Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
File: HLQJLqLRKW3-YdeKffs8HgORZAg.mft (raw, json)
Hash identifier: k5ciTiA2cXNbJZatun1C8m8GeUAhgbGu/9Kd+RUTd0M=
Subject key identifier: 74:B1:2C:E6:A9:87:4F:FD:BB:6F:C3:FE:DC:8B:DD:F3:55:22:5B:71
Authority key identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
Certificate issuer: /CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Certificate serial: 0195116BA32D308BE835036934CB16EA8684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
Manifest number: 081E
Signing time: Mon 17 Feb 2025 01:00:21 +0000
Manifest this update: Mon 17 Feb 2025 01:00:21 +0000
Manifest next update: Tue 18 Feb 2025 01:00:21 +0000
Files and hashes: 1: HLQJLqLRKW3-YdeKffs8HgORZAg.crl (hash: JMnY9KJ2+Ar6h6ozIOvf+viZszGYog7CWta63BbtZVA=)
2: lwK-tdVWMXrHYVdbn4kUCTAVzCc.roa (hash: 4tg/EkN8rS3veLtCDPXV4EkuPbAIwhwYzveo6umGo00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:a3:2d:30:8b:e8:35:03:69:34:cb:16:ea:86:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Validity
Not Before: Feb 17 01:00:21 2025 GMT
Not After : Feb 18 01:00:21 2025 GMT
Subject: CN=74b12ce6a9874ffdbb6fc3fedc8bddf355225b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:6a:fc:74:39:04:9d:e9:42:08:69:e1:08:
de:18:10:8f:31:de:e4:ec:25:66:57:1b:6b:4f:0b:
a5:08:1a:27:94:8a:5e:d7:68:9e:c5:26:7c:0d:97:
66:82:ce:6f:c1:3a:7e:20:81:92:12:71:72:15:2c:
57:12:a8:25:95:e5:66:36:12:c6:76:13:2d:e1:89:
91:d7:83:ad:4f:27:15:b0:43:c9:23:2a:56:e4:f6:
84:38:68:48:4d:a6:a2:ae:4b:ec:71:92:1c:d1:cb:
65:52:94:a0:18:fa:38:e7:f6:b5:c2:d1:24:3e:5c:
11:0c:46:c6:50:10:35:42:f3:b1:de:c0:49:1e:a2:
e7:fe:5f:55:bc:b7:4c:69:ce:0d:ea:6c:98:56:c2:
38:6a:b3:d6:92:12:6d:64:64:b6:cf:f2:c2:ee:27:
7c:44:a4:6d:12:14:87:22:34:dc:21:e3:a9:f5:cc:
42:5b:fe:b0:1a:a9:88:a5:d1:85:67:29:3e:d6:99:
5d:d7:31:9b:96:be:86:09:33:1f:06:76:cd:d6:b9:
2e:45:82:11:c9:ce:3b:08:06:08:c0:f6:06:33:c6:
69:f1:f6:3a:b8:e7:d3:1e:00:5e:79:a3:7b:fa:bb:
7a:6b:97:50:cc:81:da:fe:35:76:e6:d6:5b:82:85:
5c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B1:2C:E6:A9:87:4F:FD:BB:6F:C3:FE:DC:8B:DD:F3:55:22:5B:71
X509v3 Authority Key Identifier:
keyid:1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e0:44:c9:4d:64:06:a2:ce:84:41:dd:e1:02:ef:3b:fd:36:
f3:13:9c:1a:2b:40:21:d8:b2:2d:a2:c6:c4:70:cf:13:48:09:
73:23:b2:e4:fd:21:95:c8:e2:90:83:30:70:21:82:7d:b9:5c:
67:8d:84:0f:55:da:24:52:3e:47:7c:bb:e0:5c:bc:98:c1:71:
67:56:cc:7f:2d:1d:aa:00:34:58:9b:92:1c:ab:37:5d:a5:65:
a9:3d:65:0e:d5:27:96:72:0d:24:c7:16:19:6f:5f:09:2c:ca:
29:e5:48:8b:47:fd:7e:3e:8a:fc:78:35:55:9d:a1:b5:34:02:
be:ac:43:a8:95:c2:30:46:5e:12:16:f7:df:0d:2a:67:43:6e:
6b:1d:e6:d7:4d:10:0e:22:5e:79:e2:8a:98:d9:a5:ec:8a:74:
b6:6f:7c:3e:87:bf:9c:91:4f:58:45:52:83:b8:e2:00:29:28:
0a:4e:86:1c:23:d2:23:2a:bd:95:a6:12:2b:5e:2a:e0:55:1a:
15:f2:6d:01:a9:9f:6a:5b:de:b2:34:3a:38:5a:2b:e8:df:ef:
b0:46:37:ca:a2:7c:38:31:77:9b:11:0b:61:55:1e:4a:d4:a6:
60:d0:b2:5c:c8:7a:d6:d4:c9:07:92:86:fb:1a:ea:e3:95:3b:
84:13:b1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:39 2025 by rpki-client