Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
File: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft (raw, json)
Hash identifier: rC3nLTz5p78CldbPphN7scf9zR4MWhVkWKMXBtIzD7Y=
Subject key identifier: 47:BA:87:BF:15:8B:27:29:E9:01:32:71:14:F2:56:38:6C:5D:33:20
Authority key identifier: 1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
Certificate issuer: /CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Certificate serial: 0194BB298A8966B039F3AB319D2336186957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 07:00:49 +0000
Manifest this update: Fri 31 Jan 2025 07:00:49 +0000
Manifest next update: Sat 01 Feb 2025 07:00:49 +0000
Files and hashes: 1: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl (hash: T6KZtOv2sWvEgdvR/jdlj+qDB5QEpeF3eXQQ+ik7s18=)
2: hIagYPgcgLqF5hqMfUhJY2-sJAs.roa (hash: ZaaWq0BbjJoluHI5ROX+aFarBCsxRa8oHhsXlvsyUeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:8a:89:66:b0:39:f3:ab:31:9d:23:36:18:69:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Validity
Not Before: Jan 31 07:00:49 2025 GMT
Not After : Feb 1 07:00:49 2025 GMT
Subject: CN=47ba87bf158b2729e901327114f256386c5d3320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:17:8c:6a:43:bb:91:62:fd:9f:ad:db:2a:
d6:77:46:30:ad:48:e4:4b:bb:b6:bc:a6:a0:a6:1f:
5c:c6:0e:45:e7:db:bc:e1:01:86:c5:67:bd:5f:7e:
fa:1d:71:8e:83:a4:3b:0a:f0:5a:0d:60:64:5d:26:
31:1f:7e:fd:10:2f:90:a1:dc:e0:55:f0:5a:95:ff:
2c:09:98:f8:08:d7:2c:bc:1a:62:56:2d:92:62:3f:
58:7c:89:5c:b2:13:5a:09:ec:d7:49:44:b5:e3:11:
dd:fc:f9:40:c6:b5:5b:ba:da:9f:c6:de:fe:65:ea:
3f:c2:68:19:83:15:81:12:b1:14:43:48:a6:f2:1d:
9f:8f:33:d7:f3:71:44:1c:0b:fd:92:9c:1b:e9:a5:
53:51:57:14:a3:c4:9e:6b:ee:8b:ba:ce:05:e9:60:
a3:dc:76:f0:3d:14:f8:ca:f6:d6:0e:4e:39:f5:c4:
9f:5d:b0:ef:57:04:3b:42:04:20:5a:a1:af:7e:ea:
6c:0b:13:fa:cf:a9:1c:ee:82:bc:91:e6:0a:61:fc:
69:08:3f:28:f4:4d:94:62:dd:4d:f4:b2:28:22:b5:
8d:e2:fe:a4:87:82:ea:97:89:2e:f1:c1:cf:03:6d:
25:75:16:9f:18:fe:ba:5c:83:f9:8a:45:21:dc:34:
e4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BA:87:BF:15:8B:27:29:E9:01:32:71:14:F2:56:38:6C:5D:33:20
X509v3 Authority Key Identifier:
keyid:1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:35:fb:5f:90:28:2a:04:4d:d2:73:ad:13:f1:97:1b:af:22:
98:5a:b0:5b:a8:16:b0:fd:20:12:12:26:a3:51:ae:9c:76:cf:
39:e7:df:36:99:f6:4f:20:63:96:e3:ff:f8:8c:a3:8c:06:0f:
50:90:8e:7c:ae:1e:ac:96:b6:ff:ed:11:6e:29:aa:97:8f:54:
5f:e0:f4:2a:f0:14:2c:d1:ec:a4:08:3e:15:09:53:a5:f8:51:
bf:0a:18:71:21:00:f6:18:90:2d:5b:54:c4:22:04:60:b9:67:
82:a7:39:61:ff:b1:f7:46:84:9c:8b:1c:79:53:3b:14:32:48:
eb:79:12:f8:e2:63:62:3d:94:12:b1:f8:21:bc:a3:ba:e8:9b:
ab:a6:5e:26:d4:a3:c1:85:62:88:e0:ca:4a:48:29:f7:1b:07:
15:ee:cf:9c:b5:19:f5:d1:f7:3a:f3:f0:07:eb:f6:74:7d:0a:
c6:c1:4b:e7:db:0e:e1:ca:5c:58:72:a1:6b:ba:81:bf:b5:3c:
50:f7:80:ba:c6:d4:a2:ad:91:0c:05:4c:d0:b3:99:92:cc:35:
75:5a:fc:3d:21:03:a7:16:3e:d3:f0:e6:fe:39:e3:00:43:b6:
bf:91:bc:03:4c:77:54:9e:8d:89:78:a1:37:4e:58:c5:fa:36:
80:31:0d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:18 2025 by rpki-client on console-fra.rpki-client.org