Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.mft
File: himZ5D_2yece78WG-jpj_f6irkw.mft (raw, json)
Hash identifier: 8egVtAOZ6wx54OnI7VZNE6HaxvMq2fj9+9lB/yhICCk=
Subject key identifier: 9D:19:D0:A7:63:13:D7:EE:F6:04:F3:37:26:4D:0C:02:34:DB:91:26
Authority key identifier: 86:29:99:E4:3F:F6:C9:E7:1E:EF:C5:86:FA:3A:63:FD:FE:A2:AE:4C
Certificate issuer: /CN=862999e43ff6c9e71eefc586fa3a63fdfea2ae4c
Certificate serial: 0194BB9722837138E872AAFC688B98661191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/himZ5D_2yece78WG-jpj_f6irkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.mft
Manifest number: 020E
Signing time: Fri 31 Jan 2025 09:00:31 +0000
Manifest this update: Fri 31 Jan 2025 09:00:31 +0000
Manifest next update: Sat 01 Feb 2025 09:00:31 +0000
Files and hashes: 1: himZ5D_2yece78WG-jpj_f6irkw.crl (hash: XF+VegCqtE5rQZb7vKs6R6oOraGqzERB1ibxOHhIvfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/himZ5D_2yece78WG-jpj_f6irkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:22:83:71:38:e8:72:aa:fc:68:8b:98:66:11:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=862999e43ff6c9e71eefc586fa3a63fdfea2ae4c
Validity
Not Before: Jan 31 09:00:31 2025 GMT
Not After : Feb 1 09:00:31 2025 GMT
Subject: CN=9d19d0a76313d7eef604f337264d0c0234db9126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:62:46:88:74:95:4c:29:db:07:f3:ff:e0:76:
1d:28:1b:6c:71:03:72:45:31:6b:88:8f:ff:96:a4:
49:e2:df:d0:33:60:07:7c:68:d4:a4:17:78:2c:05:
bd:7c:bd:54:6d:78:d7:c1:94:0a:f9:96:5d:df:90:
04:25:bd:52:2c:6d:b6:b2:62:e5:d2:8e:74:84:b1:
7b:50:19:80:79:e7:93:bc:2e:32:78:ed:1a:f4:14:
a4:ff:6f:e3:ab:5d:b7:24:44:d7:92:39:09:4d:76:
8e:bf:08:d2:1a:51:03:76:5c:61:77:c7:de:b5:44:
af:42:7e:e8:2d:a2:19:eb:0d:9a:8f:e7:6d:be:de:
24:d4:99:5e:bb:e6:bb:95:c2:08:f5:7c:61:d8:41:
16:7c:27:fa:b9:7e:db:7a:ac:e9:dc:85:e6:ce:ad:
cc:9a:86:90:79:f8:99:a6:2e:8e:8a:ce:6a:7c:fb:
f6:0e:29:4d:0a:a3:c3:de:a3:4a:59:fa:b8:08:d5:
28:23:ea:d2:b4:2e:7c:cb:3b:73:e9:f2:2f:66:17:
5d:71:14:5f:d6:55:ca:af:99:e4:e4:24:94:e3:12:
d5:48:ca:8a:b5:a6:a0:e1:19:53:8b:2b:94:05:51:
bd:92:eb:25:ab:e8:5a:80:b5:f1:22:01:f4:51:c3:
4c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:19:D0:A7:63:13:D7:EE:F6:04:F3:37:26:4D:0C:02:34:DB:91:26
X509v3 Authority Key Identifier:
keyid:86:29:99:E4:3F:F6:C9:E7:1E:EF:C5:86:FA:3A:63:FD:FE:A2:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/himZ5D_2yece78WG-jpj_f6irkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0d:90:48:9e:d9:bf:8e:82:d8:0d:f3:11:62:93:b5:a4:d7:
a2:a8:4a:15:30:bc:91:cf:10:5d:a4:3f:93:c2:6c:29:d5:0b:
7b:08:b0:b5:6d:e6:41:dc:08:0e:35:3e:c2:85:c7:e6:04:b4:
6e:36:7e:4f:3d:eb:f3:92:f6:f2:cb:e4:0b:00:d5:94:d0:99:
ec:27:9b:a1:fe:a1:87:e5:01:92:ba:6b:4d:e9:ba:e2:87:df:
81:46:54:61:91:55:c3:d1:11:db:eb:0a:d4:85:79:37:e5:b9:
0c:8b:6c:5d:5e:09:00:50:ed:2b:3c:43:64:38:ec:8a:72:27:
8c:bb:0d:10:de:b9:f9:97:bd:8b:3d:29:35:2b:66:70:48:7f:
36:7b:ec:38:be:25:13:8b:4b:22:0c:d3:1d:29:51:a3:6d:a8:
d5:6a:79:5e:a4:27:34:53:1b:29:aa:84:7d:fe:58:2e:fb:42:
1b:64:f2:4b:f6:21:0c:7a:62:31:98:82:89:fe:57:f8:1f:66:
28:cd:32:6a:e5:51:fe:97:53:17:08:5b:a8:43:0f:33:44:4b:
ff:5a:fa:47:25:e6:c4:bc:04:94:8d:6e:34:bb:cc:9e:f7:45:
c9:99:c6:aa:81:cc:94:43:75:5e:06:0d:22:29:90:79:c0:30:
bd:6e:b1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:44 2025 by rpki-client on console-fra.rpki-client.org