Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json)
Hash identifier: qygTsiNlxTvlxbiKZsoR9h7IP3xToKuFV2KYKaJReX8=
Subject key identifier: 04:8B:99:EA:ED:BA:9C:A5:7E:9A:18:56:F1:2F:41:7E:02:CD:DD:95
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 019511351A1BCF0F49F0B2B0DBE1E6274AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
Manifest number: 13D0
Signing time: Mon 17 Feb 2025 00:00:47 +0000
Manifest this update: Mon 17 Feb 2025 00:00:47 +0000
Manifest next update: Tue 18 Feb 2025 00:00:47 +0000
Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: dQ0ToCPaK3dt0uywg13GZ9Qv9/9x2wtMMR7a8YoeRus=)
2: gzmNz0PYWdcLgL6_SHiIcrAToJE.roa (hash: Guzyh0bDeJqFnbpc68wrDXyHWPH3X5psfEh7CAeI44k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:1a:1b:cf:0f:49:f0:b2:b0:db:e1:e6:27:4a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Feb 17 00:00:47 2025 GMT
Not After : Feb 18 00:00:47 2025 GMT
Subject: CN=048b99eaedba9ca57e9a1856f12f417e02cddd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:ed:85:91:32:1d:2c:bf:6a:1b:b6:84:aa:
2c:61:c2:29:50:9d:37:fc:32:20:f2:ff:f1:55:0c:
6a:53:b5:ce:2e:e8:9e:8c:38:01:ec:82:7c:1f:29:
87:00:63:0f:23:c1:58:32:6a:02:21:54:01:99:6d:
80:2e:8b:ee:dc:4a:ee:ac:1e:19:32:02:a7:69:1a:
d6:f2:77:b9:7a:74:c4:0b:df:94:7c:16:f4:cb:95:
59:45:da:91:08:c9:1e:32:52:55:74:d2:0a:fd:b3:
6a:bd:2f:85:d3:62:39:1e:8e:70:4b:ab:ca:ce:1b:
de:93:a8:dc:c4:b7:a9:80:77:c1:25:57:89:56:da:
35:dc:6f:b1:05:ae:d8:bb:aa:27:d2:4d:84:48:4c:
db:e1:84:a9:2e:7d:ae:5d:b8:33:35:05:de:82:c5:
95:15:a3:ab:6f:ad:08:94:87:f4:e5:92:9e:98:c7:
08:c4:4a:f0:27:38:10:dd:fe:8d:cc:c7:f7:2f:d8:
3d:31:fb:cd:33:bf:c2:f2:93:79:f6:bd:d2:d7:0a:
84:c4:d5:37:11:8e:06:23:fb:42:c2:49:ad:9c:a3:
6b:8f:33:25:38:c3:7a:41:38:df:cc:e9:82:09:9a:
a4:0c:66:25:86:90:3e:e2:79:c9:42:31:f9:97:6a:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8B:99:EA:ED:BA:9C:A5:7E:9A:18:56:F1:2F:41:7E:02:CD:DD:95
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f3:44:99:36:39:8f:94:a0:b7:4a:fe:a3:b8:a9:a2:3a:46:
35:94:43:ab:4c:ed:36:3d:bc:09:30:5d:6c:b1:2c:d9:12:bf:
f8:17:c0:ed:57:04:a8:73:72:7a:3e:ca:6e:5e:d1:57:cc:de:
2c:a4:14:0b:c6:ea:83:ee:e8:3f:b2:8d:ea:e8:a0:25:c4:c6:
f4:00:a9:50:3e:94:6a:b3:01:af:c0:e5:d0:09:dc:11:11:8f:
55:57:7e:92:1b:a1:01:b7:17:5a:e9:89:1f:3e:93:56:0e:b6:
62:8a:16:6b:79:ce:30:d2:43:ab:b5:52:a0:71:8a:d7:f1:39:
cf:d3:62:d1:ea:20:b1:d0:cc:8e:41:62:51:4f:21:0f:df:04:
c2:0e:f5:be:32:06:da:ab:dc:7c:e6:78:e3:13:65:cb:6e:3a:
8d:88:31:22:47:27:7b:1c:f7:c4:7e:5d:bf:fd:4d:33:4c:b0:
3c:09:bb:31:b1:d8:f3:82:ec:c5:d7:59:5e:55:eb:82:b2:20:
e5:f0:93:2b:61:8f:bb:c0:fc:34:f1:b7:60:88:d5:97:77:79:
b3:e5:39:c2:29:8e:1b:1b:da:86:d5:6d:1c:da:6c:0f:05:67:
48:0e:f0:fd:79:90:63:ab:b4:13:16:0f:2d:ea:60:d7:b7:0f:
e1:55:79:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNRobzw9J8LKw2+HmJ0r8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNDVjYzY5YjRkMWVlMTUxYjUwMjc0NDJmYmJhOTQ0YzI3
NGRmOTcwHhcNMjUwMjE3MDAwMDQ3WhcNMjUwMjE4MDAwMDQ3WjAzMTEwLwYDVQQD
EygwNDhiOTllYWVkYmE5Y2E1N2U5YTE4NTZmMTJmNDE3ZTAyY2RkZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J7thZEyHSy/ahu2hKosYcIpUJ03
/DIg8v/xVQxqU7XOLuiejDgB7IJ8HymHAGMPI8FYMmoCIVQBmW2ALovu3ErurB4Z
MgKnaRrW8ne5enTEC9+UfBb0y5VZRdqRCMkeMlJVdNIK/bNqvS+F02I5Ho5wS6vK
zhvek6jcxLepgHfBJVeJVto13G+xBa7Yu6on0k2ESEzb4YSpLn2uXbgzNQXegsWV
FaOrb60IlIf05ZKemMcIxErwJzgQ3f6NzMf3L9g9MfvNM7/C8pN59r3S1wqExNU3
EY4GI/tCwkmtnKNrjzMlOMN6QTjfzOmCCZqkDGYlhpA+4nnJQjH5l2p6ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASLmertupylfpoYVvEvQX4Czd2VMB8GA1UdIwQY
MBaAFB5FzGm00e4VG1AnRC+7qUTCdN+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGtYTWFiVFI3aFViVUNkRUw3dXBSTUowMzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNDk1MjgtMmFhNC00YTdkLTk4NDUt
YzI0NDNhYTU0N2UyLzEvSGtYTWFiVFI3aFViVUNkRUw3dXBSTUowMzVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNDk1MjgtMmFhNC00YTdkLTk4NDUtYzI0NDNhYTU0N2Uy
LzEvSGtYTWFiVFI3aFViVUNkRUw3dXBSTUowMzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvNEmTY5
j5Sgt0r+o7ipojpGNZRDq0ztNj28CTBdbLEs2RK/+BfA7VcEqHNyej7Kbl7RV8ze
LKQUC8bqg+7oP7KN6uigJcTG9ACpUD6UarMBr8Dl0AncERGPVVd+khuhAbcXWumJ
Hz6TVg62YooWa3nOMNJDq7VSoHGK1/E5z9Ni0eogsdDMjkFiUU8hD98Ewg71vjIG
2qvcfOZ44xNly246jYgxIkcnexz3xH5dv/1NM0ywPAm7MbHY84LsxddZXlXrgrIg
5fCTK2GPu8D8NPG3YIjVl3d5s+U5wimOGxvahtVtHNpsDwVnSA7w/XmQY6u0ExYP
Lepg17cP4VV5rw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:15 2025 by rpki-client