Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File: HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier: WoIWdNEne+BehAtVv65eO7b0IylI1MC5IOVAT4zvnfo=
Subject key identifier: E5:31:DA:74:1D:86:F6:1F:69:23:A4:D1:E3:55:00:B9:8D:3A:04:10
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 019511A24C720B5A45497268F80F08B1B291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number: 1406
Signing time: Mon 17 Feb 2025 02:00:03 +0000
Manifest this update: Mon 17 Feb 2025 02:00:03 +0000
Manifest next update: Tue 18 Feb 2025 02:00:03 +0000
Files and hashes: 1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: Ow2J1aBC1Xtsb/Z6sd35Rnx8G6oBQIhLIhI5d1MwYp4=)
2: PqAYbce5ZFtorWDJm1IoXprDpjE.roa (hash: tbDVPuUEiQGmvMdLsr4Uj3a9EoVRDD7cfOnaPg9V/Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:4c:72:0b:5a:45:49:72:68:f8:0f:08:b1:b2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: Feb 17 02:00:03 2025 GMT
Not After : Feb 18 02:00:03 2025 GMT
Subject: CN=e531da741d86f61f6923a4d1e35500b98d3a0410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0d:5d:77:bc:aa:47:1e:13:d6:10:21:81:de:
a7:50:20:f3:c8:b7:77:b3:5d:fd:d6:4d:84:a9:f5:
5a:f7:7a:d5:73:51:e0:88:fa:46:df:5b:e8:60:87:
d7:48:fd:8c:eb:30:b3:43:9a:52:b0:27:d2:e8:f5:
d5:bc:e4:eb:65:d6:d4:07:b2:98:39:59:cd:69:d2:
9b:bb:eb:9f:73:bd:e5:fb:47:b2:89:bf:71:02:09:
16:d4:b0:2b:a3:8a:ff:ba:6a:d2:2f:15:3b:24:5d:
46:77:39:ed:bc:cc:ba:1f:5f:60:b9:c6:62:d7:93:
94:21:c3:ff:a8:91:42:5b:8a:48:3c:ad:dd:da:7a:
b7:8b:21:24:55:cd:a8:bf:a1:56:df:11:e5:96:d5:
1a:fe:2c:cc:45:ae:8e:65:eb:58:68:52:40:8d:e4:
64:2a:96:4e:a0:27:e9:64:c2:ea:a2:05:75:db:35:
2d:24:d0:17:f3:d6:b6:09:08:d6:89:2e:7d:0f:9d:
38:97:ff:24:52:78:a6:42:a5:2a:4f:29:40:f4:2e:
40:58:40:f1:3c:91:45:d9:ef:99:c5:9e:69:7c:bf:
2a:92:5b:5a:6b:c0:93:1e:27:4e:7b:9e:02:69:06:
16:85:b5:1e:cf:f3:0e:e0:ba:11:7c:49:94:0f:70:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:31:DA:74:1D:86:F6:1F:69:23:A4:D1:E3:55:00:B9:8D:3A:04:10
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8f:65:e3:17:0a:11:74:be:7b:29:00:c6:ac:27:aa:2d:21:
d9:33:62:04:8e:f4:fb:2c:ad:4e:20:c8:ba:0a:9a:00:3e:bb:
76:d0:95:4c:f6:72:d9:16:03:6d:08:3b:5d:90:11:94:b7:0e:
30:0e:a8:5a:08:d5:13:d3:87:d7:88:69:bc:96:59:30:39:9e:
e5:1b:fb:d3:1e:28:15:e8:82:e1:f6:76:ff:6d:5f:93:0f:7b:
58:3f:0d:c4:c8:4b:f4:83:0a:bf:2f:3f:a8:d9:a7:e5:5a:52:
ef:c0:d8:f9:27:9e:75:b7:74:0a:fe:5e:11:14:f4:a7:4a:3c:
0a:72:45:5d:99:16:05:6c:b8:e6:0a:e7:bb:1b:9d:6d:28:3d:
a1:18:e5:43:81:25:ed:09:91:2e:29:da:97:35:1c:34:26:fa:
fe:98:a9:a7:84:d2:92:4a:84:4f:d5:36:49:5b:8b:49:b5:e6:
47:f0:df:c8:0e:70:2d:d9:37:8f:29:0b:fd:87:ca:a1:d7:3a:
64:23:bd:9a:51:44:08:be:54:8e:d0:f0:2e:4d:ec:ee:5b:4d:
7e:25:87:62:6a:63:90:5d:76:7c:90:8d:59:3c:35:93:7b:44:
ee:07:fb:0d:e0:9d:9f:c4:59:50:50:8c:74:72:2a:9b:cb:df:
7e:12:14:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURokxyC1pFSXJo+A8IsbKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNGU5NTkyMDBhZWE4ZmI5MjkxNThiNzNlOGMwZTY5YTg4
ZGM1ZTkwHhcNMjUwMjE3MDIwMDAzWhcNMjUwMjE4MDIwMDAzWjAzMTEwLwYDVQQD
EyhlNTMxZGE3NDFkODZmNjFmNjkyM2E0ZDFlMzU1MDBiOThkM2EwNDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ1dd7yqRx4T1hAhgd6nUCDzyLd3
s1391k2EqfVa93rVc1HgiPpG31voYIfXSP2M6zCzQ5pSsCfS6PXVvOTrZdbUB7KY
OVnNadKbu+ufc73l+0eyib9xAgkW1LAro4r/umrSLxU7JF1GdzntvMy6H19gucZi
15OUIcP/qJFCW4pIPK3d2nq3iyEkVc2ov6FW3xHlltUa/izMRa6OZetYaFJAjeRk
KpZOoCfpZMLqogV12zUtJNAX89a2CQjWiS59D504l/8kUnimQqUqTylA9C5AWEDx
PJFF2e+ZxZ5pfL8qkltaa8CTHidOe54CaQYWhbUez/MO4LoRfEmUD3A1tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUx2nQdhvYfaSOk0eNVALmNOgQQMB8GA1UdIwQY
MBaAFB1OlZIArqj7kpFYtz6MDmmojcXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wNGQzNjQtNTYwZi00YjM2LThmMmEt
MmI1MzZjZjdiODI1LzEvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wNGQzNjQtNTYwZi00YjM2LThmMmEtMmI1MzZjZjdiODI1
LzEvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXY9l4xcK
EXS+eykAxqwnqi0h2TNiBI70+yytTiDIugqaAD67dtCVTPZy2RYDbQg7XZARlLcO
MA6oWgjVE9OH14hpvJZZMDme5Rv70x4oFeiC4fZ2/21fkw97WD8NxMhL9IMKvy8/
qNmn5VpS78DY+Seedbd0Cv5eERT0p0o8CnJFXZkWBWy45grnuxudbSg9oRjlQ4El
7QmRLinalzUcNCb6/pipp4TSkkqET9U2SVuLSbXmR/DfyA5wLdk3jykL/YfKodc6
ZCO9mlFECL5UjtDwLk3s7ltNfiWHYmpjkF12fJCNWTw1k3tE7gf7DeCdn8RZUFCM
dHIqm8vffhIUWw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:24 2025 by rpki-client