Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
File: HgKySJ9HE5YtEFESslJ264HxrJA.mft (raw, json)
Hash identifier: sxcc+21qYKxVnKQPSvMHOA1nyCRXdnWlSIyRKYQc10k=
Subject key identifier: 11:25:03:B8:61:D2:B0:C9:7F:D1:A4:AD:47:36:C7:82:2A:F5:61:B0
Authority key identifier: 1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
Certificate issuer: /CN=1e02b2489f4713962d105112b25276eb81f1ac90
Certificate serial: 0194BB29011171379F7B90EA8F4D5CEB78EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 07:00:14 +0000
Manifest this update: Fri 31 Jan 2025 07:00:14 +0000
Manifest next update: Sat 01 Feb 2025 07:00:14 +0000
Files and hashes: 1: 9V85HLFbpWnoHuwfi3uBdYCY9ZM.roa (hash: sWuFEcVAMiwExmVPdpvYCkHmeYDgX5Tn0zMIqcTEx/4=)
2: HgKySJ9HE5YtEFESslJ264HxrJA.crl (hash: ifQhogNrSziGjWvSHfLn13ji3EgT3+cR8pgT3lvotNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:01:11:71:37:9f:7b:90:ea:8f:4d:5c:eb:78:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e02b2489f4713962d105112b25276eb81f1ac90
Validity
Not Before: Jan 31 07:00:14 2025 GMT
Not After : Feb 1 07:00:14 2025 GMT
Subject: CN=112503b861d2b0c97fd1a4ad4736c7822af561b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:6c:76:99:5d:33:11:a5:40:80:b7:49:41:
2b:65:3e:17:ee:12:61:3e:ed:25:fd:9b:05:e7:ad:
4b:38:84:09:cf:3e:5a:f9:a8:a8:04:8b:96:16:ed:
72:30:82:4e:70:36:c7:03:95:6b:71:c8:d7:61:e3:
87:00:a5:c5:b9:86:ad:71:ce:32:d2:51:eb:97:85:
5f:eb:04:33:89:18:d6:80:f8:8b:79:60:ff:39:bb:
e9:23:85:a6:5b:b9:bb:84:d6:0d:3f:cd:82:76:93:
7d:59:74:57:5b:df:21:fa:0a:48:3b:f3:14:ef:c8:
db:1b:9b:58:e7:4a:43:14:5f:fe:ea:83:fc:cf:93:
8a:f4:c4:82:0b:f2:c4:ea:4e:41:d4:2c:63:cb:7b:
b5:27:86:41:89:bc:9a:e4:aa:24:75:be:73:95:53:
a8:c2:81:20:d2:ec:f6:c7:46:0c:66:f5:b9:c1:a1:
02:10:22:7b:f3:dd:36:3f:55:31:63:12:1e:97:48:
fb:01:25:5a:bd:09:59:fa:2c:e1:9a:8a:d7:27:b8:
60:46:29:f2:a4:c9:9c:88:77:5b:96:31:41:67:92:
8a:88:69:df:57:24:53:2f:fe:8a:86:31:3f:ee:f5:
7c:de:e6:50:e2:34:ff:14:e0:d4:96:42:2a:a1:25:
69:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:25:03:B8:61:D2:B0:C9:7F:D1:A4:AD:47:36:C7:82:2A:F5:61:B0
X509v3 Authority Key Identifier:
keyid:1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:27:59:03:7e:a2:77:ba:21:57:52:24:5b:fe:16:7a:cc:66:
34:03:a3:b9:de:3a:e3:81:70:24:c0:d3:c8:c0:2e:f7:a7:32:
b9:66:33:ed:3c:06:2e:be:0b:62:b0:2c:db:9a:62:72:74:7e:
bd:81:4e:71:a3:4c:bd:24:61:b4:a9:99:c9:5c:d1:84:da:c3:
03:cc:41:e3:b7:94:44:c2:7f:30:4e:fb:dd:1e:d4:60:f0:75:
22:5f:38:30:00:0a:b3:e0:74:d0:61:8e:87:68:b7:6a:a7:f0:
a9:77:ed:81:0d:49:05:00:27:0e:ad:aa:b5:bf:a7:2c:68:0d:
ba:fd:3c:4b:fe:03:00:c1:b8:5a:43:9d:cc:aa:2d:de:71:c8:
68:88:ee:c6:11:eb:65:68:2d:8d:8d:0a:6f:39:e2:2c:20:b3:
28:9d:a6:55:2e:9d:09:15:4a:64:17:7a:98:c1:69:88:ab:2e:
b2:5e:bb:f6:2d:54:27:e1:b3:16:1f:64:b7:5f:79:a8:d2:36:
b5:38:6b:01:5c:07:4f:6f:1b:b3:2d:d0:13:bf:a2:bc:b4:0e:
6f:45:5e:67:51:5f:5d:2a:0c:5b:8e:b8:48:a4:c4:5b:02:7c:
d0:cb:6c:c0:fb:cd:f5:a7:7d:16:16:f0:b2:ff:08:71:10:8e:
ba:dd:af:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:42 2025 by rpki-client on console-fra.rpki-client.org