Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
File: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft (raw, json)
Hash identifier: y5bxZAbdZnxNFY+C6+xOm7lVXZDZptNy+AUl/dvuSqI=
Subject key identifier: D0:75:A1:5A:F1:84:5B:94:A2:80:4A:35:57:98:3C:7A:3B:62:53:C9
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Certificate issuer: /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial: 0194BB603E721697219AB3B26BBF2A6B3684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
Manifest number: 0AD2
Signing time: Fri 31 Jan 2025 08:00:34 +0000
Manifest this update: Fri 31 Jan 2025 08:00:34 +0000
Manifest next update: Sat 01 Feb 2025 08:00:34 +0000
Files and hashes: 1: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl (hash: FSNK6P1dMMt/MYAc6Nd/FSsKWBU0+e6YLVfu7IK4y9E=)
2: Z51tk-_RA8tS0qKG579XKDThD1k.roa (hash: jrw3DdxxDeKhPMS6oVcqpTg9EmGuyht4s1KNeKcKW/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:3e:72:16:97:21:9a:b3:b2:6b:bf:2a:6b:36:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Validity
Not Before: Jan 31 08:00:34 2025 GMT
Not After : Feb 1 08:00:34 2025 GMT
Subject: CN=d075a15af1845b94a2804a3557983c7a3b6253c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:83:a4:7f:d0:b0:4f:b0:4f:95:15:83:98:
3a:39:c3:01:e5:5d:27:1e:ba:91:25:26:73:25:33:
b6:5f:93:58:73:57:a3:ad:c5:71:75:c5:7c:3f:64:
b2:b4:d4:d3:c3:72:0d:7f:94:c1:78:9b:7d:60:06:
75:1b:81:a2:34:20:38:bd:9b:4e:e7:ed:bf:b7:68:
e4:8d:bd:7b:e1:3a:38:4e:6b:8a:d6:70:ac:66:47:
24:a2:c0:9d:d4:11:48:11:be:14:8e:b4:03:08:9f:
8d:32:d0:a7:b3:8e:79:66:59:7d:e4:ad:61:43:3f:
e0:f1:46:53:41:f1:67:b2:81:33:f1:fe:cf:17:b4:
7a:b9:45:b0:c9:2a:ca:b6:e7:09:23:66:06:0b:b1:
eb:80:55:32:36:82:3a:b3:04:08:45:f9:1b:e9:4c:
89:8f:45:63:b7:27:c8:d4:ed:d0:80:f0:43:a0:2f:
b2:cc:ca:4e:c6:d5:61:3a:b7:a2:a6:b2:a7:0d:e3:
e8:bf:8f:fe:08:a7:3e:54:9e:9c:41:de:e2:e0:7d:
ca:e3:60:22:ff:c9:ff:60:4b:dd:7a:81:59:77:b8:
b0:84:4c:0b:58:92:9e:ec:81:20:cf:4c:98:d7:ea:
f4:68:71:04:ff:d6:5a:ed:50:88:c9:82:10:38:ed:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:75:A1:5A:F1:84:5B:94:A2:80:4A:35:57:98:3C:7A:3B:62:53:C9
X509v3 Authority Key Identifier:
keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:23:fa:01:c9:f4:1c:5e:c4:61:3c:9e:d2:0f:77:a9:0f:fa:
95:72:14:07:0b:89:05:1c:3f:96:73:51:90:d5:d6:3c:cd:8d:
a8:48:dc:28:2f:7d:b5:11:1d:3a:f2:4b:96:2c:af:09:64:2d:
37:e6:07:70:d8:28:41:17:82:a7:d4:48:e7:c5:a9:2c:3b:6e:
01:b9:c7:b5:f7:87:ec:80:48:3c:3d:40:63:59:00:53:9e:c8:
35:d1:a3:25:53:51:2c:3f:85:5d:8f:d0:f9:34:c4:8e:3f:3c:
54:2b:46:84:51:38:f2:44:06:5d:e5:76:9c:ea:51:59:a8:07:
93:d8:e1:87:2c:fc:df:39:a6:99:79:f2:8a:ed:09:ea:61:e3:
f3:a1:ca:2e:5d:9f:e0:22:e5:75:d5:3c:66:cc:c4:f5:34:79:
e7:33:3d:6a:23:0b:2a:af:3d:71:8c:1d:15:ee:ef:79:94:cd:
a3:ee:2d:c6:fb:59:5a:14:12:ca:8d:16:3f:c2:69:89:a8:c9:
6d:f5:09:b2:be:c4:9b:52:07:d9:5e:6a:7f:44:2b:02:1e:1f:
81:55:e5:b4:c7:fd:fb:b4:d6:68:2c:20:0c:ff:ba:54:31:57:
80:18:8c:c5:e8:87:c4:94:f9:e1:58:74:26:79:67:54:1b:10:
78:a2:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:48 2025 by rpki-client on console-fra.rpki-client.org