Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
File: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft (raw, json)
Hash identifier: Ebe7kxKLuFA78huGWmKeuXR6V/+ZTSr5cNaOTBsFVrQ=
Subject key identifier: DA:2A:9D:1C:D1:FD:C3:FC:1F:49:C7:98:FA:0D:DA:17:A1:8D:C3:9E
Authority key identifier: F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A
Certificate issuer: /CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
Certificate serial: 0194BB2937EF3F51BE352F130C0C7DBD85F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
Manifest number: 11DF
Signing time: Fri 31 Jan 2025 07:00:28 +0000
Manifest this update: Fri 31 Jan 2025 07:00:28 +0000
Manifest next update: Sat 01 Feb 2025 07:00:28 +0000
Files and hashes: 1: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl (hash: SY95ztCAnzRRC52nWGypzQr5Ur1kdkq5+a9pYMtJRU0=)
2: IPJ2H-DbyJS39-MqiGd6rorhNdk.roa (hash: s/YiZX5EGRobWwsqigpJwSULaBic38Nv8k8vwPxeO3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:37:ef:3f:51:be:35:2f:13:0c:0c:7d:bd:85:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
Validity
Not Before: Jan 31 07:00:28 2025 GMT
Not After : Feb 1 07:00:28 2025 GMT
Subject: CN=da2a9d1cd1fdc3fc1f49c798fa0dda17a18dc39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b8:dc:83:56:fa:19:1f:38:aa:4e:2f:ed:28:
80:c7:99:03:e9:ba:ad:5f:c5:5d:45:b6:dc:d0:ca:
5d:bd:9a:b7:1b:cc:80:db:5b:bf:53:f4:a8:38:49:
09:94:af:59:98:ec:cc:25:75:49:b7:c9:3e:8c:4e:
8d:4e:fb:e5:a6:4e:16:4a:6b:51:6f:15:9d:69:30:
54:31:e0:ac:3b:cc:f2:05:0c:9a:2e:b3:32:d8:96:
8d:ea:22:e0:c4:f4:fe:59:23:df:5c:c9:f0:53:8c:
a2:46:40:58:50:19:7c:d4:de:98:6b:6d:b8:d7:ce:
03:e1:0c:76:7c:b5:eb:2f:21:f9:18:71:7e:c9:8b:
ac:47:0b:49:9d:13:95:86:fe:96:b8:fd:75:71:01:
fe:70:47:70:13:a5:02:cb:c9:b4:4d:86:ad:f8:25:
52:25:2c:cb:50:55:b8:a1:5a:61:a8:c7:77:37:0f:
c8:44:c1:95:b1:75:48:6a:e4:c4:c6:0c:19:9e:ac:
35:db:8c:4b:0e:c0:47:27:63:b4:2f:da:a8:8b:d0:
c1:cc:55:62:21:00:45:af:b2:bf:87:96:60:b4:80:
55:5c:da:f2:7b:a0:5f:1b:52:eb:16:dd:e7:51:e9:
78:42:71:a8:cc:4f:6c:4f:b7:f6:d3:fd:e7:a7:93:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2A:9D:1C:D1:FD:C3:FC:1F:49:C7:98:FA:0D:DA:17:A1:8D:C3:9E
X509v3 Authority Key Identifier:
keyid:F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9b:a9:43:cc:86:bc:3f:c4:57:e8:b6:f9:ed:9b:80:a7:ad:
fc:5b:9e:13:a7:bf:c5:cd:54:2d:4f:a9:c7:d6:05:54:e1:ec:
8d:00:79:b9:56:5f:05:7b:14:5b:a3:fb:35:93:79:b3:c5:c2:
27:11:68:c3:fe:27:b0:94:2b:3e:9f:10:8a:5c:c2:4a:a2:22:
9c:aa:fa:ce:17:af:81:b7:6b:94:39:5c:2d:38:48:03:f6:f3:
04:fa:56:79:03:f1:a9:78:8e:0e:e4:8c:75:5c:e5:ec:ed:94:
4e:5b:bf:e4:05:4a:c2:9e:2b:7c:e3:90:7d:78:ac:31:5d:82:
b5:98:27:d7:c8:1d:e2:2d:b5:34:29:f9:47:20:08:0b:ee:2d:
1e:ae:e0:0d:bd:ec:6b:88:c0:c8:0c:b6:7c:1e:30:a8:27:e5:
88:08:55:f0:4b:67:66:b1:3f:0a:62:f4:fb:40:aa:3a:a3:fb:
f0:92:ec:19:3f:0b:2e:9d:89:93:59:97:ab:1f:e7:ce:8c:34:
56:1a:6f:08:95:82:0b:1f:8a:79:52:0d:c4:7f:0f:a4:bf:db:
44:fb:45:79:28:b5:f2:0e:f7:bf:af:82:a3:75:db:41:84:b9:
78:88:c4:1b:95:5e:42:aa:e8:23:78:64:4d:d6:ba:21:30:eb:
a9:67:5f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:44 2025 by rpki-client on console-fra.rpki-client.org