Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
File: HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft (raw, json)
Hash identifier: fpMDfbjAWm75fCyH3f4vDTkUFjmsVx3tYDcEtNNH1Ig=
Subject key identifier: 55:F5:3B:B6:EF:02:7A:A5:C0:B1:9A:55:8B:8E:70:1B:BD:78:63:32
Authority key identifier: 1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
Certificate issuer: /CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Certificate serial: 019510C8109071B57FEA9E0CF855EBE9748B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
Manifest number: 1454
Signing time: Sun 16 Feb 2025 22:01:41 +0000
Manifest this update: Sun 16 Feb 2025 22:01:41 +0000
Manifest next update: Mon 17 Feb 2025 22:01:41 +0000
Files and hashes: 1: HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl (hash: E4vV0c33ix+o2dV0HHHwnF9pee42XiNzgntx27YCfSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c8:10:90:71:b5:7f:ea:9e:0c:f8:55:eb:e9:74:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Validity
Not Before: Feb 16 22:01:41 2025 GMT
Not After : Feb 17 22:01:41 2025 GMT
Subject: CN=55f53bb6ef027aa5c0b19a558b8e701bbd786332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dc:8b:d9:cb:85:71:91:a6:5c:60:b0:b5:8d:
03:4e:36:2c:e8:68:16:80:ec:d1:ce:15:da:89:33:
5b:a2:e7:c0:ff:77:eb:cc:28:a0:a9:1c:b5:c8:cf:
d3:67:7f:f2:31:7b:27:02:7c:1d:37:e2:92:3f:5d:
29:67:f4:39:39:3a:d3:14:06:f6:bc:53:af:38:5a:
71:f9:b1:01:cb:0c:54:65:71:24:d5:99:96:cb:73:
c8:cb:cf:1e:d2:f9:56:eb:33:37:de:61:c1:be:a0:
40:34:48:b5:7f:64:9f:9f:00:4c:76:fa:37:d1:f0:
58:52:5e:a6:88:4e:9f:d3:40:8d:4f:4e:f3:6d:ab:
c4:a2:77:1d:81:be:0f:b6:a8:2c:b7:78:71:d2:9b:
0c:a7:c4:8a:e1:2e:70:0c:12:f8:9d:c4:e8:9b:b4:
df:5d:4e:6c:07:9c:20:6f:21:42:d8:3d:12:e1:13:
c9:0a:e1:ba:2c:e5:1c:c1:29:ae:f3:fa:7b:d2:95:
87:e3:d2:fa:b0:c1:c4:a9:b2:53:7a:c7:77:de:38:
22:2f:42:21:3f:7d:06:22:32:90:70:fe:f6:56:f5:
32:38:94:fd:72:09:73:f9:05:5d:28:92:50:ef:30:
7e:d5:39:2c:36:64:15:ad:a3:dd:e1:9b:b4:1d:70:
e9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F5:3B:B6:EF:02:7A:A5:C0:B1:9A:55:8B:8E:70:1B:BD:78:63:32
X509v3 Authority Key Identifier:
keyid:1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7c:4a:c0:d9:5c:68:c3:93:0a:bc:c3:40:1d:b1:7d:69:b2:
0a:bc:95:44:96:72:1c:da:49:16:e2:7f:19:6b:c5:cb:82:21:
98:26:8c:36:28:0f:7a:dd:a5:6f:8b:71:16:04:b9:06:34:ed:
79:3c:64:97:39:8a:21:12:58:16:92:c5:87:8d:a9:77:19:b6:
99:86:13:7e:e2:2b:07:e1:5c:c5:d2:82:20:90:e9:e3:98:62:
8c:19:e7:a0:9f:fb:15:50:e0:94:66:f1:3c:ea:5a:a3:03:76:
82:34:f8:c7:e7:b6:d1:f1:e4:f9:89:3c:aa:d1:cb:14:58:10:
1c:93:d0:c9:90:a7:64:cb:31:09:c7:b8:ca:cc:ce:dd:a4:f9:
4e:7b:de:a7:67:ea:ae:8d:cf:d3:2a:d2:01:56:6e:d7:87:e3:
03:bd:cc:46:36:60:29:cc:43:2d:ce:bb:e9:ed:9e:91:d0:9e:
bd:28:ca:e2:bb:74:6e:c6:eb:a7:97:9d:ae:20:cd:bf:89:91:
7b:b1:52:b7:70:53:b2:dd:1c:83:e0:24:12:32:f9:1d:8c:bc:
9a:b8:39:ec:d4:0c:f9:f3:48:d6:d4:30:21:9b:3a:90:69:f4:
2b:00:7d:24:91:89:34:3c:ff:08:24:1b:f6:98:95:d4:25:97:
4e:e8:ba:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQyBCQcbV/6p4M+FXr6XSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWE4N2M2ZjhlMzIwYzkzZGE5MTYyMjUwZGFjNTU4Yzg3
MWRjOTMwHhcNMjUwMjE2MjIwMTQxWhcNMjUwMjE3MjIwMTQxWjAzMTEwLwYDVQQD
Eyg1NWY1M2JiNmVmMDI3YWE1YzBiMTlhNTU4YjhlNzAxYmJkNzg2MzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNyL2cuFcZGmXGCwtY0DTjYs6GgW
gOzRzhXaiTNboufA/3frzCigqRy1yM/TZ3/yMXsnAnwdN+KSP10pZ/Q5OTrTFAb2
vFOvOFpx+bEBywxUZXEk1ZmWy3PIy88e0vlW6zM33mHBvqBANEi1f2SfnwBMdvo3
0fBYUl6miE6f00CNT07zbavEoncdgb4Ptqgst3hx0psMp8SK4S5wDBL4ncTom7Tf
XU5sB5wgbyFC2D0S4RPJCuG6LOUcwSmu8/p70pWH49L6sMHEqbJTesd33jgiL0Ih
P30GIjKQcP72VvUyOJT9cglz+QVdKJJQ7zB+1TksNmQVraPd4Zu0HXDpxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFX1O7bvAnqlwLGaVYuOcBu9eGMyMB8GA1UdIwQY
MBaAFB6qh8b44yDJPakWIlDaxVjIcdyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYTljNDYtMGI0Zi00OGE2LTg5OWUt
MWFmNTY4ZDg5MDhhLzEvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lYTljNDYtMGI0Zi00OGE2LTg5OWUtMWFmNTY4ZDg5MDhh
LzEvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHxKwNlc
aMOTCrzDQB2xfWmyCryVRJZyHNpJFuJ/GWvFy4IhmCaMNigPet2lb4txFgS5BjTt
eTxklzmKIRJYFpLFh42pdxm2mYYTfuIrB+FcxdKCIJDp45hijBnnoJ/7FVDglGbx
POpaowN2gjT4x+e20fHk+Yk8qtHLFFgQHJPQyZCnZMsxCce4yszO3aT5Tnvep2fq
ro3P0yrSAVZu14fjA73MRjZgKcxDLc676e2ekdCevSjK4rt0bsbrp5edriDNv4mR
e7FSt3BTst0cg+AkEjL5HYy8mrg57NQM+fNI1tQwIZs6kGn0KwB9JJGJNDz/CCQb
9piV1CWXTui6dg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:20 2025 by rpki-client