Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
File: HDRPEVl1lIgoU6eVgd0r94nusx8.mft (raw, json)
Hash identifier: JfL3zjL1EtNWXv43wZ0P/dL+rTvJM0NGPSIOs9W2d3I=
Subject key identifier: AF:DC:97:9B:92:E0:79:80:F7:95:1A:58:99:22:9D:EE:E6:E7:7C:9F
Authority key identifier: 1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
Certificate issuer: /CN=1c344f11597594882853a79581dd2bf789eeb31f
Certificate serial: 0194BB299D4C6C5B84F0C4CD03853E5B5F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
Manifest number: 11FD
Signing time: Fri 31 Jan 2025 07:00:54 +0000
Manifest this update: Fri 31 Jan 2025 07:00:54 +0000
Manifest next update: Sat 01 Feb 2025 07:00:54 +0000
Files and hashes: 1: HDRPEVl1lIgoU6eVgd0r94nusx8.crl (hash: kGav0W+Lr03SYnt/Z6Lu05jjq66mO1O8cqsNkAlDvVQ=)
2: OLwYzj-fOtPupeVPjMakvIdCk14.roa (hash: w82sMMgD2hDeR96YGrYPpR7eSx7BTygOkVtPfhR7sSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:9d:4c:6c:5b:84:f0:c4:cd:03:85:3e:5b:5f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c344f11597594882853a79581dd2bf789eeb31f
Validity
Not Before: Jan 31 07:00:54 2025 GMT
Not After : Feb 1 07:00:54 2025 GMT
Subject: CN=afdc979b92e07980f7951a5899229deee6e77c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:77:88:b7:96:49:2c:97:43:3c:af:f4:99:3d:
89:e7:55:a1:00:42:f4:0e:1d:ab:15:8d:7b:45:c1:
a0:68:8f:49:04:28:82:37:c0:e2:32:c0:70:da:11:
ed:33:94:0e:b3:24:42:49:83:09:04:30:1f:c4:3a:
1a:79:b3:c4:05:2f:6e:81:05:92:41:74:6a:0d:d7:
05:25:65:fa:e8:5f:bc:de:2d:e8:16:52:bc:0a:3c:
95:93:39:79:e2:54:6d:1e:d1:04:17:bb:9c:3e:8f:
e3:80:d6:5b:d0:81:6b:1f:48:6e:9e:d3:da:74:65:
11:c2:89:c0:a9:a8:85:6a:e7:c2:21:83:18:1c:a0:
97:bb:63:56:3b:97:e9:c1:a5:fc:69:41:fb:45:a3:
95:dd:10:f4:5f:58:4e:65:36:df:8c:3e:d3:59:42:
f6:37:a7:89:43:90:74:1d:ff:5a:01:a5:6f:4e:87:
89:bc:cf:89:57:37:1c:35:d0:07:50:1b:9a:2b:fe:
46:9a:c3:8b:21:1d:f1:f7:04:04:40:85:09:b0:fd:
34:07:ea:b0:dc:e4:4c:de:b7:d6:b4:86:9f:26:56:
72:1b:32:5b:b9:6f:6c:a7:d5:92:d4:66:ad:0c:70:
fb:54:0e:74:0a:db:89:95:13:c7:33:a7:a5:eb:de:
a2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DC:97:9B:92:E0:79:80:F7:95:1A:58:99:22:9D:EE:E6:E7:7C:9F
X509v3 Authority Key Identifier:
keyid:1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:69:c0:07:31:99:46:1a:b6:87:2c:2e:83:57:ca:fd:ac:32:
fb:96:77:7a:fd:3e:d6:43:2b:23:0d:fa:8f:f3:08:b2:59:fa:
37:16:82:5a:4b:6e:47:ef:25:38:7f:fc:24:19:d0:9b:2a:fe:
58:ae:95:54:b3:3b:b1:43:5e:6b:96:9b:65:f6:63:76:3a:d4:
ad:f2:e1:d2:e3:b8:0e:ed:d2:dc:21:8e:9c:0a:27:67:05:50:
08:dd:f4:8b:2e:c8:85:f6:39:e5:e2:79:0e:46:3d:72:1f:d4:
9f:3a:11:d4:03:29:81:c6:d6:8b:ef:91:df:81:5c:86:c8:64:
9c:57:ba:09:a5:f7:df:f7:60:d3:16:35:c1:ff:41:6f:bd:08:
c2:e3:0b:51:47:25:c8:13:5e:0e:40:f5:ce:c8:6d:2e:79:82:
bd:9a:e7:64:b6:12:f8:0f:60:90:43:a7:b4:d3:4f:81:7b:ac:
86:14:5b:7a:92:bc:00:c8:e2:70:1e:53:84:0c:8e:bc:5b:d8:
35:c2:35:fa:3e:1f:be:c3:d4:e5:a5:2f:a7:7a:95:6f:d3:4f:
09:50:51:b4:4f:1b:b2:69:b6:d8:fc:e8:96:32:a7:7d:87:86:
0f:bc:18:44:b7:51:b6:1f:58:26:d6:de:a4:d8:f3:c9:fb:35:
74:c1:26:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KZ1MbFuE8MTNA4U+W18OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMzQ0ZjExNTk3NTk0ODgyODUzYTc5NTgxZGQyYmY3ODll
ZWIzMWYwHhcNMjUwMTMxMDcwMDU0WhcNMjUwMjAxMDcwMDU0WjAzMTEwLwYDVQQD
EyhhZmRjOTc5YjkyZTA3OTgwZjc5NTFhNTg5OTIyOWRlZWU2ZTc3YzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XeIt5ZJLJdDPK/0mT2J51WhAEL0
Dh2rFY17RcGgaI9JBCiCN8DiMsBw2hHtM5QOsyRCSYMJBDAfxDoaebPEBS9ugQWS
QXRqDdcFJWX66F+83i3oFlK8CjyVkzl54lRtHtEEF7ucPo/jgNZb0IFrH0huntPa
dGURwonAqaiFaufCIYMYHKCXu2NWO5fpwaX8aUH7RaOV3RD0X1hOZTbfjD7TWUL2
N6eJQ5B0Hf9aAaVvToeJvM+JVzccNdAHUBuaK/5GmsOLIR3x9wQEQIUJsP00B+qw
3ORM3rfWtIafJlZyGzJbuW9sp9WS1GatDHD7VA50CtuJlRPHM6el696i9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/cl5uS4HmA95UaWJkine7m53yfMB8GA1UdIwQY
MBaAFBw0TxFZdZSIKFOnlYHdK/eJ7rMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSERSUEVWbDFsSWdvVTZlVmdkMHI5NG51c3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mMDYxOTEtYjBhOC00OTUwLWIwMjct
ZGVlYzZmY2YyZDk1LzEvSERSUEVWbDFsSWdvVTZlVmdkMHI5NG51c3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9mMDYxOTEtYjBhOC00OTUwLWIwMjctZGVlYzZmY2YyZDk1
LzEvSERSUEVWbDFsSWdvVTZlVmdkMHI5NG51c3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv2nABzGZ
Rhq2hywug1fK/awy+5Z3ev0+1kMrIw36j/MIsln6NxaCWktuR+8lOH/8JBnQmyr+
WK6VVLM7sUNea5abZfZjdjrUrfLh0uO4Du3S3CGOnAonZwVQCN30iy7IhfY55eJ5
DkY9ch/UnzoR1AMpgcbWi++R34FchshknFe6CaX33/dg0xY1wf9Bb70IwuMLUUcl
yBNeDkD1zshtLnmCvZrnZLYS+A9gkEOntNNPgXushhRbepK8AMjicB5ThAyOvFvY
NcI1+j4fvsPU5aUvp3qVb9NPCVBRtE8bsmm22PzoljKnfYeGD7wYRLdRth9YJtbe
pNjzyfs1dMEmPg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:41 2025 by rpki-client on console-fra.rpki-client.org