Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: bEiFJdezoVe05ztkSuAfP+VvcmpwgymGF5IztDe6nQk=
Subject key identifier: 54:40:05:3F:31:04:28:92:5B:A2:9E:AE:5B:09:2D:B7:D5:C2:65:8F
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 0194BB9748343A4298552DB4A4481048DCB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: 8A
Signing time: Fri 31 Jan 2025 09:00:41 +0000
Manifest this update: Fri 31 Jan 2025 09:00:41 +0000
Manifest next update: Sat 01 Feb 2025 09:00:41 +0000
Files and hashes: 1: BCpGmAAybEKlV3wOuVSBe587d6A.roa (hash: OMYJrykGqoEHSJmtTAAKG/WGPSWVW40cgEc5tVnY4H8=)
2: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: qA0VlCLIdfzOlSZblycgjBCTP0m/j0xG1yXCO/5mn+4=)
3: Hz-bNjOewKosqvkhbdq7wllugqY.roa (hash: Wg09CLCh3LKvZ9uP5X7eZQr1mwx5+JIzjmdsHdfrN+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:48:34:3a:42:98:55:2d:b4:a4:48:10:48:dc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: Jan 31 09:00:41 2025 GMT
Not After : Feb 1 09:00:41 2025 GMT
Subject: CN=5440053f310428925ba29eae5b092db7d5c2658f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:07:28:eb:9d:02:9a:f5:4d:31:83:d0:34:
b3:d5:68:39:13:9d:a6:e6:4f:57:d4:6b:cd:0d:a8:
20:d8:1a:b4:c3:7b:bf:c1:45:e3:e8:a9:8e:88:09:
de:b0:6c:f7:0a:d1:a6:4e:18:4d:01:85:7a:79:d1:
e1:9f:dc:8f:6a:8d:45:47:50:e8:1c:08:46:d6:19:
6a:06:27:6e:8a:88:e3:48:13:04:de:f8:f8:14:40:
7c:79:46:eb:7e:1c:ab:ae:46:28:33:40:d6:64:2f:
ec:78:e2:82:c7:5f:91:40:8a:9b:06:48:3d:de:4a:
f7:37:41:8e:68:7f:72:9c:18:a3:a5:c0:8b:9e:49:
2e:68:98:27:85:92:94:e8:77:18:a9:0a:54:86:4e:
20:ac:56:f6:0d:b8:ef:b0:b4:c4:dd:98:71:d7:7f:
34:12:1a:27:ef:be:f7:9d:99:0d:e2:ca:b5:68:91:
ab:91:12:60:58:77:01:2b:98:88:8e:d9:3a:e6:44:
31:0f:b6:64:bb:8f:db:26:30:0f:e4:9e:2d:e2:33:
11:4a:cc:be:ed:86:60:df:8b:56:e0:b1:a0:aa:dc:
69:fd:a8:62:7e:ce:c1:48:80:0f:87:b9:76:fa:2b:
f0:66:24:2d:83:8f:97:25:ae:ed:85:20:c2:be:68:
18:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:40:05:3F:31:04:28:92:5B:A2:9E:AE:5B:09:2D:B7:D5:C2:65:8F
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:eb:4a:40:07:70:c2:d2:ad:7b:d3:b2:76:d4:32:22:33:7f:
2b:07:f4:fe:b0:b7:00:6d:70:87:b6:1b:21:71:66:cb:e0:91:
3b:d0:88:2d:32:e0:92:8b:d0:1c:34:1d:1a:c2:b8:2e:94:83:
02:f1:7a:c0:28:66:8c:45:e5:31:52:81:af:05:d6:b2:27:19:
6c:f1:a3:12:7e:64:fc:f1:16:97:ae:53:fe:1b:bf:01:9a:1e:
f2:c1:76:d7:00:f5:3a:b5:0f:b2:52:7d:c1:d7:a6:fa:2e:be:
ee:a6:57:7c:10:15:cd:67:df:a8:90:45:12:5a:ec:f2:ed:ed:
f5:c2:ba:fc:d3:4e:5f:3b:94:93:ea:00:69:af:d1:56:0e:f8:
48:55:ad:21:78:b8:58:12:ad:68:a2:da:e3:1a:af:2f:b1:48:
d0:e0:e5:6b:ae:80:12:85:3e:66:76:2e:f3:53:ae:42:3c:4e:
ef:1a:19:5d:ef:7e:a7:7a:0e:8d:c8:e4:5d:f5:dc:cd:68:ce:
63:90:05:25:b3:c4:5f:69:e9:1d:96:81:22:6e:3e:17:85:55:
c9:21:9c:49:03:64:e8:bf:70:2f:e5:34:07:d8:a8:b3:f9:88:
eb:70:55:ac:98:e3:2d:eb:79:73:ba:5c:94:fe:d0:ac:b4:2e:
4e:90:e1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:14 2025 by rpki-client on console-fra.rpki-client.org