Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
File: HQhx_C6ZiS6hEVowITjh0ypiGCw.mft (raw, json)
Hash identifier: ZEVzXVWEINB29o4H4N5vdn0CHuEvoy/wn2vB49SjkBY=
Subject key identifier: AA:5F:CD:5A:37:B2:CC:DC:00:C6:4A:34:68:3A:54:01:2F:91:D7:08
Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
Certificate issuer: /CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Certificate serial: 0196048A6C6BB6A33BB32F01A889612E40F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
Manifest number: 14D8
Signing time: Sat 05 Apr 2025 06:01:42 +0000
Manifest this update: Sat 05 Apr 2025 06:01:42 +0000
Manifest next update: Sun 06 Apr 2025 06:01:42 +0000
Files and hashes: 1: HQhx_C6ZiS6hEVowITjh0ypiGCw.crl (hash: gUNbk4ABIPrqldQpLcvtL3BFBxvz+xBPIvr2BPnRSWw=)
2: LO1uxLKiirgi4DTjiceFUqHnZ_Q.roa (hash: Jtc+IuVms0/thPHj5bGPRIMsxU7hFLPzHKxvZdogizk=)
3: aWalfbOeEBKlHFJV-ENu8MAsZo4.roa (hash: EdxjZs6zvCXnFCAeiNpfiVYwCGvEbmMbWMZx7J9tRCc=)
4: ucuU-Uq0Xb62o4XqDQOup7WMShY.roa (hash: bTCTTFwhaYZdJywJ5h4MOhDury0ZGVdUw5QGOuUV0Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:8a:6c:6b:b6:a3:3b:b3:2f:01:a8:89:61:2e:40:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Validity
Not Before: Apr 5 06:01:42 2025 GMT
Not After : Apr 6 06:01:42 2025 GMT
Subject: CN=aa5fcd5a37b2ccdc00c64a34683a54012f91d708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f6:c7:a2:20:77:75:f0:26:53:12:64:c0:19:
64:89:f9:3e:3d:eb:21:36:bb:5d:f1:5a:82:86:59:
e3:9c:19:3c:a9:9c:47:83:35:f7:f2:a5:e3:c9:1b:
3b:6e:89:98:25:ee:76:16:1d:8d:22:61:b1:49:91:
5b:7f:0e:63:db:0f:23:1f:44:d1:50:48:fd:24:de:
dd:ab:9f:05:f2:6f:48:be:17:fd:5b:3c:58:87:3d:
64:27:ad:3c:db:c4:bb:e4:8e:d5:43:ae:29:5a:20:
39:74:f4:84:72:ee:7c:aa:52:ff:c5:fd:5a:15:bd:
83:43:6b:b7:64:18:de:11:56:3f:eb:e8:f3:84:27:
16:57:c2:56:78:36:1f:dc:f5:c1:df:98:18:23:bb:
c7:03:57:06:7b:b9:c9:77:e6:dd:8c:0c:42:71:db:
00:a5:dc:72:cf:97:bc:f3:4f:e0:93:85:f6:12:76:
eb:ba:20:53:18:eb:a9:f3:6a:a5:70:ef:20:13:aa:
43:e5:76:d8:3b:ac:f1:22:89:e7:23:1f:f8:6b:e0:
d9:a8:60:3e:d2:0e:ee:16:d8:39:52:6d:8a:5d:38:
ae:8a:9a:02:18:6f:43:ab:4a:06:8a:1c:11:bb:39:
d8:a8:6a:63:d9:ed:1f:d8:5f:cb:0d:36:13:1f:3c:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5F:CD:5A:37:B2:CC:DC:00:C6:4A:34:68:3A:54:01:2F:91:D7:08
X509v3 Authority Key Identifier:
keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:84:e3:c7:7a:ac:be:b7:b2:44:f4:c0:74:e8:09:5a:c0:09:
82:de:b8:90:3b:ce:28:c1:95:17:5b:3d:e8:64:e2:cd:88:2b:
39:5a:80:ee:ca:d0:83:a6:65:5a:ea:f1:11:86:ab:a0:34:28:
46:65:3b:15:02:02:57:df:ac:7c:43:d1:c7:e0:b7:92:17:38:
40:1b:12:7e:a1:2c:7d:79:f7:94:b2:20:2e:93:87:13:7d:26:
83:dd:02:44:bc:fd:fd:36:2a:0c:70:a1:cd:75:ed:50:c9:e4:
8f:00:11:27:54:03:dc:8d:53:d1:73:38:65:12:75:ca:e4:eb:
c6:cd:05:cf:7f:f7:c5:ad:f4:09:bc:89:c7:9a:e0:6c:07:8b:
1f:6f:9b:85:6d:d0:2a:cb:09:b0:c7:b2:65:a9:db:28:d6:b7:
23:07:c7:81:ec:89:4f:d4:d4:6a:db:56:d3:bc:c6:3f:da:7b:
5d:0d:c2:8e:97:4f:46:b2:4b:dc:c2:68:fa:cf:5f:f7:a7:40:
d8:02:0d:01:d8:f2:b0:b4:9e:df:6b:55:ca:76:9d:60:47:7e:
75:98:0a:f0:e5:5a:e4:12:dc:d3:fe:0d:8b:0a:56:7b:fe:bd:
f2:0f:bc:e6:f0:32:ec:30:1d:d3:0a:c9:6b:e2:a9:91:4e:d5:
3d:52:8e:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYEimxrtqM7sy8BqIlhLkD3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDg3MWZjMmU5OTg5MmVhMTExNWEzMDIxMzhlMWQzMmE2
MjE4MmMwHhcNMjUwNDA1MDYwMTQyWhcNMjUwNDA2MDYwMTQyWjAzMTEwLwYDVQQD
EyhhYTVmY2Q1YTM3YjJjY2RjMDBjNjRhMzQ2ODNhNTQwMTJmOTFkNzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PbHoiB3dfAmUxJkwBlkifk+Pesh
Nrtd8VqChlnjnBk8qZxHgzX38qXjyRs7bomYJe52Fh2NImGxSZFbfw5j2w8jH0TR
UEj9JN7dq58F8m9Ivhf9WzxYhz1kJ60828S75I7VQ64pWiA5dPSEcu58qlL/xf1a
Fb2DQ2u3ZBjeEVY/6+jzhCcWV8JWeDYf3PXB35gYI7vHA1cGe7nJd+bdjAxCcdsA
pdxyz5e880/gk4X2EnbruiBTGOup82qlcO8gE6pD5XbYO6zxIonnIx/4a+DZqGA+
0g7uFtg5Um2KXTiuipoCGG9Dq0oGihwRuznYqGpj2e0f2F/LDTYTHzxRCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpfzVo3sszcAMZKNGg6VAEvkdcIMB8GA1UdIwQY
MBaAFB0IcfwumYkuoRFaMCE44dMqYhgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAt
NGYzZTViMmUwYzU2LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAtNGYzZTViMmUwYzU2
LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4Tjx3qs
vreyRPTAdOgJWsAJgt64kDvOKMGVF1s96GTizYgrOVqA7srQg6ZlWurxEYaroDQo
RmU7FQICV9+sfEPRx+C3khc4QBsSfqEsfXn3lLIgLpOHE30mg90CRLz9/TYqDHCh
zXXtUMnkjwARJ1QD3I1T0XM4ZRJ1yuTrxs0Fz3/3xa30CbyJx5rgbAeLH2+bhW3Q
KssJsMeyZanbKNa3IwfHgeyJT9TUattW07zGP9p7XQ3CjpdPRrJL3MJo+s9f96dA
2AINAdjysLSe32tVynadYEd+dZgK8OVa5BLc0/4NiwpWe/698g+85vAy7DAd0wrJ
a+KpkU7VPVKOIg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:55:01 2025 by rpki-client