
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier: dJXJImOyDuvRGa4o2mfFPrqIe/letk/QFodgmwKMtaE=
Subject key identifier: D5:49:8D:00:71:5B:87:E0:89:36:08:2D:FE:AF:F4:16:6E:07:6A:BA
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 0194BAF263CF793F012F0C3A5A628511467D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number: 0723
Signing time: Fri 31 Jan 2025 06:00:34 +0000
Manifest this update: Fri 31 Jan 2025 06:00:34 +0000
Manifest next update: Sat 01 Feb 2025 06:00:34 +0000
Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: vedbWXR3fl4Ao7BpWjzOlyKhel4bvncrDJWc0h1dOn8=)
2: i7voySudmq1hRw6jZi6dhd7J9Lc.roa (hash: PJGOK5ogq6I9ytndA9V0Wf4xrfCGT+GN8CrZ63d1kO4=)
3: rVsJQEO-mj7mvcsXxH5VgaTW6zg.roa (hash: ua7+fmWA2GW1yW/CrUv0CTWRd4x0VpX6E9M5m//M8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:63:cf:79:3f:01:2f:0c:3a:5a:62:85:11:46:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: Jan 31 06:00:34 2025 GMT
Not After : Feb 1 06:00:34 2025 GMT
Subject: CN=d5498d00715b87e08936082dfeaff4166e076aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:6c:8f:d9:c6:88:7a:cc:c1:af:03:6f:a8:
dd:85:63:0b:42:8b:3a:99:aa:08:8c:e3:fa:37:23:
2f:52:95:1a:dd:ac:7f:9f:35:30:b9:94:7b:86:d8:
3c:ce:9d:1c:69:c5:f9:2c:6c:75:08:04:a7:4c:b1:
cc:e1:4f:ca:32:e1:21:c0:e6:4d:38:7e:74:ee:6f:
40:ea:4d:a2:5d:c0:a6:cb:d7:93:0b:b6:c9:4f:4d:
f1:2c:a4:e3:7c:d3:42:34:eb:77:58:5c:a1:06:c3:
f1:f7:af:3c:ab:cf:5f:f2:cd:42:e9:4f:80:2a:6f:
2f:ad:75:11:da:8c:e3:b8:16:58:1d:56:41:dd:ca:
5e:f7:14:91:bd:2b:56:9c:51:cd:96:a3:79:35:b7:
f1:9a:3e:d1:8c:13:48:34:ad:f3:9e:37:bd:bf:94:
56:06:16:6d:ac:6f:14:6a:06:ad:64:3b:4d:0f:c6:
93:1d:77:a2:ce:bd:ce:7f:58:17:6b:06:09:4c:27:
7f:4f:24:14:8a:e9:55:9f:9b:3d:f1:87:de:9c:c7:
8e:6b:f3:7e:fc:2d:46:d8:8a:b1:c2:a9:b7:34:55:
9c:30:69:e3:ec:91:6a:ca:a8:49:8d:d4:31:12:a2:
86:6a:23:b8:01:49:f6:ae:06:a8:53:0e:20:f5:fd:
c6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:49:8D:00:71:5B:87:E0:89:36:08:2D:FE:AF:F4:16:6E:07:6A:BA
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:39:38:08:47:6e:0f:64:4b:63:6c:4d:5d:95:a8:94:e6:13:
2f:1e:85:10:d6:d0:70:cb:88:f5:8a:dd:5a:14:5e:b0:81:35:
23:9e:5f:d0:7d:44:50:67:f8:d1:12:a8:5c:9e:b5:a7:32:36:
ba:d1:9c:86:09:23:41:0f:43:6f:f5:43:c1:b6:77:16:20:06:
9c:7b:7f:70:1d:74:be:8b:99:a1:12:f2:a2:42:b6:69:1e:75:
58:12:24:ae:02:1e:17:54:64:46:e2:6e:ad:30:ed:10:eb:8b:
0d:84:9d:b3:f2:0b:94:8f:f0:3e:88:1d:8e:6a:93:55:a3:ac:
b9:cd:c7:d1:12:47:0d:f7:71:b1:1a:be:94:d8:c5:9e:9a:3b:
72:0f:67:4f:54:17:4e:f2:17:2a:1c:fa:92:d5:22:16:29:40:
1a:51:b1:46:29:ff:8d:35:d2:70:dc:6e:11:f5:78:dc:bd:ea:
3d:c6:39:5e:9f:56:c7:04:9a:f0:eb:86:e2:70:76:6b:e5:ba:
e2:34:c4:89:08:79:80:60:91:da:61:d2:3a:52:51:a7:a0:e2:
9a:9b:f8:79:c5:58:b8:f2:fd:73:21:13:ed:72:aa:e3:34:c7:
d3:88:b1:04:58:83:dc:33:ec:a6:8c:84:35:67:3d:4a:4c:9d:
64:f7:19:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:24 2025 by rpki-client on console-fra.rpki-client.org