Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
File: HgxHunmaBgczODuKTbNuhLYtMV0.mft (raw, json)
Hash identifier: +PRQ8OOecdtCsNT17f3q5oRLotxkOmTU8M60QbkI8HY=
Subject key identifier: 98:EF:73:31:CB:60:78:6A:C4:3F:FB:7E:CD:89:8D:FD:A3:C5:AC:0A
Authority key identifier: 1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
Certificate issuer: /CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Certificate serial: 0194BAF2914798353906148D8FD96135463E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
Manifest number: 11BE
Signing time: Fri 31 Jan 2025 06:00:46 +0000
Manifest this update: Fri 31 Jan 2025 06:00:46 +0000
Manifest next update: Sat 01 Feb 2025 06:00:46 +0000
Files and hashes: 1: HgxHunmaBgczODuKTbNuhLYtMV0.crl (hash: J9veignOZbQnfTM4Zj206oblgXCELPYXgMFDdEK0cmw=)
2: efdcJ4Md_nW0NWOQ1Ph8NvgqU4g.roa (hash: Ks2lZAvTiIXOJHL4XOxVW69lFz0D0Ra18E8s7zHIoZo=)
3: xFzbq7zegADAXEC3JlJ8gW_VXDA.roa (hash: NRYhSLCd0Q4zIkCT1UgOQ1E2p+RPP3+6wGhkQgIto+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:91:47:98:35:39:06:14:8d:8f:d9:61:35:46:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Validity
Not Before: Jan 31 06:00:46 2025 GMT
Not After : Feb 1 06:00:46 2025 GMT
Subject: CN=98ef7331cb60786ac43ffb7ecd898dfda3c5ac0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:4b:92:d7:43:27:13:80:fb:80:a8:0f:91:
ae:5f:49:48:2b:a8:d8:37:b1:87:fb:0b:90:59:bb:
c5:6f:ab:98:41:91:b0:8d:69:5c:f3:c2:5b:c6:ef:
8e:0b:9b:94:78:fb:36:ed:be:94:7f:e2:d1:0e:67:
8e:31:49:e2:5d:58:73:41:37:e6:7c:61:e0:02:b8:
c7:f0:33:ad:a4:8d:b4:c1:6a:0e:4c:a3:12:34:d8:
cb:cf:b8:dc:8e:75:ca:91:4d:db:74:35:6e:a0:c4:
16:12:9d:4c:88:66:6f:9c:3e:9f:d1:81:d2:a8:67:
92:22:41:bc:bf:6b:ce:30:23:04:f7:9c:e1:e2:6c:
35:0a:9c:68:83:1c:d7:82:a8:7f:31:58:88:4c:ac:
1b:94:61:00:0d:09:2a:4c:36:25:45:e3:1a:5b:e9:
53:d8:f2:a7:d8:55:f7:37:df:d9:57:9c:a6:68:dc:
ae:94:6a:2e:d1:ac:c7:85:02:23:7f:ef:89:97:6c:
43:22:17:6a:1f:54:63:a4:a2:14:0c:a2:51:6d:9a:
bf:81:93:8f:90:72:74:11:fc:1a:7b:9d:81:c6:4c:
d5:d1:9a:a0:ba:b0:f0:b4:9f:8d:c9:11:ba:f4:31:
12:22:c6:d0:82:df:79:68:b4:6b:3e:a2:e0:db:3d:
40:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EF:73:31:CB:60:78:6A:C4:3F:FB:7E:CD:89:8D:FD:A3:C5:AC:0A
X509v3 Authority Key Identifier:
keyid:1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f5:db:c0:69:3f:03:79:4b:d6:44:f4:f6:a1:4d:c8:67:6d:
2c:81:6a:97:db:c1:ef:00:1c:45:36:7c:35:da:bf:21:82:2a:
6e:94:ed:be:2f:0d:4a:9c:0a:b2:49:63:c2:68:80:e9:3e:5c:
21:79:19:32:3d:be:27:92:9b:3c:d0:70:42:cd:70:cb:14:a7:
88:c8:15:1d:e5:cc:26:56:59:40:4d:5d:61:fc:7e:ce:d7:1c:
b6:38:cb:d3:3e:e9:68:fc:3b:ad:3e:d0:55:79:08:dc:c0:09:
54:77:97:7f:b7:b6:12:56:60:e5:dc:95:11:cb:6f:78:35:ce:
3c:ce:a9:8c:e6:b8:41:6d:1b:e1:6b:40:33:ab:fb:c6:e8:48:
9a:dd:bc:8d:da:c8:d1:f2:27:d8:e9:43:11:ee:50:28:d4:ab:
e4:87:32:a5:b1:79:f6:ea:27:82:80:e5:95:02:09:f8:8c:ef:
13:ca:27:fb:92:90:65:06:b0:57:16:cb:26:3a:37:3a:f0:71:
ec:e2:f3:7a:2c:b5:a1:dc:d3:b1:02:46:05:1e:d1:f6:88:de:
f7:2a:a3:e8:ed:a2:b5:da:71:7b:1b:07:f4:f8:f0:fc:5b:88:
02:a8:e4:ef:c6:07:7f:3e:23:c8:fa:7e:cf:df:be:48:40:cd:
af:4c:5e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:13 2025 by rpki-client on console-fra.rpki-client.org