Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: mckw1CQ8A5HZ+PCFHzin0xz5YfMpq8Pq6iLhO0G5Faw=
Subject key identifier: 0B:60:2A:62:9D:23:B5:8A:CE:A8:5E:9F:11:2E:0F:F9:E9:F9:35:B3
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 01965838D850AA36745260A7A07F9345C3DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 054E
Signing time: Mon 21 Apr 2025 12:00:42 +0000
Manifest this update: Mon 21 Apr 2025 12:00:42 +0000
Manifest next update: Tue 22 Apr 2025 12:00:42 +0000
Files and hashes: 1: XOOVHbvdi1PyG7OFqAlrThvaXr0.roa (hash: FXkyjiQc3j4OAi/BA8pdWLXnVuKz/SxHMWNuTxG6YRs=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: Y1BR/PToFyNCHA78IKhe/6jo95sT1w/6qLL6U/LY85Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:d8:50:aa:36:74:52:60:a7:a0:7f:93:45:c3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Apr 21 12:00:42 2025 GMT
Not After : Apr 22 12:00:42 2025 GMT
Subject: CN=0b602a629d23b58acea85e9f112e0ff9e9f935b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:8d:3d:0c:69:4a:9d:93:8d:91:a6:c7:58:
18:55:63:7c:df:54:03:19:ba:4e:eb:5d:64:1f:93:
f0:91:38:2f:1b:f4:d9:ac:20:b3:f4:b1:ee:c3:54:
fa:61:15:64:ec:e5:57:31:f4:c7:56:94:d4:f6:a0:
d6:b8:3c:08:5b:b8:50:99:57:59:86:21:9f:ef:4e:
c0:92:27:f1:21:d6:80:87:96:54:95:62:6f:e3:43:
ae:c5:cb:73:19:10:09:a6:8e:73:a0:9a:fd:d5:16:
58:58:56:bd:29:6b:4a:92:37:1a:c8:3b:b6:93:05:
73:5d:4e:d4:25:3b:47:0c:6a:6c:d4:63:d4:fb:3c:
53:e1:f5:6d:ea:1a:7e:5f:e8:6a:c2:35:d2:1e:a5:
30:09:30:c9:3e:29:2f:4d:2c:23:0e:ab:f6:bf:5d:
2a:90:dd:a3:0f:6c:69:de:43:27:ae:c9:c2:08:97:
c2:b6:8d:42:79:38:df:28:a4:6d:94:b9:02:79:29:
9a:ab:df:c0:26:3b:66:08:b4:76:3c:af:e5:76:81:
43:84:e3:37:64:86:e0:03:32:fb:ed:e9:66:cf:c1:
2a:01:d8:20:39:97:98:9e:2e:34:c3:5d:76:cc:d7:
60:cf:47:3c:4a:04:84:53:d1:55:a1:3f:3a:7e:1a:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:60:2A:62:9D:23:B5:8A:CE:A8:5E:9F:11:2E:0F:F9:E9:F9:35:B3
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c5:3d:f9:1a:69:f7:c7:0e:e5:b4:72:fd:ee:32:8d:6e:94:
94:a8:16:d3:81:21:4d:d5:3d:e5:10:ab:82:fb:7e:89:f8:cd:
1a:1c:46:d5:0c:74:a3:0d:ac:e9:e6:df:62:72:72:b9:31:f3:
ad:41:c7:b2:19:13:c7:65:c5:ca:a9:0a:7c:94:63:5c:d8:b2:
58:f6:9a:c8:40:3d:56:43:e8:a4:58:2e:c9:37:1c:6e:54:1d:
0d:85:0d:30:9b:d8:cf:8c:64:8a:86:d0:c9:35:9f:71:0c:39:
70:86:92:99:31:84:81:d4:ca:73:88:57:8f:1f:12:09:d7:48:
01:8c:b4:71:23:52:a9:b5:ce:9f:01:0f:d9:45:1f:46:0a:21:
53:6e:08:51:e8:20:f3:1c:2a:fb:5c:ee:b2:95:1d:56:6d:a1:
c2:42:8f:1b:a7:93:87:9d:9c:db:b1:80:56:f9:e9:75:87:86:
df:3d:48:07:be:c2:c2:f1:e7:ab:06:d4:ee:76:d4:69:29:6d:
b8:63:08:08:a4:50:46:05:b6:77:83:26:0e:50:b5:b6:11:65:
94:af:10:7d:38:a3:7a:64:51:e2:f2:8e:8e:f4:c4:f3:a6:83:
2a:ee:99:cc:43:86:99:26:4c:a3:48:dd:4d:4f:d0:31:c9:8e:
3f:38:76:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYONhQqjZ0UmCnoH+TRcPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OThjYmM0ZThkZmYxODUyNDA0YTk5Mjc1ZDIzMGE1NjEx
MTA1NWYwHhcNMjUwNDIxMTIwMDQyWhcNMjUwNDIyMTIwMDQyWjAzMTEwLwYDVQQD
EygwYjYwMmE2MjlkMjNiNThhY2VhODVlOWYxMTJlMGZmOWU5ZjkzNWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw32NPQxpSp2TjZGmx1gYVWN831QD
GbpO611kH5PwkTgvG/TZrCCz9LHuw1T6YRVk7OVXMfTHVpTU9qDWuDwIW7hQmVdZ
hiGf707AkifxIdaAh5ZUlWJv40OuxctzGRAJpo5zoJr91RZYWFa9KWtKkjcayDu2
kwVzXU7UJTtHDGps1GPU+zxT4fVt6hp+X+hqwjXSHqUwCTDJPikvTSwjDqv2v10q
kN2jD2xp3kMnrsnCCJfCto1CeTjfKKRtlLkCeSmaq9/AJjtmCLR2PK/ldoFDhOM3
ZIbgAzL77elmz8EqAdggOZeYni40w112zNdgz0c8SgSEU9FVoT86fhodrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtgKmKdI7WKzqhenxEuD/np+TWzMB8GA1UdIwQY
MBaAFIWYy8To3/GFJASpknXSMKVhEQVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEt
NTFlNGE1ZWFmYzhlLzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEtNTFlNGE1ZWFmYzhl
LzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMU9+Rpp
98cO5bRy/e4yjW6UlKgW04EhTdU95RCrgvt+ifjNGhxG1Qx0ow2s6ebfYnJyuTHz
rUHHshkTx2XFyqkKfJRjXNiyWPaayEA9VkPopFguyTccblQdDYUNMJvYz4xkiobQ
yTWfcQw5cIaSmTGEgdTKc4hXjx8SCddIAYy0cSNSqbXOnwEP2UUfRgohU24IUegg
8xwq+1zuspUdVm2hwkKPG6eTh52c27GAVvnpdYeG3z1IB77CwvHnqwbU7nbUaSlt
uGMICKRQRgW2d4MmDlC1thFllK8QfTijemRR4vKOjvTE86aDKu6ZzEOGmSZMo0jd
TU/QMcmOPzh2rw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:04:10 2025 by rpki-client