Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
File: HGce_RKBEUKXWJ51k6fgUFTZJVs.mft (raw, json)
Hash identifier: NNveD95PanSBuyicr9kjK781DFbGNHExM8RKWYviUF4=
Subject key identifier: 0D:07:F4:1B:FE:E4:6A:9A:CD:33:FF:D3:76:02:BB:F0:E6:EA:8A:38
Authority key identifier: 1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
Certificate issuer: /CN=1c671efd1281114297589e7593a7e05054d9255b
Certificate serial: 0194BB297089CB4665913AE8218CF1E286D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
Manifest number: 0F29
Signing time: Fri 31 Jan 2025 07:00:42 +0000
Manifest this update: Fri 31 Jan 2025 07:00:42 +0000
Manifest next update: Sat 01 Feb 2025 07:00:42 +0000
Files and hashes: 1: HGce_RKBEUKXWJ51k6fgUFTZJVs.crl (hash: /2USQmhFGgHvt/EoLWJuTvtD5z0zbx1DHocGjfTieDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:70:89:cb:46:65:91:3a:e8:21:8c:f1:e2:86:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c671efd1281114297589e7593a7e05054d9255b
Validity
Not Before: Jan 31 07:00:42 2025 GMT
Not After : Feb 1 07:00:42 2025 GMT
Subject: CN=0d07f41bfee46a9acd33ffd37602bbf0e6ea8a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:15:40:41:53:73:f9:c3:5d:85:d3:36:b8:45:
57:c1:00:34:f7:19:01:54:7d:83:34:70:85:ff:b5:
c2:ea:7d:06:3b:55:38:18:17:33:eb:bd:13:77:84:
18:43:62:8c:67:ea:ab:8f:ee:4d:81:eb:7f:e9:72:
50:d0:96:8c:4c:9d:38:e5:09:18:16:63:06:8b:21:
21:d6:76:a2:6b:f1:05:c5:d3:4d:97:83:6a:6c:94:
60:6a:df:2f:dd:fb:05:d9:03:6e:a1:52:8d:9b:f9:
9b:3a:2a:7a:b4:e4:e0:8c:b4:a4:6a:16:76:c3:cc:
af:b1:5f:bc:90:ba:3a:c8:ed:61:8f:13:df:d3:8d:
1c:0b:c8:c8:e7:fa:87:33:db:94:d1:49:3c:f5:ef:
6b:df:b4:f6:81:16:54:5f:25:ac:c5:45:34:10:33:
e1:3b:58:41:d2:ff:54:ff:76:c8:20:c4:37:18:05:
da:02:c3:25:08:f9:4a:c4:28:05:1b:55:d3:f5:c3:
1c:87:e8:54:44:0b:6e:4d:c4:af:bc:f3:b9:bb:38:
a5:5d:eb:c0:a7:7c:9d:e7:72:75:a6:c7:a2:32:64:
f8:ba:32:69:52:9d:58:5f:3f:65:dd:39:75:b2:0e:
13:60:78:db:35:d1:0d:34:ec:48:28:cd:83:ea:3c:
06:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:07:F4:1B:FE:E4:6A:9A:CD:33:FF:D3:76:02:BB:F0:E6:EA:8A:38
X509v3 Authority Key Identifier:
keyid:1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:51:b8:2f:b5:16:29:c9:89:05:10:50:1b:bc:08:6a:57:6d:
9c:03:35:00:7f:7c:c6:ea:67:ae:ab:3a:f9:53:b6:c4:65:8d:
4d:c9:81:ee:3f:c8:22:cb:3a:19:3e:ca:49:27:d1:f0:a2:d2:
f5:07:44:12:e8:3c:69:9b:ca:0c:6a:04:fc:12:ec:61:8f:6a:
c1:71:5c:20:7c:02:3d:e0:41:af:c0:5f:9e:a9:f1:94:63:08:
41:35:24:90:61:5f:23:4d:62:c1:ba:65:88:c2:f9:0f:64:f6:
78:d8:b4:07:81:91:38:03:8f:87:63:2f:ba:ce:6c:f7:0b:0f:
34:78:f3:12:99:dd:6b:c3:c8:5b:95:07:3a:1e:ac:d5:ce:a5:
da:38:f6:8c:10:91:5e:d4:cf:6e:56:e1:8c:77:37:d8:91:f5:
58:fe:25:76:c0:21:65:fd:11:6b:32:bf:c1:ae:45:7f:c7:e8:
ce:3a:55:a2:e1:4e:a8:80:b4:2c:da:25:c6:12:12:ef:ea:95:
f2:ba:88:f9:22:27:8d:c6:c8:aa:20:e0:1a:d6:75:9d:19:e8:
2b:9a:32:bf:c2:5d:88:97:c8:a6:ef:0c:dc:84:02:0a:80:e2:
bc:79:60:80:39:e2:d7:93:2c:40:25:7a:7b:04:68:0a:f5:c1:
03:f6:b8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:55 2025 by rpki-client on console-fra.rpki-client.org