Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier: 0PhTmGcM4/6QZ23Kop0MgsXVfSMQgA9+iqcuFxi5T4k=
Subject key identifier: 1B:7C:24:1C:A6:87:05:C0:0C:31:A0:1F:1A:BB:2C:01:2E:2A:F2:34
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial: 0197470B6D5A7483A17F7E5EE8616CC61B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number: 0AB2
Signing time: Fri 06 Jun 2025 21:00:20 +0000
Manifest this update: Fri 06 Jun 2025 21:00:20 +0000
Manifest next update: Sat 07 Jun 2025 21:00:20 +0000
Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: RSKWakgWMmNgeNPY/rFink7WTfK4IqV6KBhGCuINgfQ=)
2: YxdHjBspbev4c6wpMrvGTIQmKNw.roa (hash: Di9hYOa680JFEYC2+KK51U5HyB76OARKRnq2zFchJs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:6d:5a:74:83:a1:7f:7e:5e:e8:61:6c:c6:1b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Validity
Not Before: Jun 6 21:00:20 2025 GMT
Not After : Jun 7 21:00:20 2025 GMT
Subject: CN=1b7c241ca68705c00c31a01f1abb2c012e2af234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:47:87:a3:f2:61:05:19:71:78:37:d4:19:c2:
f9:ce:8f:68:a1:ec:8f:33:b5:00:45:31:40:4c:34:
9c:a2:9f:d6:bc:84:0d:26:f5:19:2f:79:75:91:4d:
8c:91:d3:d9:f2:b1:89:2d:a7:f6:70:cc:a2:32:b5:
33:2a:87:93:ee:b6:eb:e6:1b:8e:4f:21:08:11:9b:
0e:96:4b:f2:04:cd:f2:a9:3a:28:71:01:b0:23:96:
81:85:18:b0:eb:8a:7f:fd:32:1b:be:16:81:72:33:
7c:68:e8:74:e1:6a:4d:5d:7a:8e:a3:58:49:d8:00:
58:96:3c:3f:a5:d5:18:4b:ce:2b:a6:3d:7d:ee:b9:
92:1c:30:68:d6:6e:4c:23:3b:31:ed:77:23:1a:31:
03:7a:3a:00:d1:ad:9a:e7:a0:58:19:7e:27:7d:ac:
3d:ff:73:f3:12:50:07:d7:2a:6c:25:06:7c:8f:fd:
12:92:3d:11:7d:33:6a:9f:37:14:39:1c:9c:22:53:
d1:35:fa:7d:bd:f8:64:ab:fc:54:b9:0c:67:f0:6c:
8b:38:e1:db:4b:dc:30:4c:ac:25:bc:70:d3:3e:35:
57:33:4e:22:d3:c0:e6:0d:55:ef:21:07:a8:d2:e8:
54:dc:9a:68:3a:73:13:bc:62:b5:6f:f0:af:a3:6a:
e4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7C:24:1C:A6:87:05:C0:0C:31:A0:1F:1A:BB:2C:01:2E:2A:F2:34
X509v3 Authority Key Identifier:
keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2a:07:02:10:3c:62:06:9d:5e:54:8d:dd:cf:13:f5:d5:76:
2e:20:5d:9f:f3:40:7b:21:03:3d:50:7d:c4:51:aa:5f:d0:01:
57:43:7e:cf:f3:bf:4a:03:2e:b7:e6:26:4e:e3:39:1b:39:d5:
e5:15:f2:59:9e:eb:f2:19:89:e5:fa:41:9b:a5:5e:7e:d1:7e:
3b:eb:4f:0b:7b:f6:dc:c9:a2:e3:a7:57:da:9d:9e:e0:dd:ee:
8d:a1:34:0c:35:22:8a:ea:97:e3:14:81:6a:cf:c3:1d:db:0a:
9f:90:51:c2:c5:c6:85:9e:f8:b4:73:f7:77:5b:d4:5c:71:4c:
8b:51:dc:6a:47:1c:4e:2d:2e:8f:b9:09:b1:60:ba:e4:00:a5:
83:37:8a:8e:16:8f:2d:2a:4f:4c:e8:84:d7:cf:b3:86:50:40:
9a:91:a3:a7:a7:df:d9:82:63:2a:57:03:20:5e:09:fc:1d:12:
13:7e:1f:8c:db:5e:b9:87:eb:83:e9:d5:93:29:6f:04:f1:3a:
a5:f7:20:a5:1c:c2:e4:82:f3:aa:f4:ca:49:10:b3:a5:ff:8b:
e4:2a:df:07:31:ad:95:f3:fc:95:9c:ed:c5:7a:8c:b9:50:ac:
4d:07:13:ae:35:b5:89:dc:44:f3:19:2f:0b:c3:1a:54:4a:b5:
29:f5:c0:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHC21adIOhf35e6GFsxhtIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTFmNTlhOTY3OTcyNzFlMWZkNjY3M2E5YzUzNDI1N2Rh
ODhlNmIwHhcNMjUwNjA2MjEwMDIwWhcNMjUwNjA3MjEwMDIwWjAzMTEwLwYDVQQD
EygxYjdjMjQxY2E2ODcwNWMwMGMzMWEwMWYxYWJiMmMwMTJlMmFmMjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUeHo/JhBRlxeDfUGcL5zo9ooeyP
M7UARTFATDScop/WvIQNJvUZL3l1kU2MkdPZ8rGJLaf2cMyiMrUzKoeT7rbr5huO
TyEIEZsOlkvyBM3yqToocQGwI5aBhRiw64p//TIbvhaBcjN8aOh04WpNXXqOo1hJ
2ABYljw/pdUYS84rpj197rmSHDBo1m5MIzsx7XcjGjEDejoA0a2a56BYGX4nfaw9
/3PzElAH1ypsJQZ8j/0Skj0RfTNqnzcUORycIlPRNfp9vfhkq/xUuQxn8GyLOOHb
S9wwTKwlvHDTPjVXM04i08DmDVXvIQeo0uhU3JpoOnMTvGK1b/Cvo2rk7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBt8JBymhwXADDGgHxq7LAEuKvI0MB8GA1UdIwQY
MBaAFB6h9ZqWeXJx4f1mc6nFNCV9qI5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFIMW1wWjVjbkhoX1daenFjVTBKWDJvam1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85MmI1MDgtMWZhZC00Mjk5LTg3MjAt
N2M0YWZiODhlMmYyLzEvSHFIMW1wWjVjbkhoX1daenFjVTBKWDJvam1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85MmI1MDgtMWZhZC00Mjk5LTg3MjAtN2M0YWZiODhlMmYy
LzEvSHFIMW1wWjVjbkhoX1daenFjVTBKWDJvam1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFioHAhA8
YgadXlSN3c8T9dV2LiBdn/NAeyEDPVB9xFGqX9ABV0N+z/O/SgMut+YmTuM5GznV
5RXyWZ7r8hmJ5fpBm6VeftF+O+tPC3v23Mmi46dX2p2e4N3ujaE0DDUiiuqX4xSB
as/DHdsKn5BRwsXGhZ74tHP3d1vUXHFMi1HcakccTi0uj7kJsWC65AClgzeKjhaP
LSpPTOiE18+zhlBAmpGjp6ff2YJjKlcDIF4J/B0SE34fjNteuYfrg+nVkylvBPE6
pfcgpRzC5ILzqvTKSRCzpf+L5CrfBzGtlfP8lZztxXqMuVCsTQcTrjW1idxE8xkv
C8MaVEq1KfXAaA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:39:11 2025 by rpki-client