Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
File: HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft (raw, json)
Hash identifier: wCE14JkR7VuJNZHUeuH1UOU74vPuSA3o3NlrTHbN9S4=
Subject key identifier: BA:48:7B:4D:DB:05:18:2D:C6:0D:F2:6E:91:15:50:28:09:F8:67:02
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 0194BAF201C535BF2037273EBFC48E40D3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 06:00:09 +0000
Manifest this update: Fri 31 Jan 2025 06:00:09 +0000
Manifest next update: Sat 01 Feb 2025 06:00:09 +0000
Files and hashes: 1: HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl (hash: OxW5qQ6chrRZMFyNAVhgNjdF7Q+8K8Xqm7uYkAQiDDk=)
2: R5Y0djQcssCZ701JjQDPk4xfdyk.roa (hash: DSc2N36MG8S0TaEh5/lKpHOjngU7hgS2sauKy31uyUE=)
3: hRSmm6516V7O9m-dgRCN1dXhmM0.roa (hash: s+JGSz7mfrWnjIH/FpqXmM7l8VH4pyNnAOb8PA/Xeww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:01:c5:35:bf:20:37:27:3e:bf:c4:8e:40:d3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: Jan 31 06:00:09 2025 GMT
Not After : Feb 1 06:00:09 2025 GMT
Subject: CN=ba487b4ddb05182dc60df26e9115502809f86702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:41:cf:4d:b4:a5:62:70:d0:5f:f5:6e:01:
49:de:2b:d6:5d:3c:11:cd:4a:05:dc:d5:15:28:36:
28:4d:7f:0f:18:4a:f2:89:be:6a:7c:89:9a:36:cf:
ea:97:71:45:82:d0:0f:6e:4a:63:65:32:03:64:a7:
90:30:91:f3:01:60:a7:1c:a2:90:c0:8b:40:d8:12:
29:04:68:22:51:45:63:3f:cf:fd:4c:4b:13:44:a5:
12:0a:b5:5f:74:32:22:7d:e1:59:0d:0f:91:a0:d6:
95:bb:89:db:7d:53:b9:21:2c:16:37:ab:7a:2d:7a:
27:78:c9:5f:33:45:f3:6f:59:f1:3a:3a:7f:61:77:
f2:33:65:f1:02:e5:b3:1b:a5:f3:ef:85:b8:6c:92:
42:77:b5:63:d6:f2:0c:d9:9f:a1:6a:28:89:9c:56:
8f:b0:c2:3d:bd:f3:23:53:2d:d0:d9:b9:69:e0:7f:
52:b8:dc:9f:5e:ad:bf:cd:4d:ee:43:1a:eb:04:a1:
92:75:dc:49:46:8f:e1:99:16:96:f6:6c:91:6c:5a:
0e:ea:01:8f:ac:ce:cd:ea:b4:b5:b2:57:70:c7:42:
c8:de:08:61:23:c5:59:24:22:3e:73:65:f6:c8:57:
5d:60:66:36:e6:79:79:0d:15:6c:02:1b:36:ee:89:
b9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:48:7B:4D:DB:05:18:2D:C6:0D:F2:6E:91:15:50:28:09:F8:67:02
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f7:6a:9e:f5:37:9e:6a:77:89:df:68:21:4c:12:ff:f9:ae:
f5:a1:b7:9d:24:8f:49:66:e0:6d:69:6e:2e:d0:56:f9:dc:e7:
25:c9:3d:eb:79:0c:90:5f:73:4b:76:cd:24:24:37:2f:9e:b6:
b7:c0:58:9b:ca:0d:d3:46:60:f2:bf:11:44:84:b4:bb:5e:e9:
d8:ba:de:3b:16:31:c8:be:ad:16:c4:5f:5e:13:b4:77:23:9b:
af:81:ce:fc:7b:53:16:8e:23:42:f0:a3:d1:59:9b:5f:dd:7d:
c2:b5:58:87:99:30:76:99:77:a7:22:b4:55:84:d2:a8:1e:75:
c2:07:b5:c6:1b:ed:bf:b0:d6:0e:6b:ea:b7:4a:17:10:c5:f5:
b4:95:e3:1c:3f:ca:ee:c3:b7:66:8f:90:ef:75:f7:32:f2:b3:
cd:6b:2d:80:3a:5b:11:29:98:ce:71:4a:53:5d:00:32:9f:48:
ec:c9:ba:b6:f3:6b:3d:e6:65:71:63:8c:08:32:aa:2a:d8:8e:
eb:e9:4b:50:4b:14:31:ef:6f:8a:bb:1f:f8:3b:1a:a7:b4:40:
7b:a7:6a:72:d9:52:54:79:06:b5:d0:94:76:1d:08:d6:9b:85:
0a:75:3e:2b:9c:67:55:16:87:5d:1f:a2:92:92:82:7c:3c:d0:
a1:90:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:18 2025 by rpki-client on console-fra.rpki-client.org