Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
File: hRwoH1drQ6HKuVPJIEHOlZknDHg.mft (raw, json)
Hash identifier: PaoO9WPsq3wkfHPHAth9e9my6RISoZ6GYQhT21tLPN8=
Subject key identifier: 00:22:45:A8:39:B7:39:71:2C:08:46:02:41:A7:F7:23:BE:3D:39:B6
Authority key identifier: 85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
Certificate issuer: /CN=851c281f576b43a1cab953c92041ce9599270c78
Certificate serial: 0194BAF245010E01188E83F99E59052B57A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
Manifest number: 12B0
Signing time: Fri 31 Jan 2025 06:00:27 +0000
Manifest this update: Fri 31 Jan 2025 06:00:27 +0000
Manifest next update: Sat 01 Feb 2025 06:00:27 +0000
Files and hashes: 1: XhZd4AXcprYaSWJWAkCvII9n7bo.roa (hash: +WoaFZAXvgLhbONkinxfr9JdPcFsQuGimoN13TlQ0XQ=)
2: hRwoH1drQ6HKuVPJIEHOlZknDHg.crl (hash: t1FPTdKCJHW79y3VRdTW7TB/ELRstj7M0thNioW9RGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:45:01:0e:01:18:8e:83:f9:9e:59:05:2b:57:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851c281f576b43a1cab953c92041ce9599270c78
Validity
Not Before: Jan 31 06:00:27 2025 GMT
Not After : Feb 1 06:00:27 2025 GMT
Subject: CN=002245a839b739712c08460241a7f723be3d39b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:4f:7b:16:e9:77:1b:37:8b:d4:ee:0d:b5:
b0:3c:08:d8:37:b1:5c:bf:10:1c:89:f0:df:60:ef:
80:b5:09:82:98:bc:ea:0b:62:0f:44:c2:3d:f4:f9:
af:a1:6f:92:e9:18:ae:59:9b:43:80:71:b8:f6:45:
5f:3b:91:25:77:e4:15:d3:84:27:3c:14:e7:c0:a8:
3d:d2:a5:80:f5:9e:9a:53:89:7e:2c:8e:0d:32:78:
3a:bf:ef:6a:ef:c0:16:9f:e6:a3:cb:6b:a8:8f:91:
d9:80:5c:1d:e6:fe:93:d1:75:b1:ce:24:06:5c:e9:
bc:1d:85:98:72:5e:9e:2d:ff:df:e9:54:b4:71:68:
ea:be:69:b7:51:eb:9a:15:ee:33:86:98:26:48:90:
23:36:1e:52:d0:2f:76:6f:de:61:5c:3f:e9:b8:bf:
22:a9:be:af:30:ad:1f:b1:ab:03:84:b5:9d:d2:ef:
47:91:06:83:83:d8:cd:67:86:56:fa:a5:43:77:ea:
9d:76:7a:d2:fe:8f:fd:f1:42:12:57:47:c4:43:66:
74:10:d4:69:a3:96:ab:4a:61:7c:c5:18:6c:84:e9:
d9:9c:cd:ca:0a:66:c8:cc:0b:2e:a5:bc:66:10:92:
38:11:91:24:9d:40:3c:ae:40:8a:e8:40:76:15:5b:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:22:45:A8:39:B7:39:71:2C:08:46:02:41:A7:F7:23:BE:3D:39:B6
X509v3 Authority Key Identifier:
keyid:85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:79:89:fd:15:5c:c1:95:d6:9f:fd:9b:38:e5:b9:c7:f4:85:
50:7d:6e:8f:7f:45:c5:cd:07:e9:82:93:32:ac:41:bf:4d:0c:
e4:42:fc:82:d7:36:3e:61:ee:27:56:0c:cc:ce:af:d2:1c:da:
97:0f:db:21:c2:cc:69:f7:b8:19:f3:e8:5a:86:a9:49:fb:e1:
7d:44:a1:da:3c:70:9b:8b:1b:d7:12:90:3b:47:ab:af:9e:22:
82:69:03:30:42:05:f4:2e:3f:ea:d7:5f:65:16:6b:b9:b9:c0:
54:47:d9:13:68:5f:b4:e8:b5:23:a3:f1:2b:6f:79:be:7c:e5:
45:4e:f1:15:35:2b:75:0e:06:e1:0f:e9:7b:18:f1:98:32:dd:
59:89:a0:0d:4e:3a:2d:ec:11:24:6f:2b:75:68:e5:38:73:b2:
f9:70:1c:dc:5e:47:ad:b4:60:a1:84:bd:aa:62:65:06:b8:a4:
14:d8:a0:d2:48:e7:27:af:91:61:12:b7:b6:22:00:61:80:52:
79:2f:d0:16:6b:8f:51:73:5f:34:3c:4b:c5:d4:fb:84:9d:f3:
15:5e:cc:75:25:fb:96:8c:fa:b5:a5:72:64:be:67:c6:92:03:
98:df:23:3b:c1:d8:81:07:15:db:34:d1:d8:db:15:6e:dc:de:
50:ea:2d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:36 2025 by rpki-client on console-fra.rpki-client.org