Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
File: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft (raw, json)
Hash identifier: 0uNDUaUPoGX4PfKTzjfatOvNxX366xyIexD36NfP0H8=
Subject key identifier: 44:BE:05:53:D6:94:ED:BE:B6:CB:73:33:27:52:24:88:85:CA:DF:B3
Authority key identifier: 1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
Certificate issuer: /CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Certificate serial: 019510C72AD6A64E403614B196B30B2B3166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
Manifest number: 078D
Signing time: Sun 16 Feb 2025 22:00:42 +0000
Manifest this update: Sun 16 Feb 2025 22:00:42 +0000
Manifest next update: Mon 17 Feb 2025 22:00:42 +0000
Files and hashes: 1: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl (hash: lQgIxaWrJkkT9ggC13sBJBREk5L9LoMBq0FZOne9G6k=)
2: f0JNWqb0_sxkiR-fghzvzpbVYUw.roa (hash: RhuCzYejuWMbfNGSM6on7Cw2OZveLgiaD9vSRL8ll5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:2a:d6:a6:4e:40:36:14:b1:96:b3:0b:2b:31:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Validity
Not Before: Feb 16 22:00:42 2025 GMT
Not After : Feb 17 22:00:42 2025 GMT
Subject: CN=44be0553d694edbeb6cb73332752248885cadfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5a:3b:ec:30:e8:ee:22:8d:fc:fd:38:11:2c:
bd:13:92:98:ac:ec:10:bc:2e:dd:85:18:1a:56:fd:
98:31:f5:b9:4e:3a:82:40:41:51:a7:5d:0d:03:0a:
d0:a8:a3:e0:b3:43:da:fe:21:17:3a:12:bd:dd:2d:
12:28:f6:c5:e0:cb:47:50:09:c0:fc:f3:6e:37:5c:
28:ca:5e:6f:6a:71:fc:51:b5:94:b0:b0:05:88:4b:
13:03:95:4c:bc:3e:0f:68:97:18:2c:65:8b:21:b2:
71:b6:2d:83:cb:8e:b7:04:f6:4c:ee:28:3b:d6:24:
9a:84:6c:46:19:61:0b:92:55:10:99:b6:2b:1d:60:
eb:25:bf:d4:09:92:30:6e:b1:08:38:db:8f:5c:9a:
fb:af:a4:86:5b:ba:8e:a9:8b:27:b7:4a:63:99:71:
eb:dc:fc:e1:91:4c:61:7a:5a:c9:c4:43:a8:01:5c:
12:14:d7:1f:60:a3:d4:3a:2e:cb:62:42:54:41:d0:
cb:4b:05:e5:a4:d7:f2:53:94:a0:2c:b1:f5:48:fa:
0f:5e:03:94:c2:07:f1:66:61:7b:41:a6:94:34:2b:
3a:1c:61:75:35:df:4b:7c:36:76:b5:cd:33:df:c7:
3b:1c:3f:db:c5:cb:b9:52:26:1d:5f:1e:f5:29:d1:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BE:05:53:D6:94:ED:BE:B6:CB:73:33:27:52:24:88:85:CA:DF:B3
X509v3 Authority Key Identifier:
keyid:1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a0:ee:b0:2b:0a:0f:97:f1:5c:30:49:ee:8e:bb:60:9f:4e:
ea:60:fa:7c:51:e4:60:6e:5b:bc:3c:4d:df:99:2e:1e:7d:74:
cf:3f:f0:f9:c5:85:6d:9a:6b:24:27:a5:57:68:37:3d:17:78:
52:75:f2:19:23:b9:8a:51:b6:bf:09:24:84:fa:fd:c5:af:f6:
a2:ee:92:7e:9f:e9:64:27:1c:63:b8:12:0e:31:f5:df:68:f4:
ed:4d:9a:d0:04:72:ea:11:f0:96:a1:04:84:88:c4:cf:32:8e:
b3:44:ca:e2:0c:89:6c:a1:54:c2:a4:bf:da:54:cd:f0:99:17:
04:87:8c:3a:7f:7b:4c:7f:67:41:c1:ba:28:f6:19:c3:d9:7b:
dd:3a:c5:48:b1:f4:6c:24:04:be:b3:30:41:fa:14:c4:f0:9d:
d9:95:c8:c5:ff:27:ce:22:df:4e:e9:a0:4d:36:d0:07:91:43:
51:a0:4c:8e:ae:f3:66:1d:c3:54:35:8c:2f:70:90:fc:7a:49:
1f:72:a2:e1:5d:1a:6d:58:0d:36:d6:13:e7:6d:a7:25:fd:ec:
78:5d:7e:40:82:f5:df:76:98:af:3c:8b:5b:01:98:a0:ff:a5:
9e:c8:fd:8e:88:8d:c0:c4:3c:02:6e:42:1e:70:72:8b:be:59:
4d:ff:96:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxyrWpk5ANhSxlrMLKzFmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjA1M2FhZDZkYzVkNjExNTdlNjczZmQxYTc4ZWVhNjU2
OWU1MzkwHhcNMjUwMjE2MjIwMDQyWhcNMjUwMjE3MjIwMDQyWjAzMTEwLwYDVQQD
Eyg0NGJlMDU1M2Q2OTRlZGJlYjZjYjczMzMyNzUyMjQ4ODg1Y2FkZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFo77DDo7iKN/P04ESy9E5KYrOwQ
vC7dhRgaVv2YMfW5TjqCQEFRp10NAwrQqKPgs0Pa/iEXOhK93S0SKPbF4MtHUAnA
/PNuN1woyl5vanH8UbWUsLAFiEsTA5VMvD4PaJcYLGWLIbJxti2Dy463BPZM7ig7
1iSahGxGGWELklUQmbYrHWDrJb/UCZIwbrEIONuPXJr7r6SGW7qOqYsnt0pjmXHr
3PzhkUxhelrJxEOoAVwSFNcfYKPUOi7LYkJUQdDLSwXlpNfyU5SgLLH1SPoPXgOU
wgfxZmF7QaaUNCs6HGF1Nd9LfDZ2tc0z38c7HD/bxcu5UiYdXx71KdFIHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFES+BVPWlO2+tstzMydSJIiFyt+zMB8GA1UdIwQY
MBaAFBwgU6rW3F1hFX5nP9GnjuplaeU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENCVHF0YmNYV0VWZm1jXzBhZU82bVZwNVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hY2E1ZjctNzJmZi00ODIzLWJjNWQt
ZDZiOTlkZjM5ZmQ4LzEvSENCVHF0YmNYV0VWZm1jXzBhZU82bVZwNVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hY2E1ZjctNzJmZi00ODIzLWJjNWQtZDZiOTlkZjM5ZmQ4
LzEvSENCVHF0YmNYV0VWZm1jXzBhZU82bVZwNVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKDusCsK
D5fxXDBJ7o67YJ9O6mD6fFHkYG5bvDxN35kuHn10zz/w+cWFbZprJCelV2g3PRd4
UnXyGSO5ilG2vwkkhPr9xa/2ou6Sfp/pZCccY7gSDjH132j07U2a0ARy6hHwlqEE
hIjEzzKOs0TK4gyJbKFUwqS/2lTN8JkXBIeMOn97TH9nQcG6KPYZw9l73TrFSLH0
bCQEvrMwQfoUxPCd2ZXIxf8nziLfTumgTTbQB5FDUaBMjq7zZh3DVDWML3CQ/HpJ
H3Ki4V0abVgNNtYT522nJf3seF1+QIL133aYrzyLWwGYoP+lnsj9joiNwMQ8Am5C
HnByi75ZTf+WjQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:14 2025 by rpki-client