Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
File: HkogILgtApTpCi1rLA8o0Rc7ZGU.mft (raw, json)
Hash identifier: hOjtIEpmMHWvIIt+6EZGmsIMVg/+UFTeGxTUwlbHDZQ=
Subject key identifier: 4B:5C:37:90:05:BB:92:85:DF:A7:F3:B5:FA:4F:17:7A:79:3F:72:62
Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
Certificate issuer: /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Certificate serial: 0194BABB6F9E7B17152B1688AC5D33B57190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 05:00:33 +0000
Manifest this update: Fri 31 Jan 2025 05:00:33 +0000
Manifest next update: Sat 01 Feb 2025 05:00:33 +0000
Files and hashes: 1: 7wJbNCUcwtFlKnAHPgTuv8Sn0i4.roa (hash: Yg17vxRzYWiVt6fOmSwVpKWZGt89EQyeG3U2CWqSktI=)
2: HkogILgtApTpCi1rLA8o0Rc7ZGU.crl (hash: YLBlpxazIPUuWiFs3yOUWU58yLb3VJzA5bpf0yrk/RA=)
3: I1sRKyvYdSWFdpxY3K3hgfpLh8c.roa (hash: EW9DVDBND5j7A8L4kBfb9CEdZ+sujph27uho+pUx/m0=)
4: IWHxNStdjrSROqwuZe7sT7LT4Nk.roa (hash: S/bzV1Gz+VxqpXjM3Pl83zzxF5vyuBSuFK0LxiEoibw=)
5: yFf2Zz0VjYagA0shVIplpiusWp4.roa (hash: Sonq+rZh7+zVQsS+x3AiHiTrq12H+Dw70vUAQVtyO0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:6f:9e:7b:17:15:2b:16:88:ac:5d:33:b5:71:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Validity
Not Before: Jan 31 05:00:33 2025 GMT
Not After : Feb 1 05:00:33 2025 GMT
Subject: CN=4b5c379005bb9285dfa7f3b5fa4f177a793f7262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:d8:fc:24:4c:c2:3b:6e:41:a5:1e:bf:ff:
03:a3:22:99:49:e4:94:81:28:fd:f0:51:f1:e8:bc:
c7:0a:f3:ec:dc:b4:d0:8d:f7:2d:eb:4a:a4:62:42:
cb:b6:86:44:26:aa:a2:c1:9e:13:04:86:73:5e:77:
34:22:ed:55:6b:f9:ae:57:ee:fc:56:31:91:45:81:
7e:e1:df:bb:6b:4d:ae:62:a5:1b:ef:e1:7f:c2:fe:
bc:ba:ae:7f:e4:43:32:21:e3:84:2e:94:c3:19:cc:
08:7c:5a:d1:db:e1:9d:db:80:7a:20:ea:48:a6:be:
c3:64:01:87:fa:5b:01:c5:a3:ba:5d:be:70:27:91:
20:01:72:55:8b:7c:74:b5:ff:58:3b:29:f9:76:84:
b0:83:cd:a9:5c:c2:cd:95:fb:a9:c4:96:d1:95:2b:
83:25:16:f2:a5:9f:68:29:84:62:40:ff:9e:42:4a:
f8:da:84:ba:fc:8d:65:45:6e:63:37:bc:c6:5c:16:
7b:f7:dd:1c:18:3e:f1:e6:54:c3:43:ab:df:dd:99:
69:db:64:c8:25:cb:78:2b:99:ab:a9:b7:db:3c:8b:
c0:7a:76:80:0a:4a:a4:5c:5f:72:cd:22:ad:26:17:
cc:bd:c0:59:70:f0:fb:09:13:e6:98:70:dd:a4:3b:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5C:37:90:05:BB:92:85:DF:A7:F3:B5:FA:4F:17:7A:79:3F:72:62
X509v3 Authority Key Identifier:
keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fa:71:69:12:17:3d:f9:d1:c6:9f:1a:59:e2:db:9b:53:22:
49:ee:35:41:6c:1f:17:3f:87:5a:d7:b6:3b:63:17:eb:bf:d3:
29:75:03:67:db:85:a9:f6:60:88:4f:09:4e:57:6b:59:a7:8c:
69:4b:6d:39:3c:2a:93:29:a5:98:7e:b5:fc:f8:42:a8:59:e8:
44:22:7f:00:c3:c9:e2:d9:1d:b8:c1:c1:c2:ac:3a:40:72:58:
d3:f2:f8:fd:d0:f5:03:96:e5:ea:45:7b:c1:7a:db:bf:c1:28:
09:de:77:80:d3:aa:0b:15:e1:2b:50:8d:a2:18:5a:9a:9f:8b:
6a:e6:09:01:7c:67:ab:ed:c5:3b:70:36:12:87:23:bd:5a:93:
4b:03:0e:c9:a4:7b:fe:6a:e3:ce:6c:a5:fe:25:29:86:ee:c0:
4f:83:9b:6b:96:ac:3f:39:68:a4:cb:99:75:7b:a1:c6:82:48:
8f:3e:b0:a8:b7:c1:12:a6:47:5a:73:7b:59:85:e1:cc:0a:f9:
70:46:a7:0a:15:d5:db:ed:d5:0e:2f:e1:b3:ca:fd:6d:19:19:
c3:af:5b:aa:16:75:bb:1b:4f:32:d3:6f:f1:0f:93:39:1a:f4:
28:e1:13:d7:28:b4:35:ec:8e:42:3d:78:e9:b5:91:ce:a5:91:
20:94:02:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:41 2025 by rpki-client on console-fra.rpki-client.org