Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
File: H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft (raw, json)
Hash identifier: ODtU0giC1I03Kv/aN57VJ0bJ4JwsP/y2uRqPoJHT1Hs=
Subject key identifier: 3D:48:E7:89:50:83:92:FB:AB:46:1C:11:DD:93:C9:32:9A:AE:9A:77
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Certificate issuer: /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial: 0194BAF265F207A161B240EB98FE0E990C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 06:00:35 +0000
Manifest this update: Fri 31 Jan 2025 06:00:35 +0000
Manifest next update: Sat 01 Feb 2025 06:00:35 +0000
Files and hashes: 1: H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl (hash: toMWdxibf3BbYfeGlAzR4SGYbMrVdQU0DSonWZzh5fI=)
2: JExy0vnBpyXtQRXrczW-rXsvlvc.roa (hash: uayvEFxY8m7ytIfb/FnA/i1VKT8AyOarqBsheJam/Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:65:f2:07:a1:61:b2:40:eb:98:fe:0e:99:0c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f74988332069e1835246a85a1094125152b3765
Validity
Not Before: Jan 31 06:00:35 2025 GMT
Not After : Feb 1 06:00:35 2025 GMT
Subject: CN=3d48e789508392fbab461c11dd93c9329aae9a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:ae:8e:56:ad:de:59:ed:97:ff:78:d1:6b:
a1:5b:84:33:f6:e4:b7:c6:46:45:44:4c:c8:24:e7:
03:20:a8:a1:20:46:85:51:57:6d:35:4d:43:3e:0b:
e0:bb:a6:8d:d0:8d:89:eb:ad:70:e7:29:4a:7c:05:
ba:80:66:90:ed:c7:25:cf:32:8e:c3:fd:34:da:c4:
17:ac:d5:f6:8d:b7:eb:5c:6f:7a:d9:a3:e4:ad:a0:
aa:9a:f3:5b:f3:a4:f4:ce:b2:a0:7a:03:3c:4a:36:
e6:e7:e3:f9:c7:79:ef:4d:bf:8a:37:35:80:e8:a5:
50:f1:76:cd:59:52:33:8f:65:d3:39:17:36:ba:2e:
89:62:10:66:2f:9d:28:45:af:e4:ae:ff:db:bd:2f:
4e:e9:98:72:f9:56:27:44:de:64:d4:9a:a8:5b:25:
ec:8b:0a:12:06:65:24:91:1e:a8:0a:6c:77:81:c2:
81:73:cd:4a:df:79:c9:4f:43:1b:9b:3f:ca:d8:83:
a4:d6:82:64:c3:40:a8:0c:42:ec:f1:b9:6e:77:f3:
f9:de:59:57:d0:07:78:ee:75:f1:11:96:6f:15:7c:
5e:c8:e3:30:ab:f7:8b:12:24:51:cb:9d:dc:3e:31:
5f:07:e7:4e:df:c0:74:7d:2b:f3:eb:ed:e0:6b:10:
59:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:48:E7:89:50:83:92:FB:AB:46:1C:11:DD:93:C9:32:9A:AE:9A:77
X509v3 Authority Key Identifier:
keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:05:0c:2b:03:08:02:0a:e3:3f:c0:62:4e:2d:87:f7:63:d2:
50:c0:d5:d7:1c:45:42:03:94:d6:fc:f4:95:e8:52:96:6b:de:
bd:b5:45:9a:86:32:53:84:a0:e8:d6:4c:41:7a:e8:93:f8:06:
a6:67:1a:d7:d4:23:b7:82:ca:f8:53:d1:ff:ec:cb:ea:be:60:
85:18:fd:88:47:4a:45:88:f2:1b:21:02:0f:03:0d:c3:fd:91:
12:0a:cb:d6:5b:38:20:81:50:f3:88:c1:ed:09:5d:ed:44:a6:
05:bb:dd:9c:3b:90:5a:82:66:8f:4b:27:b5:5a:b3:88:d7:24:
bd:be:a6:20:11:d2:95:67:43:63:66:7e:3d:80:83:41:2f:69:
2b:72:ea:38:59:77:d3:b0:2d:ab:c0:25:f0:58:9e:64:07:25:
00:bc:a1:ce:9b:3b:8f:48:b4:d2:1e:b2:e9:af:d5:bd:3e:d0:
d5:89:9a:9a:a1:aa:bc:c4:ca:1d:31:fe:57:e1:c0:27:61:a2:
85:db:0f:a8:98:4e:4a:ed:c7:45:48:89:18:ab:2c:b0:18:22:
55:96:11:7b:a2:8d:e4:40:c3:5b:9b:ac:26:c0:ba:38:de:d5:
68:ad:d3:a8:ea:37:8f:e2:19:fe:b8:b2:c2:ca:a0:89:1e:be:
a9:69:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:10 2025 by rpki-client on console-fra.rpki-client.org