Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
File: H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft (raw, json)
Hash identifier: Di2vUyYjipgjOSy3XGb6qDlgua/FnpwT5pgRe0PQU/8=
Subject key identifier: 75:5C:DA:C6:FB:61:68:CC:B5:22:E0:C8:22:BE:88:17:43:4D:CD:23
Authority key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
Certificate issuer: /CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Certificate serial: 0196102022EC4B396237CE861C85441791B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
Manifest number: 0ACB
Signing time: Mon 07 Apr 2025 12:01:03 +0000
Manifest this update: Mon 07 Apr 2025 12:01:03 +0000
Manifest next update: Tue 08 Apr 2025 12:01:03 +0000
Files and hashes: 1: H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl (hash: nL7K4JPfbPD7gSJ2ye4942GyUVluvhBDeaiDJWh1Pnc=)
2: mxOxKrBmnmPClr9Kc96iEdW6XUE.roa (hash: UbZRUNNa6gB9j1h+WjL/FTz+dVPKNCXmn8kcP5ajisc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:20:22:ec:4b:39:62:37:ce:86:1c:85:44:17:91:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Validity
Not Before: Apr 7 12:01:03 2025 GMT
Not After : Apr 8 12:01:03 2025 GMT
Subject: CN=755cdac6fb6168ccb522e0c822be8817434dcd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e9:67:91:4f:7c:51:94:d4:ae:cb:e5:cf:5c:
57:36:2b:5c:d8:a7:76:18:58:5a:05:91:81:9a:56:
28:3c:40:df:7b:79:42:6c:a3:c1:b1:75:7d:6f:2c:
e0:fa:f2:33:29:aa:26:00:f8:0c:48:70:41:54:10:
a0:4d:f6:94:9d:e6:33:9a:b5:6b:46:bc:3b:90:cc:
03:cc:60:26:9a:d3:d8:2a:19:86:b2:ef:7b:da:22:
f7:be:45:d4:5b:63:94:7a:ce:4e:c3:57:61:35:7f:
32:94:2e:4d:90:b6:41:8c:50:bc:f9:a7:6d:27:a0:
ec:35:43:96:42:94:57:58:41:21:b1:6f:7e:0f:f9:
df:d2:d4:0e:1a:b4:62:0b:26:da:18:f1:7a:d2:5d:
05:54:6f:68:f6:8c:a6:59:56:18:3b:b1:a8:fa:f0:
f2:52:e4:8a:0f:c9:fc:d7:ff:49:35:12:30:94:99:
98:ae:5a:d9:68:9c:e1:2b:da:4c:c4:95:0c:14:78:
85:63:7d:2d:6c:36:85:99:6e:d5:70:cd:27:76:2b:
1c:67:c8:5d:74:6e:fb:22:f2:91:21:5b:43:47:74:
b0:66:8e:a4:71:5f:14:3f:8a:53:95:dc:a4:c3:c1:
07:8c:78:56:7a:45:e0:4c:5d:58:d3:ff:66:87:5a:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5C:DA:C6:FB:61:68:CC:B5:22:E0:C8:22:BE:88:17:43:4D:CD:23
X509v3 Authority Key Identifier:
keyid:1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:90:49:81:6b:ff:9e:8a:44:70:a0:c8:31:08:bb:a1:33:f6:
1d:d5:1b:65:bc:07:76:42:a8:ee:a1:d4:2a:1b:b3:98:19:b6:
9e:a5:5e:37:b6:e1:dc:f2:49:4d:4e:ca:80:59:92:4e:8a:fa:
bd:27:35:2d:0e:c4:64:fb:84:0c:f9:a4:71:ff:d2:ae:aa:a5:
29:18:32:8a:c9:14:72:b0:f0:89:9c:dd:43:2f:d5:b3:1c:e0:
83:c5:18:86:a3:af:90:0e:ef:7c:24:22:b6:c2:20:02:25:db:
c4:09:12:a7:09:db:27:57:15:63:8b:9a:41:96:f1:9f:50:c0:
da:e0:c5:bb:fc:ab:88:e9:b9:f9:36:32:11:30:f4:54:80:57:
40:cb:24:a0:90:59:84:9b:dc:f1:3e:ec:7b:aa:04:c8:e5:7b:
32:6e:50:04:62:88:ea:63:87:a4:21:89:29:51:7b:cd:34:48:
fb:7c:5a:9f:f7:ff:e8:2c:3f:03:8e:a7:53:3b:7a:21:49:4e:
8d:78:b9:ce:d7:44:5e:76:fb:a4:50:7c:0c:c0:fd:10:6c:e6:
f0:99:ff:11:c7:1e:99:1a:9d:62:0b:8f:a6:4f:e2:f5:69:4a:
e3:6f:5b:12:e0:e1:f9:01:32:10:be:4c:06:b3:f3:03:6b:56:
d5:e3:5f:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYQICLsSzliN86GHIVEF5GyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOWUyNWY0YTg4YjhiYjQzYzU0ZDU4ZjZiNGU3NTA4OWY5
MDZmZDIwHhcNMjUwNDA3MTIwMTAzWhcNMjUwNDA4MTIwMTAzWjAzMTEwLwYDVQQD
Eyg3NTVjZGFjNmZiNjE2OGNjYjUyMmUwYzgyMmJlODgxNzQzNGRjZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+lnkU98UZTUrsvlz1xXNitc2Kd2
GFhaBZGBmlYoPEDfe3lCbKPBsXV9byzg+vIzKaomAPgMSHBBVBCgTfaUneYzmrVr
Rrw7kMwDzGAmmtPYKhmGsu972iL3vkXUW2OUes5Ow1dhNX8ylC5NkLZBjFC8+adt
J6DsNUOWQpRXWEEhsW9+D/nf0tQOGrRiCybaGPF60l0FVG9o9oymWVYYO7Go+vDy
UuSKD8n81/9JNRIwlJmYrlrZaJzhK9pMxJUMFHiFY30tbDaFmW7VcM0ndiscZ8hd
dG77IvKRIVtDR3SwZo6kcV8UP4pTldykw8EHjHhWekXgTF1Y0/9mh1pJlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVc2sb7YWjMtSLgyCK+iBdDTc0jMB8GA1UdIwQY
MBaAFB+eJfSoi4u0PFTVj2tOdQifkG/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDU0bDlLaUxpN1E4Vk5XUGEwNTFDSi1RYjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi81YjVmMjAtNmVmNi00NGI5LWE2OTEt
ZTU1NGEzNWU5ZTc3LzEvSDU0bDlLaUxpN1E4Vk5XUGEwNTFDSi1RYjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi81YjVmMjAtNmVmNi00NGI5LWE2OTEtZTU1NGEzNWU5ZTc3
LzEvSDU0bDlLaUxpN1E4Vk5XUGEwNTFDSi1RYjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5BJgWv/
nopEcKDIMQi7oTP2HdUbZbwHdkKo7qHUKhuzmBm2nqVeN7bh3PJJTU7KgFmSTor6
vSc1LQ7EZPuEDPmkcf/SrqqlKRgyiskUcrDwiZzdQy/Vsxzgg8UYhqOvkA7vfCQi
tsIgAiXbxAkSpwnbJ1cVY4uaQZbxn1DA2uDFu/yriOm5+TYyETD0VIBXQMskoJBZ
hJvc8T7se6oEyOV7Mm5QBGKI6mOHpCGJKVF7zTRI+3xan/f/6Cw/A46nUzt6IUlO
jXi5ztdEXnb7pFB8DMD9EGzm8Jn/EccemRqdYguPpk/i9WlK429bEuDh+QEyEL5M
BrPzA2tW1eNfiQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:00:31 2025 by rpki-client