Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
File: mHKOiifTDIOu5fSWJAmF7kDLN4s.mft (raw, json)
Hash identifier: MzAdi5zfb/fLl2NpYjA2vm2OqDZVqDHz+rq+DfNBo+0=
Subject key identifier: D7:2F:B3:5A:69:0A:1F:76:AB:88:99:DB:37:42:C6:19:A4:82:D0:5F
Authority key identifier: 98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
Certificate issuer: /CN=98728e8a27d30c83aee5f496240985ee40cb378b
Certificate serial: 01964D7F1D761E8AF6EBC73081F610CC1333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 10:01:38 +0000
Manifest this update: Sat 19 Apr 2025 10:01:38 +0000
Manifest next update: Sun 20 Apr 2025 10:01:38 +0000
Files and hashes: 1: XJGd09AEEzsFIIfYDpNGSfAbhTA.roa (hash: SsnSMVtUQ+oIoqX7ckVqdgKbPcggygUf/qAmLg/UAmY=)
2: YQBMItgYzXgvtsJZr9Y-cbi0JwI.roa (hash: AkAfo5mQ4fkk6X0GxvhEwCam5E0S5qDCnTw0oq+a9Dk=)
3: mHKOiifTDIOu5fSWJAmF7kDLN4s.crl (hash: cqEVWy0hKyscOyCD9vRrCaZNn3nbfYWL9yMv2ss/7o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7f:1d:76:1e:8a:f6:eb:c7:30:81:f6:10:cc:13:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98728e8a27d30c83aee5f496240985ee40cb378b
Validity
Not Before: Apr 19 10:01:38 2025 GMT
Not After : Apr 20 10:01:38 2025 GMT
Subject: CN=d72fb35a690a1f76ab8899db3742c619a482d05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:84:b3:28:68:c4:27:95:b2:5c:90:76:f4:99:
ea:ce:64:f1:73:d2:98:22:73:bd:ca:53:86:34:a4:
53:0c:b9:00:a2:d7:00:b7:ea:ec:af:2a:e1:f9:93:
e4:02:12:e7:92:7a:c4:92:37:19:16:06:2f:4f:0b:
82:a7:0a:7a:36:a6:e5:c5:98:fb:00:3c:1a:4b:0d:
99:df:d9:c1:b5:37:f8:b3:7d:8a:49:de:c3:fa:63:
87:e4:69:c6:c0:9a:88:f3:92:bf:26:8b:a8:21:3a:
61:34:99:09:b9:5f:7c:6b:61:c6:1a:22:b1:6a:6e:
9e:dd:fd:2a:d3:95:55:1b:51:35:6d:b5:e2:bb:df:
af:61:df:45:c3:1c:19:e3:6b:b0:18:9e:50:e5:59:
31:9a:f6:82:91:fd:63:a7:f4:21:f8:42:db:1c:96:
a0:e8:8b:77:bf:3f:05:d1:42:14:4a:4e:12:c5:42:
55:3d:2b:c6:2d:10:83:62:c3:a1:2d:28:35:aa:bc:
aa:35:1e:e6:07:ff:79:70:cc:35:c8:30:fe:ac:09:
ce:43:a4:4f:88:3b:62:25:c9:85:40:a9:20:f8:9a:
02:d5:19:77:47:5b:aa:e6:41:39:1b:72:24:9e:6e:
06:bf:37:7a:2e:b7:8a:25:e9:3f:17:29:72:8a:f1:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2F:B3:5A:69:0A:1F:76:AB:88:99:DB:37:42:C6:19:A4:82:D0:5F
X509v3 Authority Key Identifier:
keyid:98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:df:ba:57:80:83:d5:0c:88:2d:d8:94:6a:78:c1:8a:7f:8c:
3d:a3:da:a7:70:df:08:d8:74:45:49:3b:c5:51:2d:f1:5a:3b:
0c:a3:b4:b4:ec:92:10:ea:06:3d:6c:3c:94:e5:2e:15:eb:43:
6b:80:b3:49:15:9a:4d:90:28:0a:40:e0:c0:fb:31:ca:87:82:
fd:7f:3c:6d:03:b0:35:3f:fb:2a:64:dd:0d:20:73:b8:ca:24:
bb:f1:7f:ea:67:02:3f:c9:40:e0:07:a6:62:47:e3:d0:38:a7:
b9:c5:27:5b:24:86:f4:16:26:6b:d6:f5:ae:97:1e:0c:de:02:
f6:0a:ce:4b:6f:d9:23:21:73:13:e3:a1:87:fb:3e:c5:ed:b9:
53:05:bb:71:bf:a3:67:e8:e5:2a:03:4d:c1:6c:e1:4f:a9:12:
21:86:60:0f:88:23:99:b6:a1:ec:a5:53:81:2b:48:da:09:54:
a3:ee:0f:5a:30:e0:e3:b6:62:30:6a:8f:23:b4:a8:c7:aa:86:
f7:1d:28:e4:e7:88:9e:0a:9c:93:40:63:c8:50:63:60:21:d4:
c0:af:28:48:66:69:1e:93:15:3c:b4:ee:08:1b:cd:2f:1f:dc:
e7:6e:06:18:4f:bb:6c:ce:36:e8:8a:e3:67:b6:1e:be:de:b8:
f3:c3:ec:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfx12Hor268cwgfYQzBMzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NzI4ZThhMjdkMzBjODNhZWU1ZjQ5NjI0MDk4NWVlNDBj
YjM3OGIwHhcNMjUwNDE5MTAwMTM4WhcNMjUwNDIwMTAwMTM4WjAzMTEwLwYDVQQD
EyhkNzJmYjM1YTY5MGExZjc2YWI4ODk5ZGIzNzQyYzYxOWE0ODJkMDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oSzKGjEJ5WyXJB29JnqzmTxc9KY
InO9ylOGNKRTDLkAotcAt+rsryrh+ZPkAhLnknrEkjcZFgYvTwuCpwp6NqblxZj7
ADwaSw2Z39nBtTf4s32KSd7D+mOH5GnGwJqI85K/JouoITphNJkJuV98a2HGGiKx
am6e3f0q05VVG1E1bbXiu9+vYd9FwxwZ42uwGJ5Q5VkxmvaCkf1jp/Qh+ELbHJag
6It3vz8F0UIUSk4SxUJVPSvGLRCDYsOhLSg1qryqNR7mB/95cMw1yDD+rAnOQ6RP
iDtiJcmFQKkg+JoC1Rl3R1uq5kE5G3Iknm4Gvzd6LreKJek/FylyivHFxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcvs1ppCh92q4iZ2zdCxhmkgtBfMB8GA1UdIwQY
MBaAFJhyjoon0wyDruX0liQJhe5AyzeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUhLT2lpZlRESU91NWZTV0pBbUY3a0RMTjRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wM2NhMjMtYTE0My00ZGYwLWFmYjkt
YTI0ZTNhMGEzMWVmLzEvbUhLT2lpZlRESU91NWZTV0pBbUY3a0RMTjRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wM2NhMjMtYTE0My00ZGYwLWFmYjktYTI0ZTNhMGEzMWVm
LzEvbUhLT2lpZlRESU91NWZTV0pBbUY3a0RMTjRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXN+6V4CD
1QyILdiUanjBin+MPaPap3DfCNh0RUk7xVEt8Vo7DKO0tOySEOoGPWw8lOUuFetD
a4CzSRWaTZAoCkDgwPsxyoeC/X88bQOwNT/7KmTdDSBzuMoku/F/6mcCP8lA4Aem
Ykfj0DinucUnWySG9BYma9b1rpceDN4C9grOS2/ZIyFzE+Ohh/s+xe25UwW7cb+j
Z+jlKgNNwWzhT6kSIYZgD4gjmbah7KVTgStI2glUo+4PWjDg47ZiMGqPI7Sox6qG
9x0o5OeIngqck0BjyFBjYCHUwK8oSGZpHpMVPLTuCBvNLx/c524GGE+7bM426Irj
Z7Yevt6488PsuA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:01:58 2025 by rpki-client