Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
File: HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft (raw, json)
Hash identifier: exP7xguF7sn/E2qRQVpHSYvs2rAAs92BzjKzXMxNCms=
Subject key identifier: 9D:FE:02:E9:8B:7E:9B:80:05:FA:F2:96:74:B8:00:C9:D2:49:ED:03
Authority key identifier: 1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
Certificate issuer: /CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Certificate serial: 019510C76A8392611BF46A0DAC8E1745DB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
Manifest number: 13B0
Signing time: Sun 16 Feb 2025 22:00:59 +0000
Manifest this update: Sun 16 Feb 2025 22:00:59 +0000
Manifest next update: Mon 17 Feb 2025 22:00:59 +0000
Files and hashes: 1: HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl (hash: qKirGqpqH05za77HNDVcyCJWzD+M7b3BI8+UwpH7CKY=)
2: bDOy4M4R57nj8_Sff5gfBKz-LP0.roa (hash: vm1SQ0etoIa7LbOonRtmj5Ah0LoPLSlL7NdxQSQ76i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:6a:83:92:61:1b:f4:6a:0d:ac:8e:17:45:db:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Validity
Not Before: Feb 16 22:00:59 2025 GMT
Not After : Feb 17 22:00:59 2025 GMT
Subject: CN=9dfe02e98b7e9b8005faf29674b800c9d249ed03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:80:f5:3f:0e:ab:a0:45:33:2d:b5:7e:c3:
40:a3:58:98:ec:59:af:e4:42:91:7c:ed:1d:b7:c7:
33:a3:78:8d:85:f1:f8:e4:dd:b0:b7:22:ce:a0:83:
ff:42:a0:d4:85:aa:0e:28:de:17:f8:aa:2d:91:0e:
dd:80:68:6c:d2:4b:19:9a:86:8e:f6:51:36:cb:e7:
a1:3c:e8:8a:82:1f:98:a7:df:ff:0f:9d:cc:a2:3d:
ed:97:4f:ca:3b:0b:d4:c6:99:b6:06:df:12:bc:13:
f5:2a:bb:81:5d:7f:70:b3:b0:3b:e3:77:fb:65:3b:
3b:ab:d9:0d:7e:e8:c8:17:bb:77:9f:a7:bf:9b:30:
2e:60:02:f7:f7:0b:64:38:1f:11:db:e7:8d:b4:e4:
75:5d:0d:f2:8f:22:fa:e6:27:0e:23:71:ef:75:8b:
c1:d0:51:a8:d3:6b:c7:bc:60:c7:b1:70:40:76:bf:
51:c2:cb:e9:7c:e4:b9:c8:72:ac:f1:15:6d:0c:2b:
25:34:9e:a6:f2:e3:27:41:8e:cf:5c:9b:6a:62:f2:
ec:37:1b:ed:94:be:ab:66:f7:8e:06:6c:c6:53:fd:
ad:a4:71:53:67:fd:05:93:67:1a:b1:98:7f:4d:5a:
56:dc:d6:b0:a5:62:28:c5:4f:37:5c:a2:9d:71:c4:
df:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FE:02:E9:8B:7E:9B:80:05:FA:F2:96:74:B8:00:C9:D2:49:ED:03
X509v3 Authority Key Identifier:
keyid:1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9a:bf:28:26:e0:7f:ba:61:dc:d4:29:7c:45:2a:30:69:bf:
da:13:16:05:f3:e2:27:cc:a3:d4:1d:64:57:aa:f5:23:b9:09:
68:71:3d:83:27:db:ef:4a:45:7d:54:65:bf:9e:d3:d2:cb:c9:
c0:64:e6:5b:1c:be:03:ca:99:5b:6a:a3:32:c2:0a:c2:61:99:
b4:5e:d7:77:f9:e1:65:09:df:ff:d9:8f:92:90:69:5e:7e:5e:
c8:c8:62:22:87:0d:fe:2b:12:c0:78:c5:cd:92:98:e3:2b:94:
56:ef:9b:b1:13:66:26:3e:7c:70:13:57:e3:a5:c2:1f:b2:ef:
fa:87:c5:40:93:30:dc:00:3e:6c:96:e5:2a:e6:5a:f6:46:27:
26:e1:50:bd:b5:38:52:09:84:6a:55:8e:69:16:5a:ea:d2:1d:
c4:c7:bc:7b:1e:95:f3:a3:fb:72:df:50:3b:ff:1f:36:9d:26:
63:1b:6a:47:e7:33:a9:24:85:31:c8:95:11:95:7c:1c:06:96:
0b:94:bc:73:ad:51:70:2a:c1:54:e1:2a:37:cd:ab:cc:f3:3c:
da:f4:36:64:6e:17:e9:e8:6f:39:71:65:4a:37:e9:4a:49:0c:
f2:90:31:ae:66:ce:77:48:e8:e7:19:58:fc:aa:72:bd:0b:dc:
2f:3b:8e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:00 2025 by rpki-client