Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
File: hheg4tbmBy6I03dN18z78HochjI.mft (raw, json)
Hash identifier: Zw7Y7bonSwPBG6ZWCCPJKmmyweGfSYA45eh9bZRP3Nw=
Subject key identifier: 80:EC:59:F4:4F:CF:78:7D:58:98:B9:BF:4A:88:35:8B:CD:29:E4:90
Authority key identifier: 86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
Certificate issuer: /CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Certificate serial: 0194BB296495E4D8BD4272B48AF8B9CDBF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
Manifest number: 101B
Signing time: Fri 31 Jan 2025 07:00:39 +0000
Manifest this update: Fri 31 Jan 2025 07:00:39 +0000
Manifest next update: Sat 01 Feb 2025 07:00:39 +0000
Files and hashes: 1: hheg4tbmBy6I03dN18z78HochjI.crl (hash: JWUg0ynOrfiqzLDvW197NhG4et52AGOPaUdXjs5aUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:64:95:e4:d8:bd:42:72:b4:8a:f8:b9:cd:bf:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Validity
Not Before: Jan 31 07:00:39 2025 GMT
Not After : Feb 1 07:00:39 2025 GMT
Subject: CN=80ec59f44fcf787d5898b9bf4a88358bcd29e490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:7c:c2:03:30:04:a0:fe:00:a8:65:b5:37:
21:da:05:87:df:1f:01:15:54:76:83:a6:17:4d:6e:
5c:c0:0e:26:57:fb:a5:f7:74:09:34:33:b4:54:c6:
7e:f1:9e:79:04:b1:20:ee:cc:dc:ac:40:cb:75:9b:
d7:b1:83:d5:1e:96:07:da:88:82:27:01:2b:a3:a2:
ee:96:2e:97:0e:88:f5:84:b4:f6:f9:23:77:02:c4:
b2:18:99:6b:40:f6:70:4d:d5:a3:cc:16:09:82:ba:
09:1b:4a:8c:fc:e8:ae:23:40:e6:52:14:f5:23:b5:
25:96:d2:44:ec:8a:4b:a2:e5:bd:9e:8b:33:64:db:
33:86:3f:59:95:42:2b:00:97:95:78:07:3b:97:ea:
5d:bb:8f:55:3b:9f:af:5f:0b:78:23:15:7d:c6:6e:
e6:c5:a8:da:d6:89:38:10:32:09:bd:ab:ed:bd:9a:
ec:c8:63:c1:ee:3a:7a:75:1f:81:0c:2d:79:d4:93:
4d:68:0e:9e:92:e5:60:2f:c7:3b:14:50:38:cf:8f:
6f:2b:f7:33:57:d8:37:16:2a:77:bc:22:49:4c:b2:
50:e1:b4:2a:08:79:2d:06:eb:c8:4a:64:fd:eb:38:
16:62:c9:f0:bc:52:e2:17:0a:57:b1:35:70:44:21:
49:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EC:59:F4:4F:CF:78:7D:58:98:B9:BF:4A:88:35:8B:CD:29:E4:90
X509v3 Authority Key Identifier:
keyid:86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b6:db:39:5d:bd:28:a8:d8:89:b5:fd:c3:e7:b4:e7:d1:d7:
99:d8:9f:7d:47:ea:e9:6d:7b:6c:2b:7d:92:c2:f0:f9:64:b2:
63:33:12:2e:d8:5e:97:61:71:ec:a7:a1:97:18:d4:86:f6:9a:
a7:80:9a:bf:2f:c7:d0:ff:d3:39:de:56:32:28:9c:6c:6c:eb:
a2:e1:0b:d3:52:f0:35:f1:26:c4:8f:b8:30:6b:34:bf:7d:b4:
40:85:a7:8b:8b:89:84:2f:cf:cf:df:be:0e:74:5a:a3:f6:d9:
0b:70:4d:87:ab:25:58:5f:0d:a3:b8:81:0c:2d:85:5b:59:22:
71:9d:f1:41:87:ff:49:e1:0f:04:ae:20:91:8f:fd:ac:8f:ff:
71:85:e3:25:61:ba:24:f6:fd:a1:13:9f:fe:1c:29:97:bb:28:
11:c2:d2:e5:f9:3a:ee:7d:8a:46:75:9d:8f:c4:db:76:ca:43:
f2:be:a8:aa:3c:be:eb:23:3d:29:92:08:94:43:2a:86:f5:61:
72:41:31:db:59:f8:51:57:16:9e:66:b1:9a:30:9d:b0:0c:24:
62:59:ea:7a:67:68:a9:0a:70:c3:7d:ab:c9:7d:2a:0d:ba:d6:
42:90:f3:8a:37:a4:37:ef:c3:74:8a:e5:fb:50:f6:e0:f5:50:
19:ce:07:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KWSV5Ni9QnK0ivi5zb9hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MTdhMGUyZDZlNjA3MmU4OGQzNzc0ZGQ3Y2NmYmYwN2Ex
Yzg2MzIwHhcNMjUwMTMxMDcwMDM5WhcNMjUwMjAxMDcwMDM5WjAzMTEwLwYDVQQD
Eyg4MGVjNTlmNDRmY2Y3ODdkNTg5OGI5YmY0YTg4MzU4YmNkMjllNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwR8wgMwBKD+AKhltTch2gWH3x8B
FVR2g6YXTW5cwA4mV/ul93QJNDO0VMZ+8Z55BLEg7szcrEDLdZvXsYPVHpYH2oiC
JwEro6Luli6XDoj1hLT2+SN3AsSyGJlrQPZwTdWjzBYJgroJG0qM/OiuI0DmUhT1
I7UlltJE7IpLouW9noszZNszhj9ZlUIrAJeVeAc7l+pdu49VO5+vXwt4IxV9xm7m
xaja1ok4EDIJvavtvZrsyGPB7jp6dR+BDC151JNNaA6ekuVgL8c7FFA4z49vK/cz
V9g3Fip3vCJJTLJQ4bQqCHktBuvISmT96zgWYsnwvFLiFwpXsTVwRCFJTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDsWfRPz3h9WJi5v0qINYvNKeSQMB8GA1UdIwQY
MBaAFIYXoOLW5gcuiNN3TdfM+/B6HIYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGhlZzR0Ym1CeTZJMDNkTjE4ejc4SG9jaGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yZDE4YWYtNTg5Mi00MDdmLWI5Njgt
ZWJkYzMyYTZhYjI3LzEvaGhlZzR0Ym1CeTZJMDNkTjE4ejc4SG9jaGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yZDE4YWYtNTg5Mi00MDdmLWI5NjgtZWJkYzMyYTZhYjI3
LzEvaGhlZzR0Ym1CeTZJMDNkTjE4ejc4SG9jaGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLbbOV29
KKjYibX9w+e059HXmdiffUfq6W17bCt9ksLw+WSyYzMSLthel2Fx7KehlxjUhvaa
p4Cavy/H0P/TOd5WMiicbGzrouEL01LwNfEmxI+4MGs0v320QIWni4uJhC/Pz9++
DnRao/bZC3BNh6slWF8No7iBDC2FW1kicZ3xQYf/SeEPBK4gkY/9rI//cYXjJWG6
JPb9oROf/hwpl7soEcLS5fk67n2KRnWdj8TbdspD8r6oqjy+6yM9KZIIlEMqhvVh
ckEx21n4UVcWnmaxmjCdsAwkYlnqemdoqQpww32ryX0qDbrWQpDzijekN+/DdIrl
+1D24PVQGc4HxA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:51 2025 by rpki-client on console-fra.rpki-client.org