Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
File: HgilntmPWaDqDmxDecMPW9XyCCE.mft (raw, json)
Hash identifier: fElL46GYYOwwhE4pCuEzzzq+844fd2+pKw59V8CKfZU=
Subject key identifier: 0F:D4:F4:9D:09:AB:0E:F2:E7:6D:60:E3:AC:4E:57:1A:32:3C:A1:9B
Authority key identifier: 1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
Certificate issuer: /CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Certificate serial: 0194BA8440F1D1AD3B8FD16D5E3695BEBCD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
Manifest number: 0B9D
Signing time: Fri 31 Jan 2025 04:00:17 +0000
Manifest this update: Fri 31 Jan 2025 04:00:17 +0000
Manifest next update: Sat 01 Feb 2025 04:00:17 +0000
Files and hashes: 1: HgilntmPWaDqDmxDecMPW9XyCCE.crl (hash: +BBJvKkgPkrQSCrbJolbLlYq9x5iQIZTH7OI4CDmabA=)
2: avz1C0F6AMtca4Jk8pkbgzEJLN8.roa (hash: ADspRghw06xkDcKSrVQ1jSLJvsNT1skZ/kqfKOoRUM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:40:f1:d1:ad:3b:8f:d1:6d:5e:36:95:be:bc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Validity
Not Before: Jan 31 04:00:17 2025 GMT
Not After : Feb 1 04:00:17 2025 GMT
Subject: CN=0fd4f49d09ab0ef2e76d60e3ac4e571a323ca19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:d5:22:49:db:b9:98:da:ef:56:45:c2:6d:
34:82:7f:6e:39:d6:1a:36:f7:25:0c:7e:3d:0e:f6:
5e:08:52:7f:1e:ed:a1:8e:57:45:58:1c:f4:39:09:
d9:82:bb:8e:bf:d9:33:62:b0:15:ce:69:25:2f:36:
4c:b1:90:48:a5:30:6d:f9:9a:be:20:99:9c:27:b6:
e6:86:90:e9:09:43:9e:8a:e7:a2:20:64:de:b9:62:
5e:5f:19:c8:15:55:66:ef:c2:b3:90:c5:a6:cd:0d:
6e:c2:62:2b:e2:e3:b3:39:b8:51:da:cc:80:8b:8c:
02:a8:79:a5:da:5c:4c:4b:53:09:0e:de:2b:71:b2:
24:e2:54:3c:ba:93:e6:ac:eb:d4:f5:63:0e:dc:e8:
b8:98:06:00:d4:94:0a:a3:34:7f:74:3d:e4:b3:c3:
63:73:fa:3f:d2:12:82:56:42:ac:16:8e:c9:e4:89:
86:33:f8:e3:40:32:0d:e8:ff:68:a1:51:75:0c:77:
5e:9c:41:9e:86:ea:94:72:ed:1b:ba:ed:c9:5b:80:
4e:6a:a5:05:3c:7a:df:74:fb:2d:fe:0d:e4:3e:84:
9c:42:b7:85:cb:bc:2b:56:a4:eb:11:3e:7a:a0:1a:
1b:4b:c9:7c:2a:0f:e5:bc:63:3c:e5:99:70:88:a4:
a4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D4:F4:9D:09:AB:0E:F2:E7:6D:60:E3:AC:4E:57:1A:32:3C:A1:9B
X509v3 Authority Key Identifier:
keyid:1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e2:44:a6:0b:d7:88:eb:b4:eb:7e:46:ab:a4:b1:c4:50:6a:
a6:e1:70:07:7c:31:7a:90:6f:44:c1:c1:37:04:38:d3:d3:a6:
18:a4:84:17:ba:17:3c:9e:63:42:d5:ed:9d:65:b1:ab:a7:6e:
94:dc:ee:62:e7:c5:93:3a:47:91:c2:b8:47:51:c4:e8:09:95:
30:85:01:a1:99:fe:b9:be:d2:80:9d:1a:08:cd:df:05:78:f0:
13:64:94:9b:bd:f4:43:52:2c:5a:c7:c2:36:d5:7e:78:01:cc:
76:1c:c6:32:55:12:9e:f1:15:d9:06:8d:cf:29:32:f0:0e:88:
08:89:70:a5:f7:02:d5:83:39:bc:6a:31:41:93:82:3f:42:c2:
1f:9c:02:50:78:2b:14:68:4e:99:83:5d:94:7c:17:f0:96:14:
cd:50:70:9c:49:f8:78:ec:24:71:16:71:08:c8:a4:51:72:a6:
72:64:f0:02:5b:6e:b5:65:11:d0:7b:cf:f1:86:f0:a0:da:04:
6b:ca:fd:28:90:d9:cf:30:77:05:50:da:52:7c:05:f5:24:ef:
81:fd:61:c5:5e:b8:73:fd:bf:29:0a:45:ce:91:6e:4b:9e:1a:
ba:c9:8f:1e:de:0a:32:b6:0d:87:19:98:f0:96:bc:4d:24:37:
88:df:ba:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:53 2025 by rpki-client on console-fra.rpki-client.org