Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File: HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier: mDKvZU4P5tyjcTbLStNwl2/Ps2aHKmhVgiqho/+63vc=
Subject key identifier: 2F:B1:E9:53:FE:B2:6F:85:7D:D1:CA:21:C0:BD:06:E8:C4:4F:BD:D5
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial: 0194BB9718FA589AE5891CE8C4E8E0BBB661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 09:00:29 +0000
Manifest this update: Fri 31 Jan 2025 09:00:29 +0000
Manifest next update: Sat 01 Feb 2025 09:00:29 +0000
Files and hashes: 1: 2p9UhZ4f1RpCso5_KIEAEmFd_Cs.roa (hash: oRMeyyuTPK9dSZ9MmutE2TkHWIxlWdCs8LlZr1bRdaE=)
2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: e2OMHYEVeAVlLlsdCuCS/Lv1kK7tZV1I/nE1tFqvGoE=)
3: IJNfARVzI865AIKgN_3yjxJwMgI.roa (hash: fusPL7W50hSr1S5X6R9RazY+w4yFVSYD9+IMtNP9M5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:18:fa:58:9a:e5:89:1c:e8:c4:e8:e0:bb:b6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Validity
Not Before: Jan 31 09:00:29 2025 GMT
Not After : Feb 1 09:00:29 2025 GMT
Subject: CN=2fb1e953feb26f857dd1ca21c0bd06e8c44fbdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:34:3b:96:3b:82:e0:5c:e0:74:0d:8e:09:
fe:6c:9e:47:10:04:b4:48:48:a5:c8:87:96:96:fc:
0d:46:73:e6:67:ae:e6:62:03:fd:55:90:19:0e:63:
72:a5:15:d2:25:9e:7e:17:fa:ca:99:86:e3:7b:7a:
c8:d6:eb:f3:31:a4:13:81:18:15:ed:3e:76:ee:b5:
23:00:8e:0c:d5:0c:33:a4:c4:19:8f:b8:4f:06:fe:
24:06:97:49:35:21:74:e9:d5:c8:34:d2:80:50:df:
c0:db:8d:ee:a1:47:0a:6f:6c:1b:30:53:29:4b:9c:
e6:1a:18:43:af:0f:d7:58:ab:ce:e6:64:ed:66:a7:
fb:3e:29:ef:b3:43:ee:f1:1a:af:43:cc:59:38:b4:
8b:97:af:ba:2f:78:b9:e8:59:33:24:8c:a7:bb:d2:
f8:d7:b4:93:c7:d7:82:13:ea:64:ec:ea:f9:df:ac:
cf:09:8c:94:bd:63:ba:6c:31:8a:b2:62:93:03:aa:
f8:0d:0f:d8:f7:a3:9e:a5:8a:af:2b:3d:a2:25:84:
a6:fa:bb:80:15:3b:fb:b7:7b:f1:af:98:8c:8a:a0:
4d:87:81:d7:38:1b:99:f4:c7:86:4e:b6:2a:93:df:
dc:3f:04:d9:cc:05:24:7b:57:35:8e:24:93:ef:e9:
53:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B1:E9:53:FE:B2:6F:85:7D:D1:CA:21:C0:BD:06:E8:C4:4F:BD:D5
X509v3 Authority Key Identifier:
keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:57:e8:4b:cb:7f:90:05:95:df:b4:53:e6:9e:0a:72:0c:47:
c7:63:c3:2a:85:56:67:2a:b0:40:1e:89:b9:6b:ea:c0:ad:ce:
e8:94:77:06:ef:ce:fb:74:df:4d:ba:7b:5f:2f:70:5d:c7:0c:
07:0e:68:3d:ab:c0:5b:49:56:71:a1:97:53:68:20:18:a9:67:
0c:43:5f:ba:a2:71:52:e3:9a:52:5c:ed:c8:8c:c7:c8:70:b6:
8b:bd:f7:11:2e:80:38:60:5a:47:42:2a:4e:42:0e:27:a5:bf:
21:27:a1:82:1f:45:7f:da:7d:7a:9d:e0:49:2c:18:c8:23:5a:
ca:3f:b3:8e:3a:8e:51:58:ea:c9:26:52:0c:38:6c:20:b6:63:
c7:19:9a:20:2c:c5:44:da:36:8a:5b:b6:55:9b:ab:f3:73:ed:
f1:10:a0:63:2e:62:a7:41:cf:2c:21:90:9d:da:e2:46:5d:d4:
0f:91:7f:e9:9b:df:74:90:52:28:1b:4e:1b:1a:1d:b1:f4:73:
bb:12:61:a8:2f:4d:3c:70:f6:66:7b:28:be:8f:90:30:8d:a9:
f3:d7:97:71:bc:87:dc:04:fc:c2:93:ee:41:86:5d:6b:c3:09:
04:a9:cb:95:23:f5:9c:46:0e:d2:94:44:c2:da:3d:b0:8a:5c:
ea:b5:c7:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lxj6WJrliRzoxOjgu7ZhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNjgzZjk1Yzk4ZDJjZmU5ZDc5Y2RkM2RiOGVlODEzOGJi
MzU3NzIwHhcNMjUwMTMxMDkwMDI5WhcNMjUwMjAxMDkwMDI5WjAzMTEwLwYDVQQD
EygyZmIxZTk1M2ZlYjI2Zjg1N2RkMWNhMjFjMGJkMDZlOGM0NGZiZGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyg0O5Y7guBc4HQNjgn+bJ5HEAS0
SEilyIeWlvwNRnPmZ67mYgP9VZAZDmNypRXSJZ5+F/rKmYbje3rI1uvzMaQTgRgV
7T527rUjAI4M1QwzpMQZj7hPBv4kBpdJNSF06dXINNKAUN/A243uoUcKb2wbMFMp
S5zmGhhDrw/XWKvO5mTtZqf7Pinvs0Pu8RqvQ8xZOLSLl6+6L3i56FkzJIynu9L4
17STx9eCE+pk7Or536zPCYyUvWO6bDGKsmKTA6r4DQ/Y96OepYqvKz2iJYSm+ruA
FTv7t3vxr5iMiqBNh4HXOBuZ9MeGTrYqk9/cPwTZzAUke1c1jiST7+lTWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+x6VP+sm+FfdHKIcC9BujET73VMB8GA1UdIwQY
MBaAFBxoP5XJjSz+nXnN09uO6BOLs1dyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81MDZmM2QtYzg2My00NjJmLTg3ZWIt
YjNhZTFlNGMzMmI3LzEvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81MDZmM2QtYzg2My00NjJmLTg3ZWItYjNhZTFlNGMzMmI3
LzEvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlfoS8t/
kAWV37RT5p4KcgxHx2PDKoVWZyqwQB6JuWvqwK3O6JR3Bu/O+3TfTbp7Xy9wXccM
Bw5oPavAW0lWcaGXU2ggGKlnDENfuqJxUuOaUlztyIzHyHC2i733ES6AOGBaR0Iq
TkIOJ6W/ISehgh9Ff9p9ep3gSSwYyCNayj+zjjqOUVjqySZSDDhsILZjxxmaICzF
RNo2ilu2VZur83Pt8RCgYy5ip0HPLCGQndriRl3UD5F/6ZvfdJBSKBtOGxodsfRz
uxJhqC9NPHD2Znsovo+QMI2p89eXcbyH3AT8wpPuQYZda8MJBKnLlSP1nEYO0pRE
wto9sIpc6rXHBQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:31 2025 by rpki-client on console-fra.rpki-client.org