Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier: kE7xIYujr48brwFfC3vt6qHpk1Fb5spWRm7WHZnqx8o=
Subject key identifier: FE:04:E1:3E:E3:2C:39:4A:A8:FD:B9:9C:CC:A9:9B:FA:E7:C0:97:E5
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial: 0196458DB14CA4DBD7A6BBF52740BF54E8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number: 0649
Signing time: Thu 17 Apr 2025 21:00:35 +0000
Manifest this update: Thu 17 Apr 2025 21:00:35 +0000
Manifest next update: Fri 18 Apr 2025 21:00:35 +0000
Files and hashes: 1: HrSCIGhI5pLFciUXIMT4CnC-hSs.roa (hash: eWiCHygAovdf0PgGIUiCzBDgPi+OqepoXf9QONvD3xk=)
2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: bPWfq2vdRwK71XWiacfnaxKbFS2Lw9PakSaya3ARn5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:b1:4c:a4:db:d7:a6:bb:f5:27:40:bf:54:e8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
Validity
Not Before: Apr 17 21:00:35 2025 GMT
Not After : Apr 18 21:00:35 2025 GMT
Subject: CN=fe04e13ee32c394aa8fdb99ccca99bfae7c097e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:01:b7:5f:56:ae:33:13:25:78:73:8a:df:46:
1b:ef:5e:35:cd:94:21:7a:3e:55:77:19:c9:79:e0:
42:c1:ca:45:34:c4:62:bf:c6:32:7c:6b:e4:4a:99:
ca:2a:f6:8f:c3:d6:8e:2b:2a:36:cd:9d:fa:8b:7e:
e2:b3:ee:f9:e7:38:c8:77:7e:e9:0c:54:ce:4f:13:
ac:b2:4a:19:71:cf:34:76:72:a0:eb:d3:0d:70:e2:
fd:8b:61:68:77:5c:fd:eb:64:c2:c1:8a:23:3b:c7:
48:97:8d:17:21:9e:03:a7:1e:b1:c0:e9:59:7d:f1:
73:4e:ce:ca:b7:c8:52:b3:dc:cb:4b:79:38:6b:6b:
0c:9c:8f:d1:0c:71:6f:84:c0:49:a6:f5:a6:91:7a:
33:ba:c1:3d:c8:23:01:bf:26:c3:d6:e6:e8:82:31:
ee:93:57:e7:b5:29:02:92:c9:0e:a7:d9:76:0c:cd:
cc:64:39:09:65:5d:91:c0:ed:d4:e8:a1:eb:46:2f:
6f:ce:d2:c5:ee:a4:58:0d:e1:f4:5e:eb:ef:09:2a:
44:04:95:fa:a9:1c:b8:76:10:0d:5f:d1:e2:d3:0d:
e4:5a:bb:ec:a0:6e:fc:0c:c3:5c:6e:08:b9:15:4a:
2b:3f:f1:41:f9:23:c9:0e:10:65:66:49:37:db:0f:
54:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:04:E1:3E:E3:2C:39:4A:A8:FD:B9:9C:CC:A9:9B:FA:E7:C0:97:E5
X509v3 Authority Key Identifier:
keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:21:a2:9b:22:b9:e5:d4:3e:a2:84:e5:6c:44:5e:46:09:9d:
73:5e:8a:57:64:08:b2:fd:57:91:49:5c:75:fa:a9:5f:d2:ba:
e2:14:f1:62:fc:74:d4:3a:d7:6e:a7:ac:2d:2d:20:90:c6:81:
8a:4c:d4:5c:1d:7b:ab:84:f9:07:b7:59:52:c3:e4:ad:93:0f:
58:cb:96:e9:37:2b:97:3e:31:d1:a4:25:7e:0a:c5:65:fc:5f:
e4:a0:be:34:e0:df:15:d6:33:92:25:39:18:04:87:73:14:3a:
00:15:d2:a6:be:0f:49:0d:a1:20:6c:85:b1:f6:9b:cf:2e:48:
ca:0c:7e:8f:2c:9e:da:a1:db:95:80:ee:0c:d0:03:44:b6:a8:
fd:f5:21:4f:5f:98:f0:51:8c:53:15:9e:2e:38:b1:d8:d6:2c:
fd:aa:75:f4:5f:c8:bc:10:22:c6:82:d1:a5:e2:2b:db:0e:1c:
2b:11:e8:af:c7:24:85:9c:76:db:18:e9:52:9f:52:cb:a9:4d:
fa:cb:0e:61:e4:8b:94:f3:f6:1a:36:64:b5:8f:5e:b2:c4:f9:
17:83:7a:d3:05:9a:0a:e7:57:78:9d:6d:3f:3f:d5:b9:09:42:
d4:7b:92:fe:36:07:39:f4:e3:cf:23:93:f4:bc:9c:de:df:52:
b0:6f:c9:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFjbFMpNvXprv1J0C/VOjzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NjIzYTg0NThlZmYzNDdkNDI0MzQ4NTg4ODI5ZWUxMzdi
NDVhM2YwHhcNMjUwNDE3MjEwMDM1WhcNMjUwNDE4MjEwMDM1WjAzMTEwLwYDVQQD
EyhmZTA0ZTEzZWUzMmMzOTRhYThmZGI5OWNjY2E5OWJmYWU3YzA5N2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AG3X1auMxMleHOK30Yb7141zZQh
ej5VdxnJeeBCwcpFNMRiv8YyfGvkSpnKKvaPw9aOKyo2zZ36i37is+755zjId37p
DFTOTxOsskoZcc80dnKg69MNcOL9i2Fod1z962TCwYojO8dIl40XIZ4Dpx6xwOlZ
ffFzTs7Kt8hSs9zLS3k4a2sMnI/RDHFvhMBJpvWmkXozusE9yCMBvybD1ubogjHu
k1fntSkCkskOp9l2DM3MZDkJZV2RwO3U6KHrRi9vztLF7qRYDeH0XuvvCSpEBJX6
qRy4dhANX9Hi0w3kWrvsoG78DMNcbgi5FUorP/FB+SPJDhBlZkk32w9UwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4E4T7jLDlKqP25nMypm/rnwJflMB8GA1UdIwQY
MBaAFIZiOoRY7/NH1CQ0hYiCnuE3tFo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8zOWRiNGQtZTkzZi00MTM5LWFhZDgt
NmMyOGJiNDBkNTJlLzEvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8zOWRiNGQtZTkzZi00MTM5LWFhZDgtNmMyOGJiNDBkNTJl
LzEvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAviGimyK5
5dQ+ooTlbEReRgmdc16KV2QIsv1XkUlcdfqpX9K64hTxYvx01DrXbqesLS0gkMaB
ikzUXB17q4T5B7dZUsPkrZMPWMuW6Tcrlz4x0aQlfgrFZfxf5KC+NODfFdYzkiU5
GASHcxQ6ABXSpr4PSQ2hIGyFsfabzy5Iygx+jyye2qHblYDuDNADRLao/fUhT1+Y
8FGMUxWeLjix2NYs/ap19F/IvBAixoLRpeIr2w4cKxHor8ckhZx22xjpUp9Sy6lN
+ssOYeSLlPP2GjZktY9essT5F4N60wWaCudXeJ1tPz/VuQlC1HuS/jYHOfTjzyOT
9Lyc3t9SsG/JaA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 03:05:24 2025 by rpki-client