Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
File: HxINfknJ878xPZZTGt-n6q6AV2E.mft (raw, json)
Hash identifier: d2EOVnKeWIy1EFU36ed8c0e7m2V+QYA5eepBaiix75o=
Subject key identifier: CF:F0:36:38:FC:A6:91:98:19:B4:45:4D:B5:B8:F0:AF:9B:0B:06:4B
Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
Certificate issuer: /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Certificate serial: 019651240668E99430EDD6A9A1A1CFF006B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
Manifest number: 0D5E
Signing time: Sun 20 Apr 2025 03:00:37 +0000
Manifest this update: Sun 20 Apr 2025 03:00:37 +0000
Manifest next update: Mon 21 Apr 2025 03:00:37 +0000
Files and hashes: 1: HxINfknJ878xPZZTGt-n6q6AV2E.crl (hash: dM08sdaiosx+jrYp+3JaY0BOJvhXDyfGwra9bD5GQ+4=)
2: QTjz4VGR-GTFrRo0tluoiHJIBec.roa (hash: cV6m/fRf828h8WvDtj1b9iihpVzZghXy5TyXPUcK2IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:24:06:68:e9:94:30:ed:d6:a9:a1:a1:cf:f0:06:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Validity
Not Before: Apr 20 03:00:37 2025 GMT
Not After : Apr 21 03:00:37 2025 GMT
Subject: CN=cff03638fca6919819b4454db5b8f0af9b0b064b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:ad:b1:f5:0e:60:28:04:eb:66:56:a8:82:
1c:c9:20:9c:71:73:d7:07:40:d8:ce:79:db:1b:6a:
b1:ce:53:db:d2:c7:b3:43:8e:4f:f0:ff:10:26:9f:
df:6f:d6:2a:1e:f9:d4:08:3b:78:1c:72:2f:ee:ea:
f7:61:0b:ec:75:88:1a:00:14:b5:ee:51:cc:ef:d4:
20:c8:07:21:4f:86:cd:01:9d:80:71:e4:70:ef:ee:
74:70:7c:14:e3:29:79:99:dd:fb:02:79:ff:05:f4:
90:94:27:80:14:9f:46:2d:31:91:a9:74:3d:5f:63:
78:82:b9:da:a6:07:28:b3:39:4e:34:4b:84:07:5d:
11:d8:52:65:e2:3a:25:00:47:22:9c:33:56:57:e7:
57:76:75:52:9e:8e:8e:07:37:04:4a:3a:50:3c:ff:
b5:1f:71:cb:b8:ad:17:74:cc:4a:27:f1:83:9a:8e:
d1:42:fb:dc:6e:53:c7:0d:57:90:b1:e9:28:0a:a2:
93:df:bd:4d:e4:3d:ae:53:54:17:f5:65:27:8f:b3:
c3:e4:76:57:46:98:28:4c:7e:35:70:11:40:97:3a:
06:34:39:69:df:77:df:e1:de:ea:74:4f:04:69:91:
3d:d4:f4:c5:b2:26:b5:ff:07:65:96:ef:7f:46:23:
cf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F0:36:38:FC:A6:91:98:19:B4:45:4D:B5:B8:F0:AF:9B:0B:06:4B
X509v3 Authority Key Identifier:
keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ce:3c:9c:e7:43:c8:d9:50:17:fd:48:e6:6f:a5:2d:76:ea:
c0:ae:3a:d5:7f:71:b0:24:4d:78:22:61:cc:80:61:87:16:95:
b9:57:8a:57:97:fd:da:76:f8:54:22:b9:c8:3f:07:bb:f9:72:
96:14:b9:ab:98:5e:67:09:70:38:1a:1c:8e:cb:71:6c:60:34:
83:f6:de:ed:0b:f3:3c:2c:d5:35:ce:56:ed:b8:cf:52:48:fb:
f0:1b:0f:4f:bb:a4:6c:23:f2:79:fc:4d:50:f1:54:72:98:de:
22:a5:4a:10:09:e7:04:d4:af:c4:7a:ab:40:91:f7:67:06:e2:
34:e4:21:ef:e7:d8:53:11:9d:81:73:d7:5a:35:16:95:64:31:
90:4b:50:69:b9:16:88:48:e5:d1:d0:c7:7e:fe:82:e3:8c:2e:
81:da:b3:16:3e:a0:06:6b:93:dc:7c:06:d2:b4:20:89:2d:ea:
35:a5:ae:50:ab:f8:91:c2:01:94:bd:3f:b3:55:2d:1b:f9:a7:
48:4d:6d:c3:92:1b:7e:20:38:b5:37:c4:30:fe:06:6d:2b:e4:
2a:f0:87:6d:7b:f4:ec:03:d4:2f:20:44:92:bd:e8:cc:fa:6d:
81:46:09:15:60:ec:d9:3a:e3:f3:76:d3:5c:28:bd:8a:80:f7:
3c:79:d7:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRJAZo6ZQw7dapoaHP8Aa5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTIwZDdlNDljOWYzYmYzMTNkOTY1MzFhZGZhN2VhYWU4
MDU3NjEwHhcNMjUwNDIwMDMwMDM3WhcNMjUwNDIxMDMwMDM3WjAzMTEwLwYDVQQD
EyhjZmYwMzYzOGZjYTY5MTk4MTliNDQ1NGRiNWI4ZjBhZjliMGIwNjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzitsfUOYCgE62ZWqIIcySCccXPX
B0DYznnbG2qxzlPb0sezQ45P8P8QJp/fb9YqHvnUCDt4HHIv7ur3YQvsdYgaABS1
7lHM79QgyAchT4bNAZ2AceRw7+50cHwU4yl5md37Ann/BfSQlCeAFJ9GLTGRqXQ9
X2N4grnapgcoszlONEuEB10R2FJl4jolAEcinDNWV+dXdnVSno6OBzcESjpQPP+1
H3HLuK0XdMxKJ/GDmo7RQvvcblPHDVeQsekoCqKT371N5D2uU1QX9WUnj7PD5HZX
RpgoTH41cBFAlzoGNDlp33ff4d7qdE8EaZE91PTFsia1/wdllu9/RiPPTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/wNjj8ppGYGbRFTbW48K+bCwZLMB8GA1UdIwQY
MBaAFB8SDX5JyfO/MT2WUxrfp+qugFdhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhJTmZrbko4Nzh4UFpaVEd0LW42cTZBVjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hYzVmZjktZTE5ZS00YWQwLThjNWEt
YjI3Mjc3ODkwOWQ5LzEvSHhJTmZrbko4Nzh4UFpaVEd0LW42cTZBVjJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9hYzVmZjktZTE5ZS00YWQwLThjNWEtYjI3Mjc3ODkwOWQ5
LzEvSHhJTmZrbko4Nzh4UFpaVEd0LW42cTZBVjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnM48nOdD
yNlQF/1I5m+lLXbqwK461X9xsCRNeCJhzIBhhxaVuVeKV5f92nb4VCK5yD8Hu/ly
lhS5q5heZwlwOBocjstxbGA0g/be7QvzPCzVNc5W7bjPUkj78BsPT7ukbCPyefxN
UPFUcpjeIqVKEAnnBNSvxHqrQJH3ZwbiNOQh7+fYUxGdgXPXWjUWlWQxkEtQabkW
iEjl0dDHfv6C44wugdqzFj6gBmuT3HwG0rQgiS3qNaWuUKv4kcIBlL0/s1UtG/mn
SE1tw5IbfiA4tTfEMP4GbSvkKvCHbXv07APULyBEkr3ozPptgUYJFWDs2Trj83bT
XCi9ioD3PHnX2g==
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:10:35 2025 by rpki-client