Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
File: hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft (raw, json)
Hash identifier: JiEHKDxcMrIgSCXbzmLDSghFsjsNsSFhJOW0d+rQr64=
Subject key identifier: 41:3B:2D:DA:F7:B5:CF:8E:75:A6:50:10:72:A6:04:FF:F2:14:92:8C
Authority key identifier: 86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
Certificate issuer: /CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Certificate serial: 019510C7B92E37E40817B6DC59DC937805DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
Manifest number: 1453
Signing time: Sun 16 Feb 2025 22:01:19 +0000
Manifest this update: Sun 16 Feb 2025 22:01:19 +0000
Manifest next update: Mon 17 Feb 2025 22:01:19 +0000
Files and hashes: 1: hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl (hash: e+2pdik+cqjHdRYiFwuE7+d4/EDp8zNYN2ENzcrZE+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:b9:2e:37:e4:08:17:b6:dc:59:dc:93:78:05:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Validity
Not Before: Feb 16 22:01:19 2025 GMT
Not After : Feb 17 22:01:19 2025 GMT
Subject: CN=413b2ddaf7b5cf8e75a6501072a604fff214928c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:6c:4d:c4:89:14:c0:a4:99:6f:db:df:44:
6f:95:ce:dd:69:a9:70:00:4e:de:29:1c:a6:5a:08:
0a:9a:f6:11:79:a9:70:9d:fe:a7:7f:cb:75:c0:e1:
f5:ad:24:df:cb:db:02:11:71:80:1b:01:cf:e3:9b:
2d:08:82:7a:6a:21:fe:23:ca:0f:54:12:59:29:eb:
09:57:8d:8b:28:12:9f:6a:af:20:4a:b7:86:a2:5e:
45:cf:a4:c9:64:35:0b:5d:bc:16:4b:7b:11:b3:ca:
58:f3:5a:a5:48:42:f1:af:ff:bd:74:02:c0:1c:82:
f1:63:8b:2b:24:7f:b1:a0:36:4e:b3:7d:4c:e3:a2:
e7:56:ef:6f:82:04:3a:7d:07:52:f5:71:d6:a1:49:
a4:7b:b0:1d:ac:b8:8f:2d:4e:5c:66:16:f1:62:d4:
e4:c6:44:40:88:51:d5:41:16:5a:94:f4:eb:88:ea:
2e:1c:6b:e5:3b:b7:26:f0:06:bb:56:22:f1:60:de:
f5:c5:37:f9:2d:72:1c:e0:f2:3b:a9:ef:4e:21:a0:
d5:fd:f3:52:63:67:0f:a7:b3:cb:3e:74:e4:df:7d:
50:fb:93:61:a2:6c:cb:b9:9a:93:c5:50:aa:e4:ba:
58:79:a5:12:db:b7:68:94:f2:8d:25:38:cf:3f:92:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3B:2D:DA:F7:B5:CF:8E:75:A6:50:10:72:A6:04:FF:F2:14:92:8C
X509v3 Authority Key Identifier:
keyid:86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e5:4b:60:91:66:32:85:66:23:41:f6:f8:e1:96:b1:8e:88:
32:26:4b:cd:4f:ab:00:69:c2:2e:04:c9:8f:de:3a:69:6f:a7:
17:ef:77:a4:6b:8c:b6:1e:35:79:f2:c9:24:ef:a9:fe:f1:45:
42:ce:4f:02:ef:13:06:44:25:ed:74:f1:19:27:7b:e0:a8:30:
00:ac:6b:99:1b:7d:3f:7e:ab:41:b6:73:a0:ce:1a:45:c8:85:
d5:eb:11:dd:6c:10:62:88:4c:19:b2:73:a5:cf:0c:b7:ef:5f:
78:f7:15:3f:6e:01:c3:63:a1:aa:21:ce:18:d6:67:de:af:bc:
7f:87:8e:c9:49:be:5c:26:24:21:0c:78:39:05:9f:06:81:46:
3d:d7:02:f4:2f:02:af:b6:83:74:ad:00:93:fe:0f:8b:f5:c0:
70:a4:df:1b:ce:3d:6a:35:48:3f:df:e2:0f:af:88:fc:26:fc:
51:90:73:b1:a0:1d:2a:7d:bd:12:6e:e6:c5:e7:ad:a4:89:06:
89:aa:d5:35:d1:33:08:43:6c:10:d3:84:da:ea:4a:03:bf:b9:
f8:09:61:07:d5:d4:ad:bd:7d:d2:6f:a2:2e:08:e8:c4:73:72:
53:da:d4:9b:08:72:bd:b8:9f:bd:a9:c9:b3:b2:1e:ed:84:ab:
3f:dc:0e:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx7kuN+QIF7bcWdyTeAXaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MTlmYzkwOTljZTIzZWE1YTNhOGYxOTljNTNmOTE0Mjg4
Nzg3MDUwHhcNMjUwMjE2MjIwMTE5WhcNMjUwMjE3MjIwMTE5WjAzMTEwLwYDVQQD
Eyg0MTNiMmRkYWY3YjVjZjhlNzVhNjUwMTA3MmE2MDRmZmYyMTQ5MjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCtsTcSJFMCkmW/b30Rvlc7daalw
AE7eKRymWggKmvYRealwnf6nf8t1wOH1rSTfy9sCEXGAGwHP45stCIJ6aiH+I8oP
VBJZKesJV42LKBKfaq8gSreGol5Fz6TJZDULXbwWS3sRs8pY81qlSELxr/+9dALA
HILxY4srJH+xoDZOs31M46LnVu9vggQ6fQdS9XHWoUmke7AdrLiPLU5cZhbxYtTk
xkRAiFHVQRZalPTriOouHGvlO7cm8Aa7ViLxYN71xTf5LXIc4PI7qe9OIaDV/fNS
Y2cPp7PLPnTk331Q+5NhomzLuZqTxVCq5LpYeaUS27dolPKNJTjPP5K+xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEE7Ldr3tc+OdaZQEHKmBP/yFJKMMB8GA1UdIwQY
MBaAFIYZ/JCZziPqWjqPGZxT+RQoh4cFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jY2YzYjAtYWRmZC00ZmY0LWFlZjAt
YjNmOTkxMGVlOTBkLzEvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jY2YzYjAtYWRmZC00ZmY0LWFlZjAtYjNmOTkxMGVlOTBk
LzEvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuVLYJFm
MoVmI0H2+OGWsY6IMiZLzU+rAGnCLgTJj946aW+nF+93pGuMth41efLJJO+p/vFF
Qs5PAu8TBkQl7XTxGSd74KgwAKxrmRt9P36rQbZzoM4aRciF1esR3WwQYohMGbJz
pc8Mt+9fePcVP24Bw2OhqiHOGNZn3q+8f4eOyUm+XCYkIQx4OQWfBoFGPdcC9C8C
r7aDdK0Ak/4Pi/XAcKTfG849ajVIP9/iD6+I/Cb8UZBzsaAdKn29Em7mxeetpIkG
iarVNdEzCENsENOE2upKA7+5+AlhB9XUrb190m+iLgjoxHNyU9rUmwhyvbifvanJ
s7Ie7YSrP9wOKw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:42 2025 by rpki-client