Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
File: hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft (raw, json)
Hash identifier: Wb8QMgfdjJZZWgqnkRpzePTWOoGR0WzFAJXuvkBwNys=
Subject key identifier: 08:97:77:5C:1C:76:92:88:DA:CA:50:A0:AC:5C:6A:2C:65:27:34:7F
Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
Certificate issuer: /CN=8498f3fefce2fa0120336264df15010461082e8a
Certificate serial: 01958BF2206579BBBCAACFE53B38F3E538C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
Manifest number: 1499
Signing time: Wed 12 Mar 2025 20:00:55 +0000
Manifest this update: Wed 12 Mar 2025 20:00:55 +0000
Manifest next update: Thu 13 Mar 2025 20:00:55 +0000
Files and hashes: 1: hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl (hash: akvOcRq+L8LmaNjukCGqixJ0GFYbIpSN2CgJ8QQqUTY=)
2: wDu0PbdcrV_g7-AL5I3kzmrgmd0.roa (hash: e7su7+uh2dnvlgeLnogNpRmXEp13YVA9VujtS7ejWQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:20:65:79:bb:bc:aa:cf:e5:3b:38:f3:e5:38:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a
Validity
Not Before: Mar 12 20:00:55 2025 GMT
Not After : Mar 13 20:00:55 2025 GMT
Subject: CN=0897775c1c769288daca50a0ac5c6a2c6527347f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:67:23:ea:02:58:33:fe:28:c8:48:28:9f:
fd:c8:db:f9:1c:9b:82:fe:94:0a:0e:a6:7b:59:21:
9d:b4:18:e4:f8:65:1a:58:00:18:7f:38:b2:70:0c:
14:37:69:35:a5:cd:92:08:8a:9d:29:8a:b8:90:41:
a5:f7:a5:7a:69:8a:b7:15:8b:dc:ba:d0:20:8c:3d:
84:b3:41:77:13:53:29:a2:72:c1:a0:4e:1e:e3:1d:
69:5d:92:09:fb:25:35:c4:64:c5:c3:21:c0:8c:08:
e9:b7:fd:a0:b2:b7:8e:43:3a:8e:67:dc:33:1f:a4:
18:a4:11:f2:18:a3:63:97:a2:15:ea:4e:f5:95:5b:
fb:1d:90:24:8f:f4:00:f1:cc:38:80:3b:60:81:06:
d1:0b:7d:26:e3:be:1c:71:f1:62:47:8b:b7:c5:3d:
5c:35:6f:f3:ae:66:5d:f4:4c:c3:0b:61:46:6b:14:
9f:b4:f5:b1:77:67:79:c1:3b:2a:a6:3a:d6:cb:f2:
09:5e:02:36:c3:50:2b:0d:ec:22:06:86:82:fe:68:
79:a1:d7:12:52:6f:ea:bc:d7:c0:85:11:fc:e8:50:
03:06:12:ee:e6:c3:b0:ab:54:ce:1c:e4:62:5c:c7:
f2:33:a2:34:b5:fa:8c:be:87:ca:96:fd:4c:31:33:
fa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:97:77:5C:1C:76:92:88:DA:CA:50:A0:AC:5C:6A:2C:65:27:34:7F
X509v3 Authority Key Identifier:
keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:98:bc:83:d3:10:5b:17:bb:7f:40:72:3b:0a:e5:cf:40:90:
a7:ec:a6:60:5f:cb:17:9a:65:8c:26:16:e8:ce:f9:52:92:b2:
0b:d5:5f:2a:59:d4:0b:64:04:ce:b0:25:76:11:e0:f2:40:df:
9c:0f:6b:2a:5e:db:61:ea:4e:ee:5d:25:3f:29:60:fd:39:4b:
9a:59:81:49:c2:30:a2:e4:41:31:d0:be:4e:c4:b7:ef:0b:9d:
89:dd:10:01:0c:4a:24:fe:7e:f2:62:20:72:08:eb:f1:61:a2:
ee:82:54:e5:08:1b:41:b9:a0:ce:bf:b1:7d:d9:76:02:88:26:
c8:36:a8:14:07:92:b2:07:78:9a:42:5c:b9:24:2f:3d:ef:81:
60:45:95:17:3a:13:43:dc:2c:55:66:b5:03:ba:90:bc:38:cf:
b4:66:6a:34:0c:31:65:f1:61:d2:85:44:23:9b:aa:3a:e4:c3:
28:69:cd:e9:0d:3a:d9:ed:51:bc:df:49:2a:78:0f:c8:54:90:
eb:16:36:c8:ef:94:7f:74:10:11:c9:2b:4f:47:3b:26:51:e7:
94:c4:37:e9:12:3e:b8:31:a5:af:f4:bc:53:42:40:8e:b2:e6:
d0:d7:e5:8c:04:95:6f:22:f1:a7:85:d2:48:8c:fd:05:b3:1d:
fb:9b:d0:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWL8iBlebu8qs/lOzjz5TjCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OThmM2ZlZmNlMmZhMDEyMDMzNjI2NGRmMTUwMTA0NjEw
ODJlOGEwHhcNMjUwMzEyMjAwMDU1WhcNMjUwMzEzMjAwMDU1WjAzMTEwLwYDVQQD
EygwODk3Nzc1YzFjNzY5Mjg4ZGFjYTUwYTBhYzVjNmEyYzY1MjczNDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLxnI+oCWDP+KMhIKJ/9yNv5HJuC
/pQKDqZ7WSGdtBjk+GUaWAAYfziycAwUN2k1pc2SCIqdKYq4kEGl96V6aYq3FYvc
utAgjD2Es0F3E1MponLBoE4e4x1pXZIJ+yU1xGTFwyHAjAjpt/2gsreOQzqOZ9wz
H6QYpBHyGKNjl6IV6k71lVv7HZAkj/QA8cw4gDtggQbRC30m474ccfFiR4u3xT1c
NW/zrmZd9EzDC2FGaxSftPWxd2d5wTsqpjrWy/IJXgI2w1ArDewiBoaC/mh5odcS
Um/qvNfAhRH86FADBhLu5sOwq1TOHORiXMfyM6I0tfqMvofKlv1MMTP6uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiXd1wcdpKI2spQoKxcaixlJzR/MB8GA1UdIwQY
MBaAFISY8/784voBIDNiZN8VAQRhCC6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NjExZmYtNDBiMi00YzBhLWE3Zjgt
NDA0ZGZkYjQ2NDc3LzEvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80NjExZmYtNDBiMi00YzBhLWE3ZjgtNDA0ZGZkYjQ2NDc3
LzEvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpi8g9MQ
Wxe7f0ByOwrlz0CQp+ymYF/LF5pljCYW6M75UpKyC9VfKlnUC2QEzrAldhHg8kDf
nA9rKl7bYepO7l0lPylg/TlLmlmBScIwouRBMdC+TsS37wudid0QAQxKJP5+8mIg
cgjr8WGi7oJU5QgbQbmgzr+xfdl2AogmyDaoFAeSsgd4mkJcuSQvPe+BYEWVFzoT
Q9wsVWa1A7qQvDjPtGZqNAwxZfFh0oVEI5uqOuTDKGnN6Q062e1RvN9JKngPyFSQ
6xY2yO+Uf3QQEckrT0c7JlHnlMQ36RI+uDGlr/S8U0JAjrLm0NfljASVbyLxp4XS
SIz9BbMd+5vQlg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:13 2025 by rpki-client