Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
File: HuXdRp9xw40T9Xxil5YiTMAg3BU.mft (raw, json)
Hash identifier: s9m3M0ACSmqRm6cDf957qJNfc1Cxahg/Y+Dp1C0aFUM=
Subject key identifier: 64:2D:7F:17:E1:58:90:3E:D4:BE:6C:BD:4F:A5:FE:FC:2E:E9:BF:0F
Authority key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
Certificate issuer: /CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Certificate serial: 01965801B0A3E1FA08E2874E3B785BACF10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
Manifest number: 089F
Signing time: Mon 21 Apr 2025 11:00:27 +0000
Manifest this update: Mon 21 Apr 2025 11:00:27 +0000
Manifest next update: Tue 22 Apr 2025 11:00:27 +0000
Files and hashes: 1: HuXdRp9xw40T9Xxil5YiTMAg3BU.crl (hash: xiKOsWzxxdmmrEwOhHCdj7tpSYi4yWI6MzEMxPgZE9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:b0:a3:e1:fa:08:e2:87:4e:3b:78:5b:ac:f1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Validity
Not Before: Apr 21 11:00:27 2025 GMT
Not After : Apr 22 11:00:27 2025 GMT
Subject: CN=642d7f17e158903ed4be6cbd4fa5fefc2ee9bf0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:37:04:c1:56:2c:de:3c:62:ec:ec:62:ed:
f7:1b:34:ef:ed:e5:47:dc:4c:f2:67:fa:d8:a6:ac:
79:8b:11:bd:58:03:0a:86:f5:f8:e2:df:d6:fa:de:
b7:22:c0:9e:94:66:3f:9f:2f:76:f5:1a:0e:93:d2:
4a:05:98:2d:ba:ed:07:3b:f4:5c:9e:e2:df:6b:ef:
8a:38:88:52:59:38:e6:60:16:6a:9b:ba:09:2b:70:
5c:88:e9:3a:f1:38:25:97:69:2d:56:74:55:6f:93:
8c:01:78:f1:f0:41:f6:22:83:7b:90:53:e6:a4:e6:
1f:76:d8:07:6c:4b:aa:d4:6f:61:e4:78:a8:9d:09:
86:b9:c0:aa:34:4b:c4:ab:8e:66:42:5c:eb:37:85:
05:d1:8f:6f:75:71:2e:f0:2b:80:91:dc:0b:97:1a:
40:85:96:b5:fc:94:c7:0c:07:14:5e:6f:07:99:e7:
10:b5:26:9b:cf:d0:59:46:d6:12:be:7d:d0:59:4e:
81:32:20:40:da:0d:fa:2d:23:8b:86:96:46:b5:ca:
47:71:5e:f5:da:8f:e1:2f:40:dd:9f:74:71:ef:19:
6d:e7:7d:22:4b:b4:d2:7c:03:a2:7f:6a:9a:8a:93:
18:cc:dc:12:db:6f:71:d5:48:45:fe:d9:73:14:29:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2D:7F:17:E1:58:90:3E:D4:BE:6C:BD:4F:A5:FE:FC:2E:E9:BF:0F
X509v3 Authority Key Identifier:
keyid:1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fe:67:7b:85:27:95:60:d1:9c:c7:9a:a5:1b:5e:e9:6e:2c:
72:03:f1:cb:e3:8d:70:a3:bf:6c:80:14:ed:fc:0a:a9:df:d2:
fe:2b:e1:2a:be:f1:1b:73:2c:e8:6a:7a:da:37:b1:78:0d:ed:
60:00:d0:7b:44:5f:64:79:d7:55:cf:36:39:a3:2d:66:2c:49:
2b:00:fc:62:43:be:7b:4f:7b:c4:5c:c2:69:fb:d8:01:c1:96:
7b:f9:2b:8f:6f:a2:5b:97:72:b2:f4:8a:f7:b6:d3:f0:42:2c:
b4:6a:76:14:bd:ef:64:b2:67:76:da:63:87:07:a1:6a:10:d7:
e4:17:96:2b:60:76:43:d9:90:da:80:02:a0:f8:f1:8f:7b:7a:
d0:ea:ab:f4:17:9b:ad:a0:e8:f8:a6:88:8b:93:cf:2e:06:36:
5f:09:45:f9:5a:55:f2:57:71:79:58:bd:b3:f2:a3:10:14:c0:
02:96:2c:ca:c1:4d:72:dd:98:b6:59:ae:35:f5:a8:2b:8b:46:
bb:a8:8c:35:1c:2d:40:74:0f:47:38:34:23:80:31:57:c2:c2:
af:5c:43:7f:bf:99:2e:51:17:02:46:c8:de:86:13:95:98:8c:
ed:40:54:9d:52:8c:96:e9:bb:0a:f7:2b:7c:2d:2a:ca:d0:70:
48:08:70:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYAbCj4foI4odOO3hbrPEKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZTVkZDQ2OWY3MWMzOGQxM2Y1N2M2Mjk3OTYyMjRjYzAy
MGRjMTUwHhcNMjUwNDIxMTEwMDI3WhcNMjUwNDIyMTEwMDI3WjAzMTEwLwYDVQQD
Eyg2NDJkN2YxN2UxNTg5MDNlZDRiZTZjYmQ0ZmE1ZmVmYzJlZTliZjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFQ3BMFWLN48YuzsYu33GzTv7eVH
3EzyZ/rYpqx5ixG9WAMKhvX44t/W+t63IsCelGY/ny929RoOk9JKBZgtuu0HO/Rc
nuLfa++KOIhSWTjmYBZqm7oJK3BciOk68Tgll2ktVnRVb5OMAXjx8EH2IoN7kFPm
pOYfdtgHbEuq1G9h5HionQmGucCqNEvEq45mQlzrN4UF0Y9vdXEu8CuAkdwLlxpA
hZa1/JTHDAcUXm8HmecQtSabz9BZRtYSvn3QWU6BMiBA2g36LSOLhpZGtcpHcV71
2o/hL0Ddn3Rx7xlt530iS7TSfAOif2qaipMYzNwS229x1UhF/tlzFClwyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQtfxfhWJA+1L5svU+l/vwu6b8PMB8GA1UdIwQY
MBaAFB7l3UafccONE/V8YpeWIkzAINwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNmU4OTgtNjEyYy00ODVmLWIwMjct
ZjQyMjQzMDZiYTM1LzEvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yNmU4OTgtNjEyYy00ODVmLWIwMjctZjQyMjQzMDZiYTM1
LzEvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPf5ne4Un
lWDRnMeapRte6W4scgPxy+ONcKO/bIAU7fwKqd/S/ivhKr7xG3Ms6Gp62jexeA3t
YADQe0RfZHnXVc82OaMtZixJKwD8YkO+e097xFzCafvYAcGWe/krj2+iW5dysvSK
97bT8EIstGp2FL3vZLJndtpjhwehahDX5BeWK2B2Q9mQ2oACoPjxj3t60Oqr9Beb
raDo+KaIi5PPLgY2XwlF+VpV8ldxeVi9s/KjEBTAApYsysFNct2YtlmuNfWoK4tG
u6iMNRwtQHQPRzg0I4AxV8LCr1xDf7+ZLlEXAkbI3oYTlZiM7UBUnVKMlum7Cvcr
fC0qytBwSAhwfA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 21:01:17 2025 by rpki-client