Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
File: HLRkugOLwLu-5ADz6QjfUUgsUbs.mft (raw, json)
Hash identifier: JHp1bBUaqcs26B4Ce44yamLcuWGqbbwJAx5bzcnYXrE=
Subject key identifier: 9F:F6:A6:A6:74:16:B5:20:66:CF:9B:F0:14:D4:AC:78:F4:AF:7D:49
Authority key identifier: 1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
Certificate issuer: /CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Certificate serial: 019510C79DF065CB82ED266201467D8AD0BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
Manifest number: 1346
Signing time: Sun 16 Feb 2025 22:01:12 +0000
Manifest this update: Sun 16 Feb 2025 22:01:12 +0000
Manifest next update: Mon 17 Feb 2025 22:01:12 +0000
Files and hashes: 1: HLRkugOLwLu-5ADz6QjfUUgsUbs.crl (hash: sACu70yPkJRFVRjqvF59UUO0KCuNhpUP9PMho7cb6eU=)
2: W-OtDTrcD4enIHqlL53Q8gJVqVg.roa (hash: MIoWyZfzBnM9tbFHcQ1uCgLljDFhySK8a9b/Bqx5jVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:9d:f0:65:cb:82:ed:26:62:01:46:7d:8a:d0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Validity
Not Before: Feb 16 22:01:12 2025 GMT
Not After : Feb 17 22:01:12 2025 GMT
Subject: CN=9ff6a6a67416b52066cf9bf014d4ac78f4af7d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8c:69:2d:1b:84:19:69:fe:9f:15:72:6f:1d:
b6:9a:6b:64:55:31:9f:1f:0d:e6:3d:88:bc:26:a1:
c1:04:87:a8:56:19:fe:d5:56:df:32:94:0d:69:19:
0d:40:fc:6d:4e:35:f4:13:44:5d:e6:e8:2b:84:3b:
e3:18:5f:ff:fe:76:b0:7a:38:98:74:81:30:7a:e2:
7d:31:fa:0f:03:7c:32:20:73:38:3a:d8:60:ca:8e:
ca:d8:89:5b:61:a3:80:d3:4f:e3:38:73:3d:3b:01:
25:b0:74:03:4e:09:d0:ea:6d:50:9b:1f:4a:1e:1f:
73:28:71:13:ec:4d:09:6b:45:c2:36:43:2d:a4:4c:
50:c3:fa:65:d6:d8:ac:ed:dc:53:ae:ce:3a:eb:e4:
69:ef:84:46:97:66:46:1c:7a:3e:f0:0c:ce:7a:96:
05:ba:1a:73:c9:5c:db:ac:7b:35:b6:7b:7d:c2:a6:
17:65:9a:2a:25:ea:78:0d:1f:81:3a:8c:33:78:ca:
e2:e5:5b:18:87:99:01:87:22:1f:6a:3d:68:a1:ee:
ef:f3:48:56:f3:92:cf:a4:82:fe:fd:a9:95:88:85:
aa:a4:5a:fe:d9:19:c2:85:bf:1b:91:71:2e:19:c2:
a3:5d:96:7b:a6:4d:69:91:ab:34:5f:f3:54:8e:34:
2b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F6:A6:A6:74:16:B5:20:66:CF:9B:F0:14:D4:AC:78:F4:AF:7D:49
X509v3 Authority Key Identifier:
keyid:1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:7c:bf:38:d6:7a:98:5e:c0:f8:73:3c:c9:8e:fc:fd:ce:8e:
af:1e:b7:7f:8f:28:7c:f4:89:a2:f3:6d:4b:ae:9b:eb:86:92:
82:ef:4e:fa:a9:d6:7a:2c:9d:cf:25:c3:2b:44:9e:d4:db:56:
1d:f4:5a:b8:98:6c:ff:ef:01:e3:dc:cf:36:77:fc:16:26:0e:
29:06:61:f8:0c:6e:38:c3:d2:3e:6f:87:76:90:ae:d9:48:48:
ae:d7:d5:08:4a:a9:d7:90:94:b8:00:59:a8:7b:84:b2:4f:d4:
af:57:75:91:f1:bf:09:d8:52:71:0f:b2:51:fc:62:ce:bc:cc:
ad:b5:18:b8:41:5b:38:02:74:85:56:b3:d4:d8:74:a9:c5:4d:
94:af:b3:a5:dc:92:61:94:eb:da:40:dc:b2:59:e0:c3:2a:d2:
3f:ab:f4:ec:69:f1:6e:0e:8f:e5:3f:43:2e:17:6d:5b:24:2d:
0f:c8:c7:b8:e1:c5:a7:f3:17:08:1d:96:9e:d2:89:ae:68:b9:
30:0d:e6:f5:90:f5:29:7c:2d:8a:cc:7d:81:f9:72:81:f5:7c:
d7:19:af:ce:96:a3:96:fb:a1:ba:72:88:d8:b4:c4:1b:3b:c3:
6e:99:15:20:70:bf:42:dc:80:ca:e2:32:aa:5a:0e:cc:ca:ad:
8a:04:72:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:02 2025 by rpki-client