Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
File: hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft (raw, json)
Hash identifier: /1qsy0OeBSPXDPaDVyqCWjuz4jQBAqNjmi7dtJB5VwY=
Subject key identifier: D9:FA:D8:33:C2:C8:48:28:DA:50:CC:51:DC:77:71:02:8B:90:6E:1E
Authority key identifier: 86:5A:F1:8A:8D:80:27:4C:0A:C2:F5:01:B1:6D:69:A4:54:E0:8D:5E
Certificate issuer: /CN=865af18a8d80274c0ac2f501b16d69a454e08d5e
Certificate serial: 01959005DD53D6DB37C1FA01BD43971B792A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
Manifest number: 0888
Signing time: Thu 13 Mar 2025 15:00:58 +0000
Manifest this update: Thu 13 Mar 2025 15:00:58 +0000
Manifest next update: Fri 14 Mar 2025 15:00:58 +0000
Files and hashes: 1: hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl (hash: 76rbERbiHQSfEwZ9Fq0U7PcMVoqXgqwDKa+Vh+oXVc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:05:dd:53:d6:db:37:c1:fa:01:bd:43:97:1b:79:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865af18a8d80274c0ac2f501b16d69a454e08d5e
Validity
Not Before: Mar 13 15:00:58 2025 GMT
Not After : Mar 14 15:00:58 2025 GMT
Subject: CN=d9fad833c2c84828da50cc51dc7771028b906e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:ea:90:1d:af:d5:50:f0:ec:13:21:3c:92:
16:10:3d:2e:66:5e:89:34:f8:2a:7f:e6:d3:83:13:
c8:f1:6f:d2:12:68:ab:2d:56:68:88:34:a8:1f:0f:
e1:aa:58:f0:cb:d2:cf:bf:f0:fe:09:24:19:89:90:
f5:92:c2:e7:14:59:17:7d:08:dc:ed:98:1d:1d:fd:
bc:ef:d3:af:02:21:30:36:86:52:d6:11:42:f8:4b:
7b:2a:52:41:e2:cb:76:59:dd:11:e9:9e:c5:78:95:
bd:0d:a6:16:21:de:f5:bf:da:af:84:17:df:bd:8e:
e7:d9:56:ed:9a:0e:eb:67:a5:77:4f:d7:db:5a:c6:
84:98:49:a1:d0:a4:f6:48:73:09:25:8f:c2:f4:5e:
e4:34:93:a5:8e:f5:7e:b0:c0:63:5e:e7:24:b9:6f:
cb:6a:54:1e:53:b9:17:ab:14:b1:02:9a:62:02:8d:
aa:ae:15:57:f9:03:56:be:11:7f:03:04:93:40:3c:
0c:ce:d5:e2:e5:ef:bb:75:35:01:53:a3:ae:d4:c2:
80:00:1c:6b:7b:a5:7a:d2:57:c0:aa:11:b7:43:69:
31:94:72:11:38:e0:b1:b8:90:43:18:9b:b5:49:a4:
c9:a7:6b:31:c7:7b:57:e3:9d:af:51:4b:f3:82:d1:
d5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FA:D8:33:C2:C8:48:28:DA:50:CC:51:DC:77:71:02:8B:90:6E:1E
X509v3 Authority Key Identifier:
keyid:86:5A:F1:8A:8D:80:27:4C:0A:C2:F5:01:B1:6D:69:A4:54:E0:8D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8c:57:24:6c:b1:ea:a5:bb:0d:52:c8:de:c5:6e:e7:bd:04:
ec:90:29:44:ed:b2:7f:ac:a5:dd:e1:41:62:6b:67:94:b6:4f:
ea:96:d1:1a:8c:50:ab:df:ce:9e:16:37:95:6a:20:64:0b:44:
11:36:dc:60:ff:72:59:ca:62:d4:5f:78:2c:55:ae:9c:ed:2b:
3b:ab:73:50:d9:f7:b0:ee:3c:5e:45:1e:16:2c:20:05:96:6e:
cf:1a:94:8c:a9:2e:12:45:fd:86:a2:2c:3a:5f:39:ef:af:3f:
eb:f4:23:f8:59:92:1c:57:ad:ee:cf:80:22:60:87:ff:40:9a:
03:74:f6:80:ba:4d:e6:11:3a:11:10:ac:38:53:41:ea:04:85:
12:5f:12:94:a7:77:e0:29:e1:21:b5:65:fb:18:8c:01:c7:66:
0a:e2:a2:59:d0:5a:27:9e:94:83:b8:69:a0:95:19:49:ca:fa:
a3:b5:cb:4d:2d:c9:cd:f2:34:dc:74:0d:bf:ed:60:aa:45:65:
ba:9b:26:b7:68:6b:57:2b:43:f8:33:d2:19:b8:b3:57:41:56:
f2:97:93:6a:ae:2c:32:a4:d2:fe:dd:16:67:72:83:7c:d7:34:
ea:7c:5e:0e:df:20:ee:3c:6f:1f:4e:60:b3:d8:cd:66:b9:b6:
2e:c6:27:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQBd1T1ts3wfoBvUOXG3kqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NWFmMThhOGQ4MDI3NGMwYWMyZjUwMWIxNmQ2OWE0NTRl
MDhkNWUwHhcNMjUwMzEzMTUwMDU4WhcNMjUwMzE0MTUwMDU4WjAzMTEwLwYDVQQD
EyhkOWZhZDgzM2MyYzg0ODI4ZGE1MGNjNTFkYzc3NzEwMjhiOTA2ZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl13qkB2v1VDw7BMhPJIWED0uZl6J
NPgqf+bTgxPI8W/SEmirLVZoiDSoHw/hqljwy9LPv/D+CSQZiZD1ksLnFFkXfQjc
7ZgdHf2879OvAiEwNoZS1hFC+Et7KlJB4st2Wd0R6Z7FeJW9DaYWId71v9qvhBff
vY7n2Vbtmg7rZ6V3T9fbWsaEmEmh0KT2SHMJJY/C9F7kNJOljvV+sMBjXuckuW/L
alQeU7kXqxSxAppiAo2qrhVX+QNWvhF/AwSTQDwMztXi5e+7dTUBU6Ou1MKAABxr
e6V60lfAqhG3Q2kxlHIROOCxuJBDGJu1SaTJp2sxx3tX452vUUvzgtHVaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNn62DPCyEgo2lDMUdx3cQKLkG4eMB8GA1UdIwQY
MBaAFIZa8YqNgCdMCsL1AbFtaaRU4I1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGxyeGlvMkFKMHdLd3ZVQnNXMXBwRlRnalY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jOWM4MDAtYWVmYi00NGJjLWI3MTIt
MWVlYTRlYTQzYTJmLzEvaGxyeGlvMkFKMHdLd3ZVQnNXMXBwRlRnalY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9jOWM4MDAtYWVmYi00NGJjLWI3MTItMWVlYTRlYTQzYTJm
LzEvaGxyeGlvMkFKMHdLd3ZVQnNXMXBwRlRnalY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIxXJGyx
6qW7DVLI3sVu570E7JApRO2yf6yl3eFBYmtnlLZP6pbRGoxQq9/OnhY3lWogZAtE
ETbcYP9yWcpi1F94LFWunO0rO6tzUNn3sO48XkUeFiwgBZZuzxqUjKkuEkX9hqIs
Ol85768/6/Qj+FmSHFet7s+AImCH/0CaA3T2gLpN5hE6ERCsOFNB6gSFEl8SlKd3
4CnhIbVl+xiMAcdmCuKiWdBaJ56Ug7hpoJUZScr6o7XLTS3JzfI03HQNv+1gqkVl
upsmt2hrVytD+DPSGbizV0FW8peTaq4sMqTS/t0WZ3KDfNc06nxeDt8g7jxvH05g
s9jNZrm2LsYncQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:10:06 2025 by rpki-client