Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
File: hIkfjbCMEQ2bW160xalXnkEzyBY.mft (raw, json)
Hash identifier: kdEg3cYAftZIaFycUxaATN+Vi6k56xpLmenMQvyjjsM=
Subject key identifier: 98:03:71:72:21:B0:1A:21:6B:5D:9B:1A:55:60:90:21:53:CB:C8:24
Authority key identifier: 84:89:1F:8D:B0:8C:11:0D:9B:5B:5E:B4:C5:A9:57:9E:41:33:C8:16
Certificate issuer: /CN=84891f8db08c110d9b5b5eb4c5a9579e4133c816
Certificate serial: 0194BB60371D3EC78F9D7926BFDCCBF670AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIkfjbCMEQ2bW160xalXnkEzyBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
Manifest number: 03D3
Signing time: Fri 31 Jan 2025 08:00:32 +0000
Manifest this update: Fri 31 Jan 2025 08:00:32 +0000
Manifest next update: Sat 01 Feb 2025 08:00:32 +0000
Files and hashes: 1: VhR6-WTquHS_2jnfD6TSdxmLio8.roa (hash: W0QV+vJybHz/CWW9vsyk2vI5OGmRUVH5JOXqdf8uQIU=)
2: hIkfjbCMEQ2bW160xalXnkEzyBY.crl (hash: r329DLm1kTmrwkW0UFkvOtiP61PL0xcWRMMgt3EEgP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hIkfjbCMEQ2bW160xalXnkEzyBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:37:1d:3e:c7:8f:9d:79:26:bf:dc:cb:f6:70:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84891f8db08c110d9b5b5eb4c5a9579e4133c816
Validity
Not Before: Jan 31 08:00:32 2025 GMT
Not After : Feb 1 08:00:32 2025 GMT
Subject: CN=9803717221b01a216b5d9b1a5560902153cbc824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:44:4d:32:90:2a:fb:b8:60:83:71:b0:72:65:
ab:4f:ee:02:23:f1:07:75:ef:5d:f3:64:f2:10:d7:
d5:69:81:e7:66:da:e8:e0:3a:9f:e5:fb:4e:b4:23:
63:12:a2:43:d6:48:ed:74:eb:33:56:27:cc:7f:41:
8b:c4:bd:1c:a1:fc:e7:6b:77:3c:57:f3:6d:f9:09:
10:d0:0f:26:43:8e:ca:91:a8:83:ce:28:db:53:46:
e5:07:b0:e2:8b:b5:ec:51:35:d0:5c:74:8a:1f:d4:
1b:9b:87:e2:1d:26:15:4f:f1:38:d9:13:9e:50:15:
96:90:fe:cf:eb:af:29:2d:8d:74:7f:db:9b:af:78:
cb:68:4b:91:6c:51:17:d7:20:c4:3d:30:38:42:b5:
5e:d5:18:9a:d9:46:83:48:75:29:00:12:cc:6c:c0:
d3:52:3f:0f:62:08:ec:d6:d9:bf:de:b8:ec:90:44:
a9:1e:f4:de:ab:0b:5f:cd:89:00:a5:9d:05:23:6c:
b8:4d:b1:2a:b8:80:c9:e0:1e:81:65:69:b8:96:13:
12:53:f8:48:d3:e4:f2:6b:12:35:77:f0:05:3f:6b:
82:1e:18:0a:7a:ff:65:e2:ae:a6:0f:d3:00:1e:04:
1b:e0:30:4a:44:d5:6e:ca:c9:ab:4f:84:8b:dc:19:
72:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:03:71:72:21:B0:1A:21:6B:5D:9B:1A:55:60:90:21:53:CB:C8:24
X509v3 Authority Key Identifier:
keyid:84:89:1F:8D:B0:8C:11:0D:9B:5B:5E:B4:C5:A9:57:9E:41:33:C8:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIkfjbCMEQ2bW160xalXnkEzyBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8e:b6:f2:98:37:4d:bc:fa:b6:18:b1:0b:fe:83:aa:d2:df:
24:c2:ca:83:fb:c5:ca:ee:fa:22:04:77:ea:fe:0e:ba:ea:81:
85:5a:ee:a6:83:b1:2d:60:7b:a4:a9:dc:67:68:44:4b:cf:25:
8b:15:ee:4c:09:71:c2:2e:15:13:32:33:9a:dd:3f:d8:1b:0a:
c3:43:66:e2:c1:60:36:96:95:43:bc:73:bd:88:70:66:de:f4:
0e:9b:50:55:39:cb:17:01:62:0a:1c:95:7d:87:dc:30:c6:7d:
19:95:6f:d0:68:a9:b6:4b:88:56:0a:49:65:bb:5e:fb:61:dc:
07:0a:7d:00:f8:0b:45:1b:df:54:e8:61:a6:a0:da:eb:a4:e8:
d6:53:8d:a4:02:fa:52:32:3a:ed:6d:b2:af:15:61:37:61:20:
96:f4:75:1c:b7:9c:ff:45:a6:2a:91:06:90:d7:ab:3b:3e:c2:
d6:d4:91:8e:27:30:75:48:00:ad:56:f0:37:d4:f5:b3:30:d5:
d2:05:7c:7a:05:6e:86:34:45:1b:d9:bc:f5:d7:f6:c2:71:e8:
ee:db:77:b7:b9:a7:25:04:26:71:7e:da:bd:37:ec:14:f7:67:
69:db:29:58:04:c6:07:89:76:b3:9a:45:58:ef:4f:db:2e:98:
5d:f5:ed:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:28 2025 by rpki-client on console-fra.rpki-client.org