxa0i/V
6JNhVJIvKmRCOC+rtyp/pRX/pP/L7RfvbHK66QTZXxgsVLNBix+aFdkJm1YcBpTt
LhQtr1YQHvMvuzvdVj77ww6w0Xd2aEw/WiHD++p1d8JiDc+m4Ngnu+XSjn8mrAkn
FmLNokL7GkOT0P+QJatRogUiGRvkt/W4J1DkVQVbYeOrI8LW7T65/sMun+1m0B1z
84wTmrYoqcqz8P46xAaZPI5I9+qkkSmwEHN8auoB1SSliDnuYBpglcL2Mb2kjHDS
hSNuZwRkfTlyXw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:18 2025 by rpki-client