Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
File: HSixjfJE24nyuXpscmKXM7OIYC8.mft (raw, json)
Hash identifier: 5u6A5CaHnC0USLETskSvTp+PLp964KU/nBTMANKTStQ=
Subject key identifier: 30:F7:29:7A:E2:9D:DB:3A:C9:47:CC:F3:5E:8F:C2:34:37:C3:C6:04
Authority key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
Certificate issuer: /CN=1d28b18df244db89f2b97a6c72629733b388602f
Certificate serial: 019510C7674A9F9140E486784A157EABB67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:00:58 +0000
Manifest this update: Sun 16 Feb 2025 22:00:58 +0000
Manifest next update: Mon 17 Feb 2025 22:00:58 +0000
Files and hashes: 1: HSixjfJE24nyuXpscmKXM7OIYC8.crl (hash: Buyx6YId7S2AEz2Ob/RkPHbPcOnUjC77eln4GM05FT0=)
2: sleOMLu6lCo0yQ_O9Go3ZMBJ4nQ.roa (hash: mFLE25zkAY/mi0s19XSunEJLEf8g+Qy7QzSZ17V9QYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:67:4a:9f:91:40:e4:86:78:4a:15:7e:ab:b6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d28b18df244db89f2b97a6c72629733b388602f
Validity
Not Before: Feb 16 22:00:58 2025 GMT
Not After : Feb 17 22:00:58 2025 GMT
Subject: CN=30f7297ae29ddb3ac947ccf35e8fc23437c3c604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:e4:31:d5:67:10:dc:f8:f9:e0:0b:b9:fc:
1b:0a:f7:c1:fb:96:5e:75:14:79:1e:dd:d0:93:a6:
44:2a:e0:4f:09:ab:41:8c:2b:b7:5f:71:6b:8c:b2:
e8:c3:ff:70:1c:97:93:15:1e:bd:30:d6:85:4e:27:
f2:7c:55:58:a3:d2:24:0e:74:bf:5d:18:2d:1d:eb:
3c:10:57:ef:b3:f2:42:f8:0c:14:e4:d1:f3:40:6a:
9e:e1:41:21:05:1e:2c:be:a8:42:43:37:64:c1:cb:
db:80:31:29:f5:fd:c0:84:e0:c8:3d:e2:c5:1f:90:
6f:d8:74:19:85:d6:29:71:cb:8b:4b:ee:28:4c:37:
f1:08:10:f4:3c:6d:96:5f:18:13:93:53:06:bf:35:
b9:67:f6:cb:bf:a1:26:e8:65:1b:59:4f:2f:f7:18:
c1:6e:4b:ea:43:41:19:81:a0:6f:e8:db:f7:9a:6b:
a4:dc:25:37:fe:73:02:1c:97:d0:53:39:9a:45:63:
8e:ba:d0:a0:10:81:fc:e1:1f:bf:87:f8:8a:f2:ae:
71:15:e7:3b:e9:a7:c0:2f:8e:04:2c:a1:bb:1a:67:
a3:df:6b:91:62:f3:eb:b0:40:7f:af:6b:2d:d7:62:
ae:98:91:cf:d0:1a:b6:a0:05:16:24:3f:58:4c:8d:
32:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F7:29:7A:E2:9D:DB:3A:C9:47:CC:F3:5E:8F:C2:34:37:C3:C6:04
X509v3 Authority Key Identifier:
keyid:1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:05:c9:2f:27:d6:36:da:58:a1:53:37:55:15:fe:c1:bb:4b:
f3:3a:ce:ea:eb:ce:17:cb:26:55:f3:bf:27:d3:64:8d:08:0c:
cf:51:77:be:df:b0:64:31:f2:50:27:df:7c:ec:04:9a:32:e0:
05:ff:0e:eb:37:5e:87:dd:58:e9:aa:81:35:53:e2:86:2e:90:
6a:6c:ae:9a:47:dd:46:c3:11:bf:1b:79:c9:4d:d9:b9:e9:d4:
1a:f2:13:fb:fd:44:1f:08:fa:25:b1:7c:ca:dc:ac:c7:34:d8:
ae:85:a5:9a:6d:b2:ec:c2:59:f7:c4:f3:72:50:b4:fa:7f:69:
10:df:d2:19:6f:8a:c2:dc:4a:bf:e8:a8:fd:cb:1d:a1:c3:e2:
be:93:89:ef:c7:77:69:b5:6b:03:90:0d:c4:d7:32:08:aa:7f:
7e:0e:21:c4:ac:50:e5:0e:0a:93:c8:ad:b6:1b:6c:47:a7:cd:
46:5c:37:71:b6:d4:11:6c:57:ba:0c:80:a4:68:52:b8:1a:25:
f9:d9:49:df:91:38:50:43:09:ac:23:48:46:4d:e2:5c:52:25:
03:25:87:81:c1:02:60:ac:e5:e1:1e:40:c4:58:f3:43:f9:be:
bb:01:b7:15:4f:42:86:f9:17:9d:f5:fb:ab:b1:48:53:ea:73:
13:3e:cd:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx2dKn5FA5IZ4ShV+q7Z9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMjhiMThkZjI0NGRiODlmMmI5N2E2YzcyNjI5NzMzYjM4
ODYwMmYwHhcNMjUwMjE2MjIwMDU4WhcNMjUwMjE3MjIwMDU4WjAzMTEwLwYDVQQD
EygzMGY3Mjk3YWUyOWRkYjNhYzk0N2NjZjM1ZThmYzIzNDM3YzNjNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjDkMdVnENz4+eALufwbCvfB+5Ze
dRR5Ht3Qk6ZEKuBPCatBjCu3X3FrjLLow/9wHJeTFR69MNaFTifyfFVYo9IkDnS/
XRgtHes8EFfvs/JC+AwU5NHzQGqe4UEhBR4svqhCQzdkwcvbgDEp9f3AhODIPeLF
H5Bv2HQZhdYpccuLS+4oTDfxCBD0PG2WXxgTk1MGvzW5Z/bLv6Em6GUbWU8v9xjB
bkvqQ0EZgaBv6Nv3mmuk3CU3/nMCHJfQUzmaRWOOutCgEIH84R+/h/iK8q5xFec7
6afAL44ELKG7Gmej32uRYvPrsEB/r2st12KumJHP0Bq2oAUWJD9YTI0ytwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDD3KXrinds6yUfM816PwjQ3w8YEMB8GA1UdIwQY
MBaAFB0osY3yRNuJ8rl6bHJilzOziGAvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFNpeGpmSkUyNG55dVhwc2NtS1hNN09JWUM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84ODc2MjAtZjM4NS00M2Y0LTliZTIt
YTk5YzM5MDkwZGI0LzEvSFNpeGpmSkUyNG55dVhwc2NtS1hNN09JWUM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84ODc2MjAtZjM4NS00M2Y0LTliZTItYTk5YzM5MDkwZGI0
LzEvSFNpeGpmSkUyNG55dVhwc2NtS1hNN09JWUM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwXJLyfW
NtpYoVM3VRX+wbtL8zrO6uvOF8smVfO/J9NkjQgMz1F3vt+wZDHyUCfffOwEmjLg
Bf8O6zdeh91Y6aqBNVPihi6QamyumkfdRsMRvxt5yU3ZuenUGvIT+/1EHwj6JbF8
ytysxzTYroWlmm2y7MJZ98TzclC0+n9pEN/SGW+KwtxKv+io/csdocPivpOJ78d3
abVrA5ANxNcyCKp/fg4hxKxQ5Q4Kk8itthtsR6fNRlw3cbbUEWxXugyApGhSuBol
+dlJ35E4UEMJrCNIRk3iXFIlAyWHgcECYKzl4R5AxFjzQ/m+uwG3FU9ChvkXnfX7
q7FIU+pzEz7N/Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:26 2025 by rpki-client