Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
File: hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft (raw, json)
Hash identifier: DxjczOBzD9RiBVggOcUzyRlbaPO0qW7c+3c35XS6zNA=
Subject key identifier: 1A:7B:AE:EF:9E:16:49:4C:3D:77:7B:46:39:60:F9:6F:14:4C:DE:B2
Authority key identifier: 85:02:8F:90:14:28:3B:34:9D:16:CA:FD:C9:4B:7F:5E:F1:53:0E:4D
Certificate issuer: /CN=85028f9014283b349d16cafdc94b7f5ef1530e4d
Certificate serial: 0194BB292AAA3010DB6A3B70E7E92DEDA8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
Manifest number: 01C0
Signing time: Fri 31 Jan 2025 07:00:24 +0000
Manifest this update: Fri 31 Jan 2025 07:00:24 +0000
Manifest next update: Sat 01 Feb 2025 07:00:24 +0000
Files and hashes: 1: hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl (hash: pWa7mpRELs7YuPOjzFFU/APRR+wORIZ7LO874X+Jhro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:2a:aa:30:10:db:6a:3b:70:e7:e9:2d:ed:a8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85028f9014283b349d16cafdc94b7f5ef1530e4d
Validity
Not Before: Jan 31 07:00:24 2025 GMT
Not After : Feb 1 07:00:24 2025 GMT
Subject: CN=1a7baeef9e16494c3d777b463960f96f144cdeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:44:65:bb:b5:0c:ac:0c:e6:8c:d1:ae:8d:
19:59:79:3a:bc:f5:92:a4:fb:30:d6:83:1f:36:e4:
c1:d9:4b:d1:e5:e0:de:3d:9c:d6:8f:fc:40:57:ec:
9b:b8:ed:ab:18:0d:88:8a:af:9c:f8:d2:55:f0:c0:
57:3d:6c:22:ca:19:ec:8f:99:fb:ed:d9:c7:d8:dc:
63:94:14:c0:f6:a3:e8:7d:ca:f7:f8:c6:e9:c8:ca:
91:60:10:e8:85:81:56:07:69:fa:e9:09:ec:87:4d:
38:7e:b5:ed:21:c8:82:8b:95:98:f7:b7:40:67:92:
07:c4:84:8f:d4:68:5f:f3:ae:30:19:f6:c5:ca:23:
39:b3:9f:cf:fc:ca:8b:35:fc:9c:c2:60:05:00:b5:
06:7c:3b:6a:17:e3:ab:9a:85:2c:49:74:58:7f:99:
d5:5e:de:18:45:4e:4b:85:78:8b:bb:74:3e:5b:ab:
12:76:66:57:6a:a9:c4:cd:04:03:28:c2:8e:08:2c:
97:69:8f:36:b7:15:e7:4f:7d:c5:a8:d2:96:bc:55:
c1:b0:7d:4b:c8:07:5a:ad:7d:ff:e1:88:4f:ec:22:
dd:63:87:eb:cb:56:6e:7c:1a:28:6e:d5:eb:9a:d5:
26:29:35:d5:17:da:01:6e:c2:03:85:ca:e6:76:20:
45:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7B:AE:EF:9E:16:49:4C:3D:77:7B:46:39:60:F9:6F:14:4C:DE:B2
X509v3 Authority Key Identifier:
keyid:85:02:8F:90:14:28:3B:34:9D:16:CA:FD:C9:4B:7F:5E:F1:53:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:93:d7:aa:e7:c7:28:fd:a6:60:0b:ce:da:b7:1a:b7:58:3d:
86:9b:fc:85:ab:46:80:6b:e4:0f:8a:d1:2f:c1:1d:b9:eb:45:
6c:0a:31:ff:e1:00:3d:97:b0:4a:21:e9:93:96:8f:5a:29:d4:
73:57:78:11:2c:92:30:dc:92:b1:0b:5b:b2:ce:25:3a:c6:ba:
d0:03:82:92:58:ef:84:45:75:17:61:b7:a6:ed:77:36:ea:96:
60:93:8f:7b:b1:c1:e3:ea:71:74:d1:e3:26:81:6b:ad:fd:99:
51:33:0a:70:20:2e:bf:19:16:63:47:6c:13:90:df:28:ea:39:
4c:86:f4:12:3f:5c:61:de:92:b3:4b:26:42:fe:12:b6:bc:9f:
00:19:5c:0f:66:1c:e7:e8:3b:a5:a6:7d:7f:aa:e0:96:b2:47:
00:11:60:7d:43:e4:ab:73:9c:5e:e6:17:b5:ea:b7:0d:fb:46:
5e:3a:57:d0:4e:33:7c:fb:80:ee:89:f6:6e:32:4f:40:f8:25:
27:48:6b:75:d5:0e:54:ba:cb:49:49:d4:6f:67:c8:cd:98:fb:
a8:6d:09:17:32:d0:1e:a0:af:04:ca:2d:1d:aa:b8:eb:ce:7a:
9e:b1:7e:f5:1f:1a:3c:41:34:4d:3e:0a:56:a3:96:1c:5c:a1:
c2:b6:cf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:02 2025 by rpki-client on console-fra.rpki-client.org