Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
File: HMRR-9-qEu_DUqWbAHsKiCO45l0.mft (raw, json)
Hash identifier: iGBQnhKUvQSyzDtUUrcIFhoK3VVeA8/UW3teb34/iVQ=
Subject key identifier: 8B:BE:65:B9:BA:62:C0:AE:CA:12:51:C6:F3:7B:C3:A8:C2:E1:2D:A7
Authority key identifier: 1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
Certificate issuer: /CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Certificate serial: 0194BABB99F93F24BB692993886A48B8285F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 05:00:44 +0000
Manifest this update: Fri 31 Jan 2025 05:00:44 +0000
Manifest next update: Sat 01 Feb 2025 05:00:44 +0000
Files and hashes: 1: BM8cXCST8GFLqm-S7JFg89XPJRI.roa (hash: y5HCuHLCc9q2A55wIAeiNZNpqVBjYSYL4TD8A7x1320=)
2: HMRR-9-qEu_DUqWbAHsKiCO45l0.crl (hash: uamopsEywcj0Jkr6MW/J/S8NXp8F9OHOn/JW55baQoE=)
3: cgvwzEGEwvIm6BLp57QUUWZnOgc.roa (hash: vCJFSFQ95kdVcUfRmZQUyshrPebtrGGD4KfGIuEo6nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:99:f9:3f:24:bb:69:29:93:88:6a:48:b8:28:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Validity
Not Before: Jan 31 05:00:44 2025 GMT
Not After : Feb 1 05:00:44 2025 GMT
Subject: CN=8bbe65b9ba62c0aeca1251c6f37bc3a8c2e12da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:36:88:3e:c4:3d:26:c1:1d:9f:35:9c:2e:
20:d3:76:92:6c:70:43:30:85:fd:90:96:db:31:5e:
4b:0d:ab:e0:94:f4:9b:f0:89:ac:11:65:54:75:ca:
05:3a:58:ec:d9:21:23:54:75:6a:45:e0:58:fa:e7:
ed:78:d0:75:7a:40:b2:21:b4:a7:49:14:7a:9e:fc:
73:00:4a:cd:01:ff:30:60:d4:3c:14:6d:15:5e:4e:
10:f2:54:10:a3:be:24:d2:dc:89:b9:f0:ab:d1:4c:
0c:c1:7d:67:40:be:f6:6d:d5:9f:b6:6b:94:7c:8e:
85:c9:63:3b:88:ef:6e:88:23:78:6a:4c:70:49:a5:
19:b6:a0:d9:7b:64:26:f3:3b:69:e1:c7:6a:b5:c7:
05:f1:d7:a2:2d:24:46:2a:49:b4:aa:ca:61:7a:4a:
98:38:7e:e4:df:b3:88:d9:be:d9:ad:6c:77:6b:f9:
0b:e0:1e:06:f2:d5:5a:04:2a:c9:f3:40:a3:98:8a:
df:43:88:b0:3a:47:23:83:44:e3:e5:e7:29:93:05:
60:f2:c6:0f:ae:39:9d:66:34:6d:0a:21:c1:e6:05:
73:48:29:b1:c3:aa:7b:1c:30:d9:74:d4:d4:fa:04:
f0:6e:8d:d6:a0:02:ca:7f:34:79:72:81:82:38:cf:
95:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BE:65:B9:BA:62:C0:AE:CA:12:51:C6:F3:7B:C3:A8:C2:E1:2D:A7
X509v3 Authority Key Identifier:
keyid:1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:03:a5:33:02:1e:ab:b5:f4:b5:c2:4f:bf:58:fc:db:9c:cb:
ef:c2:90:60:0c:bf:c1:9a:64:8f:86:1d:47:1e:b3:9c:15:2e:
b8:ef:bc:87:7d:39:77:c9:a2:fe:a0:fb:1c:a9:4b:a6:73:37:
29:ff:19:30:b8:b8:43:80:f5:54:35:db:da:22:b9:2b:fb:19:
e9:89:d3:dd:d9:0f:92:25:e7:6d:aa:25:4c:17:ef:78:a5:fd:
5a:18:d4:39:f2:19:02:9c:19:b5:97:b9:09:dc:e0:89:95:41:
a5:0a:a1:d6:04:dd:4e:c4:9d:4d:7c:70:72:7d:c2:45:6a:32:
4c:cc:58:75:7d:8f:3e:02:4d:30:9f:ed:d9:ac:0d:31:9a:af:
d9:d0:1e:31:a5:a6:a8:4f:e3:8e:eb:23:b7:83:11:84:e9:58:
c3:64:e8:b4:76:91:76:ba:1e:63:fa:84:2e:32:44:de:3d:b8:
a0:f6:a5:e8:00:58:4b:33:23:ff:27:9e:ce:13:9a:d9:d3:60:
90:b2:5a:34:53:89:d0:6b:05:32:36:78:2b:68:64:28:d4:58:
d2:65:fd:18:e7:65:a1:19:c8:76:51:df:8c:84:60:cb:38:79:
31:e4:58:1d:84:40:a5:3b:3c:8c:cd:7f:69:f7:26:f6:57:be:
55:17:de:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:26 2025 by rpki-client on console-fra.rpki-client.org