Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
File: HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft (raw, json)
Hash identifier: Je3+jA4CC6qIzMuOI6iW7ppdseikHXHKLgZDP51EEaI=
Subject key identifier: 97:02:78:62:EB:00:5F:70:FB:04:E1:9D:E2:53:83:4D:0B:F6:C7:9D
Authority key identifier: 1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
Certificate issuer: /CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Certificate serial: 01965500B654FBC812F0888EB5BEE550CD71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
Manifest number: 03B4
Signing time: Sun 20 Apr 2025 21:00:32 +0000
Manifest this update: Sun 20 Apr 2025 21:00:32 +0000
Manifest next update: Mon 21 Apr 2025 21:00:32 +0000
Files and hashes: 1: 6KBWfvurH0ryN0klNLmOfIfXS50.roa (hash: bQYxwK8PunB8us4iL4+kd3a48QuBW1TD23kpBG66hec=)
2: HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl (hash: lxaTbMnSgd1aE4XMbLliFYD2yWbvtIHfllU6wAxy1tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:b6:54:fb:c8:12:f0:88:8e:b5:be:e5:50:cd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Validity
Not Before: Apr 20 21:00:32 2025 GMT
Not After : Apr 21 21:00:32 2025 GMT
Subject: CN=97027862eb005f70fb04e19de253834d0bf6c79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a4:f1:83:4f:11:4e:61:74:9b:05:ec:db:f1:
00:2e:0a:04:4a:d1:66:0b:60:82:e0:e7:b7:d3:a4:
97:54:e1:4f:b1:4a:24:5b:b7:84:71:27:e0:8c:85:
f4:66:4a:b6:64:64:29:e7:13:ed:da:4d:79:17:65:
a7:ea:a5:67:d5:c9:77:53:ff:50:54:19:a6:70:2d:
b1:c8:38:82:a6:6e:53:ca:36:00:f7:78:f0:62:94:
06:ba:bc:aa:bc:a9:97:36:90:17:a7:4a:41:8b:7b:
65:ef:cf:e8:22:d3:06:cc:31:77:08:18:84:c0:bc:
b9:db:f8:92:54:00:51:35:af:a3:e2:8f:ac:15:38:
ad:ca:98:b5:5c:48:a0:a1:f2:97:95:41:46:32:79:
09:c4:66:d2:2a:4b:32:b3:23:f3:ad:e6:da:09:c8:
68:08:df:d0:40:16:c4:d2:f5:e5:a2:14:13:b7:84:
43:c8:cc:98:8a:5b:88:cd:7c:27:bd:34:02:40:77:
88:6c:62:58:dd:1a:8d:6e:f0:5f:1b:18:b0:3d:fa:
b9:1e:f3:bf:cf:56:c4:a8:48:cc:26:d5:06:cc:40:
77:d8:14:65:bc:5e:dd:ec:f4:ff:84:56:af:58:34:
04:ff:5c:ef:b6:d9:6b:d6:c0:86:44:a0:b4:5b:91:
e4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:02:78:62:EB:00:5F:70:FB:04:E1:9D:E2:53:83:4D:0B:F6:C7:9D
X509v3 Authority Key Identifier:
keyid:1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:32:99:d7:16:4e:bc:7f:66:ad:2b:ae:bb:03:87:d1:cf:fe:
95:23:fe:a4:4c:4a:87:78:92:56:03:3f:77:bf:55:e1:4f:72:
8d:db:e5:6a:39:3a:6b:3a:90:aa:47:55:c8:8d:cd:82:1f:96:
12:97:17:9c:28:16:11:ca:60:3f:17:50:bd:49:e7:0c:12:cb:
4a:f5:d7:9b:76:ef:33:d9:39:d3:81:76:15:4c:14:f7:22:bf:
74:67:ac:65:7d:d1:e9:b9:94:3e:67:aa:11:b7:b3:ea:f3:28:
c3:96:40:e2:ae:44:eb:4a:a2:b0:d2:75:46:d8:cb:90:9e:6d:
bf:34:18:52:f0:b1:33:67:86:6d:ef:43:1f:73:81:c4:74:78:
3b:6e:9a:f3:77:a2:57:c6:ba:60:36:dc:41:47:ab:00:ce:a7:
a4:f2:5e:cf:23:17:22:be:33:1e:1f:96:e8:a9:b3:70:f2:f4:
1e:97:60:9f:09:ab:5f:44:31:da:0c:03:61:42:8c:6b:51:82:
a1:b8:02:0f:3d:37:c8:84:31:b2:45:fc:57:2a:2c:0d:d7:72:
bf:85:28:04:5f:ac:6b:5f:61:c0:12:af:7b:3c:14:7b:13:bf:
d1:57:f1:e5:d1:13:38:e1:d4:2e:ce:7a:e6:11:f8:47:22:67:
02:59:f2:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVALZU+8gS8IiOtb7lUM1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTI0NzhiMWNhNGNiYTAzMDk5MWJkOGNiNDRkOWYyNGY1
OWMwYjgwHhcNMjUwNDIwMjEwMDMyWhcNMjUwNDIxMjEwMDMyWjAzMTEwLwYDVQQD
Eyg5NzAyNzg2MmViMDA1ZjcwZmIwNGUxOWRlMjUzODM0ZDBiZjZjNzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqTxg08RTmF0mwXs2/EALgoEStFm
C2CC4Oe306SXVOFPsUokW7eEcSfgjIX0Zkq2ZGQp5xPt2k15F2Wn6qVn1cl3U/9Q
VBmmcC2xyDiCpm5TyjYA93jwYpQGuryqvKmXNpAXp0pBi3tl78/oItMGzDF3CBiE
wLy52/iSVABRNa+j4o+sFTitypi1XEigofKXlUFGMnkJxGbSKksysyPzrebaCcho
CN/QQBbE0vXlohQTt4RDyMyYiluIzXwnvTQCQHeIbGJY3RqNbvBfGxiwPfq5HvO/
z1bEqEjMJtUGzEB32BRlvF7d7PT/hFavWDQE/1zvttlr1sCGRKC0W5HkZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcCeGLrAF9w+wThneJTg00L9sedMB8GA1UdIwQY
MBaAFB8SR4scpMugMJkb2MtE2fJPWcC4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mNjIzYjYtYTE5OC00MDVjLTgzMjYt
MDlmMTUyNGE1MjQ2LzEvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mNjIzYjYtYTE5OC00MDVjLTgzMjYtMDlmMTUyNGE1MjQ2
LzEvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzKZ1xZO
vH9mrSuuuwOH0c/+lSP+pExKh3iSVgM/d79V4U9yjdvlajk6azqQqkdVyI3Ngh+W
EpcXnCgWEcpgPxdQvUnnDBLLSvXXm3bvM9k504F2FUwU9yK/dGesZX3R6bmUPmeq
Ebez6vMow5ZA4q5E60qisNJ1RtjLkJ5tvzQYUvCxM2eGbe9DH3OBxHR4O26a83ei
V8a6YDbcQUerAM6npPJezyMXIr4zHh+W6KmzcPL0HpdgnwmrX0Qx2gwDYUKMa1GC
obgCDz03yIQxskX8VyosDddyv4UoBF+sa19hwBKvezwUexO/0Vfx5dETOOHULs56
5hH4RyJnAlnyXA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:42:31 2025 by rpki-client