Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: LP1Tj9uO6+iLH2vWAVOl0BKaZCGlWgLO/6Z84dSMzzc=
Subject key identifier: 29:B7:F1:76:D4:D1:D9:C0:33:EA:20:23:DF:D8:7D:8F:14:65:13:81
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 019655A55C7AA14FFC6520CF5C9436CB83C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 0376
Signing time: Mon 21 Apr 2025 00:00:22 +0000
Manifest this update: Mon 21 Apr 2025 00:00:22 +0000
Manifest next update: Tue 22 Apr 2025 00:00:22 +0000
Files and hashes: 1: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: WIwyI6VrJkIBNpXBAUp5A/MCFLFiodoI4R85DeVLSRg=)
2: kufXPEBBY4F3GtWTn9BkPD8wSxE.roa (hash: UarHb2gOFhZ20RNJlK0SIL7Fko6NvrD899Ffsd5s1AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:5c:7a:a1:4f:fc:65:20:cf:5c:94:36:cb:83:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Apr 21 00:00:22 2025 GMT
Not After : Apr 22 00:00:22 2025 GMT
Subject: CN=29b7f176d4d1d9c033ea2023dfd87d8f14651381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:15:32:33:e7:48:98:33:de:cf:56:69:28:9c:
6c:61:d9:6e:50:77:17:1b:66:63:50:92:b7:1a:6c:
63:25:a1:51:7d:cd:df:0d:b5:3b:fa:f0:91:c1:35:
ef:a2:e2:33:d0:3c:f7:ac:97:11:36:f9:0c:92:92:
bc:76:fe:3d:48:a2:e4:ea:ad:a8:1a:2e:24:fb:6c:
0f:3c:3b:2e:b5:c9:7d:0b:61:4d:25:d3:dc:36:2b:
d8:53:ea:45:42:7b:07:fc:6d:c7:66:61:9f:65:05:
b3:62:cc:e6:57:b1:3e:0e:e9:79:fe:bf:57:5c:61:
57:d2:57:e4:dd:a3:ae:e4:2d:c9:ae:2a:5b:e8:d1:
d5:b7:f5:2b:74:d2:b7:7f:e5:b4:80:3e:95:81:52:
04:0f:cf:92:d6:8a:ba:6d:2c:81:4b:da:51:22:27:
9e:45:2e:4a:96:cf:03:b5:57:3b:b3:4d:9b:c5:1c:
ae:95:ad:08:80:38:bb:17:c9:07:81:21:29:ea:8f:
13:3a:bf:3a:95:c4:66:25:c7:43:12:3a:5c:f6:44:
f0:27:bc:f4:68:0d:a0:a8:75:0c:b4:8c:d2:24:09:
0f:75:3e:d3:ea:10:9c:4e:86:24:34:1f:b9:e4:50:
34:1d:cd:1e:54:d8:bf:8c:a8:71:f9:55:d2:51:01:
ba:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B7:F1:76:D4:D1:D9:C0:33:EA:20:23:DF:D8:7D:8F:14:65:13:81
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:92:1d:56:a1:7d:23:94:03:14:ea:b5:43:01:d4:ec:1b:26:
23:40:76:6c:76:f9:c6:9e:3e:5d:6f:c3:ac:db:0b:b0:bf:c1:
bf:90:bc:f3:fe:b3:e7:51:09:a0:52:ec:c1:5d:70:39:f2:f7:
61:35:fb:06:7d:95:65:76:c0:6c:21:35:c5:ac:22:9d:25:42:
ba:2e:4f:5f:f1:07:59:e8:bc:6b:c8:02:5c:55:86:23:68:75:
65:3c:2b:17:06:c8:69:49:d1:62:49:ef:ed:8c:36:c1:87:a3:
0a:32:d0:de:62:bb:81:a1:a9:bf:af:9b:bc:3a:49:88:d1:2b:
a3:1f:f3:7e:da:d9:a2:e0:4d:04:4e:b4:66:2f:0f:31:c8:19:
b6:b3:d4:dd:b2:81:bb:ab:7d:12:30:1b:87:41:24:8c:c0:74:
b3:18:6b:5d:23:a7:5d:3f:01:a5:c3:b0:43:9d:26:2e:8b:92:
8b:e4:42:69:c9:63:9f:e2:52:75:61:bd:34:13:39:f8:68:99:
f6:2f:3c:25:01:f3:89:be:7d:57:6b:f2:ac:f1:72:59:6e:91:
96:47:9b:46:ef:db:a0:15:d8:28:24:b3:c8:3b:9c:54:a0:a4:
5d:1a:ae:b0:5a:4b:63:48:67:2b:3e:7f:81:30:58:09:2a:b5:
07:3e:20:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpVx6oU/8ZSDPXJQ2y4PFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZTk5MTM0MTcxYjU4NjNmNjJmMjJiN2Q3YWJmNzQwMzQ5
NTI4ZWMwHhcNMjUwNDIxMDAwMDIyWhcNMjUwNDIyMDAwMDIyWjAzMTEwLwYDVQQD
EygyOWI3ZjE3NmQ0ZDFkOWMwMzNlYTIwMjNkZmQ4N2Q4ZjE0NjUxMzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBUyM+dImDPez1ZpKJxsYdluUHcX
G2ZjUJK3GmxjJaFRfc3fDbU7+vCRwTXvouIz0Dz3rJcRNvkMkpK8dv49SKLk6q2o
Gi4k+2wPPDsutcl9C2FNJdPcNivYU+pFQnsH/G3HZmGfZQWzYszmV7E+Dul5/r9X
XGFX0lfk3aOu5C3Jripb6NHVt/UrdNK3f+W0gD6VgVIED8+S1oq6bSyBS9pRIiee
RS5Kls8DtVc7s02bxRyula0IgDi7F8kHgSEp6o8TOr86lcRmJcdDEjpc9kTwJ7z0
aA2gqHUMtIzSJAkPdT7T6hCcToYkNB+55FA0Hc0eVNi/jKhx+VXSUQG6YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCm38XbU0dnAM+ogI9/YfY8UZROBMB8GA1UdIwQY
MBaAFIbpkTQXG1hj9i8it9er90A0lSjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQt
ZGE5NTgwOGJhMmMxLzEvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQtZGE5NTgwOGJhMmMx
LzEvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZIdVqF9
I5QDFOq1QwHU7BsmI0B2bHb5xp4+XW/DrNsLsL/Bv5C88/6z51EJoFLswV1wOfL3
YTX7Bn2VZXbAbCE1xawinSVCui5PX/EHWei8a8gCXFWGI2h1ZTwrFwbIaUnRYknv
7Yw2wYejCjLQ3mK7gaGpv6+bvDpJiNErox/zftrZouBNBE60Zi8PMcgZtrPU3bKB
u6t9EjAbh0EkjMB0sxhrXSOnXT8BpcOwQ50mLouSi+RCacljn+JSdWG9NBM5+GiZ
9i88JQHzib59V2vyrPFyWW6RlkebRu/boBXYKCSzyDucVKCkXRqusFpLY0hnKz5/
gTBYCSq1Bz4gZQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:34 2025 by rpki-client