Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
File: hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft (raw, json)
Hash identifier: w1qu/QYb17Oplk7dGEbCpOV8iW0C8ljNWG7UPdkVIpo=
Subject key identifier: DB:B2:00:6B:C8:51:6B:E0:3D:DA:C9:0D:39:C1:20:6E:0B:50:9A:51
Authority key identifier: 84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A
Certificate issuer: /CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
Certificate serial: 0194BABBBC712524CD71B8B51759B5F2E19F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 05:00:53 +0000
Manifest this update: Fri 31 Jan 2025 05:00:53 +0000
Manifest next update: Sat 01 Feb 2025 05:00:53 +0000
Files and hashes: 1: hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl (hash: R1szfRCwl5hLOC2EpcUDImwVBrTGwEUhSR269TfCUCc=)
2: lge_NhHNBFIDg0XdYly6isNJOS4.roa (hash: pDkiQ0N7P9YYqBWB2tNQa40hEDOK8eDvKfQ/EMtchvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:bc:71:25:24:cd:71:b8:b5:17:59:b5:f2:e1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
Validity
Not Before: Jan 31 05:00:53 2025 GMT
Not After : Feb 1 05:00:53 2025 GMT
Subject: CN=dbb2006bc8516be03ddac90d39c1206e0b509a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:95:9a:c9:d6:be:a2:b4:5a:e3:96:a0:1b:
c8:46:96:74:80:36:bc:50:ed:9d:04:46:4a:e3:c1:
96:36:8c:ee:e8:f3:07:30:0c:aa:1e:79:5c:41:d9:
9f:61:d6:b9:b8:11:f2:70:08:d8:8b:dd:a9:df:d8:
6c:5f:dd:3c:92:d0:70:64:d5:0e:bc:15:62:58:a0:
1d:d4:78:55:47:59:2c:b3:4c:3a:63:f1:1a:53:5d:
ed:c6:69:47:ef:b8:5d:63:26:e1:1a:c1:34:60:23:
0f:62:4f:eb:bf:76:57:62:e8:05:3b:65:d0:27:14:
c1:a9:fc:35:4a:33:a1:64:86:bd:6e:e7:30:d3:4d:
9d:25:01:74:b9:23:6e:28:9f:cf:2c:64:58:e8:81:
ab:32:84:04:25:48:26:e8:70:2c:5a:f6:08:ec:38:
a1:f9:04:29:7f:58:95:b1:a8:f8:b4:02:33:8e:69:
d9:39:ea:d2:0c:49:38:8e:c3:4c:b9:1b:69:20:c6:
12:a5:c3:34:af:f0:b9:fc:c7:11:a4:e2:bd:1c:92:
7d:ef:50:e8:81:d5:2d:96:a4:7e:45:22:4d:3e:64:
42:62:e5:c5:f1:a8:d9:70:e6:62:6b:77:e2:c6:52:
4a:22:a5:ef:99:5f:32:47:2a:aa:cd:e1:af:bd:70:
f0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B2:00:6B:C8:51:6B:E0:3D:DA:C9:0D:39:C1:20:6E:0B:50:9A:51
X509v3 Authority Key Identifier:
keyid:84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:11:eb:ce:b8:f9:d9:8e:69:fc:43:2d:ca:de:53:33:50:81:
d6:91:c6:51:ba:e1:3c:37:8b:fb:33:c7:51:ab:73:0b:24:fc:
21:51:c1:a8:a1:e0:d5:e3:aa:fd:bb:c6:b6:18:60:8e:dc:5f:
47:35:c4:19:c3:37:0a:3e:92:93:7e:50:dd:3b:3e:66:dc:39:
59:32:22:a5:88:8a:ea:2b:be:5e:b1:63:1f:04:53:8e:7d:5a:
b0:a3:4c:75:17:1b:86:18:2f:79:93:d2:4e:da:9a:5c:66:77:
77:95:96:2b:98:ca:e8:65:63:f3:fa:bc:9f:43:bb:bc:59:30:
14:fa:b2:84:5d:4d:fc:df:54:4f:a7:70:4b:f0:7f:a0:cd:b6:
2c:06:6c:dc:d6:ac:db:cd:0e:8e:9f:27:10:7b:22:fb:da:e6:
7b:aa:2f:0c:32:80:48:e4:84:75:af:06:35:d2:c2:00:a5:72:
16:14:89:f9:0d:80:87:f7:12:7b:44:38:84:ae:8f:d0:23:3a:
ee:f6:97:7d:a7:c9:c1:fa:90:ee:1b:10:9f:4a:75:6c:42:c1:
b8:fe:a4:85:c1:85:0a:69:4f:5d:e0:6b:fa:e0:56:4f:86:3d:
5e:f6:51:47:00:c8:5d:70:42:2a:dd:7b:70:9d:89:f5:71:5e:
85:6e:3f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:56 2025 by rpki-client on console-fra.rpki-client.org