Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
File: 0HCWDtmg2hybfiRX6ry2YEeNCK4.mft (raw, json)
Hash identifier: YfeOECWbWEOp+h7Vkx6o6rMPAcVFvzljlWHFerh9UnE=
Subject key identifier: DD:74:52:B8:65:2C:57:08:9A:9D:8E:62:A7:CB:87:73:0F:9E:D0:1A
Authority key identifier: D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
Certificate issuer: /CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Certificate serial: 0194BB96D45D521BE05E7B261E6B7491FC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
Manifest number: 050A
Signing time: Fri 31 Jan 2025 09:00:11 +0000
Manifest this update: Fri 31 Jan 2025 09:00:11 +0000
Manifest next update: Sat 01 Feb 2025 09:00:11 +0000
Files and hashes: 1: 0HCWDtmg2hybfiRX6ry2YEeNCK4.crl (hash: 4wF4ksJ/IAjBhWKZxzIeQQv2GvnO646CkddDje3wqPw=)
2: ZYblDAaDwwmnrchNjFrf0zm4tO0.roa (hash: TUJh6mrSVIERTxbeRqv55tj1PiJ2BrobmYQdllbfBL8=)
3: a5ENWfgeJoTdkmkmWh2QDvelWp8.roa (hash: oka6UR7fuDvaS+P0EhzHRaWdX/8yDP3LK7DL0R3JiIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:d4:5d:52:1b:e0:5e:7b:26:1e:6b:74:91:fc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Validity
Not Before: Jan 31 09:00:11 2025 GMT
Not After : Feb 1 09:00:11 2025 GMT
Subject: CN=dd7452b8652c57089a9d8e62a7cb87730f9ed01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:87:25:e2:7a:42:54:9b:e1:fc:a9:b3:98:
40:b4:78:7b:fe:9d:50:94:46:2a:30:87:b5:95:f3:
ec:b3:f7:b7:32:e6:fc:39:25:f1:50:91:a2:d4:77:
78:f4:91:86:36:dc:8b:93:95:39:1a:2d:8b:8f:e2:
32:3d:a1:ee:37:f2:19:af:7a:97:fb:ec:f1:6f:75:
d3:64:09:0b:7f:4e:24:94:14:57:c8:47:47:78:6e:
4b:2a:3e:06:9f:f1:a5:1f:08:ee:c9:42:31:3d:a8:
c1:e6:f8:ad:19:7e:35:e3:b6:79:92:b7:c5:6d:ca:
79:36:77:10:85:60:c3:1d:c1:39:7d:e4:75:0a:c4:
72:0e:21:02:ce:f4:0c:94:5e:fd:5a:06:fa:b5:15:
c3:87:af:26:af:c6:f5:58:18:fc:35:cd:26:51:bc:
0f:65:ee:46:26:c8:6e:f8:d3:60:5d:6f:fd:46:8c:
29:77:78:94:7e:09:31:ce:3b:b5:97:f6:db:8e:6f:
0d:db:4a:7d:c8:16:30:6d:97:65:a6:a6:34:08:48:
d5:2b:94:b0:e5:10:45:b1:88:7f:8b:d1:90:f7:04:
33:f5:9d:23:7f:bb:9f:7e:56:ff:d1:7b:62:5e:60:
2f:ad:0c:00:77:19:e3:a0:ec:51:a7:04:81:6d:de:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:74:52:B8:65:2C:57:08:9A:9D:8E:62:A7:CB:87:73:0F:9E:D0:1A
X509v3 Authority Key Identifier:
keyid:D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0b:aa:6b:17:60:48:80:4e:04:82:0e:6d:c2:1a:73:55:de:
2b:8e:f3:48:75:d7:74:f5:3f:37:73:30:86:c4:c4:36:32:02:
37:c0:ad:d7:83:98:57:10:4e:cd:f5:bf:5e:5d:4b:fb:a6:54:
4b:fb:68:d4:66:ba:bb:66:2d:3f:ce:0e:c5:0b:37:f4:a2:f8:
cd:3b:51:94:b5:76:0a:6c:af:d0:fa:b6:97:15:e6:25:f7:64:
fc:d1:de:86:b3:ec:8b:48:bc:88:ed:41:73:87:21:91:89:2e:
97:18:c4:cb:f0:21:63:a3:ba:d9:a5:a2:62:af:4b:cc:ba:5a:
74:47:fc:d3:8e:3d:da:3a:10:82:58:e4:39:19:a1:a4:1d:e3:
c8:3d:b5:7b:82:68:b5:2a:8f:d6:3e:fd:ed:4e:b2:e6:02:cd:
ed:29:9c:39:ce:65:09:a7:30:e1:2b:6e:f7:d7:7e:5e:ba:0c:
af:ea:27:42:ac:5f:27:9c:fb:39:32:b4:05:2e:9d:74:ae:69:
36:72:50:69:9a:a4:d4:15:22:a8:93:5e:ac:7c:eb:5c:93:e0:
f0:53:c7:8e:b1:3b:fa:70:f4:4d:5c:a5:53:de:8b:fb:3a:60:
7a:58:d2:9c:94:9b:21:52:5f:ad:aa:0e:74:81:e1:6f:0d:77:
96:d3:81:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:41 2025 by rpki-client on console-fra.rpki-client.org