Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft
File: HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft (raw, json)
Hash identifier: Ykf6+2FhOwXZ7Q0MuSECP6+Yi3EEiMQYH9EPhIo5Jk4=
Subject key identifier: 9C:94:64:49:F9:0A:95:4A:D4:4C:F0:98:B8:70:50:5B:6A:22:0D:44
Authority key identifier: 1C:D2:E7:8A:09:7F:29:0F:C2:FC:AF:5D:9C:7D:88:FC:C8:7B:D4:52
Certificate issuer: /CN=1cd2e78a097f290fc2fcaf5d9c7d88fcc87bd452
Certificate serial: 0194C3F5A4F705ADFBF5F2EEE640284A6A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNLnigl_KQ_C_K9dnH2I_Mh71FI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft
Manifest number: 85
Signing time: Sun 02 Feb 2025 00:00:43 +0000
Manifest this update: Sun 02 Feb 2025 00:00:43 +0000
Manifest next update: Mon 03 Feb 2025 00:00:43 +0000
Files and hashes: 1: HNLnigl_KQ_C_K9dnH2I_Mh71FI.crl (hash: 7h9jJu8otaVj4rrP67raij5AbwTmi1gQ6yQR7aVBGm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNLnigl_KQ_C_K9dnH2I_Mh71FI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:a4:f7:05:ad:fb:f5:f2:ee:e6:40:28:4a:6a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd2e78a097f290fc2fcaf5d9c7d88fcc87bd452
Validity
Not Before: Feb 2 00:00:43 2025 GMT
Not After : Feb 3 00:00:43 2025 GMT
Subject: CN=9c946449f90a954ad44cf098b870505b6a220d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:e7:5b:22:5f:de:5b:1f:00:e7:7f:cd:61:
4d:4e:8d:da:da:9c:1d:06:ca:67:e1:ea:80:26:56:
e7:ae:14:3a:5e:9a:fc:3e:86:e6:42:3f:40:3f:a0:
af:ae:d5:46:06:29:6c:2c:52:5d:49:23:01:21:7a:
9a:36:de:c0:b6:da:d8:93:ef:d1:cc:6a:c4:92:5a:
80:68:14:b8:0c:73:65:36:7e:20:d6:85:6c:13:52:
dc:6f:5f:bd:b7:db:d4:a5:19:4d:a8:1c:0d:db:68:
f1:9b:27:52:2f:58:f8:e2:cd:e3:6f:38:af:e6:9f:
3a:e7:f7:ce:f3:b7:0f:2c:08:fe:63:b4:00:f6:bf:
69:36:17:c8:2a:ec:46:99:f7:31:fa:78:63:9c:a9:
03:c1:1a:01:a9:12:16:be:13:34:46:5e:34:02:13:
2a:77:5e:fe:30:92:b8:2e:0c:2a:18:25:0f:8e:70:
85:2b:fc:61:40:34:b3:a8:8b:53:33:0c:17:51:a0:
7b:29:be:1e:8b:a3:00:3f:92:c9:f4:e8:66:b8:60:
fd:59:bf:ec:0b:da:e4:e4:b7:f6:82:2b:4c:68:7b:
38:73:fd:a5:f0:e4:6d:96:30:f0:18:c1:5f:da:41:
bf:95:5d:23:92:3f:88:14:20:c4:92:c5:f3:e2:b1:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:94:64:49:F9:0A:95:4A:D4:4C:F0:98:B8:70:50:5B:6A:22:0D:44
X509v3 Authority Key Identifier:
keyid:1C:D2:E7:8A:09:7F:29:0F:C2:FC:AF:5D:9C:7D:88:FC:C8:7B:D4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNLnigl_KQ_C_K9dnH2I_Mh71FI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0f:f1:25:47:ff:4b:fd:d3:67:98:4f:ba:d5:f8:e2:e6:61:
c1:77:45:43:cf:33:0a:96:1f:77:44:e8:c9:43:db:01:cd:8f:
d7:bf:bd:e2:93:bf:08:68:78:f5:ae:c9:ab:e9:50:73:b2:ec:
93:55:38:90:76:b7:e4:65:6c:1c:a7:4b:0a:eb:8f:30:b5:ac:
4c:d3:12:0d:06:0f:20:97:47:e8:08:21:bd:56:86:b9:05:fe:
cb:2c:2c:7d:f8:f1:20:72:f9:21:3b:6b:3a:fa:87:a5:bd:2a:
ec:08:15:45:2b:b4:3b:05:46:01:01:aa:87:0a:92:cb:8d:18:
da:be:83:ed:ce:9d:06:f4:c2:90:85:5c:2f:40:8f:61:56:2e:
b5:55:68:2c:51:0d:c2:5a:8c:c2:ac:53:c5:54:14:f1:27:03:
99:c5:0a:cd:41:ec:90:e0:2e:f7:0c:83:4c:eb:f1:cd:a7:f1:
ac:ab:bf:30:98:c9:24:41:7a:49:41:cd:01:34:76:06:f5:51:
e7:be:54:a2:80:ec:e4:1b:fe:b5:66:9b:09:3e:51:03:f8:cc:
5f:d9:c4:5a:39:52:3a:e4:1b:db:a9:7d:01:b4:b6:34:19:59:
35:7a:31:6e:59:c6:13:2b:61:a9:14:3c:a0:59:9f:27:5d:10:
c4:40:94:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9aT3Ba379fLu5kAoSmpcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZDJlNzhhMDk3ZjI5MGZjMmZjYWY1ZDljN2Q4OGZjYzg3
YmQ0NTIwHhcNMjUwMjAyMDAwMDQzWhcNMjUwMjAzMDAwMDQzWjAzMTEwLwYDVQQD
Eyg5Yzk0NjQ0OWY5MGE5NTRhZDQ0Y2YwOThiODcwNTA1YjZhMjIwZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmLnWyJf3lsfAOd/zWFNTo3a2pwd
Bspn4eqAJlbnrhQ6Xpr8PobmQj9AP6CvrtVGBilsLFJdSSMBIXqaNt7AttrYk+/R
zGrEklqAaBS4DHNlNn4g1oVsE1Lcb1+9t9vUpRlNqBwN22jxmydSL1j44s3jbziv
5p865/fO87cPLAj+Y7QA9r9pNhfIKuxGmfcx+nhjnKkDwRoBqRIWvhM0Rl40AhMq
d17+MJK4LgwqGCUPjnCFK/xhQDSzqItTMwwXUaB7Kb4ei6MAP5LJ9OhmuGD9Wb/s
C9rk5Lf2gitMaHs4c/2l8ORtljDwGMFf2kG/lV0jkj+IFCDEksXz4rEpaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyUZEn5CpVK1EzwmLhwUFtqIg1EMB8GA1UdIwQY
MBaAFBzS54oJfykPwvyvXZx9iPzIe9RSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE5MbmlnbF9LUV9DX0s5ZG5IMklfTWg3MUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy81ZWZjYmItM2Q0MC00ZmUzLWI4ZWIt
MDZjMGYyYTE3NTdmLzEvSE5MbmlnbF9LUV9DX0s5ZG5IMklfTWg3MUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy81ZWZjYmItM2Q0MC00ZmUzLWI4ZWItMDZjMGYyYTE3NTdm
LzEvSE5MbmlnbF9LUV9DX0s5ZG5IMklfTWg3MUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANA/xJUf/
S/3TZ5hPutX44uZhwXdFQ88zCpYfd0ToyUPbAc2P17+94pO/CGh49a7Jq+lQc7Ls
k1U4kHa35GVsHKdLCuuPMLWsTNMSDQYPIJdH6AghvVaGuQX+yywsffjxIHL5ITtr
OvqHpb0q7AgVRSu0OwVGAQGqhwqSy40Y2r6D7c6dBvTCkIVcL0CPYVYutVVoLFEN
wlqMwqxTxVQU8ScDmcUKzUHskOAu9wyDTOvxzafxrKu/MJjJJEF6SUHNATR2BvVR
575UooDs5Bv+tWabCT5RA/jMX9nEWjlSOuQb26l9AbS2NBlZNXoxblnGEythqRQ8
oFmfJ10QxECUWQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:53 2025 by rpki-client