Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
File: HCtQ2u86DL23KyPKPbvvwVc1g_k.mft (raw, json)
Hash identifier: YR+NlA19mWbdiX4dj4e9mvgxzaNvQdqBshuCrOKj8Ng=
Subject key identifier: 42:B8:25:45:CC:1C:51:CA:CE:30:9D:16:A4:55:34:0F:6D:91:E6:07
Authority key identifier: 1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
Certificate issuer: /CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Certificate serial: 01965A5E2D4B02C02ED94A31DB7D170E37D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
Manifest number: 0A26
Signing time: Mon 21 Apr 2025 22:00:43 +0000
Manifest this update: Mon 21 Apr 2025 22:00:43 +0000
Manifest next update: Tue 22 Apr 2025 22:00:43 +0000
Files and hashes: 1: HCtQ2u86DL23KyPKPbvvwVc1g_k.crl (hash: lpUObrf3klNSAQc+d+Eib76VzUFoxJmOloWBX/OPEcA=)
2: ZGoOUwMopHkREW85RzSsR457AEU.roa (hash: ll6YKs1Lb4wcNMvOVUUEMK6peyuIPU/LPfVQcksc3+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:2d:4b:02:c0:2e:d9:4a:31:db:7d:17:0e:37:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Validity
Not Before: Apr 21 22:00:43 2025 GMT
Not After : Apr 22 22:00:43 2025 GMT
Subject: CN=42b82545cc1c51cace309d16a455340f6d91e607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:ce:0a:fa:53:05:4c:e7:87:92:9a:0b:c5:
37:c3:00:be:35:fa:09:5f:25:bf:df:da:ed:bb:57:
06:18:85:46:dd:4d:cb:6f:8c:75:93:1e:1a:45:51:
d9:cd:b3:f0:25:85:17:37:cd:fc:0b:82:b7:64:5d:
93:2e:a1:1b:ce:6b:69:94:eb:74:34:73:91:9b:fb:
a2:a8:0f:dc:72:f1:62:03:cc:e8:f9:4e:a7:54:7f:
29:4d:48:06:83:ed:3e:6f:8c:25:76:e4:d5:29:7a:
8c:76:12:ff:9c:ae:94:00:d9:f9:3a:9f:be:0b:d3:
da:86:9f:13:6d:e6:99:de:31:06:8a:86:28:a8:ee:
4f:f7:c1:17:c8:f3:f5:c9:4a:8f:4b:9b:b9:a1:ac:
df:1e:80:f8:f0:ec:e7:da:8a:d0:3a:ba:bc:d3:71:
0e:ec:ab:ce:a2:e9:9b:62:11:64:7c:c5:f8:5c:78:
c3:9f:6e:c7:30:95:63:f4:79:32:b7:77:bd:53:ce:
b7:2d:fb:91:6d:0b:2a:71:c0:a2:c8:61:b6:43:df:
dd:c8:84:ef:fe:40:71:6a:60:b8:6c:1a:75:63:6d:
6e:e6:83:a3:c8:9d:88:51:49:c7:c8:26:d6:86:81:
57:42:d1:d3:72:d8:f8:3f:f6:3f:df:b1:f3:2b:ed:
71:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B8:25:45:CC:1C:51:CA:CE:30:9D:16:A4:55:34:0F:6D:91:E6:07
X509v3 Authority Key Identifier:
keyid:1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:dc:80:39:39:6b:1e:a9:c3:c8:d4:86:9d:ac:8f:58:4a:7b:
d0:45:ba:3d:53:ac:0e:72:ad:f9:a8:a5:e2:65:de:e8:c7:2e:
a7:7b:a0:b0:6a:f9:48:5a:2d:f4:32:33:3b:66:ce:e5:b3:04:
34:ed:1a:fb:a2:80:61:f8:11:68:fb:66:9c:c0:7c:e1:da:f4:
51:a8:b1:6f:28:1e:fa:06:3a:36:82:d1:f7:50:ea:60:2e:0b:
8e:9e:c8:f2:47:88:09:28:1c:79:0d:b0:46:03:41:71:f5:d1:
d5:1e:f2:81:d2:f8:08:62:07:d9:cf:10:d3:89:4d:bf:8e:c0:
b1:05:a2:d2:ab:26:54:36:10:e4:2f:be:c2:82:f0:3f:f8:0e:
7a:63:86:05:ad:f9:c0:65:53:28:e8:20:f0:2c:37:0f:4f:2e:
67:7e:13:71:1a:e5:fc:17:e3:ca:0f:61:9e:1c:89:0d:b1:98:
6d:ce:ec:92:9e:86:84:22:3c:e5:48:43:52:e3:a2:de:8a:46:
9c:a3:30:b0:47:8d:17:3e:bb:c6:b5:17:a9:c1:ac:d2:86:46:
66:a9:c4:10:c9:94:47:b9:89:78:5e:78:ad:a2:79:b8:03:5c:
00:6b:93:14:df:06:66:a4:9a:cb:6f:6d:4f:57:e9:ca:b1:d3:
1d:49:5e:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZaXi1LAsAu2Uox230XDjfTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmI1MGRhZWYzYTBjYmRiNzJiMjNjYTNkYmJlZmMxNTcz
NTgzZjkwHhcNMjUwNDIxMjIwMDQzWhcNMjUwNDIyMjIwMDQzWjAzMTEwLwYDVQQD
Eyg0MmI4MjU0NWNjMWM1MWNhY2UzMDlkMTZhNDU1MzQwZjZkOTFlNjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5DOCvpTBUznh5KaC8U3wwC+NfoJ
XyW/39rtu1cGGIVG3U3Lb4x1kx4aRVHZzbPwJYUXN838C4K3ZF2TLqEbzmtplOt0
NHORm/uiqA/ccvFiA8zo+U6nVH8pTUgGg+0+b4wlduTVKXqMdhL/nK6UANn5Op++
C9Pahp8TbeaZ3jEGioYoqO5P98EXyPP1yUqPS5u5oazfHoD48Ozn2orQOrq803EO
7KvOoumbYhFkfMX4XHjDn27HMJVj9Hkyt3e9U863LfuRbQsqccCiyGG2Q9/dyITv
/kBxamC4bBp1Y21u5oOjyJ2IUUnHyCbWhoFXQtHTctj4P/Y/37HzK+1xNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEK4JUXMHFHKzjCdFqRVNA9tkeYHMB8GA1UdIwQY
MBaAFBwrUNrvOgy9tysjyj2778FXNYP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82ZjJiMzctMGQxNy00NWFiLTgyODIt
YWI0MjYzZWQ0MGRlLzEvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82ZjJiMzctMGQxNy00NWFiLTgyODItYWI0MjYzZWQ0MGRl
LzEvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9yAOTlr
HqnDyNSGnayPWEp70EW6PVOsDnKt+ail4mXe6Mcup3ugsGr5SFot9DIzO2bO5bME
NO0a+6KAYfgRaPtmnMB84dr0Uaixbyge+gY6NoLR91DqYC4Ljp7I8keICSgceQ2w
RgNBcfXR1R7ygdL4CGIH2c8Q04lNv47AsQWi0qsmVDYQ5C++woLwP/gOemOGBa35
wGVTKOgg8Cw3D08uZ34TcRrl/Bfjyg9hnhyJDbGYbc7skp6GhCI85UhDUuOi3opG
nKMwsEeNFz67xrUXqcGs0oZGZqnEEMmUR7mJeF54raJ5uANcAGuTFN8GZqSay29t
T1fpyrHTHUletg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:20:59 2025 by rpki-client