Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
File: HgClX517dTlrS_oT54lgpaEvTvU.mft (raw, json)
Hash identifier: vY9AXBGK/myIUV5UxH22mBoqC5hvGsYoZGLK/+cu5qU=
Subject key identifier: AC:2B:54:30:55:45:04:A1:6A:26:61:61:1F:DC:49:B1:9A:89:77:FF
Authority key identifier: 1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
Certificate issuer: /CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Certificate serial: 01958BF2835B4B34C6BBD686F3EE582E518F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
Manifest number: 0C4C
Signing time: Wed 12 Mar 2025 20:01:21 +0000
Manifest this update: Wed 12 Mar 2025 20:01:21 +0000
Manifest next update: Thu 13 Mar 2025 20:01:21 +0000
Files and hashes: 1: HgClX517dTlrS_oT54lgpaEvTvU.crl (hash: /3T/wnyl1V0TXR2P0fdO10viEz3QHOlJP89+PRfVUyY=)
2: Z9H2rikLSuyuU-ikn9teDCmjdUc.roa (hash: cRtnYLPeRJbchnmn6bYlPaowZvCX5uRJgotf5z/cank=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:83:5b:4b:34:c6:bb:d6:86:f3:ee:58:2e:51:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Validity
Not Before: Mar 12 20:01:21 2025 GMT
Not After : Mar 13 20:01:21 2025 GMT
Subject: CN=ac2b5430554504a16a2661611fdc49b19a8977ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0a:c6:d8:57:fa:a4:2a:e0:ab:94:56:8b:4b:
a9:21:f4:50:aa:ba:25:b3:1e:fc:13:23:ed:bc:cc:
5c:93:be:85:b0:4a:1a:4d:5c:c7:37:d7:55:b2:2a:
ff:15:cb:cb:83:7e:b1:77:22:bc:8f:ac:d7:62:03:
54:0d:1f:91:99:c5:58:b4:78:ce:09:4d:89:b4:2d:
e6:6e:6f:e4:8f:b1:06:85:28:d9:10:00:48:e3:b5:
04:6a:7d:ef:81:e1:d7:41:37:30:dd:ed:d1:13:d5:
3d:10:02:55:82:0c:39:2d:51:09:b4:96:0f:db:ba:
f0:3d:2c:ee:16:61:3c:b6:ba:e3:c8:ee:8d:99:6d:
f2:8b:66:27:8e:08:8a:0b:1c:b8:dc:40:d7:ac:06:
ab:8b:89:70:94:47:d0:d7:3a:66:c5:7b:39:11:d2:
b1:2c:9d:80:2a:ee:0b:e9:5d:b7:4d:23:e9:7e:0c:
73:e9:1e:8f:a7:ad:e0:69:e0:ab:2e:22:bc:10:57:
eb:73:f1:9c:85:1c:6a:b2:37:b1:74:0c:54:4a:3e:
93:cd:db:f9:90:5e:5b:2d:1c:a3:b2:68:58:48:1f:
3f:17:11:40:0f:8b:ee:29:a8:9c:ca:4d:e5:c5:7a:
36:cc:0c:45:0f:fd:fa:48:7f:f5:61:c6:c0:7b:d3:
bd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2B:54:30:55:45:04:A1:6A:26:61:61:1F:DC:49:B1:9A:89:77:FF
X509v3 Authority Key Identifier:
keyid:1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ba:76:7d:bd:69:d6:9d:a1:de:64:5e:36:fd:aa:19:b1:d0:
0f:fb:b5:4f:87:57:da:91:0b:4c:60:8a:3e:63:98:75:0e:4d:
b1:c7:6e:2d:e9:59:4f:d8:80:61:ac:a4:54:46:cf:2d:a0:8b:
0d:62:ad:fd:01:92:d2:63:e8:da:f3:54:d4:4e:01:32:8c:b3:
9a:50:aa:ca:74:42:b2:4d:c6:72:6d:08:d5:69:d0:09:d6:cf:
8b:ef:28:ad:6c:1b:0e:b9:c5:d5:ff:fc:dc:c1:fa:37:66:6c:
f2:1e:43:04:8e:09:57:01:51:77:d3:67:c6:3b:85:8b:eb:a3:
9d:b9:fa:b1:25:ac:09:8f:38:98:0c:8e:e5:e5:bb:dd:56:05:
8b:c0:75:dc:0b:b7:3a:0b:27:0c:30:54:9d:99:81:79:19:e7:
bb:ed:b3:ac:96:51:77:17:dd:fb:70:66:eb:1d:02:0c:e3:f7:
6c:f5:0d:59:4a:24:27:22:76:72:22:0a:30:ce:85:57:c6:15:
5d:ad:1a:61:29:e5:97:87:72:be:33:39:c2:31:44:49:8e:53:
20:20:d1:08:fa:40:0b:e8:a1:94:43:6c:f3:25:00:5c:fb:eb:
4e:c5:68:8e:af:15:7e:c7:00:6a:9a:62:46:d5:bd:6d:d6:37:
43:fb:e2:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWL8oNbSzTGu9aG8+5YLlGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMDBhNTVmOWQ3Yjc1Mzk2YjRiZmExM2U3ODk2MGE1YTEy
ZjRlZjUwHhcNMjUwMzEyMjAwMTIxWhcNMjUwMzEzMjAwMTIxWjAzMTEwLwYDVQQD
EyhhYzJiNTQzMDU1NDUwNGExNmEyNjYxNjExZmRjNDliMTlhODk3N2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgrG2Ff6pCrgq5RWi0upIfRQqrol
sx78EyPtvMxck76FsEoaTVzHN9dVsir/FcvLg36xdyK8j6zXYgNUDR+RmcVYtHjO
CU2JtC3mbm/kj7EGhSjZEABI47UEan3vgeHXQTcw3e3RE9U9EAJVggw5LVEJtJYP
27rwPSzuFmE8trrjyO6NmW3yi2YnjgiKCxy43EDXrAari4lwlEfQ1zpmxXs5EdKx
LJ2AKu4L6V23TSPpfgxz6R6Pp63gaeCrLiK8EFfrc/GchRxqsjexdAxUSj6Tzdv5
kF5bLRyjsmhYSB8/FxFAD4vuKaicyk3lxXo2zAxFD/36SH/1YcbAe9O9fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwrVDBVRQShaiZhYR/cSbGaiXf/MB8GA1UdIwQY
MBaAFB4ApV+de3U5a0v6E+eJYKWhL071MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGdDbFg1MTdkVGxyU19vVDU0bGdwYUV2VHZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82ODE1MjYtODYzZC00Njk4LWIxMjUt
Y2Y3ZWRmM2Y1ZWFjLzEvSGdDbFg1MTdkVGxyU19vVDU0bGdwYUV2VHZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS82ODE1MjYtODYzZC00Njk4LWIxMjUtY2Y3ZWRmM2Y1ZWFj
LzEvSGdDbFg1MTdkVGxyU19vVDU0bGdwYUV2VHZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7p2fb1p
1p2h3mReNv2qGbHQD/u1T4dX2pELTGCKPmOYdQ5NscduLelZT9iAYaykVEbPLaCL
DWKt/QGS0mPo2vNU1E4BMoyzmlCqynRCsk3Gcm0I1WnQCdbPi+8orWwbDrnF1f/8
3MH6N2Zs8h5DBI4JVwFRd9NnxjuFi+ujnbn6sSWsCY84mAyO5eW73VYFi8B13Au3
OgsnDDBUnZmBeRnnu+2zrJZRdxfd+3Bm6x0CDOP3bPUNWUokJyJ2ciIKMM6FV8YV
Xa0aYSnll4dyvjM5wjFESY5TICDRCPpAC+ihlENs8yUAXPvrTsVojq8VfscAappi
RtW9bdY3Q/viOQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:36 2025 by rpki-client