Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File: hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier: Z+ZPQUTTZ3zfFpLcSks6VEt0sanJqvoaVz2Y5YrLWxY=
Subject key identifier: 3A:B9:BE:5D:E2:87:81:69:8A:97:CE:A2:CB:E2:57:DA:99:63:AC:E7
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 019608D508BF34E6F6502632915A4F3876E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number: 14D9
Signing time: Sun 06 Apr 2025 02:01:41 +0000
Manifest this update: Sun 06 Apr 2025 02:01:41 +0000
Manifest next update: Mon 07 Apr 2025 02:01:41 +0000
Files and hashes: 1: 1-DR1I-0Q86yRegJRW48TcU9jkak.roa (hash: BbaoF4QpKICKvF2DFJvuoi1HekvHPPg57x8hdzzKsN8=)
2: QRsEK7Mm82AysiVwrsI0fcQwGZk.roa (hash: +14a6gbAtC3j39lO1seQMdbzRZUzjrGGX9KqhXCRQaA=)
3: bMolsew2aNfnwVEKpwDy2jyM58c.roa (hash: 6E9s83W/T6d5cC26/y3n1N8eAzWZSpgeiiEyiR8AjmM=)
4: exOJgZWKhs3CfxljzDJO3y7m_kg.roa (hash: sLEFa7RsALBhT6NfAUon7unSxy37m3yVXscXWcoyxvY=)
5: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: AvUCBy5Iaw6LuYm/wIpQGYL/ffhvKleU4cEad+n1wEk=)
6: nfEFUPm3YqGp7FQGkGbFir0VX4k.roa (hash: wcnZ1tdaEqbHq23LSrQJa3uBDPQRdB3Kf9OV1V7J1L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:08:d5:08:bf:34:e6:f6:50:26:32:91:5a:4f:38:76:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Apr 6 02:01:41 2025 GMT
Not After : Apr 7 02:01:41 2025 GMT
Subject: CN=3ab9be5de28781698a97cea2cbe257da9963ace7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:88:f5:ce:fd:02:9c:50:de:81:02:1c:c6:ae:
b3:74:1d:dc:ee:49:44:f1:b7:d9:94:ba:f9:5f:aa:
34:4b:53:51:06:8b:c6:b9:d6:9c:49:ca:df:84:11:
9c:6c:2a:a6:7e:ea:ce:9f:c9:83:97:c7:ac:6e:5b:
74:00:05:fd:03:7d:56:86:8d:c4:f6:12:ec:d8:68:
d0:d5:cf:96:c1:da:51:c6:9f:a2:ad:3c:d4:c4:f6:
35:90:b4:bb:14:79:93:b8:f5:cb:33:48:9b:40:82:
8e:d4:61:12:53:59:48:5d:fd:5f:c3:a9:a9:dc:f8:
84:0d:08:3a:dd:c8:98:cf:cc:df:e8:d2:48:e5:96:
9c:0f:80:67:b5:2b:65:68:fe:ef:40:1f:e7:45:2c:
0f:3c:3e:e2:23:f4:34:cc:20:ba:91:82:80:a6:fb:
be:9b:02:f8:24:a3:b7:af:76:c7:44:aa:00:f9:9d:
78:7a:8d:9e:85:8a:de:53:05:e6:7c:eb:fb:5e:57:
7f:82:62:dd:6c:57:0d:80:60:b2:51:85:1f:34:6b:
ff:32:98:ac:17:30:43:86:de:82:07:13:96:a8:41:
2a:01:d4:9b:8b:3f:66:74:ee:4a:3b:26:2c:cb:18:
f3:9b:fc:68:0d:9e:dd:b1:a0:a3:9a:18:7c:7b:c8:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B9:BE:5D:E2:87:81:69:8A:97:CE:A2:CB:E2:57:DA:99:63:AC:E7
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b9:e2:87:d1:e8:1a:1b:e7:04:ba:02:dc:78:73:92:8f:42:
7a:9d:db:c1:b9:3e:1b:29:0f:3f:32:e9:77:b3:a0:d0:03:cf:
ae:2c:72:89:f3:51:02:09:b6:23:31:2c:16:ba:e1:18:90:af:
f0:7f:8f:64:8c:39:0e:9e:29:d4:67:ac:3a:9a:7e:15:97:4b:
ae:80:87:1b:b6:b6:c0:fb:c3:3e:aa:86:c8:57:3d:2b:ef:de:
29:c6:15:53:81:96:16:ba:59:56:9f:6d:ef:f4:e9:f6:48:71:
0c:40:a3:05:41:ed:52:0e:7e:9a:0c:70:b7:4f:00:2a:04:53:
07:75:12:a7:aa:c3:cf:d0:53:90:33:97:bd:f9:d9:f0:c2:e8:
43:90:2f:09:70:0e:a8:1f:d5:a7:6f:9a:99:34:4b:45:e4:3d:
20:1a:16:f7:a3:f2:65:1a:5a:e6:ca:58:16:25:ac:42:81:91:
4e:55:a5:65:a4:80:ce:0b:41:63:cb:3c:32:3c:21:29:69:99:
04:a6:30:4a:7b:4d:8f:36:4f:80:a1:d9:32:04:ea:c3:12:7f:
14:4e:00:9d:8b:f5:2b:aa:7b:98:2f:09:52:b6:47:cb:67:b9:
2d:b5:be:a4:70:0b:52:6c:2b:d4:89:a3:33:46:00:d6:86:a9:
a7:2a:be:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYI1Qi/NOb2UCYykVpPOHbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWM1ODc1MmYzMzM2NDIyZmYwZWUxNzI2NDc0NTkxZTdh
NDFlNWYwHhcNMjUwNDA2MDIwMTQxWhcNMjUwNDA3MDIwMTQxWjAzMTEwLwYDVQQD
EygzYWI5YmU1ZGUyODc4MTY5OGE5N2NlYTJjYmUyNTdkYTk5NjNhY2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oj1zv0CnFDegQIcxq6zdB3c7klE
8bfZlLr5X6o0S1NRBovGudacScrfhBGcbCqmfurOn8mDl8esblt0AAX9A31Who3E
9hLs2GjQ1c+WwdpRxp+irTzUxPY1kLS7FHmTuPXLM0ibQIKO1GESU1lIXf1fw6mp
3PiEDQg63ciYz8zf6NJI5ZacD4BntStlaP7vQB/nRSwPPD7iI/Q0zCC6kYKApvu+
mwL4JKO3r3bHRKoA+Z14eo2ehYreUwXmfOv7Xld/gmLdbFcNgGCyUYUfNGv/Mpis
FzBDht6CBxOWqEEqAdSbiz9mdO5KOyYsyxjzm/xoDZ7dsaCjmhh8e8i3vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDq5vl3ih4FpipfOosviV9qZY6znMB8GA1UdIwQY
MBaAFIRcWHUvMzZCL/DuFyZHRZHnpB5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGUzYWItMjI4Yy00YTIzLTkyMTYt
ZjEzNGU1MWNjMDViLzEvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82NGUzYWItMjI4Yy00YTIzLTkyMTYtZjEzNGU1MWNjMDVi
LzEvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7nih9Ho
GhvnBLoC3Hhzko9Cep3bwbk+GykPPzLpd7Og0APPrixyifNRAgm2IzEsFrrhGJCv
8H+PZIw5Dp4p1GesOpp+FZdLroCHG7a2wPvDPqqGyFc9K+/eKcYVU4GWFrpZVp9t
7/Tp9khxDECjBUHtUg5+mgxwt08AKgRTB3USp6rDz9BTkDOXvfnZ8MLoQ5AvCXAO
qB/Vp2+amTRLReQ9IBoW96PyZRpa5spYFiWsQoGRTlWlZaSAzgtBY8s8MjwhKWmZ
BKYwSntNjzZPgKHZMgTqwxJ/FE4AnYv1K6p7mC8JUrZHy2e5LbW+pHALUmwr1Imj
M0YA1oappyq+4A==
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:51:18 2025 by rpki-client