Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
File: HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json)
Hash identifier: SX+HS+v+IXQQ4OZ/RJThz18dYyngwDvo/ohqbrYGRS4=
Subject key identifier: 27:3E:99:8F:3B:09:A1:B7:D6:D9:D5:65:B4:10:3E:5C:EA:49:9F:88
Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
Certificate issuer: /CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Certificate serial: 019510C6E1A0D9EAF02B0F7C38170559BCDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
Manifest number: 1070
Signing time: Sun 16 Feb 2025 22:00:24 +0000
Manifest this update: Sun 16 Feb 2025 22:00:24 +0000
Manifest next update: Mon 17 Feb 2025 22:00:24 +0000
Files and hashes: 1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: 9I9A7UFqnSEwklqCmGDUdKD0GRwHpY0I9ZWxPK5AprI=)
2: Jz9OReni23tlAFlv2GW25Ecf7IU.roa (hash: GvIndfLunXr32q+mQyRE3wlkyEX+dK/mibzNsCJj8Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:e1:a0:d9:ea:f0:2b:0f:7c:38:17:05:59:bc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Validity
Not Before: Feb 16 22:00:24 2025 GMT
Not After : Feb 17 22:00:24 2025 GMT
Subject: CN=273e998f3b09a1b7d6d9d565b4103e5cea499f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:02:ba:1e:be:70:93:b8:be:77:d3:20:85:
df:0f:7e:61:e6:45:db:53:8e:ef:f0:66:a3:1b:d0:
93:7e:49:2d:9a:1e:81:dd:0d:01:54:f6:d3:6c:a9:
06:d1:36:45:8a:34:1b:7b:14:78:9f:3d:f0:fc:6c:
11:b7:bd:ae:63:55:1a:bd:75:f3:45:5b:85:89:5e:
72:f3:f8:10:7c:f4:14:e4:af:81:71:fa:9d:1f:4b:
e4:65:c9:ad:3a:ba:05:6b:a6:1b:cc:12:4d:16:0e:
21:5b:de:b3:af:c9:a1:90:4a:7b:4d:de:36:3d:16:
00:74:43:67:a8:1a:9a:48:3a:65:53:77:69:9e:95:
32:51:f2:35:60:a8:db:31:b3:34:c3:98:90:9d:7e:
cc:57:4f:19:b2:b1:ac:78:1a:fb:19:0b:13:25:85:
14:21:26:55:95:f3:f2:bd:ec:0b:f3:80:0b:ed:81:
4d:50:fc:a0:e9:bf:e6:f3:8b:af:6d:46:fb:bf:64:
aa:59:3a:99:43:17:c1:44:4b:09:75:89:5d:29:88:
3d:5e:1e:31:60:50:d4:07:79:56:8b:97:1a:ae:0c:
91:b1:9e:3f:e9:03:e5:5f:2a:61:9c:40:eb:2f:57:
4a:5e:17:d4:52:b7:5a:89:3e:93:85:f0:f8:b5:1a:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3E:99:8F:3B:09:A1:B7:D6:D9:D5:65:B4:10:3E:5C:EA:49:9F:88
X509v3 Authority Key Identifier:
keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:89:4f:a4:ab:84:49:ee:8c:05:cf:ba:82:d4:d2:83:6d:bf:
52:9e:7a:0b:3f:29:bc:1c:86:84:ca:4f:45:6a:4a:1a:d7:0b:
ea:bf:02:2e:55:c8:60:e9:dd:81:41:ee:c1:4c:01:d3:23:c2:
bb:7c:63:b1:d5:1f:2a:02:1c:69:0c:d0:eb:94:22:00:7a:87:
15:d3:61:18:bd:6f:73:88:f0:98:e5:1a:e9:19:f4:96:4d:32:
f4:9c:1f:32:e2:84:68:43:d1:67:a4:17:7b:69:93:a1:36:53:
47:dd:65:56:f5:8b:4a:e5:50:4d:cd:97:a9:2a:90:29:80:af:
e5:eb:7b:c9:47:a1:c8:9d:cc:66:82:96:4d:4a:20:76:12:69:
93:3e:e8:0b:72:66:d8:c0:38:9d:2c:83:7b:54:4d:16:a9:29:
d5:73:fe:50:c1:be:b2:91:7a:31:c9:54:8b:5e:28:7b:ee:54:
fd:d0:91:d0:61:f2:88:58:20:91:fe:9c:4c:f7:dc:26:67:3a:
4e:39:18:ce:10:31:0b:fc:76:31:00:40:2f:ec:d7:cc:b1:41:
ac:0e:44:6e:f4:44:d3:24:fe:a2:6e:ba:41:a0:9b:ab:43:cd:
cb:9d:e3:21:9e:55:24:d8:04:d0:f0:50:5f:98:f4:b7:a1:80:
d8:61:3a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:01 2025 by rpki-client