Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
File: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft (raw, json)
Hash identifier: dDuuAOHNSNBXTvqzwUIY8cELm+uCpjQNY4ql+ZIHfTA=
Subject key identifier: CF:6F:4E:7E:B8:23:B8:11:33:EA:5C:A2:9B:76:9E:51:C5:D2:07:C0
Authority key identifier: 1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
Certificate issuer: /CN=1da443c33de5ae43506fd2406b7653661c527334
Certificate serial: 0194BAF27F845A8CAEBDE291CD8BD79E6BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
Manifest number: 100F
Signing time: Fri 31 Jan 2025 06:00:42 +0000
Manifest this update: Fri 31 Jan 2025 06:00:42 +0000
Manifest next update: Sat 01 Feb 2025 06:00:42 +0000
Files and hashes: 1: 38ChC54MipQ2oUyMl9LHxJPZyGY.roa (hash: oZd7O3FQ96+P+5QZC26B+0IWiqxNL14ov/QbnFUoZaY=)
2: B5goYls2pH3yBPe0gnzIkr6hsR0.roa (hash: f7c34+lBrPKMK3sy0aiejgFRmV5sKwVWcyjFvoePLVo=)
3: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl (hash: 1Xqo3ipDtx/12nE8jWE9VC/KURb1ybsFldEe1UiVJO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:7f:84:5a:8c:ae:bd:e2:91:cd:8b:d7:9e:6b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da443c33de5ae43506fd2406b7653661c527334
Validity
Not Before: Jan 31 06:00:42 2025 GMT
Not After : Feb 1 06:00:42 2025 GMT
Subject: CN=cf6f4e7eb823b81133ea5ca29b769e51c5d207c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:cb:31:bc:ea:63:b4:e0:64:09:a5:84:ca:
5f:b4:e7:74:b1:c9:bc:f0:ce:f5:cc:e6:52:12:44:
06:01:ea:81:0e:b6:90:dd:66:32:57:89:63:0b:98:
6f:65:5f:af:40:12:3c:9c:a0:de:6c:3a:30:10:44:
0a:0e:05:21:f3:16:e8:a1:15:ee:3a:81:97:56:96:
d0:9f:4d:78:db:54:71:24:d7:b5:6c:7a:0a:a1:55:
25:01:aa:e0:2e:06:21:ea:78:18:c1:56:10:7d:ee:
29:84:6b:a0:95:96:38:d0:d1:a6:3c:f2:c5:ba:3d:
43:c0:50:b4:b9:f2:83:17:95:66:0f:78:5e:8b:92:
b6:39:91:20:e6:1e:99:4d:1d:18:0a:df:97:68:7b:
56:dd:90:73:11:d6:32:af:04:36:39:91:31:6d:a0:
e2:bd:fb:8e:d9:d7:aa:3c:e7:d3:3c:dc:7d:ed:a5:
d7:f9:18:0e:8a:3c:1b:43:f5:61:30:6c:de:6e:6d:
1b:d2:59:22:34:5a:3a:f3:07:1b:25:b5:b0:50:16:
be:98:32:90:5c:dd:bf:f1:3a:03:8d:53:c4:d7:8a:
14:d4:3b:f9:ed:bb:42:15:c2:e0:de:dd:0b:75:27:
52:70:5b:e5:af:a0:a9:53:b2:84:85:c5:eb:f4:73:
76:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6F:4E:7E:B8:23:B8:11:33:EA:5C:A2:9B:76:9E:51:C5:D2:07:C0
X509v3 Authority Key Identifier:
keyid:1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:de:26:6d:6a:67:f1:0e:5e:75:1e:21:40:f4:d1:b3:df:32:
05:f4:fa:8e:b0:14:1e:3b:29:85:f1:6d:4b:f4:28:09:c0:5a:
4a:40:49:71:04:0d:02:67:c2:49:ee:9a:3c:04:cb:7c:9c:f9:
47:02:a4:b1:33:95:e2:18:47:0d:1e:55:95:c4:91:ee:b4:b4:
63:ef:5f:5a:0a:38:9b:1e:59:01:6b:e5:89:73:38:f7:d8:2e:
bd:f3:54:1d:44:20:cb:59:7f:7c:47:b0:99:67:6f:f9:a3:08:
66:41:f0:96:ae:7c:e7:8b:d9:d7:35:0c:d3:2e:4e:dc:84:c2:
b2:a7:c3:cf:ed:5a:31:22:dc:dd:a7:67:88:dc:c1:e6:7b:22:
34:00:ac:93:e1:39:99:1d:97:ce:0e:b0:6b:82:98:15:52:75:
79:69:22:58:11:2b:99:65:65:36:22:94:7d:ca:53:83:88:39:
32:d3:45:fd:95:31:ab:94:89:85:a5:54:fc:f8:d4:c7:87:7c:
af:3a:4d:3c:75:a4:46:28:39:ae:94:9a:94:f5:19:52:f2:3d:
ad:b3:09:c6:fa:aa:91:10:03:94:f8:06:28:c3:32:78:06:47:
c2:9c:6a:12:89:c6:0a:4c:8d:a1:e5:c9:01:30:0f:6f:6a:2b:
ee:02:28:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:06 2025 by rpki-client on console-fra.rpki-client.org