Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier: xgbK+bUID5GkcHCp2jREBj+/OVGWyH1tspil3xjL/rk=
Subject key identifier: F1:CE:D3:03:85:AF:A2:2E:B3:87:82:E8:04:01:BC:03:2A:C0:23:AB
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial: 0194BB96C5F56690ED61769DA7AE8E6E73F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number: 0B49
Signing time: Fri 31 Jan 2025 09:00:07 +0000
Manifest this update: Fri 31 Jan 2025 09:00:07 +0000
Manifest next update: Sat 01 Feb 2025 09:00:07 +0000
Files and hashes: 1: 2OZ_lpKGV37MXe5UjWqN6pJGN0I.roa (hash: /SKwcSk1TPHGfonvbfCcudrh/7BTbQOLo1nol958xWU=)
2: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: +N4+14O2ISXfE2E7LfXxgpxshx8QtTBZH8dO9rc8VVw=)
3: pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa (hash: eAiA3LScpHVLn6hm7FMcqWOD8wBahEBpe3kvRDh7XrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:c5:f5:66:90:ed:61:76:9d:a7:ae:8e:6e:73:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Validity
Not Before: Jan 31 09:00:07 2025 GMT
Not After : Feb 1 09:00:07 2025 GMT
Subject: CN=f1ced30385afa22eb38782e80401bc032ac023ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:53:da:4c:dd:a9:fb:31:c5:b1:0d:2e:0a:d8:
db:0d:02:86:ba:1d:08:77:b9:7a:f0:4c:b1:02:7d:
ae:3b:ec:9d:eb:b0:b3:79:e1:8b:cb:16:ec:88:6a:
91:6c:9c:27:54:00:93:1c:42:85:be:a6:3b:e1:49:
ab:76:4f:9c:5e:c2:c9:e5:b1:ab:3e:81:ca:2f:e2:
36:49:6e:7f:20:a3:5a:44:c9:7e:da:3d:7e:9b:2e:
33:80:6c:44:a1:7d:4c:a4:71:ba:0e:b1:98:89:61:
2d:3e:87:10:5d:11:4c:bc:db:00:51:0b:70:bf:b5:
7b:1f:01:b6:fe:be:de:2e:74:db:54:d4:54:92:b2:
df:c3:3f:2b:55:94:01:54:5a:fc:69:67:1b:e7:94:
f3:e2:78:39:03:e1:fd:5d:d9:64:cb:0b:f3:27:0f:
81:63:b6:66:1f:52:b8:7e:6c:d7:a4:c7:7e:cf:07:
05:43:8b:40:f5:9a:0a:81:23:4c:70:f6:c4:64:51:
ec:72:79:a4:b1:68:a7:2f:e2:0b:38:8b:3f:66:d2:
86:8f:7f:b0:b2:7c:09:5b:0c:8c:89:03:fe:25:45:
58:88:7d:c3:78:5b:34:17:d7:9a:54:2b:e2:12:73:
4f:63:4e:99:08:24:37:ce:bf:a7:e2:26:ba:9c:96:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CE:D3:03:85:AF:A2:2E:B3:87:82:E8:04:01:BC:03:2A:C0:23:AB
X509v3 Authority Key Identifier:
keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:24:41:f8:62:41:6d:6a:ff:a9:13:35:51:33:48:c5:bb:89:
2c:20:7d:ed:aa:fc:bc:92:62:27:82:78:8c:2e:7f:c7:fd:cf:
02:23:3a:e4:48:bf:1e:c8:b8:65:04:bd:3c:90:0b:18:65:ee:
18:96:d7:d6:a0:b2:c9:4d:97:cd:d3:c7:90:90:35:ae:4b:4a:
9e:c1:35:2e:8c:ca:c3:29:51:0c:98:7e:cd:99:aa:8a:2d:9e:
40:20:85:f3:22:df:45:aa:b2:a3:e3:8f:aa:6b:5b:c5:7b:5b:
5b:16:67:67:8f:a2:e7:f2:b8:55:ef:9d:87:41:74:ad:29:3b:
87:20:df:37:b8:5d:67:e6:f3:44:d2:48:67:df:22:cb:d0:f9:
e1:7e:b0:1a:e1:45:7f:bf:15:86:a3:7e:12:06:90:36:8c:fe:
29:3f:3e:7c:34:67:39:25:dc:9c:21:2c:d6:2a:83:72:96:92:
7f:11:b6:ac:56:0f:d1:cc:cc:8c:7f:41:4f:c6:df:ae:2a:33:
24:c2:4b:94:a1:2c:e6:e2:79:ff:90:1b:aa:e1:97:e8:e1:c4:
ae:c1:e6:e3:1d:c2:49:f3:25:7a:68:78:a1:a0:da:45:12:a4:
1d:67:bb:6b:26:e3:fb:5f:60:de:08:d7:cf:40:4a:8f:95:81:
91:31:f1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:43 2025 by rpki-client on console-fra.rpki-client.org