Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
File: HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft (raw, json)
Hash identifier: ty3wTaddmq6OaV+E/Sbt3kqRdmF9BN775QftR8YEKww=
Subject key identifier: 33:75:57:C9:45:EE:56:5F:00:10:D5:C6:70:74:3F:6B:08:1D:38:03
Authority key identifier: 1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
Certificate issuer: /CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Certificate serial: 01958C6093BD0F150F84060BDF25C6DFB36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
Manifest number: 13F0
Signing time: Wed 12 Mar 2025 22:01:34 +0000
Manifest this update: Wed 12 Mar 2025 22:01:34 +0000
Manifest next update: Thu 13 Mar 2025 22:01:34 +0000
Files and hashes: 1: HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl (hash: 8sEu8Fp3iArO7XCfaRIxq5B+4rZJFibxwQozkerEs0U=)
2: bDOy4M4R57nj8_Sff5gfBKz-LP0.roa (hash: vm1SQ0etoIa7LbOonRtmj5Ah0LoPLSlL7NdxQSQ76i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:93:bd:0f:15:0f:84:06:0b:df:25:c6:df:b3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Validity
Not Before: Mar 12 22:01:34 2025 GMT
Not After : Mar 13 22:01:34 2025 GMT
Subject: CN=337557c945ee565f0010d5c670743f6b081d3803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1b:ed:52:8b:e4:36:e4:7a:b0:14:c1:d7:18:
0e:b8:89:ad:60:03:5e:6d:bc:f9:bd:d6:9e:db:40:
fd:5d:99:97:48:69:5a:93:f4:b3:98:ca:c0:3b:06:
c0:ec:0c:cd:de:20:93:e8:51:db:ee:3e:d6:63:50:
a8:27:25:11:95:14:f3:44:40:73:58:c8:40:37:e3:
5f:8a:be:11:22:33:a8:2a:34:26:cb:f3:51:ed:84:
ea:8b:fb:d9:2b:2d:ca:bf:ca:03:66:17:31:a3:1b:
d8:a5:5a:0a:73:77:49:73:93:f7:7a:ff:4e:4d:ef:
b7:ff:08:f3:12:ce:ce:ad:31:fc:39:d0:dc:fc:1b:
a2:02:68:98:5d:55:23:6e:e3:7c:12:bb:61:a8:29:
d4:bb:60:07:66:b0:94:61:58:81:6d:03:ea:10:c1:
19:ff:a9:89:37:eb:e3:31:54:9c:01:a0:f7:11:35:
f9:26:a9:e6:9c:5e:bc:cb:d2:fb:01:ab:6f:dc:9c:
9f:f4:92:6e:7b:6b:05:01:72:85:85:bb:89:8b:94:
83:de:26:f3:24:c4:2f:f5:87:57:0a:6c:24:87:6b:
10:a6:15:17:d6:04:e2:97:8d:24:79:a2:25:dd:7c:
93:75:d0:86:44:af:a5:e8:f4:cc:aa:1b:c9:61:92:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:75:57:C9:45:EE:56:5F:00:10:D5:C6:70:74:3F:6B:08:1D:38:03
X509v3 Authority Key Identifier:
keyid:1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:39:59:12:c1:63:10:3f:17:25:72:d9:21:c5:bf:60:1f:60:
60:22:0c:b8:38:0b:bc:e6:1d:1c:79:d6:9b:7d:29:1f:2c:25:
65:f3:07:a7:4e:11:8f:f4:76:64:f9:73:b5:29:79:5b:ad:e0:
2b:63:2f:45:78:14:06:4d:f5:cb:9a:55:d8:ed:7b:40:2b:e8:
73:25:7d:9f:87:9d:86:f5:96:9d:62:09:a2:72:b3:5d:e1:8e:
39:1f:18:2a:8c:ff:40:bd:c7:d7:fb:71:88:6a:3e:5d:55:d2:
c1:4a:d2:52:cb:f2:a7:67:d7:1e:f9:fb:71:bc:8c:f8:02:10:
7d:f2:bc:d2:85:c7:43:b9:68:25:01:19:cc:3e:b3:ac:91:f7:
ba:74:53:00:4d:84:80:f0:a5:14:1d:fe:67:5b:d7:55:8c:41:
a8:37:87:09:4f:6d:30:8b:d9:82:de:89:4d:d9:99:ad:c8:0f:
9b:0d:75:ad:f9:4b:f7:fd:63:07:cc:40:5c:af:74:e6:95:b2:
26:e0:f2:13:06:c9:61:46:b8:9c:cc:2c:da:a8:a7:3e:ec:3d:
46:9f:bd:37:b8:08:21:eb:b1:25:5e:7f:45:91:38:22:7a:e6:
e1:8e:65:33:12:a6:5c:12:c1:15:68:3b:2d:cf:55:d5:4b:ee:
f6:2e:d0:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYJO9DxUPhAYL3yXG37NtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmFjMTI0NmEyZTBlYTk3YTBjMjI5NWI3M2RkYmUwMDZk
MGVkMmMwHhcNMjUwMzEyMjIwMTM0WhcNMjUwMzEzMjIwMTM0WjAzMTEwLwYDVQQD
EygzMzc1NTdjOTQ1ZWU1NjVmMDAxMGQ1YzY3MDc0M2Y2YjA4MWQzODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBvtUovkNuR6sBTB1xgOuImtYANe
bbz5vdae20D9XZmXSGlak/SzmMrAOwbA7AzN3iCT6FHb7j7WY1CoJyURlRTzREBz
WMhAN+Nfir4RIjOoKjQmy/NR7YTqi/vZKy3Kv8oDZhcxoxvYpVoKc3dJc5P3ev9O
Te+3/wjzEs7OrTH8OdDc/BuiAmiYXVUjbuN8ErthqCnUu2AHZrCUYViBbQPqEMEZ
/6mJN+vjMVScAaD3ETX5JqnmnF68y9L7Aatv3Jyf9JJue2sFAXKFhbuJi5SD3ibz
JMQv9YdXCmwkh2sQphUX1gTil40keaIl3XyTddCGRK+l6PTMqhvJYZKQzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDN1V8lF7lZfABDVxnB0P2sIHTgDMB8GA1UdIwQY
MBaAFBwqwSRqLg6pegwilbc92+AG0O0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENyQkpHb3VEcWw2RENLVnR6M2I0QWJRN1N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wZGU3ZTEtYmY3Zi00MzRmLTk1OTEt
OGQ0NmUwOWRmOWYzLzEvSENyQkpHb3VEcWw2RENLVnR6M2I0QWJRN1N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wZGU3ZTEtYmY3Zi00MzRmLTk1OTEtOGQ0NmUwOWRmOWYz
LzEvSENyQkpHb3VEcWw2RENLVnR6M2I0QWJRN1N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTlZEsFj
ED8XJXLZIcW/YB9gYCIMuDgLvOYdHHnWm30pHywlZfMHp04Rj/R2ZPlztSl5W63g
K2MvRXgUBk31y5pV2O17QCvocyV9n4edhvWWnWIJonKzXeGOOR8YKoz/QL3H1/tx
iGo+XVXSwUrSUsvyp2fXHvn7cbyM+AIQffK80oXHQ7loJQEZzD6zrJH3unRTAE2E
gPClFB3+Z1vXVYxBqDeHCU9tMIvZgt6JTdmZrcgPmw11rflL9/1jB8xAXK905pWy
JuDyEwbJYUa4nMws2qinPuw9Rp+9N7gIIeuxJV5/RZE4Inrm4Y5lMxKmXBLBFWg7
Lc9V1Uvu9i7Qjg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:47 2025 by rpki-client