Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
File: HgClX517dTlrS_oT54lgpaEvTvU.mft (raw, json)
Hash identifier: tfqqwBUEUi43J83KkxP+YcNu6NEwFqmkD/EAzdNKlL0=
Subject key identifier: 76:FD:F4:08:1F:7B:C6:24:43:D0:96:81:79:58:44:9B:B9:4B:FB:3A
Authority key identifier: 1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
Certificate issuer: /CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Certificate serial: 019611332461F0BD95185E3DC85E2F70DDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
Manifest number: 0C91
Signing time: Mon 07 Apr 2025 17:01:26 +0000
Manifest this update: Mon 07 Apr 2025 17:01:26 +0000
Manifest next update: Tue 08 Apr 2025 17:01:26 +0000
Files and hashes: 1: HgClX517dTlrS_oT54lgpaEvTvU.crl (hash: oaWt9DjJe/ZbBxs98RCknt34VQG+d4hW8zkM6WuSwgg=)
2: Z9H2rikLSuyuU-ikn9teDCmjdUc.roa (hash: cRtnYLPeRJbchnmn6bYlPaowZvCX5uRJgotf5z/cank=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:33:24:61:f0:bd:95:18:5e:3d:c8:5e:2f:70:dd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Validity
Not Before: Apr 7 17:01:26 2025 GMT
Not After : Apr 8 17:01:26 2025 GMT
Subject: CN=76fdf4081f7bc62443d096817958449bb94bfb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:96:8e:b5:9f:5f:c2:f3:80:6d:a5:6d:27:
28:f2:59:bd:4a:ee:1b:10:b0:78:bf:59:7b:b0:a4:
a2:3e:bf:b5:c8:36:5d:a4:d2:08:08:b9:8c:81:69:
b1:4f:98:60:d4:80:40:3d:a2:cc:35:01:b5:ba:75:
2e:52:27:b5:ad:08:aa:bd:05:83:5c:c4:1e:d6:de:
0e:1a:95:b7:11:bd:d8:63:56:59:03:00:da:9e:63:
d4:87:11:23:1c:0f:d2:28:8e:74:80:8a:ac:d0:39:
64:a0:6e:af:ac:7c:79:d0:e2:cf:5a:2b:c7:40:b7:
78:8f:8a:00:c6:06:49:a2:70:84:6f:23:fa:94:30:
df:df:3a:a0:02:92:e8:87:4c:b3:4c:ec:2b:fb:98:
ce:2c:e8:20:4f:26:e7:81:e4:e7:7f:65:3c:de:74:
f4:2c:2c:24:34:95:8d:9f:a0:2b:3a:ef:7e:6d:7a:
09:3f:17:e6:5f:18:97:5d:1d:6e:19:ce:12:74:48:
7d:e4:9c:11:29:bd:27:6b:c0:b6:61:ec:6c:88:c8:
24:0b:ff:9d:82:60:60:cf:1d:98:39:6f:d3:d7:9f:
ae:f3:b4:6d:7c:98:6c:a3:93:d9:f8:4d:6a:83:19:
6b:ad:fd:c8:96:9f:2d:69:1a:f5:17:a3:59:f6:74:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FD:F4:08:1F:7B:C6:24:43:D0:96:81:79:58:44:9B:B9:4B:FB:3A
X509v3 Authority Key Identifier:
keyid:1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:eb:35:5e:10:80:86:7a:53:11:e0:08:2d:98:07:69:19:92:
3a:3f:73:e4:f5:ff:43:37:ee:f0:0d:9b:0f:7f:38:27:2b:fd:
6c:1c:3a:35:85:95:0e:49:4c:09:6e:0f:64:96:c3:c5:32:76:
2a:ab:b7:e4:9c:34:c4:f2:b9:62:1e:bd:1c:33:0f:11:e7:d1:
2c:cf:fe:72:d5:a5:8c:f2:06:5a:4b:0c:0b:70:9b:1a:10:a7:
f1:ca:3f:0b:4a:bd:fc:bc:5b:1b:8a:e4:1c:20:3f:30:d4:03:
4c:99:65:78:1f:7a:3e:e1:a3:b4:1d:ac:58:68:60:27:35:2e:
a5:f7:9d:ce:65:b8:6c:f1:1d:81:92:33:73:c4:77:e3:87:4b:
98:98:85:10:50:4a:4d:45:3a:21:13:58:4a:17:78:cf:51:5b:
8c:31:ba:b0:b8:7f:56:aa:50:44:77:0b:a0:67:85:f6:08:08:
c3:1b:8d:da:d0:b4:9b:73:c7:58:68:3f:4c:c2:8c:99:82:bb:
84:b7:f0:a9:e0:15:c5:c0:56:33:3f:7a:0b:3f:d5:81:b0:b1:
0f:64:2e:0e:89:37:db:de:5f:8d:3e:db:65:f5:e4:1e:33:22:
03:3e:e0:29:de:9a:11:78:55:1f:cc:a1:c9:0b:c6:96:ed:a6:
dd:bf:a4:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYRMyRh8L2VGF49yF4vcN3zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMDBhNTVmOWQ3Yjc1Mzk2YjRiZmExM2U3ODk2MGE1YTEy
ZjRlZjUwHhcNMjUwNDA3MTcwMTI2WhcNMjUwNDA4MTcwMTI2WjAzMTEwLwYDVQQD
Eyg3NmZkZjQwODFmN2JjNjI0NDNkMDk2ODE3OTU4NDQ5YmI5NGJmYjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVyWjrWfX8LzgG2lbSco8lm9Su4b
ELB4v1l7sKSiPr+1yDZdpNIICLmMgWmxT5hg1IBAPaLMNQG1unUuUie1rQiqvQWD
XMQe1t4OGpW3Eb3YY1ZZAwDanmPUhxEjHA/SKI50gIqs0DlkoG6vrHx50OLPWivH
QLd4j4oAxgZJonCEbyP6lDDf3zqgApLoh0yzTOwr+5jOLOggTybngeTnf2U83nT0
LCwkNJWNn6ArOu9+bXoJPxfmXxiXXR1uGc4SdEh95JwRKb0na8C2YexsiMgkC/+d
gmBgzx2YOW/T15+u87RtfJhso5PZ+E1qgxlrrf3Ilp8taRr1F6NZ9nQwmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHb99Agfe8YkQ9CWgXlYRJu5S/s6MB8GA1UdIwQY
MBaAFB4ApV+de3U5a0v6E+eJYKWhL071MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGdDbFg1MTdkVGxyU19vVDU0bGdwYUV2VHZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82ODE1MjYtODYzZC00Njk4LWIxMjUt
Y2Y3ZWRmM2Y1ZWFjLzEvSGdDbFg1MTdkVGxyU19vVDU0bGdwYUV2VHZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS82ODE1MjYtODYzZC00Njk4LWIxMjUtY2Y3ZWRmM2Y1ZWFj
LzEvSGdDbFg1MTdkVGxyU19vVDU0bGdwYUV2VHZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+s1XhCA
hnpTEeAILZgHaRmSOj9z5PX/Qzfu8A2bD384Jyv9bBw6NYWVDklMCW4PZJbDxTJ2
Kqu35Jw0xPK5Yh69HDMPEefRLM/+ctWljPIGWksMC3CbGhCn8co/C0q9/LxbG4rk
HCA/MNQDTJlleB96PuGjtB2sWGhgJzUupfedzmW4bPEdgZIzc8R344dLmJiFEFBK
TUU6IRNYShd4z1FbjDG6sLh/VqpQRHcLoGeF9ggIwxuN2tC0m3PHWGg/TMKMmYK7
hLfwqeAVxcBWMz96Cz/VgbCxD2QuDok3295fjT7bZfXkHjMiAz7gKd6aEXhVH8yh
yQvGlu2m3b+kJA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:58 2025 by rpki-client