Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
File: HLQJLqLRKW3-YdeKffs8HgORZAg.mft (raw, json)
Hash identifier: +4Mkyj+Sxk4FFkgzK6BEO8PI6XlB3sqDihcO8QsPupw=
Subject key identifier: 02:44:3A:7C:4A:B9:AF:9A:8E:96:CC:7B:B0:4E:E7:3A:EF:B9:5C:E8
Authority key identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
Certificate issuer: /CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Certificate serial: 0194BABB666AD0A5A77E427DED7DD4DA5DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
Manifest number: 07F1
Signing time: Fri 31 Jan 2025 05:00:31 +0000
Manifest this update: Fri 31 Jan 2025 05:00:31 +0000
Manifest next update: Sat 01 Feb 2025 05:00:31 +0000
Files and hashes: 1: HLQJLqLRKW3-YdeKffs8HgORZAg.crl (hash: Lqsshjhr7MnK9A4sftne3jYXPuZW6UPPVDRN+ICp5ks=)
2: lwK-tdVWMXrHYVdbn4kUCTAVzCc.roa (hash: 4tg/EkN8rS3veLtCDPXV4EkuPbAIwhwYzveo6umGo00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:66:6a:d0:a5:a7:7e:42:7d:ed:7d:d4:da:5d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Validity
Not Before: Jan 31 05:00:31 2025 GMT
Not After : Feb 1 05:00:31 2025 GMT
Subject: CN=02443a7c4ab9af9a8e96cc7bb04ee73aefb95ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:91:62:5c:0f:26:ff:7e:d7:eb:ac:aa:ce:
ce:20:41:d1:f8:27:97:22:a4:6e:48:05:48:44:cc:
4c:11:32:fb:43:09:e4:b8:a9:ee:48:44:ad:0e:5e:
d2:41:1e:60:6f:7c:5e:ee:68:5d:2b:3e:8c:2e:7d:
5f:a5:59:d9:2d:00:37:64:e9:d8:57:c7:56:f6:ce:
91:eb:87:75:e0:c7:29:86:38:e6:1e:69:89:a7:9b:
25:86:e5:2d:5f:bf:40:aa:e5:ef:af:63:4c:e7:25:
42:d4:3a:f5:02:4a:bb:21:4d:88:7a:23:ad:62:3c:
58:dc:3a:53:f0:71:17:24:7a:e5:79:9c:61:b1:30:
18:10:f5:6c:4c:9e:e3:c2:e9:5d:5d:4c:29:af:6f:
f8:2d:7d:57:49:08:07:5e:05:e0:bc:13:3f:81:f4:
e1:0d:9a:36:f2:96:55:a1:ba:78:b7:49:d5:b4:88:
22:9b:ea:4d:b9:72:8f:a4:38:90:84:11:39:ab:10:
b8:52:b1:61:5a:c5:1c:e1:90:cf:1f:8a:53:7e:56:
de:ee:aa:97:e1:b5:6b:c5:d3:44:15:24:56:1c:85:
6b:50:81:20:86:b2:11:e4:6d:18:92:6c:12:63:aa:
cd:52:70:ea:da:1b:b7:9a:ba:b6:b1:3e:38:60:d0:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:44:3A:7C:4A:B9:AF:9A:8E:96:CC:7B:B0:4E:E7:3A:EF:B9:5C:E8
X509v3 Authority Key Identifier:
keyid:1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:66:e5:6b:f7:e7:14:31:70:63:09:bb:c4:5f:68:01:75:e2:
25:34:4b:d1:6b:d2:fd:5f:58:64:53:53:3c:ff:3f:63:cf:35:
6f:58:00:67:86:ff:63:d7:c3:2c:6e:07:c8:82:82:4e:bb:23:
63:55:76:a8:5b:fa:f8:51:72:da:c6:b5:07:1e:2e:b2:ac:fe:
4b:57:16:96:56:f1:ea:46:ce:f1:ef:82:fc:54:b6:ed:f6:ff:
32:5c:18:42:1f:1b:d4:73:b0:c7:c7:07:07:d3:ad:c2:7f:96:
d4:aa:b4:9a:db:16:e3:88:b9:dc:e4:d9:d3:a0:26:d5:10:b5:
6f:4c:cc:6f:b0:c7:92:81:57:c0:32:4a:01:eb:5d:68:43:a9:
3e:b3:73:26:2c:a2:ab:7a:77:95:bf:33:56:df:a3:9f:23:07:
35:92:bf:a2:2b:a2:6d:68:7c:6a:74:3c:33:4f:b2:60:b9:59:
c5:a5:0c:b4:f4:c3:19:c6:bd:82:8e:0f:4e:65:50:8b:46:66:
b5:f1:19:06:a2:b8:66:38:d3:ea:b1:72:1b:87:dd:40:d0:6f:
57:83:9c:23:8e:4a:a8:f7:7a:d8:fc:fd:d1:f3:4d:1b:ef:46:
6e:82:e8:ff:a3:c7:9c:25:2f:1a:27:6a:ed:0d:30:77:52:4f:
6f:57:8b:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u2Zq0KWnfkJ97X3U2l2lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYjQwOTJlYTJkMTI5NmRmZTYxZDc4YTdkZmIzYzFlMDM5
MTY0MDgwHhcNMjUwMTMxMDUwMDMxWhcNMjUwMjAxMDUwMDMxWjAzMTEwLwYDVQQD
EygwMjQ0M2E3YzRhYjlhZjlhOGU5NmNjN2JiMDRlZTczYWVmYjk1Y2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygqRYlwPJv9+1+usqs7OIEHR+CeX
IqRuSAVIRMxMETL7QwnkuKnuSEStDl7SQR5gb3xe7mhdKz6MLn1fpVnZLQA3ZOnY
V8dW9s6R64d14McphjjmHmmJp5slhuUtX79AquXvr2NM5yVC1Dr1Akq7IU2IeiOt
YjxY3DpT8HEXJHrleZxhsTAYEPVsTJ7jwuldXUwpr2/4LX1XSQgHXgXgvBM/gfTh
DZo28pZVobp4t0nVtIgim+pNuXKPpDiQhBE5qxC4UrFhWsUc4ZDPH4pTflbe7qqX
4bVrxdNEFSRWHIVrUIEghrIR5G0YkmwSY6rNUnDq2hu3mrq2sT44YNDohQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJEOnxKua+ajpbMe7BO5zrvuVzoMB8GA1UdIwQY
MBaAFBy0CS6i0Slt/mHXin37PB4DkWQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSExRSkxxTFJLVzMtWWRlS2ZmczhIZ09SWkFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC80Y2EwMDUtMTc3ZC00NGI1LTlkOTYt
YzU0NjlmYzdkMmQwLzEvSExRSkxxTFJLVzMtWWRlS2ZmczhIZ09SWkFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC80Y2EwMDUtMTc3ZC00NGI1LTlkOTYtYzU0NjlmYzdkMmQw
LzEvSExRSkxxTFJLVzMtWWRlS2ZmczhIZ09SWkFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWbla/fn
FDFwYwm7xF9oAXXiJTRL0WvS/V9YZFNTPP8/Y881b1gAZ4b/Y9fDLG4HyIKCTrsj
Y1V2qFv6+FFy2sa1Bx4usqz+S1cWllbx6kbO8e+C/FS27fb/MlwYQh8b1HOwx8cH
B9Otwn+W1Kq0mtsW44i53OTZ06Am1RC1b0zMb7DHkoFXwDJKAetdaEOpPrNzJiyi
q3p3lb8zVt+jnyMHNZK/oiuibWh8anQ8M0+yYLlZxaUMtPTDGca9go4PTmVQi0Zm
tfEZBqK4ZjjT6rFyG4fdQNBvV4OcI45KqPd62Pz90fNNG+9GboLo/6PHnCUvGidq
7Q0wd1JPb1eLig==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:25 2025 by rpki-client on console-fra.rpki-client.org