Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: BsyUDuLVJi8RXkZiGV9K58u8OJl0JRnHi0c96O7fbhc=
Subject key identifier: 13:10:AA:C8:0C:B5:C4:84:46:5C:2B:93:AF:0C:01:6F:EE:5A:D3:A6
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 01964B909FA0DCA69AD00F9B58E012FD7B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 0E04
Signing time: Sat 19 Apr 2025 01:01:31 +0000
Manifest this update: Sat 19 Apr 2025 01:01:31 +0000
Manifest next update: Sun 20 Apr 2025 01:01:31 +0000
Files and hashes: 1: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: bh0xqlvNXQnV2FQAg4JUH3sYRAGWb32zl57r4rnCS5k=)
2: nWIGQEEDzaoVvT_y5hPxRiP1qn8.roa (hash: uGDWeypcq1B/eKXj8B8fn9FgOmQqtHY/Hs+n7XduT00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:9f:a0:dc:a6:9a:d0:0f:9b:58:e0:12:fd:7b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Apr 19 01:01:31 2025 GMT
Not After : Apr 20 01:01:31 2025 GMT
Subject: CN=1310aac80cb5c484465c2b93af0c016fee5ad3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:de:e0:b0:ea:06:48:0d:7d:a2:a7:30:19:
c9:82:97:e6:ec:9a:df:9f:71:06:c0:67:d0:fd:3a:
ff:6e:ed:29:b6:8b:88:47:c5:d8:87:ce:f4:79:eb:
63:62:dc:ef:3c:9c:77:60:62:c7:48:03:e7:88:9c:
d5:43:fe:48:9e:a4:14:cb:f4:7a:6d:2b:31:8c:de:
4c:51:9f:e0:6c:df:bd:5c:9d:43:de:37:44:07:14:
6b:1c:ef:42:0e:e6:44:8e:05:b5:65:1a:7a:08:1b:
7c:c6:1a:63:fc:da:58:00:a7:a6:f3:e5:61:40:50:
87:3a:5f:b7:e5:46:71:25:28:f4:42:cc:1b:b0:9e:
ca:40:f4:20:84:f2:da:72:0c:91:ce:20:5b:ee:ea:
f8:c6:51:95:db:b6:67:83:4c:18:ed:3d:fb:8e:dc:
ba:1c:a8:2f:17:a5:19:cd:f8:98:8a:3e:db:57:5b:
dc:7d:1b:09:8c:9c:5d:75:81:8f:59:fd:91:c4:b9:
51:6f:0c:13:2e:bb:c3:3e:91:1e:95:80:7e:82:5a:
85:01:31:8e:f0:86:74:7a:6e:5b:89:87:cd:93:81:
9f:f7:03:40:40:40:74:4d:d0:96:8d:38:22:4d:80:
a3:3f:38:f3:e0:b7:24:cf:74:8c:98:20:7b:68:24:
a9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:10:AA:C8:0C:B5:C4:84:46:5C:2B:93:AF:0C:01:6F:EE:5A:D3:A6
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:80:7f:58:56:0a:76:06:c4:28:3b:8c:fd:75:ee:f2:d6:85:
eb:be:99:e7:0b:61:49:bd:70:3e:06:82:12:e0:76:c9:6d:b0:
87:28:d4:0c:c9:e2:df:d2:a0:2d:3c:a6:13:9e:d2:ff:f4:a2:
0c:f9:ea:a0:7e:3a:75:9e:8c:9f:13:b4:92:44:e3:b3:f3:37:
5b:85:46:b1:de:01:1c:aa:12:34:04:fc:b6:dd:65:b5:0d:31:
01:61:03:ca:de:61:87:22:62:fe:de:ec:0f:81:88:97:57:df:
5f:d4:06:02:6f:11:6f:eb:4d:86:5a:67:b4:ae:06:7e:91:41:
b0:a2:4d:48:c5:7a:f6:f9:25:ab:b6:70:7a:95:99:8f:68:75:
9f:f6:09:1d:62:e3:1d:06:7f:db:f1:d3:81:c7:c3:cd:8c:57:
90:2d:fa:24:da:37:23:cb:de:aa:db:d4:0c:3b:a3:f9:65:05:
c0:70:7f:cd:4b:d0:0d:06:9f:41:84:b1:04:7a:28:25:a2:cc:
24:e4:d4:0a:79:2d:d1:bb:ff:19:5b:7b:ac:7f:7a:de:0a:64:
4e:09:c1:6d:38:00:e0:20:18:4a:b7:c3:4f:f3:a0:23:c1:b9:
50:6f:67:3c:5e:1c:bd:52:ac:98:f7:7e:0d:8b:eb:b9:4e:bd:
54:9c:ec:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZLkJ+g3Kaa0A+bWOAS/XsiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNzUxMDY3NzFjNDI5NWUzZDNlY2ZhMDRjYjk3ZjYzMTYy
M2U1YmYwHhcNMjUwNDE5MDEwMTMxWhcNMjUwNDIwMDEwMTMxWjAzMTEwLwYDVQQD
EygxMzEwYWFjODBjYjVjNDg0NDY1YzJiOTNhZjBjMDE2ZmVlNWFkM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVHe4LDqBkgNfaKnMBnJgpfm7Jrf
n3EGwGfQ/Tr/bu0ptouIR8XYh870eetjYtzvPJx3YGLHSAPniJzVQ/5InqQUy/R6
bSsxjN5MUZ/gbN+9XJ1D3jdEBxRrHO9CDuZEjgW1ZRp6CBt8xhpj/NpYAKem8+Vh
QFCHOl+35UZxJSj0QswbsJ7KQPQghPLacgyRziBb7ur4xlGV27Zng0wY7T37jty6
HKgvF6UZzfiYij7bV1vcfRsJjJxddYGPWf2RxLlRbwwTLrvDPpEelYB+glqFATGO
8IZ0em5biYfNk4Gf9wNAQEB0TdCWjTgiTYCjPzjz4Lckz3SMmCB7aCSpeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMQqsgMtcSERlwrk68MAW/uWtOmMB8GA1UdIwQY
MBaAFB51EGdxxClePT7PoEy5f2MWI+W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGEwZjItYzgwNi00YjU1LWJiZTct
YTJmZGI5MzhjYTJkLzEvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85NGEwZjItYzgwNi00YjU1LWJiZTctYTJmZGI5MzhjYTJk
LzEvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4B/WFYK
dgbEKDuM/XXu8taF676Z5wthSb1wPgaCEuB2yW2whyjUDMni39KgLTymE57S//Si
DPnqoH46dZ6MnxO0kkTjs/M3W4VGsd4BHKoSNAT8tt1ltQ0xAWEDyt5hhyJi/t7s
D4GIl1ffX9QGAm8Rb+tNhlpntK4GfpFBsKJNSMV69vklq7ZwepWZj2h1n/YJHWLj
HQZ/2/HTgcfDzYxXkC36JNo3I8veqtvUDDuj+WUFwHB/zUvQDQafQYSxBHooJaLM
JOTUCnkt0bv/GVt7rH963gpkTgnBbTgA4CAYSrfDT/OgI8G5UG9nPF4cvVKsmPd+
DYvruU69VJzsrg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:08:50 2025 by rpki-client