Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
File: hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft (raw, json)
Hash identifier: DT3aUp+3CAAvEQFPnsyncK2zzAwCD3Y3Rp35A4GSGZQ=
Subject key identifier: 70:F8:02:D3:26:66:10:77:58:AD:BC:FE:D5:9E:EB:A7:E9:EB:64:0D
Authority key identifier: 84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
Certificate issuer: /CN=84f590ca62c246440583818c31f2573a0f50ffd0
Certificate serial: 0194BA842566D61D5762DC48C62316ABA9B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
Manifest number: 083D
Signing time: Fri 31 Jan 2025 04:00:09 +0000
Manifest this update: Fri 31 Jan 2025 04:00:09 +0000
Manifest next update: Sat 01 Feb 2025 04:00:09 +0000
Files and hashes: 1: hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl (hash: bLh/mw5+HvIRAg19TjOsMpa4WzXr/KpV/KTatDoVpu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:25:66:d6:1d:57:62:dc:48:c6:23:16:ab:a9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f590ca62c246440583818c31f2573a0f50ffd0
Validity
Not Before: Jan 31 04:00:09 2025 GMT
Not After : Feb 1 04:00:09 2025 GMT
Subject: CN=70f802d32666107758adbcfed59eeba7e9eb640d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:bc:47:c8:bf:cf:b5:a6:5b:10:db:b7:e8:
ce:37:48:24:e6:90:6e:09:d2:9e:8c:95:cf:54:87:
5c:fc:d2:fd:9e:42:e0:ae:5d:b0:94:fc:0e:86:ec:
24:d0:a1:18:6e:86:24:00:46:21:41:02:45:a5:15:
0f:7b:1a:2e:84:6c:e8:d9:b1:da:5e:eb:fa:05:27:
6f:8d:35:b1:7b:0d:0e:42:52:11:54:84:46:6f:1e:
54:05:ab:8c:9a:5a:63:0d:6e:fc:e1:0a:1c:80:58:
ef:53:bb:21:88:28:4c:8c:56:ec:e8:67:8f:8e:20:
07:8d:7b:81:e7:04:7f:fe:19:1b:88:dc:46:95:3c:
29:33:07:6c:10:f5:7d:b9:95:68:e9:3d:6e:f2:48:
e9:58:6a:81:15:3b:4a:14:7b:e1:94:aa:f6:ab:19:
21:90:32:6d:94:72:7d:a5:c7:08:1d:7d:4d:c9:03:
64:4b:24:2a:ca:d6:da:ed:fc:5b:ec:f0:9f:c1:a1:
59:87:1d:5e:da:08:e2:25:51:02:aa:ed:69:63:2d:
2c:83:09:2b:c7:84:98:ff:d7:61:d0:72:82:4e:38:
f6:93:71:bf:d5:a5:9a:20:65:01:d6:9a:77:a5:4d:
6f:da:e3:73:ec:80:01:56:f4:0b:6c:f9:3f:02:04:
08:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F8:02:D3:26:66:10:77:58:AD:BC:FE:D5:9E:EB:A7:E9:EB:64:0D
X509v3 Authority Key Identifier:
keyid:84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:24:c8:8b:90:73:60:0e:79:0f:6f:d2:d2:89:d2:f8:d5:0e:
60:a2:ef:7b:61:32:86:fa:44:3f:77:00:66:66:57:78:82:9c:
47:df:fe:97:25:19:e8:e2:f5:aa:17:7b:9b:c5:aa:c4:83:e0:
45:6c:9f:f2:f9:3f:36:b0:33:e9:e4:10:2a:2a:8f:49:1d:d9:
ad:80:e5:e8:0f:af:69:81:bf:5f:b1:81:14:72:93:12:7c:e1:
aa:4d:9a:1a:62:12:e5:eb:5c:85:ec:f0:74:2d:7f:f1:48:f2:
33:ff:10:04:81:c3:58:e3:14:ea:47:66:f7:dc:df:43:e7:d7:
ed:c4:5d:c0:6f:15:94:4f:a8:41:d7:9c:4e:38:87:15:61:55:
8d:ab:9b:f9:f3:03:39:86:3d:01:a8:ce:40:79:33:2d:96:d7:
5f:d9:fc:48:4c:fd:f3:bb:76:b8:5c:49:ac:bc:f6:4e:b7:f6:
2b:73:71:61:75:03:0b:68:09:94:85:10:55:ed:86:38:74:a9:
e9:01:ea:2e:8f:d4:2e:04:4b:60:3f:19:e3:18:b7:94:8d:6a:
63:80:22:54:09:f5:98:c1:e8:1a:63:2e:62:39:d7:df:13:33:
13:76:8e:82:48:e2:2d:72:99:33:4c:83:d8:54:38:3c:84:90:
0b:e1:36:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:52 2025 by rpki-client on console-fra.rpki-client.org