Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: tLasFR0rNgzcsv4JdQhqsiZK7Xc18j3F3anvxSkiCjM=
Subject key identifier: 00:60:0E:9E:91:CC:D2:7A:DE:81:7B:0E:4C:31:0E:A4:52:81:15:4E
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 01958B846494BC74D40D36E0503ABA89B3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 1122
Signing time: Wed 12 Mar 2025 18:01:04 +0000
Manifest this update: Wed 12 Mar 2025 18:01:04 +0000
Manifest next update: Thu 13 Mar 2025 18:01:04 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: +AhPgOZDEMZl3yigmmgRmrv9pQQ+BrrXWxN4EObRY3Q=)
2: vOY7PB5NDzFxhVih037o9jJ1bUc.roa (hash: 8OCsn1+9HWmViC4NQ7DEHa7bN4pK4rZb0B/Nsp5g6gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:64:94:bc:74:d4:0d:36:e0:50:3a:ba:89:b3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Mar 12 18:01:04 2025 GMT
Not After : Mar 13 18:01:04 2025 GMT
Subject: CN=00600e9e91ccd27ade817b0e4c310ea45281154e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1f:ae:f5:79:0d:25:e0:e5:8c:7e:eb:b3:ea:
33:00:32:b9:f6:f3:e0:ed:f6:14:48:6c:43:cd:1d:
89:01:ec:75:b8:1f:22:21:68:69:b1:84:7c:8c:bb:
88:e4:a9:c9:b7:a6:24:9f:b7:d4:7c:5a:4a:9f:49:
47:17:37:ba:96:56:af:42:60:bb:fc:af:41:3b:e4:
d7:b4:73:24:e9:26:77:2d:5f:85:f3:e9:95:82:46:
91:2e:f8:30:b3:20:2c:71:63:62:29:d2:06:70:d6:
c1:96:99:e9:ca:67:ed:7e:86:dd:3c:41:b9:be:66:
f6:45:41:3a:83:25:60:f7:81:8a:b9:35:6d:3b:a2:
54:de:80:74:f2:44:a6:0e:8c:b9:16:52:ae:96:f9:
fb:47:6c:d0:08:de:1d:35:82:84:f5:83:49:85:21:
27:50:8f:f2:b7:90:01:4b:73:d6:26:0d:71:68:ef:
3b:05:40:80:8d:65:15:28:18:62:2b:3e:04:16:95:
a2:1e:6c:41:ce:77:b9:8e:d1:72:20:af:6a:25:3f:
7c:2a:eb:b9:15:f3:ee:51:cc:99:45:9c:99:98:9e:
27:c3:46:28:6e:5d:40:38:13:cf:0d:37:65:5f:01:
88:6d:6f:14:2e:0c:99:5f:b9:b4:c4:dd:ae:c9:9b:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:60:0E:9E:91:CC:D2:7A:DE:81:7B:0E:4C:31:0E:A4:52:81:15:4E
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e9:8f:f0:76:78:61:54:be:16:b5:a8:d7:15:ca:b3:41:2c:
d9:7e:3f:27:50:2e:12:21:ff:c0:1c:62:d2:7c:e4:4f:aa:a0:
51:b1:fd:73:76:bf:bf:d4:71:c4:18:8a:b5:e9:93:33:f9:62:
aa:0d:99:ac:f5:c7:55:33:3e:7c:e8:b5:bd:1f:4d:a8:e7:d8:
fe:ab:3f:63:37:fc:87:61:40:86:ef:c5:9a:f5:1a:ce:5c:7d:
ad:10:7e:be:7e:33:48:81:ea:0a:49:16:51:29:ad:53:2c:f0:
d6:c3:ab:de:b5:fb:38:0b:8c:b1:bb:49:fb:1f:87:a3:43:7a:
99:d4:04:23:2b:f1:cd:77:58:04:d7:20:44:58:0d:f0:9e:cc:
99:6a:21:26:52:43:a1:a3:38:ec:e2:83:75:fd:c2:64:fb:09:
41:e8:b1:48:de:7f:d1:42:3e:9a:98:e8:71:82:30:7e:41:24:
06:e6:bf:e9:f5:a1:f5:90:ad:c6:bf:64:cb:34:65:ac:01:fc:
97:64:0d:9c:56:83:89:eb:d4:d6:96:95:9d:32:b2:0d:99:e8:
e4:cf:9c:26:d9:36:57:c6:77:41:2c:ae:64:d5:fb:05:2c:9a:
d8:6b:d5:d0:bb:c3:07:d9:d0:7c:33:ca:0c:57:31:97:fe:a9:
ed:ed:7f:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLhGSUvHTUDTbgUDq6ibOqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZGM3NjMyN2U5MmYyNWZjNDcxYjM0NWEzN2QyNDNjYzgz
OTM1MDAwHhcNMjUwMzEyMTgwMTA0WhcNMjUwMzEzMTgwMTA0WjAzMTEwLwYDVQQD
EygwMDYwMGU5ZTkxY2NkMjdhZGU4MTdiMGU0YzMxMGVhNDUyODExNTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B+u9XkNJeDljH7rs+ozADK59vPg
7fYUSGxDzR2JAex1uB8iIWhpsYR8jLuI5KnJt6Ykn7fUfFpKn0lHFze6llavQmC7
/K9BO+TXtHMk6SZ3LV+F8+mVgkaRLvgwsyAscWNiKdIGcNbBlpnpymftfobdPEG5
vmb2RUE6gyVg94GKuTVtO6JU3oB08kSmDoy5FlKulvn7R2zQCN4dNYKE9YNJhSEn
UI/yt5ABS3PWJg1xaO87BUCAjWUVKBhiKz4EFpWiHmxBzne5jtFyIK9qJT98Kuu5
FfPuUcyZRZyZmJ4nw0Yobl1AOBPPDTdlXwGIbW8ULgyZX7m0xN2uyZvZmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABgDp6RzNJ63oF7DkwxDqRSgRVOMB8GA1UdIwQY
MBaAFBzcdjJ+kvJfxHGzRaN9JDzIOTUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYt
ODA3MzY5NTBhYTk0LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYtODA3MzY5NTBhYTk0
LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+mP8HZ4
YVS+FrWo1xXKs0Es2X4/J1AuEiH/wBxi0nzkT6qgUbH9c3a/v9RxxBiKtemTM/li
qg2ZrPXHVTM+fOi1vR9NqOfY/qs/Yzf8h2FAhu/FmvUazlx9rRB+vn4zSIHqCkkW
USmtUyzw1sOr3rX7OAuMsbtJ+x+Ho0N6mdQEIyvxzXdYBNcgRFgN8J7MmWohJlJD
oaM47OKDdf3CZPsJQeixSN5/0UI+mpjocYIwfkEkBua/6fWh9ZCtxr9kyzRlrAH8
l2QNnFaDievU1paVnTKyDZno5M+cJtk2V8Z3QSyuZNX7BSya2GvV0LvDB9nQfDPK
DFcxl/6p7e1/9w==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:38 2025 by rpki-client