Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
File: h6WU4wS2ghg6ojWeQOHc75P-BXA.mft (raw, json)
Hash identifier: Kt3Bwz80Jyx99/qXvMqHl3YiEr0RhWT8LYfdf1LnmEM=
Subject key identifier: 32:16:00:C2:02:2A:2D:48:60:D0:44:E7:98:70:E7:F6:20:CC:01:69
Authority key identifier: 87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
Certificate issuer: /CN=87a594e304b682183aa2359e40e1dcef93fe0570
Certificate serial: 0194BAF287A2B00331CE1666C5DA54D67F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
Manifest number: 033C
Signing time: Fri 31 Jan 2025 06:00:44 +0000
Manifest this update: Fri 31 Jan 2025 06:00:44 +0000
Manifest next update: Sat 01 Feb 2025 06:00:44 +0000
Files and hashes: 1: h6WU4wS2ghg6ojWeQOHc75P-BXA.crl (hash: 9iqgEDTOi+APMDQUXrzdFwSDAezCmSo6gtY+AcQ4W3Q=)
2: mZILI8WqqcpHAw37DM7B3iDAuHk.roa (hash: BeVHXMxzxy+SJZqCSRve8Im+ETGPeoPOdbCD7qoAgVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:87:a2:b0:03:31:ce:16:66:c5:da:54:d6:7f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a594e304b682183aa2359e40e1dcef93fe0570
Validity
Not Before: Jan 31 06:00:44 2025 GMT
Not After : Feb 1 06:00:44 2025 GMT
Subject: CN=321600c2022a2d4860d044e79870e7f620cc0169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2a:f1:6d:a8:ce:e0:fe:88:e5:2c:3f:32:1c:
8b:0b:f4:f4:1f:44:cf:76:7f:a2:4c:c1:0b:1a:b6:
f2:1d:7d:23:7f:ae:74:3f:38:09:3c:5e:14:c9:e2:
fa:fd:52:29:c8:4c:88:b3:85:ef:d8:93:22:2d:bc:
0d:f6:e1:71:5b:56:71:8d:78:c6:d7:db:3e:87:25:
6c:95:10:dc:c6:ca:7e:8a:1b:48:27:a4:46:6a:04:
b2:d8:fe:d4:ef:22:1f:c3:20:4f:86:8e:7a:cf:9c:
88:da:5a:c1:85:82:7e:11:f8:4c:06:59:cf:57:a7:
7d:f9:56:6a:72:69:13:eb:07:bf:c5:09:77:f6:83:
62:42:1b:3d:ec:6e:e8:d9:77:96:92:18:d4:96:8d:
a2:8c:13:aa:9d:05:f1:0a:20:9a:3b:aa:cf:df:a6:
45:ea:db:6f:13:d5:e7:36:ba:76:57:c8:c9:0d:fb:
c1:c5:24:8e:b0:b5:d2:2a:9e:f0:c1:fc:20:d9:0f:
a7:d5:a3:6c:71:e3:5e:e2:9a:68:8a:c4:5d:2f:5c:
89:68:f5:38:5e:00:18:25:58:b7:63:1a:02:ef:56:
85:de:98:66:e2:b9:85:a8:71:25:33:4e:8d:5a:82:
c4:bb:1d:a1:af:9b:da:2a:be:9d:06:8a:71:f6:c6:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:16:00:C2:02:2A:2D:48:60:D0:44:E7:98:70:E7:F6:20:CC:01:69
X509v3 Authority Key Identifier:
keyid:87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0d:db:8f:84:18:c1:e7:6d:9d:3d:9f:bb:4d:62:d2:e8:fa:
76:47:ed:a5:5a:fb:6b:3a:d8:84:21:41:da:bf:01:fd:a4:80:
fe:ec:38:00:00:6a:7e:97:8e:b6:3e:6f:5b:f1:17:d2:48:d3:
e1:ad:35:41:95:97:c3:45:3d:19:22:d5:60:5e:63:67:d5:3b:
9a:51:4b:36:e8:92:45:83:e2:5e:f7:93:ee:7b:a1:5b:dd:b5:
a5:cb:51:fa:22:85:59:e4:12:9e:bf:b1:8a:cd:df:8d:4d:c3:
93:c1:2a:37:d9:f7:61:02:59:0f:14:4a:5a:34:fa:6e:ce:1a:
5d:cd:91:ad:82:5a:75:90:5a:1c:b6:ef:b5:2d:ce:2b:ff:f4:
8d:dc:b0:2c:88:ad:63:bb:b5:bd:f8:ed:44:35:4e:43:c2:b5:
02:87:a5:c0:4a:c6:19:3e:e9:37:83:c3:6f:49:a2:6c:f8:b2:
3b:60:f0:49:e4:26:17:f7:0b:71:98:46:a2:bb:f5:2f:69:e8:
2d:57:24:95:a3:df:ad:10:d5:e6:cc:cc:03:58:39:45:49:38:
f9:a1:d7:d0:19:64:23:c8:c8:fa:92:b2:34:e8:f7:34:d0:28:
8d:6f:ef:57:ea:e5:6e:30:b7:4f:86:e7:44:81:1d:35:d4:3f:
60:a3:3a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:06 2025 by rpki-client on console-fra.rpki-client.org