Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
File: HgClX517dTlrS_oT54lgpaEvTvU.mft (raw, json)
Hash identifier: gkaOQOuiyWkNb9GZr0EQSXJEgpnLQt/9mqmaw5wI6Eo=
Subject key identifier: AF:8A:74:34:71:F5:7F:F3:F6:CB:C1:E6:22:18:15:CB:95:E9:22:19
Authority key identifier: 1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
Certificate issuer: /CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Certificate serial: 0194BB60185E385746F3A5E44BB4C79558F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
Manifest number: 0BE0
Signing time: Fri 31 Jan 2025 08:00:24 +0000
Manifest this update: Fri 31 Jan 2025 08:00:24 +0000
Manifest next update: Sat 01 Feb 2025 08:00:24 +0000
Files and hashes: 1: HgClX517dTlrS_oT54lgpaEvTvU.crl (hash: iVGId79g4Szyz7J/ipqOdt2Jhmnb8jsS7Z7Dgoqoi2A=)
2: Z9H2rikLSuyuU-ikn9teDCmjdUc.roa (hash: cRtnYLPeRJbchnmn6bYlPaowZvCX5uRJgotf5z/cank=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:18:5e:38:57:46:f3:a5:e4:4b:b4:c7:95:58:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Validity
Not Before: Jan 31 08:00:24 2025 GMT
Not After : Feb 1 08:00:24 2025 GMT
Subject: CN=af8a743471f57ff3f6cbc1e6221815cb95e92219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:46:da:34:b1:ca:66:99:71:29:5b:be:ec:
ce:2b:7c:08:e0:2e:65:18:3b:23:e9:99:95:5f:91:
b9:e8:ad:8e:ca:fc:f2:60:77:c4:07:99:cd:7b:39:
8c:47:91:da:2f:91:de:8a:a9:67:09:b3:d6:80:02:
18:b1:1b:98:66:5d:ae:da:4d:6f:4a:bd:2e:15:5f:
52:9f:c6:0f:5a:12:d7:5f:7d:3f:a9:4b:ef:63:f5:
12:96:a4:47:92:0d:b5:9d:78:7f:cc:e3:ea:ff:15:
79:d0:97:e8:d6:c4:c8:67:d6:a9:bb:fc:df:c2:59:
ff:28:1a:a7:43:0c:cf:d3:dc:46:07:4b:05:ea:f7:
99:b5:12:bd:c9:6e:aa:05:ff:22:cc:f5:77:1b:b9:
93:e2:49:82:74:eb:44:7e:0f:f9:f6:f2:54:95:80:
50:5c:e2:e1:be:4a:44:e4:81:7a:28:e9:10:5c:f2:
c5:51:6c:1b:54:3e:05:ec:81:99:2a:7d:46:e6:f8:
be:03:28:1e:79:64:7e:dc:ff:a7:c9:e4:5a:10:1d:
5c:c3:9c:06:83:b7:0f:15:e6:a0:c8:cb:34:cc:54:
9f:29:fc:bc:62:0b:d9:da:81:a4:2c:4a:c3:31:0e:
7f:7b:e2:f8:44:5d:d9:c4:48:2c:3e:34:4a:a6:61:
d5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8A:74:34:71:F5:7F:F3:F6:CB:C1:E6:22:18:15:CB:95:E9:22:19
X509v3 Authority Key Identifier:
keyid:1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e1:f0:7e:86:ca:c4:91:c1:a9:bf:64:40:5b:23:ad:8e:58:
16:e8:33:20:d6:38:0a:91:88:b1:55:e0:0f:8a:49:5c:ff:71:
44:e7:fb:43:39:25:bb:38:0f:46:dd:3e:f3:db:f3:3c:e0:96:
9b:91:fa:50:1e:7a:bd:07:ef:57:3a:60:74:4d:28:02:50:08:
6c:e0:b4:e3:aa:f2:26:af:31:55:0a:11:45:3c:5d:d0:1c:f9:
50:ed:81:09:67:7d:ce:61:a6:22:d3:23:b6:a9:a2:60:70:ab:
37:5f:d5:62:92:db:23:07:db:1d:8a:bd:11:c7:a2:02:7e:a5:
4b:b0:48:f8:7f:fc:87:16:8f:c5:bc:67:54:76:cd:6e:2c:65:
f1:5f:42:19:5c:d6:1d:51:b2:93:1c:a0:ae:0f:e7:73:70:54:
00:f2:80:4a:ee:2c:3b:51:f6:9e:36:f3:66:2e:01:5d:d9:9b:
1c:71:7e:38:eb:2d:3f:fd:91:df:1b:6c:5f:00:55:fc:9e:69:
7c:af:25:27:07:87:d2:72:2a:70:29:b7:f3:fa:aa:c0:bd:25:
4a:eb:0e:93:7d:dc:e9:3f:05:bb:c2:d2:60:d8:a9:5a:14:3b:
e0:77:1a:4e:e7:6c:c5:57:8f:b7:9b:1e:07:5e:54:62:24:cb:
7c:ba:8c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:11 2025 by rpki-client on console-fra.rpki-client.org