Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: 21Vv9HueDDvyv1bWiW/PrrLmRH1V54DmZEJCx3+hPPc=
Subject key identifier: 2D:6F:11:54:D9:95:4E:43:DE:C6:33:72:BF:01:08:86:FE:FD:25:6D
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 0194BABB93D7ECC9A119A77A42466AEE5041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 05:00:42 +0000
Manifest this update: Fri 31 Jan 2025 05:00:42 +0000
Manifest next update: Sat 01 Feb 2025 05:00:42 +0000
Files and hashes: 1: 01CHf_9w14ZNhv9S3Xhmvi90F8Q.roa (hash: ArkBvOvd5Ct0Kx1EUTZrG268WQ9wBIinLxbgoX9Nw3c=)
2: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: Y3Vd0ifUWM/yiMGAUNW2Sko5skFx8oMWUGUZ1Z9/drw=)
3: tDdZfF9_zffjxvEpEwDvjqS4I9k.roa (hash: U2TiVT1eXbO5ylElonLSsn5yN8P2ofyhgwF0HWpyq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:93:d7:ec:c9:a1:19:a7:7a:42:46:6a:ee:50:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Jan 31 05:00:42 2025 GMT
Not After : Feb 1 05:00:42 2025 GMT
Subject: CN=2d6f1154d9954e43dec63372bf010886fefd256d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:bc:3f:72:33:bd:b6:4b:11:06:01:1c:da:
63:14:91:87:57:29:0f:ed:bd:e6:5e:b3:5d:6e:94:
92:e6:8b:c9:6d:69:76:78:66:7b:f3:e1:90:04:1f:
bc:a9:d4:82:6d:42:b1:b0:82:b1:70:66:4d:b5:b1:
9d:f9:75:be:8e:45:59:7d:5d:5a:be:99:55:e2:aa:
7a:c7:1b:f3:19:02:e5:3d:fe:9f:ba:cd:24:4c:91:
1d:07:15:62:04:18:ec:ea:3c:da:0f:19:ed:54:eb:
59:8c:1d:0c:cc:87:ab:7a:ab:82:ff:b2:da:b5:61:
4d:7e:92:f0:12:35:01:e9:0c:3d:9c:29:de:e7:bd:
44:73:b2:9f:3b:77:84:d5:a1:eb:9b:f5:bb:2d:7e:
91:83:c4:d0:fd:0e:fc:20:1e:67:f3:c5:c1:52:68:
30:f5:2c:9f:33:fe:13:42:2b:d3:12:ee:4b:0d:84:
99:a2:b6:7f:08:d1:b0:ca:cc:0a:cc:9a:a2:a8:db:
04:bf:bc:00:e3:38:0a:2c:f1:45:59:f2:4a:3a:8b:
05:39:08:57:bc:91:56:25:68:b5:4e:42:ee:73:e7:
a4:27:67:25:36:7f:2a:2a:9d:27:99:2d:5d:10:98:
2d:16:53:f4:7c:d2:98:4c:a4:f0:33:4c:99:ce:4d:
25:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6F:11:54:D9:95:4E:43:DE:C6:33:72:BF:01:08:86:FE:FD:25:6D
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:75:31:e7:85:f2:8e:5b:b2:83:28:d1:5b:e9:3f:a2:13:72:
ae:18:7b:fc:ce:84:4f:07:4e:50:1d:68:5d:6d:bc:3d:47:15:
2d:f9:00:d6:be:c4:78:03:c6:91:f0:ef:3c:c6:ff:28:e1:8c:
b1:43:eb:df:63:7a:84:4f:3f:15:36:6f:23:4e:02:a7:31:b5:
7f:27:74:9f:5e:4f:f5:2b:a7:c4:41:06:d0:f4:f5:fa:96:b1:
b1:4c:61:3f:a0:9e:83:63:73:21:cb:cd:8c:c5:82:b0:61:fb:
e6:b5:09:f1:44:da:da:4d:58:42:7f:1d:ea:c7:76:d6:76:64:
5c:1c:d8:54:8e:88:90:0c:cf:2e:b7:56:10:04:50:91:88:75:
95:c1:e7:f1:8b:9c:45:28:1c:2b:6f:43:72:95:03:7a:70:87:
d9:65:db:0c:ec:04:d2:fb:eb:6f:54:62:af:55:d2:28:c1:7b:
36:c2:63:3c:b6:6f:6b:ff:ce:36:ba:28:0d:5e:60:9e:bc:df:
4a:dc:19:ca:89:12:80:b7:bd:f8:e2:2e:6f:d0:c9:a0:ae:a0:
8d:13:8c:db:53:76:10:2f:1b:89:f8:08:09:4f:4e:a0:8b:17:
5d:df:f9:20:06:17:68:d4:28:0a:7d:e3:d2:80:a4:7e:e7:10:
7b:8e:58:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:36 2025 by rpki-client on console-fra.rpki-client.org