Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft
File: HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft (raw, json)
Hash identifier: MxTLLnAuV1SB2qhNPnarPFIy2nUguDpwiyLQxgt+XXg=
Subject key identifier: 03:9D:13:68:D3:73:04:70:D2:13:C0:DB:E9:4A:B3:85:1B:07:1B:69
Authority key identifier: 1C:53:53:A8:6A:BD:33:B1:A2:36:E4:07:CE:46:92:61:D0:63:61:50
Certificate issuer: /CN=1c5353a86abd33b1a236e407ce469261d0636150
Certificate serial: 0194BABBBCA63FCAC32654F064454CEE9600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFNTqGq9M7GiNuQHzkaSYdBjYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft
Manifest number: 06AE
Signing time: Fri 31 Jan 2025 05:00:53 +0000
Manifest this update: Fri 31 Jan 2025 05:00:53 +0000
Manifest next update: Sat 01 Feb 2025 05:00:53 +0000
Files and hashes: 1: HFNTqGq9M7GiNuQHzkaSYdBjYVA.crl (hash: 8cFlYbFSrollG7lFggCGzI0qXbqX7hGmtALdrUcTXUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFNTqGq9M7GiNuQHzkaSYdBjYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:bc:a6:3f:ca:c3:26:54:f0:64:45:4c:ee:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5353a86abd33b1a236e407ce469261d0636150
Validity
Not Before: Jan 31 05:00:53 2025 GMT
Not After : Feb 1 05:00:53 2025 GMT
Subject: CN=039d1368d3730470d213c0dbe94ab3851b071b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:69:9b:16:11:49:f5:62:6d:3a:7e:81:2f:
d4:cd:a3:ce:77:60:84:87:43:fc:6a:ae:8b:4d:9f:
3c:65:cb:98:4c:23:0f:1e:fc:4e:02:0b:6e:b9:be:
72:c8:32:af:b3:de:71:d1:ab:1d:05:6c:a1:8b:e9:
85:4a:f0:ec:d6:56:5b:85:63:62:79:67:8e:a0:7e:
31:0d:6d:b3:25:e9:65:81:b5:09:54:6a:f7:82:78:
36:1f:81:ec:d5:16:81:8e:5d:34:0a:a3:3d:f8:e8:
f9:e2:a5:82:00:3b:d9:cf:a2:ee:c6:1d:3d:7c:54:
c7:0f:cd:07:0a:4d:2f:4b:fb:3d:35:3b:71:1b:1a:
0b:9a:89:57:5a:77:4d:75:27:32:70:06:fd:d0:46:
b8:54:9f:85:69:e3:c5:62:80:72:e8:d9:ec:f9:78:
75:e3:d2:c4:dc:e4:cc:ad:12:b0:be:9f:4d:21:bd:
8e:c9:76:c3:41:0e:ee:ab:96:ef:af:3a:d2:36:f2:
e5:ef:4e:4d:c4:d6:db:0d:c8:59:5c:75:b9:76:96:
a4:09:8c:cc:35:1c:82:03:00:b5:da:d1:27:93:1a:
9c:d4:be:51:dc:b2:0e:a7:97:b1:06:ab:04:07:e7:
14:db:73:10:e3:50:5c:4a:ff:89:28:4f:54:bb:a2:
6d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9D:13:68:D3:73:04:70:D2:13:C0:DB:E9:4A:B3:85:1B:07:1B:69
X509v3 Authority Key Identifier:
keyid:1C:53:53:A8:6A:BD:33:B1:A2:36:E4:07:CE:46:92:61:D0:63:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFNTqGq9M7GiNuQHzkaSYdBjYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cca8da-4079-463d-bd53-c4e18b8bb1cf/1/HFNTqGq9M7GiNuQHzkaSYdBjYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1c:8c:8f:5c:13:83:9f:36:01:13:9c:66:0b:f0:f2:cc:9b:
20:6a:72:8f:e0:b1:be:1b:b0:c3:5a:b5:3f:47:12:6b:15:27:
ae:17:a9:f3:cb:57:ef:55:69:94:62:9e:0f:d6:ed:5f:78:46:
65:83:c7:0f:0a:b9:82:db:11:8c:a6:ca:8a:28:71:c2:af:98:
5a:8e:b2:b8:f5:0a:d4:82:55:e7:ac:63:c2:98:66:f6:1b:32:
ee:f6:36:81:c5:5f:17:59:2c:d8:96:81:34:6e:6b:b6:42:b8:
ff:9c:3f:33:7d:3b:d9:d0:bb:da:db:1c:96:d2:53:69:64:91:
e9:2b:a5:5d:28:be:07:3f:53:ca:64:41:94:c5:5c:4d:3b:78:
e7:f6:3f:ca:51:ba:d8:d9:8b:13:93:23:82:e4:9c:36:f5:e9:
de:ef:2f:89:5f:c7:64:de:73:5f:0f:51:e6:34:b7:e5:1e:b3:
3d:f5:c9:99:9e:68:00:15:72:20:c6:86:7c:37:da:5e:45:fb:
d8:21:84:ad:29:95:44:e8:03:ae:9d:89:db:20:4c:87:38:0f:
4f:35:9c:3e:d3:2e:29:fb:c1:fb:bb:cb:26:5e:60:43:6b:9c:
8c:b7:a4:dd:b2:30:93:fa:dd:1e:53:7f:72:9d:0c:2f:85:e4:
00:79:93:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:30 2025 by rpki-client on console-fra.rpki-client.org